This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json) Hash identifier: oG1vjp5xMF2YK2/quxZgfZQRGdy/YASiZ5a+oi60FMU= Subject key identifier: 93:21:60:B3:B2:01:7E:97:6F:18:29:94:65:A7:E0:A6:FA:61:C7:7E Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019AF1D24FAA96D249594281F09D70A45F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft Manifest number: 43 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: IuFMGMo0qQPNaw_HwikeG1qpC1g.roa (hash: pfIr6AYyv+yYDp1crXdTbGLCvoMDiRQhQRhnL5paHiM=) 2: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: JXxwtxw2N0NYRggm+jMl45NNgl90Ofax1qRmfPDKoo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:aa:96:d2:49:59:42:81:f0:9d:70:a4:5f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=932160b3b2017e976f18299465a7e0a6fa61c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:d0:03:1b:41:c8:8a:22:41:8e:d5:ac:50: a7:b2:25:4d:68:5c:2e:60:d0:af:8b:53:f2:83:69: 1a:d0:4c:d3:2e:6e:a1:1c:61:4a:7a:49:30:72:83: 56:cc:f4:2a:e1:b9:97:b2:c6:2f:ba:4d:3c:66:d3: 75:f2:31:7f:96:77:1e:13:34:77:be:a2:07:e4:04: 83:85:fc:e5:e6:d1:b9:b0:5f:a0:65:c6:30:be:d3: f0:48:bc:59:70:f6:da:d5:ec:e3:be:e7:a5:fb:44: f1:c7:e8:28:4f:79:5d:ec:83:d7:18:52:a3:f5:0f: fc:66:8c:cd:22:b1:ed:5c:fc:b2:f7:c2:69:6c:4e: 17:01:27:25:5f:b3:a7:b9:a5:48:f9:6e:9a:06:d9: 10:62:b8:5b:51:fe:00:28:2b:fa:5a:e5:84:7a:e0: a7:a7:7e:b2:06:00:1f:45:44:a1:bd:96:d1:3a:8f: 66:75:dc:30:9a:bd:99:b6:da:48:15:3f:22:d9:97: 09:0d:07:16:b4:6c:4f:3c:43:a5:40:d7:06:f6:63: ec:17:73:eb:eb:a8:49:29:97:dd:8f:49:c7:91:2b: 88:3a:70:6e:96:7b:5b:f4:df:a2:d3:f0:84:70:3f: ac:fb:a9:0f:89:e5:72:73:03:d8:18:9b:fd:4d:55: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:60:B3:B2:01:7E:97:6F:18:29:94:65:A7:E0:A6:FA:61:C7:7E X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:d1:09:a4:7b:63:8d:4d:2e:87:d9:ec:fa:62:a5:25:75: 15:87:9e:be:d3:de:d3:40:63:41:bb:dd:96:b7:23:28:a3:05: 38:b2:dc:09:b6:88:92:10:e7:81:7f:4b:fd:79:7d:db:08:98: e8:de:a6:38:1a:9d:2b:8b:c2:99:4a:a2:f9:c1:52:b4:0c:88: 42:dc:aa:74:99:b1:c0:26:79:e1:63:84:ed:7c:8e:f2:24:7f: b6:ae:72:3f:da:58:0d:26:31:31:b9:c8:20:b1:b1:53:71:6f: b9:7d:7c:5e:ce:71:81:fa:46:07:79:59:19:ab:92:35:f2:b6: 94:06:93:fb:a8:16:0d:e9:d8:a2:25:8f:69:39:94:98:13:0f: 19:5e:8b:8f:7f:91:74:de:39:a8:3e:41:54:db:a3:33:af:77: c4:8f:25:49:19:1d:c6:63:40:06:d6:0b:98:61:58:c3:73:7b: 9d:1c:43:e3:bf:ff:ea:f9:72:d2:a6:ca:27:61:64:2a:18:9b: 5e:6e:20:1a:73:3a:05:0b:c9:ec:65:c1:72:cb:c6:91:c4:d3: 24:52:9c:e2:f2:b6:0d:b2:de:78:57:93:74:2b:0e:84:45:05: b8:4e:b1:e1:47:f3:cd:9a:4e:1c:a5:e2:73:31:82:1a:db:6d: 42:dd:ae:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k+qltJJWUKB8J1wpF8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg5MzIxNjBiM2IyMDE3ZTk3NmYxODI5OTQ2NWE3ZTBhNmZhNjFjNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQXQAxtByIoiQY7VrFCnsiVNaFwu YNCvi1Pyg2ka0EzTLm6hHGFKekkwcoNWzPQq4bmXssYvuk08ZtN18jF/lnceEzR3 vqIH5ASDhfzl5tG5sF+gZcYwvtPwSLxZcPba1ezjvuel+0Txx+goT3ld7IPXGFKj 9Q/8ZozNIrHtXPyy98JpbE4XASclX7OnuaVI+W6aBtkQYrhbUf4AKCv6WuWEeuCn p36yBgAfRUShvZbROo9mddwwmr2ZttpIFT8i2ZcJDQcWtGxPPEOlQNcG9mPsF3Pr 66hJKZfdj0nHkSuIOnBulntb9N+i0/CEcD+s+6kPieVycwPYGJv9TVWAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMhYLOyAX6XbxgplGWn4Kb6Ycd+MB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz3RCaR7 Y41NLofZ7PpipSV1FYeevtPe00BjQbvdlrcjKKMFOLLcCbaIkhDngX9L/Xl92wiY 6N6mOBqdK4vCmUqi+cFStAyIQtyqdJmxwCZ54WOE7XyO8iR/tq5yP9pYDSYxMbnI ILGxU3FvuX18Xs5xgfpGB3lZGauSNfK2lAaT+6gWDenYoiWPaTmUmBMPGV6Lj3+R dN45qD5BVNujM693xI8lSRkdxmNABtYLmGFYw3N7nRxD47//6vly0qbKJ2FkKhib Xm4gGnM6BQvJ7GXBcsvGkcTTJFKc4vK2DbLeeFeTdCsOhEUFuE6x4UfzzZpOHKXi czGCGtttQt2uOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:38 2025 by rpki-client