This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft File: jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json) Hash identifier: XsCsvPQeiPm4pBVSReeZAWwYad0fsYMG8w63AkK7ezM= Subject key identifier: 0C:D1:69:A1:7B:BE:A0:DE:4F:F0:90:81:D0:BF:67:46:64:C9:1A:CF Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361 Certificate serial: 019AF4656DFC054FBA99316859CCBD6852D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft Manifest number: 118B Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: 04p8KrQzLE3_55k5WI6hT9mZY7I.roa (hash: fLB1vC6DtYgNR3pd4HHiFVc8DTvk2K0a96GUua+8IXM=) 2: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=) 3: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: FkMaztlxzT74Xqbpbxe4c/hOWWtGoG604+el487ZAcA=) 4: tfjD1TzFroCRpYCznfdPEgCSvX8.roa (hash: u220kJVCWbv+NR8D6urQHZ0h8UgyTPW+PkohUPZwTYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6d:fc:05:4f:ba:99:31:68:59:cc:bd:68:52:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361 Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=0cd169a17bbea0de4ff09081d0bf674664c91acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:a2:84:3f:d4:57:b1:28:26:3d:c5:0c:cd: 95:8f:53:19:24:29:51:92:9f:ce:7e:b9:7e:02:07: 19:08:ef:33:6d:ab:77:07:79:ab:40:99:bf:5b:d5: 1f:81:ad:86:24:a2:90:22:1d:8e:04:ec:20:a0:12: 17:bd:4c:01:79:2b:70:40:d1:af:df:fc:a7:35:a0: 6e:ed:5f:dc:d2:7b:17:3c:13:f3:b8:8e:e3:b3:ec: cd:00:69:83:2d:b8:f8:8a:75:99:2d:45:c6:d5:80: 7e:c9:72:f0:e2:84:5b:0f:6c:40:ff:62:25:83:eb: bd:99:0b:03:b1:0b:4c:73:d7:1c:0b:f7:5e:79:49: 26:b5:55:91:a0:67:05:c0:2c:1f:b8:81:96:31:92: e3:0a:62:91:29:16:57:cb:29:e6:91:eb:1b:f8:6a: f9:d3:26:e4:2a:20:ad:3e:eb:65:6f:2a:89:71:c9: 1d:29:78:92:88:2c:ae:b2:ff:be:b7:0f:d0:c7:31: 24:bd:09:7e:7a:9a:bf:b1:ca:21:3a:d4:39:65:a3: 55:e2:0b:d2:97:03:cb:d5:d6:41:c4:7b:67:e0:e5: 00:69:32:ba:e2:db:89:e7:9c:a4:2e:cf:e4:f2:32: 85:f9:ce:04:a1:be:09:ef:c7:dc:74:4e:32:3e:76: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D1:69:A1:7B:BE:A0:DE:4F:F0:90:81:D0:BF:67:46:64:C9:1A:CF X509v3 Authority Key Identifier: keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:87:16:0b:62:a3:24:40:58:1b:e4:e4:48:ba:7a:65:53:df: f9:05:6c:96:81:4a:50:8a:dc:62:1a:8d:f6:47:07:79:63:77: db:63:45:0e:bf:2b:d6:b5:12:b3:2f:0f:49:30:79:5c:75:e7: 69:95:b4:d1:b4:30:1c:ed:16:e4:e5:dd:25:aa:41:a4:b5:13: cf:f7:a0:30:fd:32:0f:c9:ea:b4:7a:72:e8:f9:e9:d0:72:f0: e1:b0:e8:9a:47:45:b4:55:1b:ec:40:cd:13:e7:4e:48:70:ed: ca:e6:14:5f:b6:37:5c:67:f4:f3:5c:88:34:a9:f1:79:c7:ac: 8b:53:dd:95:af:ee:46:2e:38:70:f9:9c:50:87:69:f8:f2:78: ce:56:e7:f9:21:ff:a4:55:9a:0e:06:7e:6f:4c:02:ea:28:9a: 65:a5:1f:94:c6:67:fa:cf:55:40:d8:cb:88:a8:10:2b:77:e7: 80:65:dc:2e:fd:6e:9d:5b:81:5a:fc:7c:7e:05:d7:e9:7d:88: 42:0c:ac:0c:38:36:9e:d7:6f:ff:02:50:fa:20:0a:b3:c8:d6: 3f:6a:a8:35:9f:2d:81:89:f9:7c:88:9c:ef:f6:63:dc:de:10: 50:65:39:19:50:79:ad:83:c9:9c:f3:46:1d:53:8a:0a:7f:d1: 91:3a:4b:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW38BU+6mTFoWcy9aFLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2YzNTZhMDJkOTY3OWNlODkwYjVkNTFlMGRlYzJmM2Yz NjMzNjEwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD EygwY2QxNjlhMTdiYmVhMGRlNGZmMDkwODFkMGJmNjc0NjY0YzkxYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXaihD/UV7EoJj3FDM2Vj1MZJClR kp/Ofrl+AgcZCO8zbat3B3mrQJm/W9Ufga2GJKKQIh2OBOwgoBIXvUwBeStwQNGv 3/ynNaBu7V/c0nsXPBPzuI7js+zNAGmDLbj4inWZLUXG1YB+yXLw4oRbD2xA/2Il g+u9mQsDsQtMc9ccC/deeUkmtVWRoGcFwCwfuIGWMZLjCmKRKRZXyynmkesb+Gr5 0ybkKiCtPutlbyqJcckdKXiSiCyusv++tw/QxzEkvQl+epq/scohOtQ5ZaNV4gvS lwPL1dZBxHtn4OUAaTK64tuJ55ykLs/k8jKF+c4Eob4J78fcdE4yPnZ7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzRaaF7vqDeT/CQgdC/Z0ZkyRrPMB8GA1UdIwQY MBaAFI0/NWoC2Wec6JC11R4N7C8/NjNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAt NmI5M2FmNjEzZDdkLzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAtNmI5M2FmNjEzZDdk LzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYcWC2Kj JEBYG+TkSLp6ZVPf+QVsloFKUIrcYhqN9kcHeWN322NFDr8r1rUSsy8PSTB5XHXn aZW00bQwHO0W5OXdJapBpLUTz/egMP0yD8nqtHpy6Pnp0HLw4bDomkdFtFUb7EDN E+dOSHDtyuYUX7Y3XGf081yINKnxecesi1Pdla/uRi44cPmcUIdp+PJ4zlbn+SH/ pFWaDgZ+b0wC6iiaZaUflMZn+s9VQNjLiKgQK3fngGXcLv1unVuBWvx8fgXX6X2I QgysDDg2ntdv/wJQ+iAKs8jWP2qoNZ8tgYn5fIic7/Zj3N4QUGU5GVB5rYPJnPNG HVOKCn/RkTpLgA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:58 2025 by rpki-client