This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json) Hash identifier: v4sK/X28/FXG45KIF6BSagy2wOBW5ZuQbDaA2kRyAqo= Subject key identifier: E1:85:78:AF:86:7C:38:5E:B5:99:F7:C8:6E:40:5D:3A:42:C8:FC:44 Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66 Certificate serial: 019AF1643F896C099544983D5CFA1596D269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft Manifest number: 0C5E Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=) 2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: ytnzcZV4UhgSvmGQCQZSQ0K3yqVWadG0hh10/tz26jA=) 3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3f:89:6c:09:95:44:98:3d:5c:fa:15:96:d2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=e18578af867c385eb599f7c86e405d3a42c8fc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:0e:f1:18:da:7d:97:72:14:b4:c9:d3:cc: 97:90:8a:4b:06:7c:4d:0a:3a:6e:06:d8:ef:a0:e3: a6:55:c1:8a:11:91:57:82:77:8e:05:02:a5:56:9a: e9:7d:6d:de:30:f2:87:8d:e8:04:d4:f3:07:4f:65: d8:cf:8d:0c:4e:f0:9f:3c:eb:cd:62:01:03:e9:14: b4:e8:e8:48:75:fc:cf:da:1c:6b:d9:74:c7:1c:ab: 7b:ad:45:46:15:94:1c:c9:1f:55:82:16:d3:77:50: 33:8e:5a:c7:2a:e0:dd:41:66:33:28:36:8f:22:3c: 27:4c:63:6e:89:f1:f6:e6:0f:b3:c0:92:f1:73:8a: d0:e4:ac:23:52:ee:8d:53:a2:26:59:b9:b4:37:56: 2b:02:45:6a:a6:7b:69:71:df:a5:2c:da:dd:ce:d5: 12:4b:05:5b:32:71:ca:69:a2:26:a1:20:2f:8f:f9: 8b:52:aa:b5:9c:23:aa:e1:02:0e:47:ee:83:04:53: de:af:39:09:90:c8:70:1d:fe:79:06:fe:d7:6c:68: 37:30:3b:6a:bf:1d:1c:a8:86:bf:16:b4:2e:57:0d: 6c:be:23:6e:2d:42:74:1c:4b:28:ef:7d:c0:b5:7d: 0d:a1:19:f1:90:9b:4b:34:5c:df:b5:40:e6:60:75: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:78:AF:86:7C:38:5E:B5:99:F7:C8:6E:40:5D:3A:42:C8:FC:44 X509v3 Authority Key Identifier: keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:4e:5f:7b:22:b1:d9:5b:c1:28:70:ae:3b:7f:72:fc:10:91: 44:4c:1c:89:e1:d5:66:41:e9:80:66:d9:ab:d2:f1:83:a3:50: 5e:e3:d7:3a:42:d9:58:53:cc:40:b1:e7:e5:58:6a:f8:37:5f: 27:c0:0c:8e:54:fd:2d:35:9a:d9:4d:a3:4c:87:a8:9c:5e:93: e3:36:bf:41:d9:dd:34:8a:35:78:43:f6:73:a3:c2:b3:54:0f: ea:14:b1:a7:cb:d9:fd:c5:28:52:2f:c3:c6:a2:bb:45:06:56: 69:34:e6:19:35:35:9b:0a:bf:f6:8a:5a:51:51:c3:b3:b1:d3: 73:39:03:57:85:d6:5f:5f:a7:ec:58:67:41:ec:78:d0:0d:1c: a3:7d:15:eb:13:24:e2:87:8d:71:2d:50:b0:2e:8e:5d:cb:0b: 74:06:a8:58:61:6d:28:a6:65:9c:88:58:d3:00:7d:69:10:e6: 07:fe:6f:79:b4:52:1a:08:31:95:2b:8e:80:6a:59:5f:60:82: 5f:1e:72:45:55:3d:d2:d1:d2:99:83:87:5c:22:b5:fd:42:e0: 8d:98:4c:48:6f:36:2d:73:39:7a:ed:84:2b:09:cb:13:24:37: 84:3b:54:e9:78:52:dc:45:85:21:fb:f1:6a:d0:e2:3d:a6:2c: a3:92:58:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD+JbAmVRJg9XPoVltJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5 NjdjNjYwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhlMTg1NzhhZjg2N2MzODVlYjU5OWY3Yzg2ZTQwNWQzYTQyYzhmYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxkO8RjafZdyFLTJ08yXkIpLBnxN CjpuBtjvoOOmVcGKEZFXgneOBQKlVprpfW3eMPKHjegE1PMHT2XYz40MTvCfPOvN YgED6RS06OhIdfzP2hxr2XTHHKt7rUVGFZQcyR9VghbTd1AzjlrHKuDdQWYzKDaP IjwnTGNuifH25g+zwJLxc4rQ5KwjUu6NU6ImWbm0N1YrAkVqpntpcd+lLNrdztUS SwVbMnHKaaImoSAvj/mLUqq1nCOq4QIOR+6DBFPerzkJkMhwHf55Bv7XbGg3MDtq vx0cqIa/FrQuVw1sviNuLUJ0HEso733AtX0NoRnxkJtLNFzftUDmYHV4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGFeK+GfDhetZn3yG5AXTpCyPxEMB8GA1UdIwQY MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE5feyKx 2VvBKHCuO39y/BCRREwcieHVZkHpgGbZq9Lxg6NQXuPXOkLZWFPMQLHn5Vhq+Ddf J8AMjlT9LTWa2U2jTIeonF6T4za/QdndNIo1eEP2c6PCs1QP6hSxp8vZ/cUoUi/D xqK7RQZWaTTmGTU1mwq/9opaUVHDs7HTczkDV4XWX1+n7FhnQex40A0co30V6xMk 4oeNcS1QsC6OXcsLdAaoWGFtKKZlnIhY0wB9aRDmB/5vebRSGggxlSuOgGpZX2CC Xx5yRVU90tHSmYOHXCK1/ULgjZhMSG82LXM5eu2EKwnLEyQ3hDtU6XhS3EWFIfvx atDiPaYso5JYfg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:49 2025 by rpki-client