This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json) Hash identifier: b10xqQ/EUwzR5mbP8w9OEklw5M78rA/OOXI4kkKaO8U= Subject key identifier: 8D:D8:51:1C:E5:33:1D:47:45:DE:18:0B:66:65:23:76:9D:F7:73:2B Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7 Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7 Certificate serial: 019AF23F84409CC3AF941E5FA66B469DB6E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft Manifest number: 15BD Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=) 2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: KdgBeshS1zR66izluCZO2Gq1KQo64v9cWh+4bAWdx0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:84:40:9c:c3:af:94:1e:5f:a6:6b:46:9d:b6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7 Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=8dd8511ce5331d4745de180b666523769df7732b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:be:d6:52:d8:82:00:39:48:dc:58:e7:da: a2:54:b5:15:ab:2c:b4:ef:8e:75:99:0f:1d:a1:89: 1f:db:74:4c:84:bd:e3:55:4f:92:49:ee:1a:1d:e7: 47:a3:69:6c:14:82:4a:c7:ea:18:4a:2c:f7:5b:4f: 1c:fc:d6:9e:87:17:b7:e9:9f:25:fc:8b:e4:02:66: 2a:c0:a7:9c:17:70:83:06:81:38:1e:36:98:66:98: 6f:42:6a:d1:e7:c5:3f:b9:4c:43:2c:72:90:8a:f2: 0f:c6:1f:e1:e2:a6:41:0d:ad:b9:c6:96:91:c9:35: 07:0a:a7:e5:da:27:5b:5c:6e:01:76:71:70:20:f9: 18:0d:35:7e:1e:61:e1:3b:77:97:dc:78:da:fe:b5: 01:16:37:e7:1c:73:92:33:20:05:9e:e3:31:6c:72: d9:3a:b3:5e:34:46:63:33:ec:d4:21:3c:88:82:c6: 26:e4:1d:58:36:a6:1e:c3:74:fd:f2:7c:1e:59:bc: 39:cf:38:0d:5b:5e:a9:48:b3:ea:a8:37:64:2f:8e: 7e:d0:65:dc:62:11:f8:d6:9c:ed:ea:b4:05:3c:a8: 4e:b6:6f:96:53:05:56:de:40:ba:b1:e9:6e:46:b0: 0f:45:a7:7f:81:53:71:aa:cc:12:2a:a7:54:a9:b1: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D8:51:1C:E5:33:1D:47:45:DE:18:0B:66:65:23:76:9D:F7:73:2B X509v3 Authority Key Identifier: keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:82:50:e7:5f:9b:4a:7e:0e:fb:87:69:3c:60:e6:9b:5b:12: aa:c3:79:9a:b4:82:01:37:36:fd:43:da:c5:0a:d4:66:58:25: 40:c6:80:aa:8e:86:25:9b:aa:7c:20:ec:b6:18:b8:1a:a6:d1: a3:24:bd:3f:b0:83:6b:45:82:22:86:b1:ff:d1:0f:4f:f6:0d: ca:65:a1:a1:07:68:0c:e4:2b:ec:e2:5e:07:d2:84:b3:0b:05: 15:3d:8b:5e:2b:bb:fa:65:5c:e9:e5:21:83:b1:b4:ad:e8:f8: ea:cd:6e:22:12:23:03:bd:73:f1:08:d3:a2:de:aa:7a:a3:75: 0d:cc:45:18:e6:f3:81:6a:da:c2:da:23:45:a7:bd:4f:d0:e6: ce:85:f4:54:6a:06:fa:70:47:90:5a:28:88:a2:1b:f3:69:89: 36:5f:a2:1b:14:cc:55:73:be:05:a1:15:ba:20:6c:ea:08:b0: 0f:e8:46:58:32:0d:3d:02:43:17:1f:b5:2d:67:eb:9d:b1:81: 04:82:29:06:42:7d:67:f7:6d:a1:52:0e:1b:35:4d:a9:1e:5a: 56:39:e5:13:d9:88:88:14:bc:6a:c0:f7:b8:69:51:7a:67:a8: 6d:cd:1d:8b:98:8f:45:56:3a:12:c2:aa:c5:34:6b:f8:06:0e: a8:47:d6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4RAnMOvlB5fpmtGnbbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTJmODg5MjZlMGJkODQwMWM3M2NlZGI3N2U5OWM5NGRj YzUyZDcwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD Eyg4ZGQ4NTExY2U1MzMxZDQ3NDVkZTE4MGI2NjY1MjM3NjlkZjc3MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjy+1lLYggA5SNxY59qiVLUVqyy0 7451mQ8doYkf23RMhL3jVU+SSe4aHedHo2lsFIJKx+oYSiz3W08c/Naehxe36Z8l /IvkAmYqwKecF3CDBoE4HjaYZphvQmrR58U/uUxDLHKQivIPxh/h4qZBDa25xpaR yTUHCqfl2idbXG4BdnFwIPkYDTV+HmHhO3eX3Hja/rUBFjfnHHOSMyAFnuMxbHLZ OrNeNEZjM+zUITyIgsYm5B1YNqYew3T98nweWbw5zzgNW16pSLPqqDdkL45+0GXc YhH41pzt6rQFPKhOtm+WUwVW3kC6seluRrAPRad/gVNxqswSKqdUqbGnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3YURzlMx1HRd4YC2ZlI3ad93MrMB8GA1UdIwQY MBaAFI+i+Ikm4L2EAcc87bd+mclNzFLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMt ZDBlZGVjOTcyOGU1LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMtZDBlZGVjOTcyOGU1 LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYJQ51+b Sn4O+4dpPGDmm1sSqsN5mrSCATc2/UPaxQrUZlglQMaAqo6GJZuqfCDsthi4GqbR oyS9P7CDa0WCIoax/9EPT/YNymWhoQdoDOQr7OJeB9KEswsFFT2LXiu7+mVc6eUh g7G0rej46s1uIhIjA71z8QjTot6qeqN1DcxFGObzgWrawtojRae9T9DmzoX0VGoG +nBHkFooiKIb82mJNl+iGxTMVXO+BaEVuiBs6giwD+hGWDINPQJDFx+1LWfrnbGB BIIpBkJ9Z/dtoVIOGzVNqR5aVjnlE9mIiBS8asD3uGlRemeobc0di5iPRVY6EsKq xTRr+AYOqEfWTw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:07 2025 by rpki-client