This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: DJNINI29/Hlkbkhvi+0F+uf75npqlUUmXDWlCkPe2hI= Subject key identifier: 1B:2D:36:C8:3B:D9:6C:9E:E5:F7:ED:BC:71:84:7B:6A:98:02:AD:0F Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019AF12E2C2808BAA73EEB953A1DE893FE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0CC1 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: 3N9aZ8zTSdZQ6ZvfIiyQMbKeNPE.roa (hash: VzMo5OEH6WAO4xNi9N0ubLSFEAUrDTWn6IFMnfmYKL4=) 2: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=) 3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=) 4: GIpX64dJ6HZBn7pYOJNMhZ7z2Wk.roa (hash: PjZLxgP6snPECokGBM26BsZLn+FL8XwBYAL6/1qDHeI=) 5: IZdk74hSrnh74ZynVfW7EO53suI.roa (hash: 5Lf7wqH7b2uz1cEp7iE8xbZTzdwcRRNn/RAvAhVoRXw=) 6: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: 1HwXVB04R2SJRCPOLAgi9u4EzYvsnP8jbzU4qMde7xc=) 7: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=) 8: dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa (hash: b3jMX68O+rKcLGgMZNQr4ecBhH3oDiVmJuYCs2ww/m4=) 9: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=) 10: sI3owle2SK5hDtoXgnXqvnb2Lig.roa (hash: h/A8g/6518BnZmSBn+Xa4u50/hcauxf7ASYtMTXTA3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2c:28:08:ba:a7:3e:eb:95:3a:1d:e8:93:fe:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=1b2d36c83bd96c9ee5f7edbc71847b6a9802ad0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:e7:aa:5e:57:f6:fd:03:10:66:33:39:57: 06:b8:e4:29:93:e9:77:89:42:d3:1d:97:7c:68:8d: d6:39:36:82:8c:00:4b:a0:07:62:97:f3:78:5c:eb: 66:d9:d1:e4:6f:c1:14:ec:c7:72:c3:7a:71:f5:91: 84:6c:c1:43:66:00:e0:b7:36:07:a5:30:9e:34:0e: b3:e1:fc:a5:cb:57:41:45:6c:27:e5:dc:e4:1f:0d: 48:b6:2d:24:16:62:49:f0:f8:63:14:03:88:a1:2a: a1:03:d2:29:03:4f:4e:40:e2:95:94:cd:e9:c6:05: e1:14:d0:bd:dc:ce:7d:f9:23:01:a9:df:ae:1f:38: d1:c0:b4:75:43:de:3b:a8:a8:48:f3:09:e4:6e:e6: 75:6a:be:6f:6f:d3:53:48:20:2e:ab:3b:e1:67:8d: e2:bd:7d:5a:ec:f6:5c:69:ee:37:ef:cf:1a:96:d8: 9c:ad:50:5e:11:ae:b5:fe:a3:6c:c8:0b:b4:db:0e: 28:01:85:f4:e1:c2:56:a4:f0:e6:bf:a9:3e:1d:e7: d1:b8:4e:a5:f2:c9:f0:b4:83:eb:79:be:13:2e:53: e2:64:d3:41:97:36:e1:86:c5:f1:1f:e9:a8:8b:98: 01:18:de:7b:8b:5b:14:dd:0d:2f:6a:91:9d:ea:c1: 4a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2D:36:C8:3B:D9:6C:9E:E5:F7:ED:BC:71:84:7B:6A:98:02:AD:0F X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:81:f8:7c:79:2e:8b:3d:4a:56:92:11:ef:38:49:34:37:f6: 18:f3:66:d7:fd:67:74:6d:76:e8:4f:f7:6f:28:e9:7b:7d:b5: 56:a2:15:95:bf:73:e2:2e:44:ba:3c:e9:17:88:7e:77:3a:71: 8d:e4:52:70:50:a7:60:79:37:aa:5f:50:48:10:14:8c:34:c3: f3:1b:28:9d:18:10:29:b1:55:14:84:48:41:46:73:35:4b:13: 8b:5f:6e:17:21:42:25:a8:7e:a1:a6:5b:08:09:df:22:41:ec: a7:96:0e:d9:16:d9:8e:66:46:53:09:93:85:55:8c:8c:d1:65: 10:1b:d7:e0:ad:57:70:37:3b:79:26:10:d2:03:ac:72:1a:ad: ac:b9:61:fe:51:1b:a0:5c:c0:4d:44:87:e5:d6:73:64:3d:72: ee:1b:eb:06:db:21:ab:18:4f:2a:aa:00:61:53:fd:2b:56:4e: 30:24:a3:a9:4f:5b:b1:8a:1e:40:0f:1a:eb:dd:9a:f6:37:93: 9f:97:ac:be:54:83:10:d1:89:12:fa:2a:b1:b7:f5:24:0c:a2: d1:20:6d:56:f5:15:70:4c:f5:a1:fc:6c:4f:a0:02:d0:03:9c: 88:5a:0f:b4:d7:a5:7d:7f:2c:10:9c:99:eb:9c:0e:41:8a:10: 92:16:5b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiwoCLqnPuuVOh3ok/5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygxYjJkMzZjODNiZDk2YzllZTVmN2VkYmM3MTg0N2I2YTk4MDJhZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLnql5X9v0DEGYzOVcGuOQpk+l3 iULTHZd8aI3WOTaCjABLoAdil/N4XOtm2dHkb8EU7Mdyw3px9ZGEbMFDZgDgtzYH pTCeNA6z4fyly1dBRWwn5dzkHw1Iti0kFmJJ8PhjFAOIoSqhA9IpA09OQOKVlM3p xgXhFNC93M59+SMBqd+uHzjRwLR1Q947qKhI8wnkbuZ1ar5vb9NTSCAuqzvhZ43i vX1a7PZcae43788alticrVBeEa61/qNsyAu02w4oAYX04cJWpPDmv6k+HefRuE6l 8snwtIPreb4TLlPiZNNBlzbhhsXxH+moi5gBGN57i1sU3Q0vapGd6sFKwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBstNsg72Wye5fftvHGEe2qYAq0PMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYH4fHku iz1KVpIR7zhJNDf2GPNm1/1ndG126E/3byjpe321VqIVlb9z4i5EujzpF4h+dzpx jeRScFCnYHk3ql9QSBAUjDTD8xsonRgQKbFVFIRIQUZzNUsTi19uFyFCJah+oaZb CAnfIkHsp5YO2RbZjmZGUwmThVWMjNFlEBvX4K1XcDc7eSYQ0gOschqtrLlh/lEb oFzATUSH5dZzZD1y7hvrBtshqxhPKqoAYVP9K1ZOMCSjqU9bsYoeQA8a692a9jeT n5esvlSDENGJEvoqsbf1JAyi0SBtVvUVcEz1ofxsT6AC0AOciFoPtNelfX8sEJyZ 65wOQYoQkhZbmg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:22 2025 by rpki-client