This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json) Hash identifier: McId1JdW+NfY6nSGIzppBD+TmZWKcfkvk+RJXcfAgfU= Subject key identifier: 4D:2E:6D:BD:48:C0:72:97:4A:43:E7:7F:2D:91:82:46:54:D6:1D:86 Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Certificate serial: 019AF2AD6ECC8A0162DD9984DD345DA78CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft Manifest number: 0F8C Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: tFzt3JQXwT+NttmftE8/tDpK+tmXGXC2SGuxH25mCQA=) 2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6e:cc:8a:01:62:dd:99:84:dd:34:5d:a7:8c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=4d2e6dbd48c072974a43e77f2d91824654d61d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:df:6f:fa:06:a1:37:c5:af:5b:e6:52:4a: e2:89:34:47:8d:62:91:2e:97:03:77:bb:f0:2c:bd: 72:d8:0b:cf:06:b7:d7:d9:b3:15:0a:b3:b6:db:fe: 9d:e6:d6:96:0d:63:06:0a:0f:36:a7:a8:2b:96:66: ca:07:d0:b4:58:96:2c:13:67:56:2b:06:e2:4a:b5: 2b:68:5e:d3:2a:89:fa:23:e0:88:65:e6:cf:cc:1c: 46:89:b2:ff:15:da:ae:5f:b0:9d:bc:aa:87:85:7b: 41:ad:87:55:46:99:48:0f:49:9a:1b:5c:40:04:74: fe:b7:eb:07:58:65:68:e4:84:23:4d:4b:31:3c:89: 6d:b6:19:f5:18:ab:f8:b2:ee:6d:14:7c:08:4a:bd: b6:e9:05:90:47:b8:33:32:f8:91:9b:af:0d:08:5b: 44:46:9f:ee:af:85:d4:dc:27:cf:e1:f9:f5:bf:49: b9:03:b5:fb:98:31:bd:07:6f:ed:46:4d:5e:78:59: 22:87:b6:d5:c2:a6:79:7f:f4:48:d8:85:fd:1e:99: 86:64:fa:8c:ce:55:2b:55:51:fe:86:48:60:4c:4a: 2a:a1:5f:8d:6d:45:70:00:85:3d:0d:56:cf:a1:6a: aa:19:98:13:77:3d:7c:c8:31:87:59:d6:7f:b2:84: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2E:6D:BD:48:C0:72:97:4A:43:E7:7F:2D:91:82:46:54:D6:1D:86 X509v3 Authority Key Identifier: keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3a:29:25:cb:06:9e:36:53:bb:72:2d:31:95:53:0c:2e:2b: e7:dd:2c:1a:f5:9e:4a:04:32:10:c0:c1:d8:91:d5:fc:4a:07: e4:ee:aa:9a:38:60:63:68:80:e5:44:d1:44:7e:da:a1:c2:7d: 9d:b2:9b:d0:d7:5d:f5:fc:fd:1d:1b:f4:eb:44:fc:d3:58:b0: ad:57:fd:b2:26:08:bc:d8:91:9b:86:a1:04:2a:57:22:06:80: f4:e4:c7:5e:a1:c7:54:2e:f5:14:65:36:b4:94:54:eb:80:87: ca:54:cf:dc:be:ce:b2:5f:c5:c0:13:42:5c:90:00:3b:c5:0b: 2c:c4:18:8a:0b:58:3e:cc:e5:31:eb:f0:ab:fa:a4:84:27:b6: 77:4b:ae:da:7c:73:49:57:45:83:20:af:7e:43:85:c8:84:56: 82:03:3a:1c:56:27:d7:4e:71:7a:8e:ac:cc:1a:04:27:d6:d4: a1:78:80:e8:ec:5b:cc:90:87:cc:34:2a:f1:c5:78:e8:f7:2e: e1:b2:aa:f3:7e:97:5d:a9:93:a5:11:0f:c3:2c:0e:1b:4c:13: 35:08:21:1a:bc:56:18:d7:b3:35:9b:17:80:7b:b4:a5:8c:ad: 0e:8d:35:bc:3c:bd:82:cb:4e:ff:1b:f1:8a:1b:3a:cd:4f:aa: a1:0d:90:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW7MigFi3ZmE3TRdp4zZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OWI4YTM3NDg0NDBjOWQ1YzJjNTA4YmQwM2I0NmQ3Mjcz ZWVlNTYwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg0ZDJlNmRiZDQ4YzA3Mjk3NGE0M2U3N2YyZDkxODI0NjU0ZDYxZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHHfb/oGoTfFr1vmUkriiTRHjWKR LpcDd7vwLL1y2AvPBrfX2bMVCrO22/6d5taWDWMGCg82p6grlmbKB9C0WJYsE2dW KwbiSrUraF7TKon6I+CIZebPzBxGibL/FdquX7CdvKqHhXtBrYdVRplID0maG1xA BHT+t+sHWGVo5IQjTUsxPIltthn1GKv4su5tFHwISr226QWQR7gzMviRm68NCFtE Rp/ur4XU3CfP4fn1v0m5A7X7mDG9B2/tRk1eeFkih7bVwqZ5f/RI2IX9HpmGZPqM zlUrVVH+hkhgTEoqoV+NbUVwAIU9DVbPoWqqGZgTdz18yDGHWdZ/soQBLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0ubb1IwHKXSkPnfy2RgkZU1h2GMB8GA1UdIwQY MBaAFCabijdIRAydXCxQi9A7RtcnPu5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2Qt Zjg3YmMxNzNkMmFhLzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2QtZjg3YmMxNzNkMmFh LzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjopJcsG njZTu3ItMZVTDC4r590sGvWeSgQyEMDB2JHV/EoH5O6qmjhgY2iA5UTRRH7aocJ9 nbKb0Ndd9fz9HRv060T801iwrVf9siYIvNiRm4ahBCpXIgaA9OTHXqHHVC71FGU2 tJRU64CHylTP3L7Osl/FwBNCXJAAO8ULLMQYigtYPszlMevwq/qkhCe2d0uu2nxz SVdFgyCvfkOFyIRWggM6HFYn105xeo6szBoEJ9bUoXiA6OxbzJCHzDQq8cV46Pcu 4bKq836XXamTpREPwywOG0wTNQghGrxWGNezNZsXgHu0pYytDo01vDy9gstO/xvx ihs6zU+qoQ2QnA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:00:27 2025 by rpki-client