This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json) Hash identifier: tAG+hxNMKyzQmMs2xV4PbNz10Hv28qVUdVqr1+R8z3I= Subject key identifier: 06:75:75:89:D7:23:B6:29:04:7F:BA:9C:9E:6D:43:FD:CD:EF:8C:C6 Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9 Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9 Certificate serial: 019AF5E64FE2282129E779EB2A8C01A22EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft Manifest number: 04AC Signing time: Sat 06 Dec 2025 23:01:42 +0000 Manifest this update: Sat 06 Dec 2025 23:01:42 +0000 Manifest next update: Sun 07 Dec 2025 23:01:42 +0000 Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: ugeOp93LfKypQ8R3jBWB6BLFBtd3RNwMg+mcWBaKPq4=) 2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:4f:e2:28:21:29:e7:79:eb:2a:8c:01:a2:2e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9 Validity Not Before: Dec 6 23:01:42 2025 GMT Not After : Dec 7 23:01:42 2025 GMT Subject: CN=06757589d723b629047fba9c9e6d43fdcdef8cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:dc:d8:42:a1:40:47:24:0c:c1:40:2b:be: 79:8b:7b:2c:73:3b:b2:1c:90:79:e1:c3:47:dd:66: fe:6d:aa:5d:a9:1f:c6:c2:96:18:ad:5d:3a:de:b8: 70:0b:50:22:fc:a4:57:de:2b:77:99:40:36:79:11: a6:8d:e1:9f:3c:f2:b9:0a:f9:06:40:ca:0b:d7:52: 03:7d:30:31:86:a6:90:e1:72:0b:48:68:aa:1a:5c: 74:c4:cf:7a:6a:d8:66:d3:c9:cb:ab:2f:83:39:cf: ec:7f:7e:ce:07:69:6a:27:ce:3a:75:09:d5:19:ac: 0c:14:f1:f7:6a:dc:64:21:56:d2:dc:27:d5:24:b0: 82:8a:ea:5a:1c:74:23:86:dc:7b:7f:e7:e8:93:4a: 78:0a:cb:e3:0f:a4:34:3a:e5:8b:6e:10:9e:03:5c: a5:90:d1:fb:00:f8:54:fb:2b:18:62:96:45:7c:12: 1c:c3:87:e3:e3:ff:ca:a6:d7:bc:48:e3:cb:b0:a9: 01:77:e3:00:79:03:e9:6f:86:a0:90:02:e4:dd:fe: 1e:ac:ff:ff:8b:15:9e:50:5a:3b:a0:28:4b:ae:03: e1:a3:9e:95:5f:c3:a0:3f:1a:2f:4c:e4:09:4c:5b: 2f:3d:d1:28:1c:34:ee:83:62:dd:0e:99:ae:d2:d6: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:75:89:D7:23:B6:29:04:7F:BA:9C:9E:6D:43:FD:CD:EF:8C:C6 X509v3 Authority Key Identifier: keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:73:dc:48:36:12:cc:ca:e1:be:0a:a5:50:a6:c0:2b:8d:57: 03:1c:12:e5:20:cb:c6:b1:f8:23:11:49:9b:73:62:15:04:c2: 62:76:46:14:e0:7a:4e:55:04:46:8b:b6:57:9e:4a:47:53:15: ac:22:21:ad:79:33:1a:24:70:94:30:88:01:a2:7b:6c:10:01: 62:b5:e2:54:1f:f7:1d:f4:62:d5:a1:13:6d:ee:ba:2f:2a:b5: 77:b9:55:d2:ea:b3:d5:bd:91:3b:3c:2f:40:bf:fe:5d:81:ad: 65:4a:54:a8:0d:99:fb:55:f9:55:db:e7:28:9a:1a:9f:5a:dd: d8:27:50:01:49:a0:8c:e5:ce:95:8e:b3:1a:a2:21:3f:e5:c4: 8e:66:24:b8:4b:29:79:77:c0:e9:07:9d:47:b4:fe:9f:ae:d8: b0:03:47:ec:37:78:c8:4b:d3:42:60:1d:15:c3:e2:a6:be:ac: 78:c6:da:37:1d:ca:6d:2b:01:92:76:02:91:1a:72:a0:99:b5: 65:41:50:6e:a7:05:3f:ed:2c:2d:e8:29:b1:9a:f4:e0:cd:95: 56:7e:bb:4e:ab:1e:cc:2f:60:a5:ad:81:49:1d:12:94:ec:a8: a8:5e:95:3d:cb:a1:2c:21:b0:cc:d1:2e:a2:fe:40:45:ae:82: f2:4a:42:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15k/iKCEp53nrKowBoi7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Nzk1MjBmYjgxYTQ1ZmNiYzQyYTZlOTM1NTgwN2ViOWE3 NjQxZjkwHhcNMjUxMjA2MjMwMTQyWhcNMjUxMjA3MjMwMTQyWjAzMTEwLwYDVQQD EygwNjc1NzU4OWQ3MjNiNjI5MDQ3ZmJhOWM5ZTZkNDNmZGNkZWY4Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIzc2EKhQEckDMFAK755i3ssczuy HJB54cNH3Wb+bapdqR/GwpYYrV063rhwC1Ai/KRX3it3mUA2eRGmjeGfPPK5CvkG QMoL11IDfTAxhqaQ4XILSGiqGlx0xM96athm08nLqy+DOc/sf37OB2lqJ846dQnV GawMFPH3atxkIVbS3CfVJLCCiupaHHQjhtx7f+fok0p4CsvjD6Q0OuWLbhCeA1yl kNH7APhU+ysYYpZFfBIcw4fj4//Kpte8SOPLsKkBd+MAeQPpb4agkALk3f4erP// ixWeUFo7oChLrgPho56VX8OgPxovTOQJTFsvPdEoHDTug2LdDpmu0tbXMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ1dYnXI7YpBH+6nJ5tQ/3N74zGMB8GA1UdIwQY MBaAFCZ5Ug+4GkX8vEKm6TVYB+uadkH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMt ZmE4MjM5ZjZjNmIzLzEvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMtZmE4MjM5ZjZjNmIz LzEvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHPcSDYS zMrhvgqlUKbAK41XAxwS5SDLxrH4IxFJm3NiFQTCYnZGFOB6TlUERou2V55KR1MV rCIhrXkzGiRwlDCIAaJ7bBABYrXiVB/3HfRi1aETbe66Lyq1d7lV0uqz1b2ROzwv QL/+XYGtZUpUqA2Z+1X5VdvnKJoan1rd2CdQAUmgjOXOlY6zGqIhP+XEjmYkuEsp eXfA6QedR7T+n67YsANH7Dd4yEvTQmAdFcPipr6seMbaNx3KbSsBknYCkRpyoJm1 ZUFQbqcFP+0sLegpsZr04M2VVn67TqsezC9gpa2BSR0SlOyoqF6VPcuhLCGwzNEu ov5ARa6C8kpCkg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:29 2025 by rpki-client