This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json) Hash identifier: 8yl3FlC+3FEaNiehu+yQ5jDEp0jBSeQp/nxy5+NEUfE= Subject key identifier: 70:1B:FD:3B:CD:69:52:3D:4C:1F:C4:F3:58:C5:82:7B:9A:65:42:13 Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Certificate serial: 019AF31CD5D4F7E2B7534485DE662EE9F3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=) 2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: jBoHlpuRJmbbiBH1KpGqsd65Ac81mA/BZCZ88dSi6hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d5:d4:f7:e2:b7:53:44:85:de:66:2e:e9:f3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=701bfd3bcd69523d4c1fc4f358c5827b9a654213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:1d:7e:11:32:a3:76:7c:69:d9:83:dd:71: e8:2a:f7:4e:3b:74:ca:db:7c:67:17:10:42:6b:cf: 70:21:cc:e9:3d:cd:20:99:99:34:d4:a5:f7:56:c7: f7:08:ac:47:b2:26:95:5c:07:8e:7e:9c:f3:4f:7d: a1:9b:57:85:1e:9a:66:f6:54:20:c8:82:3a:9e:f8: fa:e5:bc:ee:c7:9a:4b:6d:4e:b0:4d:75:6e:71:ab: ba:ea:87:de:61:30:4a:58:cf:50:13:a9:63:2f:d4: 44:31:54:a0:3b:cb:ba:75:5a:44:66:d6:45:02:3b: 3b:7b:08:8a:f9:ef:08:2d:e9:33:f0:85:2a:ef:9b: 88:83:62:80:fb:53:2e:50:9f:cb:c2:8b:69:01:82: 77:09:3f:64:f9:8d:a3:27:25:6a:ac:18:ea:f8:a5: 51:c1:02:23:bc:8e:d1:1c:98:7b:0b:bd:50:a0:e5: 77:7d:7d:cf:09:32:93:0d:db:76:0d:71:85:c9:2b: b2:1d:a0:76:dc:66:a6:4d:ed:a0:5c:d4:3c:d5:68: 43:4b:a0:ab:40:75:96:bd:a1:50:fb:7a:4b:fc:b8: 12:74:9a:9f:3d:20:a5:4c:95:5b:c4:4b:93:55:b7: 58:b7:e8:bf:e0:55:81:59:a3:76:98:8f:f8:7e:30: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1B:FD:3B:CD:69:52:3D:4C:1F:C4:F3:58:C5:82:7B:9A:65:42:13 X509v3 Authority Key Identifier: keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:03:8b:af:7c:d9:71:69:a6:91:3a:c9:e3:a3:7a:80:1d: 12:71:07:ab:e9:7e:d2:b2:7c:53:de:5e:e3:39:0d:04:0a:e3: 69:f6:a4:5d:26:5b:c5:1d:24:21:66:bd:6f:5e:2e:40:1c:09: db:7b:27:66:43:d8:78:36:e0:0c:fc:5e:f7:4c:da:f4:9b:7f: d7:67:5d:39:32:a8:d5:6c:2c:12:1b:68:12:73:b8:b1:49:1c: 7c:ed:c0:b2:9f:8b:95:89:85:dd:0a:1a:70:7f:55:e1:35:e1: 09:06:9e:d1:2d:57:6b:0b:ec:bc:da:fb:eb:ff:44:d9:65:e9: 1d:37:e9:ce:2c:05:aa:34:76:b9:ff:8a:f9:af:75:0d:31:67: 30:a2:9b:73:a3:ae:73:93:a5:c4:c7:f5:df:2d:aa:e5:ac:7a: de:d9:aa:18:9c:a3:cf:90:a6:73:8b:f7:5c:df:71:70:9e:ee: 21:b7:82:d5:75:94:4a:d6:05:30:95:74:3d:8e:16:0c:bc:2a: 73:18:dc:f5:15:6f:5c:68:3e:be:fe:d9:94:57:95:c6:92:79: 54:88:4d:95:45:65:89:16:d5:6f:43:0f:24:f4:a9:76:46:50: b6:29:4f:0a:dc:76:7b:d9:83:3f:aa:ef:f0:87:2a:83:d0:11: 53:db:21:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNXU9+K3U0SF3mYu6fOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM3MDRkNTUwMWVkNzVhNmUyMDk2NmViZjA3YTM2NTU1 YjFhYjYwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD Eyg3MDFiZmQzYmNkNjk1MjNkNGMxZmM0ZjM1OGM1ODI3YjlhNjU0MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1odfhEyo3Z8admD3XHoKvdOO3TK 23xnFxBCa89wIczpPc0gmZk01KX3Vsf3CKxHsiaVXAeOfpzzT32hm1eFHppm9lQg yII6nvj65bzux5pLbU6wTXVucau66ofeYTBKWM9QE6ljL9REMVSgO8u6dVpEZtZF Ajs7ewiK+e8ILekz8IUq75uIg2KA+1MuUJ/LwotpAYJ3CT9k+Y2jJyVqrBjq+KVR wQIjvI7RHJh7C71QoOV3fX3PCTKTDdt2DXGFySuyHaB23GamTe2gXNQ81WhDS6Cr QHWWvaFQ+3pL/LgSdJqfPSClTJVbxEuTVbdYt+i/4FWBWaN2mI/4fjD2TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAb/TvNaVI9TB/E81jFgnuaZUITMB8GA1UdIwQY MBaAFI5jcE1VAe11puIJZuvwejZVWxq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUt Yzk0N2UxNmMyYzYxLzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83OTcyMWYtZjQwYi00MWQyLWFjMGUtYzk0N2UxNmMyYzYx LzEvam1Od1RWVUI3WFdtNGdsbTZfQjZObFZiR3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk8Di698 2XFpppE6yeOjeoAdEnEHq+l+0rJ8U95e4zkNBArjafakXSZbxR0kIWa9b14uQBwJ 23snZkPYeDbgDPxe90za9Jt/12ddOTKo1WwsEhtoEnO4sUkcfO3Asp+LlYmF3Qoa cH9V4TXhCQae0S1XawvsvNr76/9E2WXpHTfpziwFqjR2uf+K+a91DTFnMKKbc6Ou c5OlxMf13y2q5ax63tmqGJyjz5Cmc4v3XN9xcJ7uIbeC1XWUStYFMJV0PY4WDLwq cxjc9RVvXGg+vv7ZlFeVxpJ5VIhNlUVliRbVb0MPJPSpdkZQtilPCtx2e9mDP6rv 8Icqg9ARU9sh2w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:36 2025 by rpki-client