This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json) Hash identifier: cdeGB4M73w42cAhSispwfOFZPNVVIbvEXWqTe8WYTaE= Subject key identifier: B9:41:EE:FE:2A:3F:3B:4D:80:85:12:FC:07:03:8E:5D:1C:D3:E6:BF Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d Certificate serial: 019AF540FFA1E53B6F5C4B41766EED6B0A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 20:01:08 +0000 Manifest this update: Sat 06 Dec 2025 20:01:08 +0000 Manifest next update: Sun 07 Dec 2025 20:01:08 +0000 Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: sSEbtERKswzOFiCd0tAaSuPpqU1MjMBlpro5lhchczw=) 2: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (hash: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ff:a1:e5:3b:6f:5c:4b:41:76:6e:ed:6b:0a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d Validity Not Before: Dec 6 20:01:08 2025 GMT Not After : Dec 7 20:01:08 2025 GMT Subject: CN=b941eefe2a3f3b4d808512fc07038e5d1cd3e6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:43:b2:57:97:7b:b7:84:6f:cc:62:f4:58: ce:5d:ef:31:89:df:0d:16:85:0b:3f:eb:2f:fb:c4: ad:1a:37:d9:a3:9b:4f:08:02:3f:0b:88:c1:b8:1b: 00:53:ef:ad:8b:ec:8e:85:86:ec:ea:1c:10:da:62: 3a:c8:a7:e2:64:a1:51:c6:98:05:e2:af:52:e5:b8: d9:82:91:d0:fb:8d:61:68:5f:2f:d1:64:c6:7e:af: bd:7a:d6:3c:05:d5:90:e2:5c:bd:f3:aa:01:b4:e7: c5:08:4e:1b:c0:4c:18:2b:eb:2e:43:99:af:67:fa: 70:48:a1:48:cd:91:da:7e:d3:1c:98:81:ff:8d:f9: 6a:a1:73:0b:25:2b:27:6d:99:5f:be:2b:d8:db:83: 23:96:fc:34:e6:e3:c4:fa:0d:8e:0b:d3:bd:f6:7a: ae:a1:70:38:e2:54:f9:11:82:70:82:b1:f1:20:ba: 56:25:8d:41:3c:5e:4b:4e:7b:06:c6:cc:9d:b4:6a: e0:ac:7a:70:9f:62:06:72:ab:a2:60:5f:8e:a4:dc: 72:c5:21:57:5e:13:e0:f2:cb:51:bb:f4:4e:d5:af: c1:df:0b:b7:99:49:7a:95:6b:04:41:a8:d3:83:bc: 7f:3e:ed:9a:4a:9e:e6:47:6a:e5:f2:1e:31:04:20: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:EE:FE:2A:3F:3B:4D:80:85:12:FC:07:03:8E:5D:1C:D3:E6:BF X509v3 Authority Key Identifier: keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:18:a3:7f:cd:3f:de:fb:98:af:5f:0e:fe:c2:4d:0a:5b:4b: 65:77:83:66:b1:ed:99:03:79:6c:fe:3c:eb:00:3a:34:e2:25: 7d:e9:26:d2:86:01:20:49:93:16:05:60:fc:c7:ac:4b:7a:9c: 17:64:f5:7f:c8:e7:f7:95:03:72:9c:21:19:68:da:0c:f7:4d: e4:df:e9:40:a7:da:d3:fd:6a:48:7e:6e:e9:a4:61:30:5a:fc: 3f:cc:2b:8c:1d:1f:d7:91:b9:39:4e:69:d0:8e:12:8e:67:8d: 73:cf:12:1a:f0:cd:54:8d:05:e9:fc:90:c0:df:24:2d:f8:0a: c0:ce:14:83:4f:af:5c:58:2f:98:e3:73:a5:bd:d2:57:55:b8: ba:5e:d2:30:66:77:ca:3e:84:9e:b0:92:74:ef:07:fb:fd:18: 40:2a:89:48:53:b3:36:74:7e:65:7c:a2:ba:88:f8:28:44:35: bf:47:39:f8:98:fc:ca:40:76:9c:eb:4a:00:f2:0b:6d:f7:6d: 98:4d:05:3e:9c:c5:2b:60:26:74:67:4b:74:98:3f:66:54:74: 8c:40:02:21:48:96:db:40:00:40:dd:65:e5:68:48:e4:2a:62: 25:e8:5a:13:6f:5a:d1:15:de:27:0c:cf:26:c9:61:b7:d0:84: e0:c0:0d:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QP+h5TtvXEtBdm7tawoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MzM0M2Y3Y2M2YzIzN2RhM2Y4YjgxMTM4YzA1MWQ4Zjkz YzljNGQwHhcNMjUxMjA2MjAwMTA4WhcNMjUxMjA3MjAwMTA4WjAzMTEwLwYDVQQD EyhiOTQxZWVmZTJhM2YzYjRkODA4NTEyZmMwNzAzOGU1ZDFjZDNlNmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2BDsleXe7eEb8xi9FjOXe8xid8N FoULP+sv+8StGjfZo5tPCAI/C4jBuBsAU++ti+yOhYbs6hwQ2mI6yKfiZKFRxpgF 4q9S5bjZgpHQ+41haF8v0WTGfq+9etY8BdWQ4ly986oBtOfFCE4bwEwYK+suQ5mv Z/pwSKFIzZHaftMcmIH/jflqoXMLJSsnbZlfvivY24Mjlvw05uPE+g2OC9O99nqu oXA44lT5EYJwgrHxILpWJY1BPF5LTnsGxsydtGrgrHpwn2IGcquiYF+OpNxyxSFX XhPg8stRu/RO1a/B3wu3mUl6lWsEQajTg7x/Pu2aSp7mR2rl8h4xBCDOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlB7v4qPztNgIUS/AcDjl0c0+a/MB8GA1UdIwQY MBaAFNYzQ/fMbCN9o/i4ETjAUdj5PJxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEt NTMxODBlZWM1NmZiLzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEtNTMxODBlZWM1NmZi LzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBijf80/ 3vuYr18O/sJNCltLZXeDZrHtmQN5bP486wA6NOIlfekm0oYBIEmTFgVg/MesS3qc F2T1f8jn95UDcpwhGWjaDPdN5N/pQKfa0/1qSH5u6aRhMFr8P8wrjB0f15G5OU5p 0I4SjmeNc88SGvDNVI0F6fyQwN8kLfgKwM4Ug0+vXFgvmONzpb3SV1W4ul7SMGZ3 yj6EnrCSdO8H+/0YQCqJSFOzNnR+ZXyiuoj4KEQ1v0c5+Jj8ykB2nOtKAPILbfdt mE0FPpzFK2AmdGdLdJg/ZlR0jEACIUiW20AAQN1l5WhI5CpiJehaE29a0RXeJwzP Jslht9CE4MANfw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:27 2025 by rpki-client