This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json) Hash identifier: Q4EA/Pulq3dNLWBWyTSN1CDkCbMKRf2uttwFc/33OTo= Subject key identifier: 1D:CC:48:E5:A7:DF:85:C6:F1:6D:E9:F6:03:74:1A:6A:A9:D2:7E:9F Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b Certificate serial: 019AF20949510D8AB2C6A5C38120A21FC4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft Manifest number: 0E20 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=) 2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: oQpmi/WHMvgSNKLOzfNFd2dxXcW2otmsbc0SrnQ/PMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:49:51:0d:8a:b2:c6:a5:c3:81:20:a2:1f:c4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=1dcc48e5a7df85c6f16de9f603741a6aa9d27e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4c:71:41:65:2b:1c:ac:55:6b:9f:a2:42:54: c3:16:6b:e1:a8:5c:e2:96:a4:2e:cb:f1:82:84:a7: 4e:e7:e3:d6:6f:05:ce:75:1c:89:81:af:d9:84:36: 34:3b:cd:f9:73:7d:a8:d6:4e:cf:a7:fe:f5:f6:df: f9:85:27:91:0f:e9:1b:07:86:4d:af:d7:1c:7a:b1: e5:46:d3:e4:78:c1:4c:78:20:b6:ca:b7:c9:f0:c7: 2d:2d:1c:7e:dc:02:c9:78:ee:96:a2:a9:b4:1c:bb: d4:5c:06:71:cd:b8:13:1c:36:6d:09:7c:9c:66:ac: 2c:75:3e:33:21:42:e7:4e:0c:7a:46:3e:69:93:c9: e6:72:77:28:f5:56:a5:06:a1:4b:e2:b0:f2:40:af: f2:ec:d5:93:57:da:df:14:29:86:79:10:b5:19:d0: 0d:63:bb:04:51:bd:fa:7a:94:4b:56:ac:78:18:9f: 07:0e:db:f1:7b:8b:8f:c8:1d:16:fd:86:b9:f8:54: ff:2a:eb:da:2a:87:6a:62:8e:cf:cb:88:e2:1f:00: 7c:53:14:2d:4b:e5:e1:eb:4e:8a:ca:00:49:89:7a: fa:23:50:61:31:51:af:4e:42:6a:84:7b:a8:d6:c5: 58:a7:6b:43:e0:17:13:8a:f0:ad:31:2b:93:72:d2: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CC:48:E5:A7:DF:85:C6:F1:6D:E9:F6:03:74:1A:6A:A9:D2:7E:9F X509v3 Authority Key Identifier: keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1e:da:e4:28:e4:65:05:11:1d:c3:6c:15:e0:94:22:18:ef: 88:ed:d9:90:f0:34:80:92:75:5a:b1:90:21:40:2c:cb:40:95: a3:1b:01:21:3b:b8:f6:5b:c0:a9:13:56:6d:8f:ec:1d:bc:d3: b9:0d:6d:34:97:54:85:a7:70:a0:ec:f4:ca:bd:70:0e:34:8e: 5f:2e:e6:99:fe:79:63:51:24:2c:81:d6:7c:4e:a6:c9:37:4b: 08:a1:37:fb:dd:62:cc:54:69:0d:f5:d1:d4:84:86:6a:20:ab: b3:0a:e1:77:1f:20:97:5e:d2:2a:ea:5b:64:fa:7c:75:cd:cf: 36:e4:64:6f:6f:5b:ec:ee:73:b0:3b:3e:8e:fb:34:e6:b0:05: 96:bb:fa:b0:28:e2:32:93:11:c6:ba:9c:e5:d3:e6:7e:4a:b7: db:1b:b3:a0:d1:7a:a7:14:c3:cc:5f:8e:ce:92:e3:6d:eb:4a: db:1c:a2:a5:75:a6:4d:b9:65:b1:48:a4:57:fd:ef:8c:ad:c2: 37:12:af:1e:79:88:1c:21:fd:75:51:51:91:cd:10:97:87:4b: 92:ab:c8:d7:e9:80:1f:25:3f:a5:77:bd:39:2f:bc:2e:50:93: ad:0a:1c:07:83:0f:34:63:5f:7e:e3:6f:56:8d:63:7e:9b:23: ba:a5:48:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUlRDYqyxqXDgSCiH8TSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm NDdlM2IwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EygxZGNjNDhlNWE3ZGY4NWM2ZjE2ZGU5ZjYwMzc0MWE2YWE5ZDI3ZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ExxQWUrHKxVa5+iQlTDFmvhqFzi lqQuy/GChKdO5+PWbwXOdRyJga/ZhDY0O835c32o1k7Pp/719t/5hSeRD+kbB4ZN r9ccerHlRtPkeMFMeCC2yrfJ8MctLRx+3ALJeO6Woqm0HLvUXAZxzbgTHDZtCXyc ZqwsdT4zIULnTgx6Rj5pk8nmcnco9ValBqFL4rDyQK/y7NWTV9rfFCmGeRC1GdAN Y7sEUb36epRLVqx4GJ8HDtvxe4uPyB0W/Ya5+FT/KuvaKodqYo7Py4jiHwB8UxQt S+Xh606KygBJiXr6I1BhMVGvTkJqhHuo1sVYp2tD4BcTivCtMSuTctJhRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3MSOWn34XG8W3p9gN0Gmqp0n6fMB8GA1UdIwQY MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt YmRhNTM0ZTZmNjQzLzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR7a5Cjk ZQURHcNsFeCUIhjviO3ZkPA0gJJ1WrGQIUAsy0CVoxsBITu49lvAqRNWbY/sHbzT uQ1tNJdUhadwoOz0yr1wDjSOXy7mmf55Y1EkLIHWfE6myTdLCKE3+91izFRpDfXR 1ISGaiCrswrhdx8gl17SKupbZPp8dc3PNuRkb29b7O5zsDs+jvs05rAFlrv6sCji MpMRxrqc5dPmfkq32xuzoNF6pxTDzF+OzpLjbetK2xyipXWmTbllsUikV/3vjK3C NxKvHnmIHCH9dVFRkc0Ql4dLkqvI1+mAHyU/pXe9OS+8LlCTrQocB4MPNGNffuNv Vo1jfpsjuqVIcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:11 2025 by rpki-client