This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json) Hash identifier: /042JxePhFYqECXdtXoo4hKtGcW7j3tQs0VsFqPDsVg= Subject key identifier: FB:FC:60:55:BA:50:38:F9:C3:AD:A4:11:DD:0C:69:4E:44:2D:4F:E0 Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c Certificate serial: 019AF42DC06C1AF91CB38E35A92341EA7A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 15:00:30 +0000 Manifest this update: Sat 06 Dec 2025 15:00:30 +0000 Manifest next update: Sun 07 Dec 2025 15:00:30 +0000 Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=) 2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=) 3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: iRIBJ9fgtiYXAoeTnu+R5NPO7voZGR7AqJD8IABoeUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c0:6c:1a:f9:1c:b3:8e:35:a9:23:41:ea:7a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c Validity Not Before: Dec 6 15:00:30 2025 GMT Not After : Dec 7 15:00:30 2025 GMT Subject: CN=fbfc6055ba5038f9c3ada411dd0c694e442d4fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:42:13:82:7c:ec:75:8d:cf:11:d1:86:e8: 56:31:38:35:d2:02:4e:4a:92:ec:32:3b:9e:29:09: fb:20:ba:ef:35:93:73:01:ea:da:f1:59:26:e8:4a: 18:0b:f1:9d:d2:e2:66:2a:85:5e:91:a0:59:45:07: 80:bd:f3:30:32:28:76:e4:95:62:ae:d8:53:89:d6: 67:71:86:4e:dc:d2:6e:82:91:e8:e7:c7:a5:20:85: ce:b6:ed:34:98:05:84:bb:ab:c1:7d:d7:c9:a0:b4: 64:56:59:a8:d3:11:c9:b1:40:6a:c4:70:fe:3b:27: a7:db:48:13:e9:a1:55:63:22:59:e3:cd:d3:d7:c6: 35:95:a2:30:a5:ab:ef:f0:cc:18:60:2e:13:34:65: 00:b8:c7:90:8b:ac:88:8c:56:4d:71:e4:17:8f:98: 60:df:de:98:02:cc:13:f2:12:e0:2d:23:ac:70:73: a4:1f:44:41:bf:84:78:56:97:a5:72:a4:b6:f9:24: df:f2:f7:46:c8:b9:c0:fe:54:e5:05:d7:60:ed:a2: 93:86:eb:55:ae:f4:e0:51:e8:67:af:f5:70:cd:09: 18:4f:e8:a9:18:90:4a:6c:50:b4:c5:2b:8d:89:c5: b8:8d:3a:35:f7:e7:97:59:5f:ea:50:80:e8:0e:0b: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:60:55:BA:50:38:F9:C3:AD:A4:11:DD:0C:69:4E:44:2D:4F:E0 X509v3 Authority Key Identifier: keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e7:15:5f:aa:8e:5f:6a:7f:97:8d:f1:1a:7d:d2:15:45:12: 16:b4:d5:1b:da:40:35:15:8a:8a:e5:93:53:f4:9d:63:01:77: e6:1b:d6:20:81:bf:ae:1e:48:bd:ee:0d:5d:58:f8:a8:eb:f7: 19:93:f8:46:98:6b:7b:d2:30:17:ce:2a:e7:d5:cb:15:97:42: 76:0c:e6:7b:5e:0c:bb:fd:f2:40:3e:97:e3:46:e0:1a:02:43: 70:c6:c1:5b:3b:78:56:69:a8:16:84:60:47:5e:5e:4f:78:6a: c0:37:14:6d:b2:b2:67:37:d4:85:cf:8e:9f:d9:10:e8:d4:03: 02:58:11:48:25:51:54:fe:79:14:7a:3a:47:62:0c:e5:4f:55: d0:e1:92:88:c6:3e:fe:74:ff:e9:cb:17:b0:17:cf:5d:56:3f: ec:f7:c3:52:80:b6:b7:64:34:ba:d3:ab:70:73:60:51:6b:42: 4a:2d:08:44:7b:76:cc:36:26:2e:95:a5:78:39:24:ce:40:53: cd:c6:f9:df:27:e7:48:49:02:90:2f:a3:64:89:37:ad:fd:73: d8:fd:90:c6:09:76:02:c2:c8:4a:63:e3:d6:f0:22:e0:ed:61: 48:e1:fe:98:9a:b5:86:5d:04:2e:28:a5:c9:96:e2:24:97:64: 46:63:55:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcBsGvkcs441qSNB6npIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOTBiZDI4NzAwNTBjODQ0NzdhMTYxZWIwOTBmMDVlYjk2 MjAxNmMwHhcNMjUxMjA2MTUwMDMwWhcNMjUxMjA3MTUwMDMwWjAzMTEwLwYDVQQD EyhmYmZjNjA1NWJhNTAzOGY5YzNhZGE0MTFkZDBjNjk0ZTQ0MmQ0ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RdCE4J87HWNzxHRhuhWMTg10gJO SpLsMjueKQn7ILrvNZNzAera8Vkm6EoYC/Gd0uJmKoVekaBZRQeAvfMwMih25JVi rthTidZncYZO3NJugpHo58elIIXOtu00mAWEu6vBfdfJoLRkVlmo0xHJsUBqxHD+ Oyen20gT6aFVYyJZ483T18Y1laIwpavv8MwYYC4TNGUAuMeQi6yIjFZNceQXj5hg 396YAswT8hLgLSOscHOkH0RBv4R4VpelcqS2+STf8vdGyLnA/lTlBddg7aKThutV rvTgUehnr/VwzQkYT+ipGJBKbFC0xSuNicW4jTo19+eXWV/qUIDoDgs4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv8YFW6UDj5w62kEd0MaU5ELU/gMB8GA1UdIwQY MBaAFI6QvShwBQyER3oWHrCQ8F65YgFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMt ZWNiODA3MDJhMTE3LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMtZWNiODA3MDJhMTE3 LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgecVX6qO X2p/l43xGn3SFUUSFrTVG9pANRWKiuWTU/SdYwF35hvWIIG/rh5Ive4NXVj4qOv3 GZP4Rphre9IwF84q59XLFZdCdgzme14Mu/3yQD6X40bgGgJDcMbBWzt4VmmoFoRg R15eT3hqwDcUbbKyZzfUhc+On9kQ6NQDAlgRSCVRVP55FHo6R2IM5U9V0OGSiMY+ /nT/6csXsBfPXVY/7PfDUoC2t2Q0utOrcHNgUWtCSi0IRHt2zDYmLpWleDkkzkBT zcb53yfnSEkCkC+jZIk3rf1z2P2Qxgl2AsLISmPj1vAi4O1hSOH+mJq1hl0ELiil yZbiJJdkRmNVFA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:46 2025 by rpki-client