This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json) Hash identifier: z8p9Xsl0dr6tHlfgKIjiC6q2l4yRxsShXhzu9MdsXkw= Subject key identifier: D8:42:12:2F:7D:70:D5:BD:A1:9A:69:D2:D4:2F:32:CD:E6:17:1D:ED Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Certificate serial: 019AF2AD485E56A48476752506C8042D2D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft Manifest number: 0A2B Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=) 2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: ym0Xk61wF4bG7XyCMjZIdTAyLDD3m+xEXquU60FtzrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:48:5e:56:a4:84:76:75:25:06:c8:04:2d:2d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=d842122f7d70d5bda19a69d2d42f32cde6171ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:fc:99:51:86:ff:ba:15:6b:71:e0:50:f6: d8:36:26:b0:1d:75:48:b8:03:e9:a9:69:a0:02:c3: 97:85:b3:c0:41:bf:03:cf:f7:6e:7d:7f:22:d2:ee: cb:56:54:44:47:88:43:f5:eb:6b:fe:94:cd:d6:43: 09:57:a9:58:82:ff:2f:4b:7f:05:f6:b2:2d:33:ea: e0:7d:de:95:8e:6f:b9:16:ee:e0:53:10:9c:39:73: d1:15:e0:7b:24:d7:79:6c:69:27:0a:0e:2d:b7:34: 47:64:09:ff:21:f0:f3:2e:af:b7:3b:dd:82:6b:2c: 7a:51:c0:ee:c2:bb:c4:70:79:d7:c2:eb:f2:64:1a: bd:81:c0:8f:f8:9e:16:5f:95:e2:ac:8e:77:41:78: ba:b7:4b:d9:39:36:ae:1f:c7:0b:ca:16:61:cb:36: 91:5a:1d:dd:41:d4:0b:38:a0:c7:04:4f:c4:1e:38: 7b:49:41:df:0f:25:2e:12:80:da:55:96:08:ae:e1: 18:13:5a:19:9a:73:1b:92:e5:38:1d:fa:cf:86:9f: a7:45:41:e0:ec:20:b5:50:b8:94:9e:2a:3d:c6:78: e1:c3:85:71:8b:93:38:2e:f8:19:08:b1:c3:07:29: 7c:a8:07:3c:d1:45:8e:84:48:47:a1:69:5d:d2:47: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:12:2F:7D:70:D5:BD:A1:9A:69:D2:D4:2F:32:CD:E6:17:1D:ED X509v3 Authority Key Identifier: keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5f:84:7e:a7:2f:65:a9:95:34:2a:86:54:3a:c4:a1:dc:cf: 5b:6c:cb:8e:91:c7:34:08:d0:a0:bd:07:01:97:bf:1d:67:fa: cb:a7:05:97:f1:74:d6:e3:ef:71:ec:24:de:43:29:e2:ec:5d: 0d:65:23:28:9a:5b:9b:6f:6a:a2:e3:30:d2:46:12:a4:ce:bc: 3f:27:a0:4b:2e:b9:5d:7f:1b:48:1f:40:f5:39:91:7f:f3:2d: a4:b7:92:4f:58:7e:57:73:64:16:a7:ae:7e:2a:18:bc:9d:ed: dc:c2:31:d1:eb:7a:88:b9:ad:ad:77:79:db:70:c1:11:4f:c3: b2:e0:ee:8c:65:1e:bd:e1:87:86:44:e5:3b:db:7b:65:8e:5a: 46:0e:e9:e5:85:d5:7e:77:c3:2a:c3:70:0b:5d:08:85:21:03: 2a:3c:45:90:14:51:f5:f4:76:28:96:23:f7:d0:ad:b1:22:ed: 4b:6c:c2:cd:25:1b:1b:b2:01:44:6e:b3:6c:ba:a7:6f:3a:b3: 73:65:8f:91:ef:32:39:c7:3a:5b:20:f8:c4:dc:a8:38:66:89: 09:6c:30:5c:c8:cc:d5:dc:c4:ec:69:cf:1f:e4:96:9e:d8:e9: e0:a7:38:f7:fa:29:b9:20:ff:be:cf:e4:2f:10:f8:4f:63:7d: 44:0f:9a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUheVqSEdnUlBsgELS0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk OWRhNWYwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD EyhkODQyMTIyZjdkNzBkNWJkYTE5YTY5ZDJkNDJmMzJjZGU2MTcxZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC38mVGG/7oVa3HgUPbYNiawHXVI uAPpqWmgAsOXhbPAQb8Dz/dufX8i0u7LVlRER4hD9etr/pTN1kMJV6lYgv8vS38F 9rItM+rgfd6Vjm+5Fu7gUxCcOXPRFeB7JNd5bGknCg4ttzRHZAn/IfDzLq+3O92C ayx6UcDuwrvEcHnXwuvyZBq9gcCP+J4WX5XirI53QXi6t0vZOTauH8cLyhZhyzaR Wh3dQdQLOKDHBE/EHjh7SUHfDyUuEoDaVZYIruEYE1oZmnMbkuU4HfrPhp+nRUHg 7CC1ULiUnio9xnjhw4Vxi5M4LvgZCLHDByl8qAc80UWOhEhHoWld0kdJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhCEi99cNW9oZpp0tQvMs3mFx3tMB8GA1UdIwQY MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl+Efqcv ZamVNCqGVDrEodzPW2zLjpHHNAjQoL0HAZe/HWf6y6cFl/F01uPvcewk3kMp4uxd DWUjKJpbm29qouMw0kYSpM68PyegSy65XX8bSB9A9TmRf/MtpLeST1h+V3NkFqeu fioYvJ3t3MIx0et6iLmtrXd523DBEU/DsuDujGUeveGHhkTlO9t7ZY5aRg7p5YXV fnfDKsNwC10IhSEDKjxFkBRR9fR2KJYj99CtsSLtS2zCzSUbG7IBRG6zbLqnbzqz c2WPke8yOcc6WyD4xNyoOGaJCWwwXMjM1dzE7GnPH+SWntjp4Kc49/opuSD/vs/k LxD4T2N9RA+arA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:42 2025 by rpki-client