This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json) Hash identifier: 4v0a3XUEwsPneMQIKpZ1IMIiicDJ+TFPcYLJxXJehLM= Subject key identifier: B1:DD:75:71:72:25:C8:A2:45:F0:18:81:A0:FD:9D:29:54:EC:18:A8 Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b Certificate serial: 019AF19AA7B5119E2366FC5B3A583A2EF912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft Manifest number: 04E7 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=) 2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: H56VOSt53jA8XedAmB3KY1ng6t25YXTbHGQAEWiM5Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a7:b5:11:9e:23:66:fc:5b:3a:58:3a:2e:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=b1dd75717225c8a245f01881a0fd9d2954ec18a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:00:13:56:93:46:88:97:b1:62:d4:9c:5e: 70:3f:84:d7:9f:ec:94:22:f5:54:3d:7e:92:0c:8d: 46:d0:4f:a5:47:d6:e9:31:e2:82:e8:ef:4b:21:d0: d8:0e:81:38:a5:c6:f3:6c:e6:75:e4:ae:52:99:a2: 53:cf:03:17:3e:20:15:84:fd:ad:3b:dd:fc:d4:70: 99:6b:ec:8b:d4:bb:47:15:fd:23:18:5c:95:5d:43: a5:4d:9c:62:ea:48:0d:1c:ab:2b:49:a0:95:dd:90: e3:39:8d:b8:17:bd:77:47:80:b8:5b:47:9a:65:37: ab:14:c2:7e:e7:b1:07:83:7d:4d:eb:88:fd:6c:e4: cb:e9:56:0b:61:21:a7:53:da:e5:5d:ed:c0:69:e7: 04:d4:e2:f9:88:ea:81:3e:e1:47:c0:1f:e6:0e:89: b0:e5:2c:01:d1:d9:4b:53:69:71:7c:97:5e:f0:f4: a8:a0:92:cf:15:05:f7:68:15:41:3c:c1:7b:0e:d8: ac:5c:46:6d:65:a9:96:71:2e:6d:b3:6b:c7:34:67: 75:a0:64:0a:c7:0e:00:f7:eb:d7:3d:7f:84:fb:21: ba:cb:23:c7:97:40:ef:cd:65:ec:ab:6c:7d:99:b9: 4d:03:1b:fa:29:34:8f:4b:92:f6:aa:21:dd:53:59: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DD:75:71:72:25:C8:A2:45:F0:18:81:A0:FD:9D:29:54:EC:18:A8 X509v3 Authority Key Identifier: keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fe:34:90:e2:62:62:dc:e8:11:b4:b1:83:3f:57:df:c4:3a: a2:a2:33:c8:af:79:f9:83:ef:22:aa:24:cc:d9:07:78:ec:79: 49:5a:55:c8:87:d1:23:7b:8f:64:38:45:2c:c8:be:7c:1f:6c: fc:68:f0:0f:91:4d:ba:8b:df:07:fb:50:13:ca:01:34:e8:c6: da:86:e7:c1:a6:1f:2c:bd:e0:0a:67:0e:53:99:74:63:f1:fa: fd:e9:23:93:2f:4f:65:a3:ca:12:d4:26:83:8a:b1:9a:4e:07: 93:a6:5d:6d:86:17:e0:38:fb:bb:d7:96:ff:91:25:03:c4:a6: ae:06:88:e5:c6:25:c3:24:7f:7c:e6:c0:aa:30:24:43:3c:a3: 79:e5:0f:e1:be:ec:04:6e:21:f8:a5:21:6e:23:c6:51:8e:a2: 37:89:22:5a:77:d3:f0:ef:bc:f8:c1:85:3d:7a:ad:8a:7c:70: de:be:e0:4e:a1:60:99:8c:14:0f:6b:77:1b:b9:9d:af:27:84: c5:09:2c:08:9a:4b:c6:30:e1:3f:8c:46:17:63:d7:f7:96:11: a2:88:cd:43:93:52:f5:26:6b:1a:84:62:1c:d6:a1:d0:85:9c: ac:5c:82:bb:81:b0:10:a1:93:43:dd:fd:45:78:82:1c:d4:0c: 8f:9c:bb:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqe1EZ4jZvxbOlg6LvkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZmRlZmVjZWQ1Y2VlOGYxYTZjOTM3OThlNWEzNGI2MjFm NmRjMGIwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EyhiMWRkNzU3MTcyMjVjOGEyNDVmMDE4ODFhMGZkOWQyOTU0ZWMxOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppsAE1aTRoiXsWLUnF5wP4TXn+yU IvVUPX6SDI1G0E+lR9bpMeKC6O9LIdDYDoE4pcbzbOZ15K5SmaJTzwMXPiAVhP2t O9381HCZa+yL1LtHFf0jGFyVXUOlTZxi6kgNHKsrSaCV3ZDjOY24F713R4C4W0ea ZTerFMJ+57EHg31N64j9bOTL6VYLYSGnU9rlXe3AaecE1OL5iOqBPuFHwB/mDomw 5SwB0dlLU2lxfJde8PSooJLPFQX3aBVBPMF7DtisXEZtZamWcS5ts2vHNGd1oGQK xw4A9+vXPX+E+yG6yyPHl0DvzWXsq2x9mblNAxv6KTSPS5L2qiHdU1krqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHddXFyJciiRfAYgaD9nSlU7BioMB8GA1UdIwQY MBaAFIz97+ztXO6PGmyTeY5aNLYh9twLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQt MDZjZGViMzhmN2I2LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQtMDZjZGViMzhmN2I2 LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/40kOJi YtzoEbSxgz9X38Q6oqIzyK95+YPvIqokzNkHeOx5SVpVyIfRI3uPZDhFLMi+fB9s /GjwD5FNuovfB/tQE8oBNOjG2obnwaYfLL3gCmcOU5l0Y/H6/ekjky9PZaPKEtQm g4qxmk4Hk6ZdbYYX4Dj7u9eW/5ElA8SmrgaI5cYlwyR/fObAqjAkQzyjeeUP4b7s BG4h+KUhbiPGUY6iN4kiWnfT8O+8+MGFPXqtinxw3r7gTqFgmYwUD2t3G7mdryeE xQksCJpLxjDhP4xGF2PX95YRoojNQ5NS9SZrGoRiHNah0IWcrFyCu4GwEKGTQ939 RXiCHNQMj5y7Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:32 2025 by rpki-client