This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json) Hash identifier: 4gKh4AmOxse17ZM1iRfTBv+7J6GwCl82JkWLO7kfv/Q= Subject key identifier: F5:0B:E9:23:3F:08:41:A4:9A:5F:37:0B:69:13:5E:2C:7E:5A:13:8F Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56 Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956 Certificate serial: 019AF12D31DD52F039CF4B86226BFD4FD989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft Manifest number: 067E Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=) 2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: t01aeZ37Vy946U2M91M6wG3dpiCELrV5Q1IpAwsF9IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:31:dd:52:f0:39:cf:4b:86:22:6b:fd:4f:d9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=f50be9233f0841a49a5f370b69135e2c7e5a138f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:ff:f2:bc:ef:1b:1a:5e:0f:cd:53:99:62: 37:1b:a3:b2:c9:ca:58:cf:e3:1b:20:d8:9b:d0:9f: 61:28:c0:50:cd:49:8c:06:63:3c:93:7c:5f:44:63: 64:8c:c5:22:b4:08:7c:e0:2d:ac:d1:aa:ba:86:96: ce:22:9c:3f:85:75:83:56:ab:65:95:12:9e:40:8c: 38:5a:46:08:11:00:38:cf:47:d1:45:58:62:69:f0: 29:51:2a:d1:32:f7:5d:76:c9:f5:57:59:2c:7d:14: f2:ab:96:4b:24:62:76:95:56:e2:db:62:70:ea:ac: 29:ca:90:40:18:ac:94:6d:35:86:cf:9b:36:83:af: 3a:ce:ab:67:40:fe:34:52:46:62:53:a0:9e:f7:66: 3c:13:39:88:49:9b:a0:b8:80:df:75:08:2c:9c:a1: 71:e1:9a:9b:05:ef:64:20:43:e7:25:6c:14:02:48: 2f:89:4e:e7:d1:af:f5:5a:35:ec:a3:1f:7a:3b:d9: 99:2d:c9:a8:dd:26:64:16:f0:b3:4f:99:68:02:5a: 81:bf:ec:92:70:92:6e:9d:a3:97:45:43:c3:8e:ba: d4:17:40:58:e4:22:b1:2b:6b:0a:1e:85:e2:df:56: 2c:18:fb:96:4f:a9:b3:18:be:a9:be:66:f5:8b:2c: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0B:E9:23:3F:08:41:A4:9A:5F:37:0B:69:13:5E:2C:7E:5A:13:8F X509v3 Authority Key Identifier: keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5c:7d:40:0d:bd:43:f7:d5:4a:11:c3:1b:74:20:b0:e6:d8: e8:ab:46:d3:c0:e6:ba:4f:5c:11:1b:9a:f8:ef:47:bc:02:c4: b2:53:06:68:dc:3b:0e:0e:80:d9:d4:a5:39:79:24:09:36:e3: c5:0c:9d:0d:9b:27:c6:bd:7c:36:dc:94:7a:3e:04:34:aa:5e: c2:1e:38:59:6e:ed:24:e6:0e:3e:ac:9d:97:01:91:56:1d:53: 82:06:01:e2:4c:f5:25:d5:41:62:ba:a4:a1:9c:6a:86:23:0e: 4b:aa:70:fe:82:ae:44:8f:4e:94:02:37:72:76:60:1e:c8:a2: d7:c1:4e:34:e5:b9:44:79:11:f5:63:6a:91:74:ac:18:f2:d4: 29:5b:59:c0:67:ef:d4:72:ea:21:3a:a3:63:2a:a1:d9:db:e1: 08:15:17:24:0d:37:2a:86:f3:82:40:50:80:a2:57:90:79:aa: e9:e5:1a:b0:43:b0:8d:f6:7d:31:7c:8b:6a:e0:fc:b8:bb:b8: 5e:bb:5d:15:d8:ba:8d:7e:20:10:96:93:55:c9:4d:b9:32:a1: 2f:dc:4d:94:7a:66:5a:8d:18:c5:45:85:ab:37:04:8d:a0:d6: 98:81:e8:1d:b5:75:78:d5:f3:97:51:eb:8e:0c:f8:33:29:97: 4f:96:dc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTHdUvA5z0uGImv9T9mJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh M2Q5NTYwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EyhmNTBiZTkyMzNmMDg0MWE0OWE1ZjM3MGI2OTEzNWUyYzdlNWExMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdD/8rzvGxpeD81TmWI3G6OyycpY z+MbINib0J9hKMBQzUmMBmM8k3xfRGNkjMUitAh84C2s0aq6hpbOIpw/hXWDVqtl lRKeQIw4WkYIEQA4z0fRRVhiafApUSrRMvdddsn1V1ksfRTyq5ZLJGJ2lVbi22Jw 6qwpypBAGKyUbTWGz5s2g686zqtnQP40UkZiU6Ce92Y8EzmISZuguIDfdQgsnKFx 4ZqbBe9kIEPnJWwUAkgviU7n0a/1WjXsox96O9mZLcmo3SZkFvCzT5loAlqBv+yS cJJunaOXRUPDjrrUF0BY5CKxK2sKHoXi31YsGPuWT6mzGL6pvmb1iyxMuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUL6SM/CEGkml83C2kTXix+WhOPMB8GA1UdIwQY MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5 LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFx9QA29 Q/fVShHDG3QgsObY6KtG08Dmuk9cERua+O9HvALEslMGaNw7Dg6A2dSlOXkkCTbj xQydDZsnxr18NtyUej4ENKpewh44WW7tJOYOPqydlwGRVh1TggYB4kz1JdVBYrqk oZxqhiMOS6pw/oKuRI9OlAI3cnZgHsii18FONOW5RHkR9WNqkXSsGPLUKVtZwGfv 1HLqITqjYyqh2dvhCBUXJA03KobzgkBQgKJXkHmq6eUasEOwjfZ9MXyLauD8uLu4 XrtdFdi6jX4gEJaTVclNuTKhL9xNlHpmWo0YxUWFqzcEjaDWmIHoHbV1eNXzl1Hr jgz4MymXT5bc/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:04 2025 by rpki-client