This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json) Hash identifier: OZls9WxYz8GSGON6lWqtbmI9mkTZTrYLMjsfvbsKE4w= Subject key identifier: E5:D6:F0:BC:59:7C:E1:E1:5B:4F:56:BE:FF:A8:38:D4:26:8E:A6:F5 Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Certificate serial: 019AF2091FDADE79D97AD2D43EBAF6643106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft Manifest number: 12BC Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=) 2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: 86bBvQ5mQ+C201ttFrURIFH2Q6WPIm+qT8wwvyoUYe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1f:da:de:79:d9:7a:d2:d4:3e:ba:f6:64:31:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=e5d6f0bc597ce1e15b4f56beffa838d4268ea6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:57:ba:7e:12:77:97:6d:26:61:90:44:93: 5b:7d:b7:7a:b1:ac:09:2d:ce:8d:c9:4d:2d:a3:b1: 48:24:8f:6f:d5:0b:ba:5d:55:be:92:3a:b6:26:c0: aa:b8:1a:6a:61:f9:e8:90:5e:23:05:98:e5:10:c6: d3:58:52:90:2e:75:a1:33:72:30:96:f5:a5:87:99: 62:8c:fe:4c:09:f0:47:c3:86:18:e2:2f:02:a6:34: 96:d8:77:12:f3:40:b6:bc:3f:43:57:42:39:5d:dd: 44:37:ec:5d:c6:1e:e9:29:38:f7:f7:44:48:34:ab: 44:b3:86:e5:c0:8f:be:71:16:50:11:64:94:14:e9: 7a:a2:32:2d:f5:a9:ce:0f:f6:62:e0:0d:e1:ba:de: 57:27:e9:b7:e9:23:a2:61:06:81:2e:2e:a3:5e:6f: 2d:37:36:53:69:d0:3f:2b:0f:8b:a7:60:b5:da:08: 17:02:2a:51:88:6d:f6:19:a8:37:7b:7a:e8:b1:b2: e2:d2:c6:3a:c5:26:de:1d:21:ab:22:3b:0a:30:6d: fb:ca:fa:3e:5c:78:32:d5:c0:20:12:3a:d5:fd:a8: 1c:29:cc:e6:c8:76:04:be:2e:88:88:90:78:65:b2: c9:7b:46:45:a7:59:c1:15:4d:da:a9:42:3c:d9:9d: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D6:F0:BC:59:7C:E1:E1:5B:4F:56:BE:FF:A8:38:D4:26:8E:A6:F5 X509v3 Authority Key Identifier: keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f1:f7:e1:6f:ae:31:3b:ec:06:d7:3a:00:0a:a3:cd:34:0b: cf:7d:f1:0f:95:cd:3c:42:4e:d3:13:b6:eb:05:c2:78:a4:68: 52:38:02:da:62:1a:83:82:d3:1f:58:22:da:38:96:0b:91:4b: ed:0c:ff:74:c4:3a:16:fd:f8:cf:33:62:ff:54:2c:ae:12:e1: 41:4c:11:03:38:29:c1:bc:1f:09:fd:1b:5f:3d:54:8d:e9:6d: a8:45:40:19:10:19:85:f2:6b:be:6e:28:d9:b9:bf:aa:1f:67: 15:0f:e1:67:bd:3d:ca:66:7d:15:f0:6e:6c:a6:f4:ce:2e:eb: ef:fc:5a:fc:29:c2:c9:ae:b8:59:18:94:b1:98:f2:7c:71:83: 4f:ba:2c:f6:b4:b6:01:0a:4e:25:02:07:f7:c4:6a:99:e9:4c: 6e:05:f2:21:87:d8:5e:ff:85:0f:78:43:29:8d:f6:1b:ac:5e: 8f:11:a5:9a:b6:f3:e9:d3:18:69:9f:7b:22:ba:e1:ae:85:6e: d9:7c:0b:68:14:6e:b2:ae:57:f0:79:b3:c0:b1:9b:19:f6:b1: aa:db:b1:06:ab:82:91:af:1f:4b:06:1c:a8:23:08:06:62:1a: bf:1b:d7:35:bb:aa:4a:c7:27:15:58:fb:17:88:d8:51:1a:08: 82:17:06:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR/a3nnZetLUPrr2ZDEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjhmNzkyOGMxMGZjMmI1NGI1YjU4OTQ0OGZlNzdkNDA0 MjE4Y2EwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhlNWQ2ZjBiYzU5N2NlMWUxNWI0ZjU2YmVmZmE4MzhkNDI2OGVhNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhVXun4Sd5dtJmGQRJNbfbd6sawJ Lc6NyU0to7FIJI9v1Qu6XVW+kjq2JsCquBpqYfnokF4jBZjlEMbTWFKQLnWhM3Iw lvWlh5lijP5MCfBHw4YY4i8CpjSW2HcS80C2vD9DV0I5Xd1EN+xdxh7pKTj390RI NKtEs4blwI++cRZQEWSUFOl6ojIt9anOD/Zi4A3hut5XJ+m36SOiYQaBLi6jXm8t NzZTadA/Kw+Lp2C12ggXAipRiG32Gag3e3rosbLi0sY6xSbeHSGrIjsKMG37yvo+ XHgy1cAgEjrV/agcKczmyHYEvi6IiJB4ZbLJe0ZFp1nBFU3aqUI82Z3i1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXW8LxZfOHhW09Wvv+oONQmjqb1MB8GA1UdIwQY MBaAFI1o95KMEPwrVLW1iUSP531AQhjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYt ZDAxMTE1MDg5NDYzLzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYtZDAxMTE1MDg5NDYz LzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvH34W+u MTvsBtc6AAqjzTQLz33xD5XNPEJO0xO26wXCeKRoUjgC2mIag4LTH1gi2jiWC5FL 7Qz/dMQ6Fv34zzNi/1QsrhLhQUwRAzgpwbwfCf0bXz1UjeltqEVAGRAZhfJrvm4o 2bm/qh9nFQ/hZ709ymZ9FfBubKb0zi7r7/xa/CnCya64WRiUsZjyfHGDT7os9rS2 AQpOJQIH98RqmelMbgXyIYfYXv+FD3hDKY32G6xejxGlmrbz6dMYaZ97IrrhroVu 2XwLaBRusq5X8HmzwLGbGfaxqtuxBquCka8fSwYcqCMIBmIavxvXNbuqSscnFVj7 F4jYURoIghcGCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:51 2025 by rpki-client