This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json) Hash identifier: fqe3ISGDBEhqbDiVluXuGCrbxadZcoVDZ58Vq0wd3qY= Subject key identifier: DE:C1:78:BD:BD:81:9F:58:14:AC:63:9B:CE:59:1A:78:7E:5F:6F:66 Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Certificate serial: 019AF31B36E309CAB67FC4868150A9F9D037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: IW8x9Qc0kDR+/qX3ZhPC8QPk42T0e3bNTB4z8xQx0ZE=) 2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:36:e3:09:ca:b6:7f:c4:86:81:50:a9:f9:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=dec178bdbd819f5814ac639bce591a787e5f6f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:92:af:d8:49:90:30:8f:2c:4b:83:25:b1: f5:a0:86:f9:bf:c8:f8:37:03:a7:23:a4:fa:33:30: e1:40:17:55:39:1d:ab:62:17:2d:b3:bf:9d:1f:00: 27:cb:3a:28:24:75:57:eb:63:9b:cc:98:a7:ef:10: 0d:88:cf:67:9e:a3:33:0e:ed:b8:71:cf:79:28:ad: fe:03:99:00:a9:c9:99:57:a0:3d:66:d4:1f:3d:e9: 39:e1:9e:36:eb:09:6a:8d:0e:92:94:f2:ed:e7:56: 25:fd:a6:0e:c7:75:38:6a:2f:1d:c9:4e:a0:43:ce: 17:35:af:4b:0d:dc:75:40:bf:b0:05:90:14:74:e8: 8d:7b:d7:e9:fa:12:84:2c:8d:f5:a5:0b:ee:68:5b: 00:8c:26:01:a3:df:0f:4f:65:b7:71:dc:8d:4f:a1: e4:34:2f:d2:6d:a0:7a:47:2d:e3:88:78:45:9b:22: 45:41:2d:04:3e:6f:12:11:00:fb:64:c3:80:12:e3: 5d:63:40:6b:4f:89:68:34:38:5b:58:a1:27:6e:91: 51:13:0d:4d:ad:15:26:0a:4d:f4:a7:fb:56:0f:be: 7a:7c:44:85:fe:bd:36:cd:f6:0a:e7:b9:c1:05:7a: 06:93:7e:fa:6e:6c:e2:62:54:c9:6b:5e:13:ae:db: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C1:78:BD:BD:81:9F:58:14:AC:63:9B:CE:59:1A:78:7E:5F:6F:66 X509v3 Authority Key Identifier: keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a4:a4:57:56:ce:db:47:67:60:6b:c8:50:39:95:11:2d:39: 09:48:5c:38:fc:08:c7:40:1d:ef:29:f6:76:cb:f4:12:e2:9e: b8:77:93:01:c0:c5:36:3b:f8:d2:25:e9:f4:96:04:21:de:80: 5d:f6:1f:fe:cb:18:95:37:cb:68:30:05:35:70:88:4b:e6:5c: 06:98:9f:a3:f6:19:0f:ea:66:ba:8f:64:60:77:bb:ba:f7:25: 91:08:c2:ec:c6:f6:d3:85:02:1a:99:ca:2d:76:8a:d4:94:59: 91:c5:46:84:15:11:03:23:c4:b7:70:81:48:69:5f:d6:22:df: 11:4a:d2:45:20:2d:b0:e5:d6:c9:1b:ef:f2:01:5e:f5:ca:f5: 8e:c9:d3:0e:44:fb:d2:ea:b8:2f:2b:51:8c:4f:19:a6:f7:d4: 8e:45:8e:6f:f5:57:88:3c:89:a7:7b:2a:41:fd:50:54:1d:d4: 81:35:ca:56:a2:b5:19:a4:40:55:b4:6d:3d:0e:90:50:a0:6d: 64:d6:ef:84:43:3b:2f:4d:73:86:7a:a9:28:36:e8:71:b9:4f: 31:84:22:2c:2a:47:5c:0f:8f:d9:95:50:25:b8:91:d1:ab:45: 14:9e:5d:5f:a8:cd:07:86:2a:52:4e:c6:a9:d2:a1:7d:5f:5e: 5d:29:80:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzbjCcq2f8SGgVCp+dA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy Zjg0Y2QwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhkZWMxNzhiZGJkODE5ZjU4MTRhYzYzOWJjZTU5MWE3ODdlNWY2ZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoeSr9hJkDCPLEuDJbH1oIb5v8j4 NwOnI6T6MzDhQBdVOR2rYhcts7+dHwAnyzooJHVX62ObzJin7xANiM9nnqMzDu24 cc95KK3+A5kAqcmZV6A9ZtQfPek54Z426wlqjQ6SlPLt51Yl/aYOx3U4ai8dyU6g Q84XNa9LDdx1QL+wBZAUdOiNe9fp+hKELI31pQvuaFsAjCYBo98PT2W3cdyNT6Hk NC/SbaB6Ry3jiHhFmyJFQS0EPm8SEQD7ZMOAEuNdY0BrT4loNDhbWKEnbpFREw1N rRUmCk30p/tWD756fESF/r02zfYK57nBBXoGk376bmziYlTJa14TrtuxPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7BeL29gZ9YFKxjm85ZGnh+X29mMB8GA1UdIwQY MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5 LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6SkV1bO 20dnYGvIUDmVES05CUhcOPwIx0Ad7yn2dsv0EuKeuHeTAcDFNjv40iXp9JYEId6A XfYf/ssYlTfLaDAFNXCIS+ZcBpifo/YZD+pmuo9kYHe7uvclkQjC7Mb204UCGpnK LXaK1JRZkcVGhBURAyPEt3CBSGlf1iLfEUrSRSAtsOXWyRvv8gFe9cr1jsnTDkT7 0uq4LytRjE8ZpvfUjkWOb/VXiDyJp3sqQf1QVB3UgTXKVqK1GaRAVbRtPQ6QUKBt ZNbvhEM7L01zhnqpKDbocblPMYQiLCpHXA+P2ZVQJbiR0atFFJ5dX6jNB4YqUk7G qdKhfV9eXSmAjg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:57 2025 by rpki-client