This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft File: jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json) Hash identifier: zHDVIz+sJr+1DLCY/QfuYHiSn+809MNEX/IWZnEgpog= Subject key identifier: EB:E3:F4:5F:F3:49:F8:EB:2D:7F:1D:51:0B:D6:AB:D7:28:85:66:FA Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 Certificate issuer: /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Certificate serial: 019AFA66CF5BFE5DB2C51AB62CBC11B8DDB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft Manifest number: 0788 Signing time: Sun 07 Dec 2025 20:00:33 +0000 Manifest this update: Sun 07 Dec 2025 20:00:33 +0000 Manifest next update: Mon 08 Dec 2025 20:00:33 +0000 Files and hashes: 1: WOkyiKZXyZb_JE15v4JPZZ7_uas.roa (hash: uCxh+/x66loEAoXJHeu6h1m3ZKFFNdiPZwnHjwWElmQ=) 2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: 9sHaVi4HNo8MZ6pjSRIuSRYGJiRp2F+6bgwJa/oKTaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:66:cf:5b:fe:5d:b2:c5:1a:b6:2c:bc:11:b8:dd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Validity Not Before: Dec 7 20:00:33 2025 GMT Not After : Dec 8 20:00:33 2025 GMT Subject: CN=ebe3f45ff349f8eb2d7f1d510bd6abd7288566fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:59:bb:95:8e:8e:05:57:68:8e:42:34:93: 5c:11:c2:fe:93:a4:7e:02:08:fc:0e:6b:0c:b7:ee: 79:e7:c5:3a:fb:81:43:4f:56:1f:2c:32:44:a1:3a: cf:2a:51:a4:5b:d2:52:73:90:40:eb:ab:69:51:3f: e2:77:27:96:d2:29:d7:13:d6:1b:ae:e3:b7:60:6e: 63:85:57:aa:a2:dc:d2:9d:e1:57:06:1a:e0:32:f9: 03:2b:f0:38:83:0b:a6:f7:2f:7e:34:52:15:7b:b3: 7f:c6:aa:96:13:fa:87:10:ee:50:f2:b1:ba:75:ea: 17:be:ed:92:01:c4:26:50:d1:dc:30:31:46:98:da: 64:78:d8:b8:6c:1c:a2:6e:36:2a:9c:d8:a9:0e:06: 8a:09:48:96:53:42:06:4d:02:3f:3e:c6:3a:27:c9: 26:e7:04:71:e8:25:12:6e:1d:33:6a:3c:de:ee:ae: 9b:53:a3:31:ac:29:7e:6b:36:18:a9:2a:4e:ed:89: cd:1f:f4:4e:6f:0e:86:31:c4:27:a6:a1:56:dd:0f: ca:15:6c:f9:58:1b:40:39:98:54:0c:ed:9d:27:07: 08:10:b8:ae:40:5c:ad:b1:a4:17:c5:45:7c:57:10: f9:9e:fd:2f:95:1a:bf:63:36:dc:66:e0:7a:81:a7: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E3:F4:5F:F3:49:F8:EB:2D:7F:1D:51:0B:D6:AB:D7:28:85:66:FA X509v3 Authority Key Identifier: keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:96:06:90:6a:dd:66:4d:d0:b7:a3:3a:f5:cd:a5:67:8f:97: f9:73:76:91:40:e6:4e:cb:c0:bc:a1:79:2a:72:04:66:a0:c8: 2a:15:80:32:24:c2:6c:e8:59:e6:0e:b4:3b:fc:24:e6:ae:80: 52:e4:26:16:dc:1e:50:a5:57:ee:89:2b:a6:d5:fe:b6:72:5f: 54:a3:be:d3:f0:73:5c:76:96:d8:9f:65:cd:f4:f9:1e:c5:49: 4c:ba:c8:25:c9:65:ec:fa:a0:93:32:67:8e:6b:2e:d0:34:68: 58:0d:aa:ae:71:41:18:c0:ce:8d:4b:87:43:f9:8a:4f:3a:35: 3b:43:27:92:06:f4:d7:a2:7e:c1:b4:bf:86:99:35:53:3f:df: f8:a7:10:c4:84:54:66:94:79:0a:c0:7c:c3:56:f1:e5:f6:f7: cd:97:8d:a5:4e:94:cb:0c:4e:21:64:58:3b:72:3f:c4:8e:89: 47:df:f8:d6:a7:fe:d0:5c:53:cf:b3:07:b1:cf:80:09:66:73: f5:bf:ea:0f:50:f6:e9:5f:29:1a:09:29:21:01:e7:1c:8b:fa: 9e:55:f3:25:ff:dc:d9:d5:f8:86:af:f7:88:67:57:5f:94:e1: 0b:98:8c:7a:2c:9b:10:ff:ac:84:9f:43:3e:a0:6a:cf:89:05: c1:2d:e6:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6Zs9b/l2yxRq2LLwRuN2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl ZWQ3OTcwHhcNMjUxMjA3MjAwMDMzWhcNMjUxMjA4MjAwMDMzWjAzMTEwLwYDVQQD EyhlYmUzZjQ1ZmYzNDlmOGViMmQ3ZjFkNTEwYmQ2YWJkNzI4ODU2NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZZu5WOjgVXaI5CNJNcEcL+k6R+ Agj8DmsMt+5558U6+4FDT1YfLDJEoTrPKlGkW9JSc5BA66tpUT/idyeW0inXE9Yb ruO3YG5jhVeqotzSneFXBhrgMvkDK/A4gwum9y9+NFIVe7N/xqqWE/qHEO5Q8rG6 deoXvu2SAcQmUNHcMDFGmNpkeNi4bByibjYqnNipDgaKCUiWU0IGTQI/PsY6J8km 5wRx6CUSbh0zajze7q6bU6MxrCl+azYYqSpO7YnNH/RObw6GMcQnpqFW3Q/KFWz5 WBtAOZhUDO2dJwcIELiuQFytsaQXxUV8VxD5nv0vlRq/YzbcZuB6gae59wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvj9F/zSfjrLX8dUQvWq9cohWb6MB8GA1UdIwQY MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt NGFhYjJkNjhmYTVhLzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJYGkGrd Zk3Qt6M69c2lZ4+X+XN2kUDmTsvAvKF5KnIEZqDIKhWAMiTCbOhZ5g60O/wk5q6A UuQmFtweUKVX7okrptX+tnJfVKO+0/BzXHaW2J9lzfT5HsVJTLrIJcll7PqgkzJn jmsu0DRoWA2qrnFBGMDOjUuHQ/mKTzo1O0Mnkgb016J+wbS/hpk1Uz/f+KcQxIRU ZpR5CsB8w1bx5fb3zZeNpU6UywxOIWRYO3I/xI6JR9/41qf+0FxTz7MHsc+ACWZz 9b/qD1D26V8pGgkpIQHnHIv6nlXzJf/c2dX4hq/3iGdXX5ThC5iMeiybEP+shJ9D PqBqz4kFwS3mzA== -----END CERTIFICATE-----Generated at Mon Dec 8 02:34:42 2025 by rpki-client