This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json) Hash identifier: Q7zRmxJAZGVSulyFJ/mPMbmbkbl0sSKOQeY1GKM3DY0= Subject key identifier: 1E:BC:78:54:DD:36:22:59:9A:42:3D:8A:EF:48:01:C3:35:AF:14:68 Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9 Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9 Certificate serial: 019AF6F9EA362228956AD1F9076FEA666911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft Manifest number: 06C0 Signing time: Sun 07 Dec 2025 04:02:44 +0000 Manifest this update: Sun 07 Dec 2025 04:02:44 +0000 Manifest next update: Mon 08 Dec 2025 04:02:44 +0000 Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=) 2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: avONVpDIxvBelEhqY/TYEqpU31vNOKxiNtwS+qC/NfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:ea:36:22:28:95:6a:d1:f9:07:6f:ea:66:69:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9 Validity Not Before: Dec 7 04:02:44 2025 GMT Not After : Dec 8 04:02:44 2025 GMT Subject: CN=1ebc7854dd3622599a423d8aef4801c335af1468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:a4:cd:e4:ae:8d:7c:18:71:5e:e8:9e:79: 8e:e4:8d:c0:1c:54:15:aa:40:98:4c:91:40:d0:09: ea:35:8f:56:9e:3a:d0:11:d7:1c:1f:d4:db:b8:9d: e2:f1:fa:cd:2c:96:25:a2:e4:f1:23:72:5b:66:68: c8:48:30:5d:51:43:fc:2a:03:0d:2d:10:f4:f5:0d: 91:ce:10:24:4b:ec:d7:82:ca:63:22:4c:09:03:b1: 9c:63:e1:63:d6:9d:2c:a3:d5:f5:06:e5:c2:46:2a: 9c:9e:47:cf:ce:2e:68:2c:02:3a:56:dc:e1:6a:2a: b7:48:f8:3b:1e:8f:7e:96:70:58:3f:ca:d8:15:6b: 58:6f:c3:55:ac:72:3a:5b:d9:ec:ba:20:2c:c3:fd: f4:db:1d:e0:c6:8f:02:4f:3e:53:33:2d:5e:8e:c9: 83:4e:89:06:ec:23:97:a5:3b:29:81:de:92:0d:00: 1e:e5:cc:f4:30:88:59:db:c3:f8:d6:9a:e9:2c:22: 66:bd:d9:a7:32:e0:f6:5b:7e:1f:3a:bf:cf:71:ff: bd:98:30:aa:11:98:5c:d3:19:60:c6:aa:98:c6:74: 15:17:f4:43:ed:83:a3:26:5c:2e:85:9e:0a:77:df: 01:bb:e1:92:2a:75:68:3d:bd:d9:dd:e8:77:41:ac: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BC:78:54:DD:36:22:59:9A:42:3D:8A:EF:48:01:C3:35:AF:14:68 X509v3 Authority Key Identifier: keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6c:87:c3:5d:21:f6:4f:53:ef:4c:b4:83:44:74:d5:37:85: 32:73:65:af:c8:6c:e5:71:af:f4:9f:1d:6a:61:ef:94:77:84: c7:5d:f1:7d:6f:8f:b4:34:e8:77:20:05:8b:c4:65:6a:27:bd: a8:e4:2c:bf:6e:9d:35:1d:2e:28:9a:d7:d1:02:30:ac:90:4b: b4:aa:49:c6:e3:8a:d9:20:c7:66:22:f3:4b:50:33:ec:8c:28: db:a7:74:44:2c:e6:7c:9d:6e:47:4f:f9:75:4b:d3:24:02:0a: 7c:b0:61:d5:a1:d5:d0:f6:50:92:2e:17:2f:68:08:a3:ed:8f: 35:fe:ea:e9:29:6e:2a:f8:b5:ea:42:3d:45:98:5b:cb:d3:ea: 21:27:cb:ca:0a:d9:cb:f5:74:84:b0:c2:aa:4b:cf:a1:d9:1a: 85:7a:c2:7e:61:66:e2:75:0f:fe:81:99:3f:59:1c:cd:06:de: 5d:68:0e:68:f7:6d:b4:15:e9:b6:dd:6b:3a:67:e3:4a:51:bf: e9:e0:10:c8:f3:47:3b:fc:a0:49:61:fd:62:0f:4a:17:ac:ae: 47:c1:89:34:5c:90:1d:96:8b:3d:75:34:7b:6c:ec:28:82:9e: ff:78:ca:65:03:ff:88:f7:b8:0a:89:d6:c8:ff:7a:d0:49:4d: ba:78:88:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+eo2IiiVatH5B2/qZmkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZjg1ZWZmMjQ0OGM3MzY0NmUzNTRhZmVhNjQxYmNmNzll N2M3ZjkwHhcNMjUxMjA3MDQwMjQ0WhcNMjUxMjA4MDQwMjQ0WjAzMTEwLwYDVQQD EygxZWJjNzg1NGRkMzYyMjU5OWE0MjNkOGFlZjQ4MDFjMzM1YWYxNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7KkzeSujXwYcV7onnmO5I3AHFQV qkCYTJFA0AnqNY9WnjrQEdccH9TbuJ3i8frNLJYlouTxI3JbZmjISDBdUUP8KgMN LRD09Q2RzhAkS+zXgspjIkwJA7GcY+Fj1p0so9X1BuXCRiqcnkfPzi5oLAI6Vtzh aiq3SPg7Ho9+lnBYP8rYFWtYb8NVrHI6W9nsuiAsw/302x3gxo8CTz5TMy1ejsmD TokG7COXpTspgd6SDQAe5cz0MIhZ28P41prpLCJmvdmnMuD2W34fOr/Pcf+9mDCq EZhc0xlgxqqYxnQVF/RD7YOjJlwuhZ4Kd98Bu+GSKnVoPb3Z3eh3QaxvtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB68eFTdNiJZmkI9iu9IAcM1rxRoMB8GA1UdIwQY MBaAFI/4Xv8kSMc2RuNUr+pkG89558f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjIt ZTMyMjA4Nzg3MGQyLzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjItZTMyMjA4Nzg3MGQy LzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGyHw10h 9k9T70y0g0R01TeFMnNlr8hs5XGv9J8damHvlHeEx13xfW+PtDTodyAFi8Rlaie9 qOQsv26dNR0uKJrX0QIwrJBLtKpJxuOK2SDHZiLzS1Az7Iwo26d0RCzmfJ1uR0/5 dUvTJAIKfLBh1aHV0PZQki4XL2gIo+2PNf7q6SluKvi16kI9RZhby9PqISfLygrZ y/V0hLDCqkvPodkahXrCfmFm4nUP/oGZP1kczQbeXWgOaPdttBXptt1rOmfjSlG/ 6eAQyPNHO/ygSWH9Yg9KF6yuR8GJNFyQHZaLPXU0e2zsKIKe/3jKZQP/iPe4ConW yP960ElNuniIHg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:48:15 2025 by rpki-client