This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json) Hash identifier: crV0AwXskkxmvevsKArgQdZXaeMNf8nmThjOo2pByPM= Subject key identifier: 66:83:30:C7:70:EF:1A:73:7A:95:B1:63:9A:7C:63:BF:E5:A1:9C:CF Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3 Certificate serial: 019AF31D5E46CA8E382305E1EE753B69F786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=) 2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: 9GkncLNEB9HxSZZRgCPXgIDLpqDvXRFJvIn88Ue6iBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5e:46:ca:8e:38:23:05:e1:ee:75:3b:69:f7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3 Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=668330c770ef1a737a95b1639a7c63bfe5a19ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:fa:f2:6b:99:d3:2a:a5:8d:cf:7a:13:86: 63:cd:d4:c3:df:9c:90:e0:0d:84:57:2d:bb:60:43: 32:f9:14:0e:83:1a:fd:9d:c6:89:44:0c:b1:a9:bf: b0:6d:d2:84:44:4c:97:77:61:0b:e5:3b:a0:64:ad: 1f:1c:e1:99:f8:cc:00:84:de:e0:cd:46:6a:f0:89: d8:00:f9:7c:a2:de:26:6e:bc:71:ef:62:ac:83:a1: 77:6a:af:fe:f7:68:69:be:31:83:7b:71:32:f3:a2: 7c:e4:6a:b6:63:fe:e9:e8:fe:b0:54:ff:4b:61:4a: fe:d4:7f:d9:10:ea:04:8d:2d:5a:26:08:e4:15:e0: bb:3b:d3:6a:52:71:27:ba:c1:f4:43:1b:4d:72:de: 61:66:6d:99:6d:ed:70:ee:a4:ab:1d:ec:01:49:bc: 06:82:16:dc:0c:fb:36:bc:20:6d:74:bb:50:00:15: c6:58:7f:6d:87:3a:ff:35:a8:56:4a:be:fe:db:97: 1d:72:17:1d:f0:4f:99:ac:7a:32:6f:a4:58:7b:dd: 63:ea:48:ea:31:70:04:de:33:08:ed:f0:13:d7:1e: cc:84:93:ec:72:55:cd:3c:f0:43:37:f2:27:d2:d9: d9:e7:96:29:49:f6:e0:08:99:a1:34:a7:4d:98:73: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:83:30:C7:70:EF:1A:73:7A:95:B1:63:9A:7C:63:BF:E5:A1:9C:CF X509v3 Authority Key Identifier: keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f7:ae:3f:b0:94:11:31:cd:5d:fd:03:b5:06:85:4a:d6:3f: 85:dd:dd:a4:28:dc:11:ab:6f:92:a5:5f:72:c1:ca:9e:e9:ba: 6a:70:ab:0c:d3:c6:4d:42:b6:eb:58:98:fb:21:63:18:3e:79: bd:b4:fe:ef:71:17:bb:22:4c:c3:60:87:07:43:4d:eb:3f:b1: 46:a9:38:54:7b:93:e3:52:02:f7:eb:e6:db:40:53:67:d3:07: 58:e8:81:14:61:be:2b:5b:52:52:26:78:84:a5:f7:6a:9c:25: a7:ec:65:4d:f5:d9:4e:04:5f:c1:21:d0:99:f8:f0:4a:81:76: 31:ad:e3:3a:4c:c1:15:d8:f8:fe:77:7a:a7:ac:3f:70:1f:26: 27:22:b8:fc:78:9c:6a:65:3d:8e:68:d8:dd:bc:50:df:24:7c: 6a:ed:5c:f6:2c:cc:a7:2d:9e:d0:12:8a:74:58:7a:a2:49:32: be:9f:87:20:f5:6d:12:bc:a7:d6:2d:5c:05:e0:79:e8:f9:d4: a1:32:e7:51:05:3b:4d:a0:34:55:32:74:c1:07:26:93:0a:73: 06:f2:79:d2:69:ff:89:e8:1c:ad:c1:7b:80:ae:6c:97:00:48: a1:da:cb:d3:84:eb:a3:75:41:68:0c:ac:87:51:bf:f9:9c:19: e6:c0:bc:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV5Gyo44IwXh7nU7afeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh MDBhYjMwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD Eyg2NjgzMzBjNzcwZWYxYTczN2E5NWIxNjM5YTdjNjNiZmU1YTE5Y2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscr68muZ0yqljc96E4ZjzdTD35yQ 4A2EVy27YEMy+RQOgxr9ncaJRAyxqb+wbdKEREyXd2EL5TugZK0fHOGZ+MwAhN7g zUZq8InYAPl8ot4mbrxx72Ksg6F3aq/+92hpvjGDe3Ey86J85Gq2Y/7p6P6wVP9L YUr+1H/ZEOoEjS1aJgjkFeC7O9NqUnEnusH0QxtNct5hZm2Zbe1w7qSrHewBSbwG ghbcDPs2vCBtdLtQABXGWH9thzr/NahWSr7+25cdchcd8E+ZrHoyb6RYe91j6kjq MXAE3jMI7fAT1x7MhJPsclXNPPBDN/In0tnZ55YpSfbgCJmhNKdNmHM1wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaDMMdw7xpzepWxY5p8Y7/loZzPMB8GA1UdIwQY MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt YTEwNGQyNDc3MTVmLzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPeuP7CU ETHNXf0DtQaFStY/hd3dpCjcEatvkqVfcsHKnum6anCrDNPGTUK261iY+yFjGD55 vbT+73EXuyJMw2CHB0NN6z+xRqk4VHuT41IC9+vm20BTZ9MHWOiBFGG+K1tSUiZ4 hKX3apwlp+xlTfXZTgRfwSHQmfjwSoF2Ma3jOkzBFdj4/nd6p6w/cB8mJyK4/Hic amU9jmjY3bxQ3yR8au1c9izMpy2e0BKKdFh6okkyvp+HIPVtEryn1i1cBeB56PnU oTLnUQU7TaA0VTJ0wQcmkwpzBvJ50mn/iegcrcF7gK5slwBIodrL04Tro3VBaAys h1G/+ZwZ5sC8pg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:07 2025 by rpki-client