This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft File: jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json) Hash identifier: AXOxi71gsleL9yiOBuXeb+mkHZkyZ+PemDKl5y3bGYQ= Subject key identifier: 66:79:19:D7:8C:F0:22:DD:F2:8F:CB:E9:67:A1:37:7C:59:FB:82:20 Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Certificate serial: 019AF389C655CC80EB4DDBB939AA2520F344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft Manifest number: 04BB Signing time: Sat 06 Dec 2025 12:01:23 +0000 Manifest this update: Sat 06 Dec 2025 12:01:23 +0000 Manifest next update: Sun 07 Dec 2025 12:01:23 +0000 Files and hashes: 1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: SFy8ItpJ7ab58mQ1agLARkDF/WWezVXvhLTaqz2DspQ=) 2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c6:55:cc:80:eb:4d:db:b9:39:aa:25:20:f3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e Validity Not Before: Dec 6 12:01:23 2025 GMT Not After : Dec 7 12:01:23 2025 GMT Subject: CN=667919d78cf022ddf28fcbe967a1377c59fb8220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:c8:d9:99:53:0e:27:4b:fe:7c:69:e3:40: 15:5a:ff:36:fd:87:4c:43:ec:45:dc:3a:13:b0:6e: 72:09:3f:8f:72:b5:52:db:9e:7b:d7:3b:3e:72:85: 45:d9:25:50:20:60:a0:a2:09:29:c3:e6:d5:7b:df: 6e:62:5a:d9:2c:05:1d:ae:21:1f:a9:2b:19:d8:f3: 3e:fd:84:09:e6:1b:77:39:46:31:71:23:06:15:8f: 34:5d:a2:c7:21:7f:5e:25:0e:06:4f:8e:7e:91:ab: ac:d2:8a:17:c0:9f:40:2c:64:dd:37:06:79:0b:6a: 79:92:7f:a3:42:c9:27:8b:65:ab:38:6a:19:19:69: 68:f1:01:da:e8:14:c6:7f:84:82:43:85:81:bd:0a: dd:d5:45:8a:4e:79:a4:49:f3:e9:47:7d:ec:71:8e: c1:39:31:68:b4:bd:0b:09:64:6e:74:76:49:c9:8f: 7f:5b:2c:66:0b:b8:da:b3:42:d6:a1:1d:2c:4e:78: 29:86:c6:5f:d0:42:4c:19:a5:74:14:c0:f5:40:43: d5:2d:6d:ce:53:5f:50:5c:69:cc:82:b3:4c:6c:5e: e3:50:74:9e:27:4f:c8:64:ec:cf:82:6c:94:65:f8: a9:f8:b1:1b:65:6e:c9:fa:49:75:75:cc:b4:90:d3: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:19:D7:8C:F0:22:DD:F2:8F:CB:E9:67:A1:37:7C:59:FB:82:20 X509v3 Authority Key Identifier: keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:da:7f:e7:a2:8e:64:56:e3:aa:da:a1:2f:43:fd:03:e4:91: 4d:6f:11:22:83:92:5e:07:59:68:b3:e6:1d:10:75:15:2e:66: 02:aa:49:f0:6e:60:43:6c:0b:a3:5a:f4:bd:b1:e0:35:63:e2: fb:e7:d1:db:15:08:7d:e6:c4:2f:bc:05:6a:11:e4:aa:52:91: b5:60:c1:73:99:8d:4a:3e:67:ab:e2:e2:e4:65:f3:be:38:11: 32:0d:33:dc:ab:97:ec:51:06:ad:a2:29:7c:1a:09:59:1c:4a: 2b:1e:3c:b5:d8:d5:31:9a:ff:fd:9c:ca:4e:bb:bb:d0:fe:75: cc:cb:ec:3b:7c:db:51:78:ba:a9:71:ed:8e:37:0b:7d:7a:3d: 93:de:1a:f1:b4:c3:e2:59:22:be:e5:e8:12:1e:a9:62:96:29: d7:f2:bb:5f:37:40:ae:76:b0:f6:a2:b0:6b:3b:d7:77:98:02: 6b:f4:31:bd:22:15:0e:56:86:52:25:8a:72:24:6d:ed:79:c2: d2:d9:30:fa:5a:ae:b7:35:5a:1a:aa:67:ef:8d:f1:b7:be:9a: 76:ad:c4:af:ac:85:dc:b0:3d:d5:2c:4d:5d:51:80:44:84:32: 12:35:4c:5c:a7:23:40:7c:2e:3f:46:4b:25:6a:6e:62:25:0a: f4:85:79:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicZVzIDrTdu5OaolIPNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWY0ZTgyZGJhODAyMzk5OWVmYmRhZDM0YjI3MWExZjQ4 OTJlOWUwHhcNMjUxMjA2MTIwMTIzWhcNMjUxMjA3MTIwMTIzWjAzMTEwLwYDVQQD Eyg2Njc5MTlkNzhjZjAyMmRkZjI4ZmNiZTk2N2ExMzc3YzU5ZmI4MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaPI2ZlTDidL/nxp40AVWv82/YdM Q+xF3DoTsG5yCT+PcrVS25571zs+coVF2SVQIGCgogkpw+bVe99uYlrZLAUdriEf qSsZ2PM+/YQJ5ht3OUYxcSMGFY80XaLHIX9eJQ4GT45+kaus0ooXwJ9ALGTdNwZ5 C2p5kn+jQskni2WrOGoZGWlo8QHa6BTGf4SCQ4WBvQrd1UWKTnmkSfPpR33scY7B OTFotL0LCWRudHZJyY9/WyxmC7jas0LWoR0sTngphsZf0EJMGaV0FMD1QEPVLW3O U19QXGnMgrNMbF7jUHSeJ0/IZOzPgmyUZfip+LEbZW7J+kl1dcy0kNMKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ5GdeM8CLd8o/L6WehN3xZ+4IgMB8GA1UdIwQY MBaAFI2fToLbqAI5me+9rTSycaH0iS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMt ZmJkOWZlYjBmMTNjLzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMtZmJkOWZlYjBmMTNj LzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdp/56KO ZFbjqtqhL0P9A+SRTW8RIoOSXgdZaLPmHRB1FS5mAqpJ8G5gQ2wLo1r0vbHgNWPi ++fR2xUIfebEL7wFahHkqlKRtWDBc5mNSj5nq+Li5GXzvjgRMg0z3KuX7FEGraIp fBoJWRxKKx48tdjVMZr//ZzKTru70P51zMvsO3zbUXi6qXHtjjcLfXo9k94a8bTD 4lkivuXoEh6pYpYp1/K7XzdArnaw9qKwazvXd5gCa/QxvSIVDlaGUiWKciRt7XnC 0tkw+lqutzVaGqpn743xt76adq3Er6yF3LA91SxNXVGARIQyEjVMXKcjQHwuP0ZL JWpuYiUK9IV5DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:16 2025 by rpki-client