This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json) Hash identifier: Ew4ky2QXHn4K2GSMLn/5DOLhUPfMCBDfPE4lWt09N6U= Subject key identifier: F1:D1:24:7A:EF:E8:42:2E:63:34:22:EF:2F:9B:54:9E:27:0C:BC:49 Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Certificate serial: 019AF20985A4DE99F77DACBEF2E2EBB75335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft Manifest number: 10DC Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: cDoEpqnJGEOevLecYLKnrA+c/P4Ll/t5wsnOEjbz4yk=) 2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:85:a4:de:99:f7:7d:ac:be:f2:e2:eb:b7:53:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=f1d1247aefe8422e633422ef2f9b549e270cbc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:23:20:f4:78:7d:c8:d9:8f:fd:ba:27:a5: 49:a5:9c:6a:92:8a:5d:e2:f7:c5:22:4d:c5:97:f2: 51:cf:b0:32:c2:d4:a7:35:58:84:0f:03:05:41:8c: f1:e0:a6:bb:90:89:b4:f5:d9:00:87:b4:82:53:11: bf:de:56:af:12:d8:a8:82:3b:bb:7a:58:03:4a:de: 59:6e:ff:51:7f:3b:99:c8:05:80:fd:27:d5:2f:75: 4d:42:17:e4:14:54:01:86:10:3e:71:3d:2c:e9:9d: 15:f9:0a:99:03:1f:e3:54:01:8e:7b:f5:ac:4b:87: f0:7f:3a:fa:6c:7a:d6:a3:0b:a3:59:e5:6a:d5:4f: fa:9b:fd:34:16:ea:fc:63:85:16:e3:ca:37:b2:6a: 68:a4:2a:26:f2:0f:b5:da:11:b7:61:7f:8a:be:ff: 31:f9:a6:45:8e:3d:c0:85:85:fa:00:c4:9c:41:cf: c9:ba:42:e6:3e:50:83:0d:2b:c8:a9:ad:af:72:14: 75:80:d4:89:14:67:89:b6:e6:29:f1:03:e6:4d:ad: cd:75:54:67:5c:4f:70:8b:85:c1:4a:ba:3f:62:d1: a1:d6:7b:df:88:7c:56:c9:93:e9:96:f9:b8:92:b2: c3:ef:f0:84:d7:3c:ec:53:ff:98:b8:c0:6f:00:3f: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:24:7A:EF:E8:42:2E:63:34:22:EF:2F:9B:54:9E:27:0C:BC:49 X509v3 Authority Key Identifier: keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:00:14:9d:21:eb:00:ac:60:7a:e0:fa:fa:e1:73:14:e0:a8: 2f:59:6c:89:18:c2:38:7a:f0:de:76:59:04:79:f4:0e:c8:ce: 0b:4a:f4:36:b5:51:5c:cc:4b:87:45:fa:72:11:cb:9b:64:88: 86:b1:86:ea:f5:33:99:50:f1:18:f5:7a:a7:0d:2c:e7:80:8c: d7:70:ff:9b:a9:58:cb:6a:3b:7f:04:ff:d9:45:1f:f8:75:0a: 23:b9:c3:7d:7d:62:3f:d4:2f:16:1b:5a:54:56:7c:30:26:3d: 70:b8:4c:17:f5:1c:a4:5e:34:25:35:59:43:f6:96:77:4b:85: 8e:7b:38:19:9d:cb:37:f3:de:7e:9a:e2:eb:0f:04:82:74:49: 87:ba:ca:e8:3b:a2:58:cc:24:74:55:a2:c7:f8:e1:32:55:5b: dc:c9:a6:ea:37:74:a1:03:db:d7:6b:48:0f:1c:e3:e6:8d:6b: c9:82:09:93:5d:17:fd:7a:22:00:34:03:57:1c:4c:d7:03:d5: 72:44:81:38:da:31:ff:c1:e0:e1:91:9b:85:a7:d0:4c:3a:0c: 57:a3:48:e7:d3:8a:98:cb:c2:8d:5b:31:3f:ac:65:01:79:35: 46:55:04:3d:97:31:ca:f0:8f:20:14:7b:3a:d1:5d:0d:79:4e: 0b:c5:2c:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYWk3pn3fay+8uLrt1M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWI5MzlhM2FjOTdkYWRhMDgyNTE2MWYzYTBlODUwMzNh ODJkMjUwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhmMWQxMjQ3YWVmZTg0MjJlNjMzNDIyZWYyZjliNTQ5ZTI3MGNiYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzojIPR4fcjZj/26J6VJpZxqkopd 4vfFIk3Fl/JRz7AywtSnNViEDwMFQYzx4Ka7kIm09dkAh7SCUxG/3lavEtiogju7 elgDSt5Zbv9RfzuZyAWA/SfVL3VNQhfkFFQBhhA+cT0s6Z0V+QqZAx/jVAGOe/Ws S4fwfzr6bHrWowujWeVq1U/6m/00Fur8Y4UW48o3smpopCom8g+12hG3YX+Kvv8x +aZFjj3AhYX6AMScQc/JukLmPlCDDSvIqa2vchR1gNSJFGeJtuYp8QPmTa3NdVRn XE9wi4XBSro/YtGh1nvfiHxWyZPplvm4krLD7/CE1zzsU/+YuMBvAD+6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHRJHrv6EIuYzQi7y+bVJ4nDLxJMB8GA1UdIwQY MBaAFKybk5o6yX2toIJRYfOg6FAzqC0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYt Mzg1NzIzMmY0NTZjLzEvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYtMzg1NzIzMmY0NTZj LzEvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQAUnSHr AKxgeuD6+uFzFOCoL1lsiRjCOHrw3nZZBHn0DsjOC0r0NrVRXMxLh0X6chHLm2SI hrGG6vUzmVDxGPV6pw0s54CM13D/m6lYy2o7fwT/2UUf+HUKI7nDfX1iP9QvFhta VFZ8MCY9cLhMF/UcpF40JTVZQ/aWd0uFjns4GZ3LN/Pefpri6w8EgnRJh7rK6Dui WMwkdFWix/jhMlVb3Mmm6jd0oQPb12tIDxzj5o1ryYIJk10X/XoiADQDVxxM1wPV ckSBONox/8Hg4ZGbhafQTDoMV6NI59OKmMvCjVsxP6xlAXk1RlUEPZcxyvCPIBR7 OtFdDXlOC8UsSA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:20 2025 by rpki-client