This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json) Hash identifier: sIvFUFkOtKsLoO7+0Bs+Gj2b9KcGXA6aCaT3SCmWeAg= Subject key identifier: D2:4C:D1:A1:62:E2:5B:C6:95:E0:36:95:43:8B:00:4B:2B:06:A1:EC Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689 Certificate serial: 019AF31D70A633E297FA14E5B6CD3AED5540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft Manifest number: 0FE4 Signing time: Sat 06 Dec 2025 10:03:03 +0000 Manifest this update: Sat 06 Dec 2025 10:03:03 +0000 Manifest next update: Sun 07 Dec 2025 10:03:03 +0000 Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=) 2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: nwS+Y8c+kWrRBXRo9FCyuZJ/seFzk1EsJyuZkS63ODs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:70:a6:33:e2:97:fa:14:e5:b6:cd:3a:ed:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689 Validity Not Before: Dec 6 10:03:03 2025 GMT Not After : Dec 7 10:03:03 2025 GMT Subject: CN=d24cd1a162e25bc695e03695438b004b2b06a1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:cd:27:f5:47:c0:f3:1e:9a:35:78:25:e4: f3:78:59:56:88:53:5a:7a:d3:b7:74:69:ed:73:bd: 5c:1e:8e:6f:3f:a0:eb:45:06:f6:86:8b:81:e5:c8: 97:54:6a:fe:98:d2:8d:4d:a1:fe:ad:d1:ac:b4:9e: c7:da:f8:b1:af:da:55:ef:cf:a5:27:6c:1a:0a:56: 9a:c6:8f:30:50:95:0a:94:d7:28:6e:db:b8:a9:2e: 19:8f:58:e1:5c:3c:42:25:14:32:b5:62:1f:d6:32: 86:98:e2:62:cc:cf:8a:fb:89:c1:e2:1a:38:af:06: d8:d9:3d:f1:00:ac:c9:df:e7:58:a8:95:09:74:14: 60:cd:11:62:02:f5:16:0e:c5:e1:4f:c7:ad:b0:6e: 4a:1f:a1:ae:44:17:42:71:d1:66:51:5a:ee:58:7e: d1:ce:f6:95:2a:27:98:5e:3e:4a:e0:ed:53:fb:a6: 2e:ec:c7:45:c6:ef:ca:10:b4:d2:07:7b:20:4c:0c: 53:b1:28:95:3f:1c:66:01:0c:ea:65:63:b6:75:c5: 87:d8:53:a7:f8:65:4b:86:1d:e3:74:0f:11:c9:44: 2a:31:e3:79:d0:06:d5:cf:10:4a:9a:30:49:08:cb: ff:20:42:c3:70:a3:4a:1e:84:7d:14:ee:98:80:f1: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4C:D1:A1:62:E2:5B:C6:95:E0:36:95:43:8B:00:4B:2B:06:A1:EC X509v3 Authority Key Identifier: keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fc:47:ce:61:a1:e1:94:8b:b2:6d:59:84:49:0e:57:40:33: 65:cf:b2:b2:43:0a:94:63:a3:06:ba:ea:cb:23:e1:af:c9:11: 26:f2:3f:de:a5:0d:45:96:a3:cf:7e:3b:3f:d9:07:72:cc:cd: ff:6d:d1:c1:5b:39:96:42:c8:98:f4:d4:fe:2a:0d:6b:0f:e3: 00:1d:09:78:7b:a3:36:37:10:3a:b0:79:76:d5:08:65:3c:ab: 31:e1:d3:6f:5f:99:a3:cd:6d:52:44:37:9a:83:4a:72:23:23: 3b:9b:2d:37:9c:7b:9f:78:d2:75:ed:bd:36:b8:38:ce:2d:22: 4d:4b:e6:80:80:ce:e0:75:e5:c7:f9:54:4a:a5:e0:4a:3f:e0: 5b:a0:95:8d:b3:44:2f:5f:da:91:0c:5e:3a:71:82:13:bf:81: b9:87:88:9e:72:97:b2:e2:31:d5:12:83:78:9e:87:62:2d:8a: 48:ff:88:62:80:b4:eb:bb:95:3f:96:1f:ee:81:51:0d:b9:5b: f9:b2:d0:01:f9:db:21:84:76:40:cd:27:7c:fb:d5:38:ec:97: 65:46:9c:e4:7b:30:b1:17:42:08:62:9d:c3:6b:b4:f4:59:ab: 7c:40:cb:f1:c7:7e:9d:84:f7:7f:55:14:20:ab:16:32:9a:6b: 02:f6:92:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHXCmM+KX+hTlts067VVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw NDQ2ODkwHhcNMjUxMjA2MTAwMzAzWhcNMjUxMjA3MTAwMzAzWjAzMTEwLwYDVQQD EyhkMjRjZDFhMTYyZTI1YmM2OTVlMDM2OTU0MzhiMDA0YjJiMDZhMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCjNJ/VHwPMemjV4JeTzeFlWiFNa etO3dGntc71cHo5vP6DrRQb2houB5ciXVGr+mNKNTaH+rdGstJ7H2vixr9pV78+l J2waClaaxo8wUJUKlNcobtu4qS4Zj1jhXDxCJRQytWIf1jKGmOJizM+K+4nB4ho4 rwbY2T3xAKzJ3+dYqJUJdBRgzRFiAvUWDsXhT8etsG5KH6GuRBdCcdFmUVruWH7R zvaVKieYXj5K4O1T+6Yu7MdFxu/KELTSB3sgTAxTsSiVPxxmAQzqZWO2dcWH2FOn +GVLhh3jdA8RyUQqMeN50AbVzxBKmjBJCMv/IELDcKNKHoR9FO6YgPG6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJM0aFi4lvGleA2lUOLAEsrBqHsMB8GA1UdIwQY MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvxHzmGh 4ZSLsm1ZhEkOV0AzZc+yskMKlGOjBrrqyyPhr8kRJvI/3qUNRZajz347P9kHcszN /23RwVs5lkLImPTU/ioNaw/jAB0JeHujNjcQOrB5dtUIZTyrMeHTb1+Zo81tUkQ3 moNKciMjO5stN5x7n3jSde29Nrg4zi0iTUvmgIDO4HXlx/lUSqXgSj/gW6CVjbNE L1/akQxeOnGCE7+BuYeInnKXsuIx1RKDeJ6HYi2KSP+IYoC067uVP5Yf7oFRDblb +bLQAfnbIYR2QM0nfPvVOOyXZUac5HswsRdCCGKdw2u09FmrfEDL8cd+nYT3f1UU IKsWMpprAvaS6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:26 2025 by rpki-client