This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json) Hash identifier: 97ybeStSzLZ3a/7s0kJ53nbIvPUMYLML7f4tZ9mfXfg= Subject key identifier: A1:38:83:82:21:09:CD:5F:E9:C0:59:8A:D3:8E:E9:04:3A:BA:4A:FE Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Certificate serial: 019AF19A8F908ADAAAC5F193F7E69B7FF55E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft Manifest number: 031E Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: /RQUzajcl4dyTH2mgVpgRecmDnYAEVYpmIl2tiqypVg=) 2: tI3vS8bXRpYk2uJT942ZTBiVKdc.roa (hash: m8AWxg57zCEgWp5C3CXYTmTH0M1td7C0p+1vWuP3iI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:8f:90:8a:da:aa:c5:f1:93:f7:e6:9b:7f:f5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=a13883822109cd5fe9c0598ad38ee9043aba4afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:1f:4a:1b:da:56:1f:43:ea:21:9a:64:7a: 4e:ba:54:18:be:46:e8:b3:f9:f9:77:e4:01:5a:3e: f8:57:2a:1e:fb:35:79:c8:40:25:2a:85:d2:59:2b: 6d:26:17:79:ff:2b:82:cc:c9:fe:39:81:22:48:1b: 3f:20:a2:be:08:c3:13:27:f8:83:68:68:13:8a:f5: 5c:b1:ab:80:4e:4b:2d:39:7f:01:97:9f:69:ab:5b: 55:0c:5b:e6:23:60:be:1b:e6:ea:ef:ca:87:19:af: b9:c1:bc:60:38:d8:60:b0:7d:c6:74:e0:5e:ce:48: ef:3b:38:14:51:4f:0d:ea:77:f3:79:3b:db:a9:d6: 7d:9b:81:16:10:45:75:4f:e3:87:06:98:e9:8d:af: db:8a:2f:2c:d2:e8:3d:40:ea:8d:cb:47:cc:e3:86: 3c:bf:f9:6b:af:59:b4:2b:61:17:a9:42:60:b8:e2: 69:2b:15:79:e6:20:0a:4b:b6:df:3f:9c:3a:2f:53: f1:a6:4c:71:06:61:17:38:e6:be:e1:ed:23:28:c3: ab:5f:ce:01:a8:0e:80:f8:53:e3:f2:66:d2:e0:ce: 38:b1:8a:65:f6:1d:9a:44:ac:fd:15:1e:7e:bd:68: 4d:67:d0:6c:57:f8:d9:8d:d3:8b:50:44:7e:c2:3b: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:38:83:82:21:09:CD:5F:E9:C0:59:8A:D3:8E:E9:04:3A:BA:4A:FE X509v3 Authority Key Identifier: keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:c6:4a:bf:e9:f5:4c:6d:de:e7:cc:a2:e4:1d:46:ae:87: fc:92:6d:a8:18:d3:47:7e:9a:89:33:6e:e4:2b:87:c1:77:a7: 67:f0:07:36:08:78:23:93:b1:fa:a9:21:9e:a8:c0:94:2b:ea: ba:bd:d3:ac:f9:a3:af:b8:90:63:bf:7f:4e:c1:57:93:45:43: 54:62:af:e2:5b:82:4a:c2:54:a1:cd:27:73:80:a2:2f:f9:43: 8f:35:7d:17:67:5f:79:c8:15:45:96:79:4f:f5:99:60:76:2a: a7:c3:d8:91:0a:b7:a0:d9:73:03:4e:19:68:9e:a4:08:04:ce: c8:5f:e8:46:3d:85:c9:91:21:89:03:ad:83:4b:0e:0f:a5:ec: a0:c1:10:b1:7b:d3:cc:b4:05:7f:64:2d:bf:e0:7a:3c:29:a7: 40:d6:02:11:21:3f:ef:cc:b4:12:b9:f2:82:ee:9c:72:bc:66: 82:69:0c:01:32:38:d2:ea:27:7f:92:1c:3a:92:58:bf:32:ac: c1:c7:e8:14:28:6c:4b:25:5c:66:0d:93:4c:73:1f:00:4e:35: 5e:c9:ba:7c:d6:d7:97:27:f1:ad:62:e9:4c:60:94:08:d6:a2: 01:75:9f:2c:1b:8d:2f:b6:ed:86:59:47:eb:77:3e:c3:f9:da: 78:65:75:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmo+QitqqxfGT9+abf/VeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi YmM5NmQwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD EyhhMTM4ODM4MjIxMDljZDVmZTljMDU5OGFkMzhlZTkwNDNhYmE0YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJQfShvaVh9D6iGaZHpOulQYvkbo s/n5d+QBWj74Vyoe+zV5yEAlKoXSWSttJhd5/yuCzMn+OYEiSBs/IKK+CMMTJ/iD aGgTivVcsauATkstOX8Bl59pq1tVDFvmI2C+G+bq78qHGa+5wbxgONhgsH3GdOBe zkjvOzgUUU8N6nfzeTvbqdZ9m4EWEEV1T+OHBpjpja/bii8s0ug9QOqNy0fM44Y8 v/lrr1m0K2EXqUJguOJpKxV55iAKS7bfP5w6L1PxpkxxBmEXOOa+4e0jKMOrX84B qA6A+FPj8mbS4M44sYpl9h2aRKz9FR5+vWhNZ9BsV/jZjdOLUER+wjsmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE4g4IhCc1f6cBZitOO6QQ6ukr+MB8GA1UdIwQY MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0 LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7XGSr/p 9Uxt3ufMouQdRq6H/JJtqBjTR36aiTNu5CuHwXenZ/AHNgh4I5Ox+qkhnqjAlCvq ur3TrPmjr7iQY79/TsFXk0VDVGKv4luCSsJUoc0nc4CiL/lDjzV9F2dfecgVRZZ5 T/WZYHYqp8PYkQq3oNlzA04ZaJ6kCATOyF/oRj2FyZEhiQOtg0sOD6XsoMEQsXvT zLQFf2Qtv+B6PCmnQNYCESE/78y0Ernygu6ccrxmgmkMATI40uonf5IcOpJYvzKs wcfoFChsSyVcZg2TTHMfAE41Xsm6fNbXlyfxrWLpTGCUCNaiAXWfLBuNL7bthllH 63c+w/naeGV12g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:39 2025 by rpki-client