This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json) Hash identifier: 2sdGonyBC5ytRXt7lfFszKFiOoGdgY0kV0XFQVB6fJM= Subject key identifier: 88:64:3C:00:B5:B3:54:F7:07:5A:F8:64:F6:35:F6:E3:10:91:2A:E4 Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71 Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371 Certificate serial: 019AF3F7341E504F32B2115F6A79A68B5A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft Manifest number: 0120 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: C5dyrFbQjOkZXajAcrBQIh5QjOrMs568rbKmReEce9s=) 2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:34:1e:50:4f:32:b2:11:5f:6a:79:a6:8b:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371 Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=88643c00b5b354f7075af864f635f6e310912ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7f:7f:a6:e5:9f:5a:a6:e9:5c:d3:cb:77:cc: d6:de:1b:0d:07:2f:76:4a:02:fd:a6:ae:6f:7a:41: 2f:a8:f5:7c:72:6a:a6:fd:0b:01:d7:89:e4:92:eb: 5c:0f:00:13:4c:32:9c:8a:aa:7e:a7:51:79:2c:cf: f6:b6:06:04:4f:1c:70:19:b5:08:75:72:88:36:88: 17:cc:1c:18:53:72:d3:72:30:01:af:e3:56:0d:a6: 16:d1:31:c3:47:f9:d7:4f:a8:16:5d:6b:c2:89:2f: 8b:90:b6:c6:40:30:f1:e8:75:c8:a1:7d:7b:4b:ab: 72:ef:ec:94:40:ac:57:74:31:42:dc:cf:a9:ea:c3: 17:2c:6a:a8:31:68:5c:e2:49:d0:8a:a4:8e:d5:00: 63:d0:fe:12:2e:6a:a8:9f:04:37:67:b7:a4:8d:c0: b3:c4:8f:c4:3f:a4:d3:7d:aa:02:32:56:ae:df:f4: fe:f3:aa:be:9e:43:61:bb:88:48:f8:62:be:48:9c: 55:2b:ed:0f:16:fd:fc:03:ef:c2:89:8f:73:5e:50: 6b:00:c0:46:5c:33:6f:a0:9e:d5:92:00:18:88:1b: a2:0a:ec:e5:96:8c:9b:a6:fc:9a:9b:33:27:27:da: c4:d8:13:18:04:d9:03:be:2e:32:72:78:fc:8e:f0: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:3C:00:B5:B3:54:F7:07:5A:F8:64:F6:35:F6:E3:10:91:2A:E4 X509v3 Authority Key Identifier: keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:50:ce:38:61:dc:50:5f:d2:0e:4c:b4:99:63:e8:00:ce: 07:14:97:53:cb:30:ae:c7:14:f5:8f:a5:1e:80:4e:7e:9d:49: 6f:58:37:97:e1:6a:57:ee:4b:07:d5:b4:c4:da:72:99:14:f9: cc:74:44:7d:eb:9e:17:6c:a1:90:ab:5d:b7:dc:c9:4b:ba:c0: 54:73:8d:38:2a:47:72:d9:04:97:96:69:ec:ac:17:fd:19:d3: 30:ce:93:24:e0:11:2e:56:7b:b3:c1:a7:f7:73:b4:d3:db:a2: 91:0a:df:4b:3b:26:73:ad:b0:fd:29:bf:fb:f8:54:53:50:39: 06:b2:3c:d0:e3:e4:61:5e:34:7a:01:3f:80:84:be:ac:7c:97: 28:97:9f:47:47:7f:b4:0e:c4:f4:ea:13:03:bd:3f:35:8e:38: d8:04:11:df:d5:30:6f:0f:c4:b5:14:43:9a:b8:cb:66:0a:7f: 54:86:16:b6:ef:76:38:0d:cd:82:30:be:e7:1a:ab:a2:a7:e7: 1a:c8:0b:af:a2:ab:bd:14:4d:d9:5a:23:d9:74:60:6e:b1:b5: 06:8a:0d:8a:8e:cb:53:d4:3e:b6:84:3c:ac:a8:97:05:bb:b6: 65:2e:d7:a4:f8:1f:87:c8:d4:97:7d:99:3c:1c:44:52:26:37: fa:48:26:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zQeUE8yshFfanmmi1qBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTBhOGM4ODZlZTlhYzQyMzg2MTZmOTI2MzFlYmI4YmM3 NmUzNzEwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD Eyg4ODY0M2MwMGI1YjM1NGY3MDc1YWY4NjRmNjM1ZjZlMzEwOTEyYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA539/puWfWqbpXNPLd8zW3hsNBy92 SgL9pq5vekEvqPV8cmqm/QsB14nkkutcDwATTDKciqp+p1F5LM/2tgYETxxwGbUI dXKINogXzBwYU3LTcjABr+NWDaYW0THDR/nXT6gWXWvCiS+LkLbGQDDx6HXIoX17 S6ty7+yUQKxXdDFC3M+p6sMXLGqoMWhc4knQiqSO1QBj0P4SLmqonwQ3Z7ekjcCz xI/EP6TTfaoCMlau3/T+86q+nkNhu4hI+GK+SJxVK+0PFv38A+/CiY9zXlBrAMBG XDNvoJ7VkgAYiBuiCuzlloybpvyamzMnJ9rE2BMYBNkDvi4ycnj8jvAm4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhkPAC1s1T3B1r4ZPY19uMQkSrkMB8GA1UdIwQY MBaAFI2QqMiG7prEI4YW+SYx67i8duNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUt MzZhYTkxMDY5Y2JkLzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUtMzZhYTkxMDY5Y2Jk LzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb5Qzjhh 3FBf0g5MtJlj6ADOBxSXU8swrscU9Y+lHoBOfp1Jb1g3l+FqV+5LB9W0xNpymRT5 zHREfeueF2yhkKtdt9zJS7rAVHONOCpHctkEl5Zp7KwX/RnTMM6TJOARLlZ7s8Gn 93O009uikQrfSzsmc62w/Sm/+/hUU1A5BrI80OPkYV40egE/gIS+rHyXKJefR0d/ tA7E9OoTA70/NY442AQR39Uwbw/EtRRDmrjLZgp/VIYWtu92OA3NgjC+5xqroqfn GsgLr6KrvRRN2Voj2XRgbrG1BooNio7LU9Q+toQ8rKiXBbu2ZS7XpPgfh8jUl32Z PBxEUiY3+kgmKg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:20 2025 by rpki-client