This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json) Hash identifier: GZL8qxCqaxSd76JQRLeuL2ria+cojSD55u1+EYvfWsE= Subject key identifier: 04:06:39:4B:A7:A6:C2:F7:8C:B2:44:66:BD:EC:1F:91:F1:01:6D:7C Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144 Certificate serial: 019AF20943C40C1A972470FB78BF0B627796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=) 2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=) 3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: pZz9lE4iFp0tZn287JEY11ZjYkOaD/HXryfyo649wvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:43:c4:0c:1a:97:24:70:fb:78:bf:0b:62:77:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=0406394ba7a6c2f78cb24466bdec1f91f1016d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:ee:91:12:fc:19:c0:17:95:1c:92:2e:e0: 41:ae:db:2d:43:74:28:41:f6:a8:04:48:d2:be:08: 21:c6:6a:e2:9a:d3:e0:8e:6e:69:e7:1f:14:29:cb: d0:de:05:b9:e5:c6:c1:5a:a9:4e:80:aa:c3:a0:6f: b1:50:4b:e3:1c:70:5e:3e:49:7e:09:c8:b0:cd:43: 60:70:3b:a1:9f:df:0f:c7:d4:e0:81:c2:8c:0a:e3: 02:cb:4c:ec:aa:7e:5d:12:97:4c:17:da:86:94:ef: cd:7a:c8:ab:5b:ee:1e:a3:9a:a3:87:5d:fa:ca:03: f1:fb:62:79:5f:09:51:a1:b8:f2:5e:42:0b:30:7e: ae:6a:c1:ce:71:29:e7:13:f9:e8:ed:a5:d8:c2:16: ea:be:01:ac:ba:fd:98:20:14:83:bb:52:d0:0d:aa: 43:c7:61:d1:e3:54:cf:44:c6:4a:2a:5f:2b:18:b3: 21:d2:c6:02:f6:3c:3b:ca:ab:be:30:ce:c9:40:a1: b9:54:e4:df:9a:5f:85:32:ce:59:a9:c9:78:7a:36: 8a:a8:cc:95:c4:52:a1:29:29:2a:09:11:84:97:d7: 81:8e:83:60:89:40:2f:0d:28:cc:3d:c1:df:74:3d: 4a:19:0b:5b:31:e2:77:88:dd:c1:b3:d8:b4:e2:f5: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:06:39:4B:A7:A6:C2:F7:8C:B2:44:66:BD:EC:1F:91:F1:01:6D:7C X509v3 Authority Key Identifier: keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:13:ab:64:b4:e5:8a:eb:bb:1d:cc:ae:d1:69:dc:50:9a:25: 1e:73:a0:6f:7d:8c:df:ae:8f:c1:89:ed:52:5f:45:b9:0d:95: 01:bc:96:2e:a6:f7:72:0b:c0:b4:76:92:e0:f8:41:3b:ff:75: 83:72:77:72:0a:06:b3:f1:84:ca:7c:0e:2a:81:b9:95:59:67: ce:2d:fe:58:83:9a:2c:38:8c:75:09:a6:bf:a3:0c:4e:04:44: 8a:c0:f2:0b:65:94:f8:56:2c:e1:e4:44:09:bc:9b:2c:a3:ce: 7d:d3:46:a5:09:20:aa:c4:77:9e:93:30:10:21:cb:33:95:32: 00:48:0e:08:bf:e2:9f:a9:dc:4f:4d:60:07:b4:f0:98:81:34: c5:82:46:13:e7:c2:a1:db:85:a9:12:d8:94:6a:e2:4c:1b:31: ae:15:ca:06:19:fb:34:f2:f3:db:bc:ad:db:fe:54:82:00:10: 7d:1d:13:06:92:83:57:17:36:eb:a2:1c:db:a6:81:7e:a7:cf: f6:63:22:f0:4d:f7:ea:36:8c:b0:f5:fa:52:0b:2e:ba:88:48: 30:e2:2a:7a:8f:6c:30:63:cb:ac:25:0f:7a:88:6b:7b:e4:8c: ad:94:a1:2b:36:04:ad:3a:90:ba:f7:19:0e:1a:f7:07:56:8d: 73:c1:d6:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUPEDBqXJHD7eL8LYneWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5 NTYxNDQwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EygwNDA2Mzk0YmE3YTZjMmY3OGNiMjQ0NjZiZGVjMWY5MWYxMDE2ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv17ukRL8GcAXlRySLuBBrtstQ3Qo QfaoBEjSvgghxmrimtPgjm5p5x8UKcvQ3gW55cbBWqlOgKrDoG+xUEvjHHBePkl+ CciwzUNgcDuhn98Px9TggcKMCuMCy0zsqn5dEpdMF9qGlO/NesirW+4eo5qjh136 ygPx+2J5XwlRobjyXkILMH6uasHOcSnnE/no7aXYwhbqvgGsuv2YIBSDu1LQDapD x2HR41TPRMZKKl8rGLMh0sYC9jw7yqu+MM7JQKG5VOTfml+FMs5Zqcl4ejaKqMyV xFKhKSkqCRGEl9eBjoNgiUAvDSjMPcHfdD1KGQtbMeJ3iN3Bs9i04vUscwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQGOUunpsL3jLJEZr3sH5HxAW18MB8GA1UdIwQY MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct NzI0NDgzNTJiODA3LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3 LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOROrZLTl iuu7Hcyu0WncUJolHnOgb32M366PwYntUl9FuQ2VAbyWLqb3cgvAtHaS4PhBO/91 g3J3cgoGs/GEynwOKoG5lVlnzi3+WIOaLDiMdQmmv6MMTgREisDyC2WU+FYs4eRE CbybLKPOfdNGpQkgqsR3npMwECHLM5UyAEgOCL/in6ncT01gB7TwmIE0xYJGE+fC oduFqRLYlGriTBsxrhXKBhn7NPLz27yt2/5UggAQfR0TBpKDVxc266Ic26aBfqfP 9mMi8E336jaMsPX6UgsuuohIMOIqeo9sMGPLrCUPeohre+SMrZShKzYErTqQuvcZ Dhr3B1aNc8HWkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:11 2025 by rpki-client