This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json) Hash identifier: NkrOhK/YOaJPhIiKTcdp+IaCWaPoYzKE9KoSDTJukPU= Subject key identifier: FF:79:4D:12:C0:75:6A:0F:23:AD:46:F9:56:0A:22:6E:85:52:12:1C Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Certificate serial: 019AF1647A2CE39883FC67DEA68CBD6EF80A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft Manifest number: 0D89 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=) 2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: xcDn4ZZt/QhWzuN2MKMMkx1wubMjFYwIlXWQQJm1uPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7a:2c:e3:98:83:fc:67:de:a6:8c:bd:6e:f8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=ff794d12c0756a0f23ad46f9560a226e8552121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:67:ff:b9:45:85:24:fd:51:73:88:6b:2b: 83:0d:5d:2f:98:d1:c9:1c:c8:06:f3:f1:dd:b7:2c: b8:67:7c:1c:8f:40:76:76:a4:1c:85:87:eb:dd:73: 6c:c0:ea:56:29:18:08:f3:6a:af:e9:2b:58:29:03: 90:b0:6b:cc:ab:f9:db:3c:b8:6c:84:80:0b:b1:27: a9:02:c6:11:10:fb:40:62:a6:fe:3d:9d:51:12:c6: b9:11:bf:82:98:9d:ae:fd:f7:bf:dd:d0:73:5f:58: 63:bc:84:4d:c5:4c:1a:ea:ff:08:7c:4e:aa:81:41: e1:88:6f:65:69:17:8f:4f:c3:3a:f2:41:d9:5d:ba: 22:27:c6:50:cd:ad:e4:7d:44:76:6a:6d:53:4d:2f: 24:e3:bf:9d:55:e2:bf:fd:84:20:03:81:e1:c7:91: 31:35:82:ca:14:14:2f:3a:0a:90:36:03:8d:1d:e5: 57:6e:85:60:7f:42:b1:fa:b6:35:3d:a2:a2:e9:37: 95:1d:76:3a:59:72:52:4d:6e:7c:32:6f:ef:38:ce: 17:a5:21:1f:9f:12:72:ac:cb:78:59:50:cd:1b:0e: 86:32:df:07:46:b3:95:8a:35:88:5c:e5:79:7f:6a: 9f:96:9b:7a:4b:90:da:8e:1a:a4:62:85:ff:7e:fe: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:4D:12:C0:75:6A:0F:23:AD:46:F9:56:0A:22:6E:85:52:12:1C X509v3 Authority Key Identifier: keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1d:64:e7:f2:e3:ab:1f:26:c9:ae:0d:7f:4e:43:63:2d:8c: 54:51:a2:71:f1:ac:07:ef:f1:5a:c0:74:75:73:e8:90:d2:f0: e2:f8:3e:8a:e6:7c:7d:35:87:4f:18:13:76:94:01:f6:5e:19: 7d:a4:b8:5b:96:b2:ff:70:57:f0:44:45:9a:4a:d6:50:85:fe: f9:69:30:5a:f3:c5:4a:ef:64:d0:77:5e:52:87:39:51:00:3d: 57:50:73:7b:0a:84:c9:4f:da:9c:c6:75:3e:d9:59:9f:6e:27: 60:9e:65:ce:f6:9b:c9:17:41:95:04:3e:f4:d9:4d:39:7c:09: 81:c5:e4:69:ad:70:b7:70:37:be:c3:ea:d2:50:2f:f9:89:7a: fa:29:00:28:df:9d:84:d8:1f:e2:40:ff:fe:af:73:a8:0b:98: 54:be:bf:9c:34:1c:75:b0:03:bb:d4:be:f4:ad:8e:fa:0e:51: 0c:7e:56:a0:a8:f5:2f:c6:8c:00:a8:da:fd:8d:ab:75:d3:ad: 94:e5:92:d3:0c:57:43:c3:13:c7:a7:2f:f2:8d:b9:c1:6b:a2: bb:04:18:76:cc:c9:47:23:75:fa:27:6a:33:82:d1:22:59:24: ac:67:63:26:5d:1d:3c:17:5b:3c:b7:a9:6c:77:1f:e8:9f:f9: 62:c3:fc:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHos45iD/Gfepoy9bvgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz YjY4YWYwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EyhmZjc5NGQxMmMwNzU2YTBmMjNhZDQ2Zjk1NjBhMjI2ZTg1NTIxMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoxn/7lFhST9UXOIayuDDV0vmNHJ HMgG8/Hdtyy4Z3wcj0B2dqQchYfr3XNswOpWKRgI82qv6StYKQOQsGvMq/nbPLhs hIALsSepAsYREPtAYqb+PZ1REsa5Eb+CmJ2u/fe/3dBzX1hjvIRNxUwa6v8IfE6q gUHhiG9laRePT8M68kHZXboiJ8ZQza3kfUR2am1TTS8k47+dVeK//YQgA4Hhx5Ex NYLKFBQvOgqQNgONHeVXboVgf0Kx+rY1PaKi6TeVHXY6WXJSTW58Mm/vOM4XpSEf nxJyrMt4WVDNGw6GMt8HRrOVijWIXOV5f2qflpt6S5DajhqkYoX/fv5bJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP95TRLAdWoPI61G+VYKIm6FUhIcMB8GA1UdIwQY MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx1k5/Lj qx8mya4Nf05DYy2MVFGicfGsB+/xWsB0dXPokNLw4vg+iuZ8fTWHTxgTdpQB9l4Z faS4W5ay/3BX8ERFmkrWUIX++WkwWvPFSu9k0HdeUoc5UQA9V1BzewqEyU/anMZ1 PtlZn24nYJ5lzvabyRdBlQQ+9NlNOXwJgcXkaa1wt3A3vsPq0lAv+Yl6+ikAKN+d hNgf4kD//q9zqAuYVL6/nDQcdbADu9S+9K2O+g5RDH5WoKj1L8aMAKja/Y2rddOt lOWS0wxXQ8MTx6cv8o25wWuiuwQYdszJRyN1+idqM4LRIlkkrGdjJl0dPBdbPLep bHcf6J/5YsP8bA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:08 2025 by rpki-client