This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json) Hash identifier: RTpZM4S+ACI5+cyGUScwrRmmHDyqLZ4cUkFPaawDX8w= Subject key identifier: AE:C7:B9:5C:C1:AB:88:10:3A:8E:E8:57:B7:BA:6C:C4:28:D5:5B:48 Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d Certificate serial: 019AF19AA5B968F3EF9D5DD6A5E6EBE7F3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft Manifest number: 0490 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: V+x9uuy/oajb+EbIgTUsMg7SXAKx66EcNKshjPkDk8o=) 2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a5:b9:68:f3:ef:9d:5d:d6:a5:e6:eb:e7:f3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=aec7b95cc1ab88103a8ee857b7ba6cc428d55b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:f6:c4:a8:a3:12:b7:a0:fc:a3:6a:10:db: 37:26:23:3c:5b:e8:49:15:9f:2d:55:e4:52:75:22: cc:f6:65:f6:8e:3b:88:8b:45:90:0c:d2:18:1d:0f: dc:b0:c0:1a:ce:7c:dd:bb:69:cc:5f:ab:b2:33:bf: ed:cd:e4:b1:02:ef:d5:b1:ef:cf:fe:0e:ab:bc:a4: 60:54:5a:3e:2e:61:79:35:10:f3:9c:83:54:3c:ca: 2f:8d:1e:45:c8:5b:90:28:ca:36:ac:6b:94:24:0f: 81:0f:da:48:e9:31:a6:d3:f4:32:c0:19:51:6b:1f: 00:a2:65:58:30:1b:30:a8:22:28:cd:c5:1f:25:bf: 5a:59:17:8e:97:6a:9c:d6:e2:b3:4d:f8:49:a0:4e: e0:b4:d1:92:ef:f8:1a:58:c3:bb:e7:01:10:dc:20: f5:9e:42:10:99:73:44:c1:70:ae:b3:d0:8f:00:5b: 2d:83:09:e2:2d:4c:9e:5d:ab:11:49:cb:ff:e3:5f: dc:b4:e9:78:5a:72:2f:21:11:12:94:5d:e0:ce:d7: 1d:74:6e:84:b8:06:d2:12:17:4f:16:53:63:80:7d: 4b:7a:da:5e:94:d0:12:92:4c:79:71:36:1b:8b:d1: 33:7a:d8:8c:1c:96:3c:97:67:7b:5b:1d:11:50:15: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:B9:5C:C1:AB:88:10:3A:8E:E8:57:B7:BA:6C:C4:28:D5:5B:48 X509v3 Authority Key Identifier: keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:1a:90:73:cc:c2:43:81:de:63:36:f7:00:0c:ee:6f:97: 0d:a8:2a:4e:7f:e9:1f:08:36:2e:5f:6c:8f:1c:98:f0:e5:c1: 05:2a:da:88:51:42:cc:f9:11:c6:e3:c8:39:37:d8:c9:49:ba: 1e:0c:24:92:55:dd:90:41:c5:e6:2f:69:d5:e0:24:48:49:8d: 84:e4:d7:c6:30:22:02:a8:e9:bd:d3:10:fa:1d:ff:07:de:d4: b2:82:88:e8:cd:4c:27:d9:0c:0f:76:fe:bc:98:2a:32:96:d9: 8c:22:a1:cb:9a:ad:10:8c:54:98:89:e0:4a:37:db:c8:41:93: 81:2e:f5:da:bd:f0:25:f9:cf:de:f3:9c:04:af:6c:29:b2:b6: f9:ea:d6:7e:ce:95:c6:c3:47:77:89:9e:54:f8:73:8b:f7:d3: 49:1a:fa:58:17:a6:76:18:bc:00:ff:1b:1e:cc:b8:92:2f:a7: d7:f9:e7:47:eb:bc:1c:38:35:50:a6:15:6b:2f:af:49:d5:c0: 4e:31:8f:8f:6c:b7:7b:42:c2:27:91:2e:72:fb:73:1d:5b:a2: dd:24:f9:53:e4:ef:a9:1c:20:8e:da:e2:cd:92:b0:18:a9:16: f2:22:1b:de:02:6e:28:e9:9a:5e:62:e2:0d:c9:d7:01:17:9c: 02:9a:b7:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqW5aPPvnV3Wpebr5/P0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky YWE0MmQwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EyhhZWM3Yjk1Y2MxYWI4ODEwM2E4ZWU4NTdiN2JhNmNjNDI4ZDU1YjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw/2xKijEreg/KNqENs3JiM8W+hJ FZ8tVeRSdSLM9mX2jjuIi0WQDNIYHQ/csMAaznzdu2nMX6uyM7/tzeSxAu/Vse/P /g6rvKRgVFo+LmF5NRDznINUPMovjR5FyFuQKMo2rGuUJA+BD9pI6TGm0/QywBlR ax8AomVYMBswqCIozcUfJb9aWReOl2qc1uKzTfhJoE7gtNGS7/gaWMO75wEQ3CD1 nkIQmXNEwXCus9CPAFstgwniLUyeXasRScv/41/ctOl4WnIvIRESlF3gztcddG6E uAbSEhdPFlNjgH1LetpelNASkkx5cTYbi9EzetiMHJY8l2d7Wx0RUBXT+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7HuVzBq4gQOo7oV7e6bMQo1VtIMB8GA1UdIwQY MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt NzY2YzgyNzU4MDY1LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1 LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhQakHPM wkOB3mM29wAM7m+XDagqTn/pHwg2Ll9sjxyY8OXBBSraiFFCzPkRxuPIOTfYyUm6 HgwkklXdkEHF5i9p1eAkSEmNhOTXxjAiAqjpvdMQ+h3/B97UsoKI6M1MJ9kMD3b+ vJgqMpbZjCKhy5qtEIxUmIngSjfbyEGTgS712r3wJfnP3vOcBK9sKbK2+erWfs6V xsNHd4meVPhzi/fTSRr6WBemdhi8AP8bHsy4ki+n1/nnR+u8HDg1UKYVay+vSdXA TjGPj2y3e0LCJ5EucvtzHVui3ST5U+TvqRwgjtrizZKwGKkW8iIb3gJuKOmaXmLi DcnXARecApq3bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:54 2025 by rpki-client