This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft File: _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json) Hash identifier: 176uWq5JgK6PU1nzIWYamywoSwWUC/kka2EyRXOFwrM= Subject key identifier: 61:EF:06:1C:65:5F:DF:51:C0:36:30:F6:95:FF:73:46:A1:79:FC:5C Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2 Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2 Certificate serial: 019AF7663BAD6501B8BB66EF1002FD57AEE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft Manifest number: 16F7 Signing time: Sun 07 Dec 2025 06:01:03 +0000 Manifest this update: Sun 07 Dec 2025 06:01:03 +0000 Manifest next update: Mon 08 Dec 2025 06:01:03 +0000 Files and hashes: 1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=) 2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: f0+idvojZUIEvLqKrolKumKwI/dcGr3f268YqBxBlvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:3b:ad:65:01:b8:bb:66:ef:10:02:fd:57:ae:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2 Validity Not Before: Dec 7 06:01:03 2025 GMT Not After : Dec 8 06:01:03 2025 GMT Subject: CN=61ef061c655fdf51c03630f695ff7346a179fc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:4c:4d:8c:37:7a:5f:be:61:60:96:bd:9c: e1:c4:cf:be:90:f7:9d:ec:8f:56:1f:1a:b1:da:ba: 36:98:55:9d:24:62:dd:bb:66:b1:fa:e7:90:55:8c: 91:aa:02:d6:ff:57:ae:40:0e:a4:06:04:1b:09:f1: 97:bf:f0:e7:40:f7:bc:5f:92:fb:3f:2d:29:8c:a1: b8:24:83:b8:d0:70:56:99:b0:00:4c:f3:10:9c:56: b4:a1:cd:78:9e:10:37:8e:1f:44:21:53:34:54:ce: 71:90:93:c3:aa:0d:70:f7:51:27:23:40:21:b8:9a: 72:0d:e0:32:86:ef:29:91:d6:99:62:f6:bb:ef:23: dd:40:d3:bb:67:f9:ae:5b:57:7f:b3:ba:35:aa:41: 13:77:1b:31:01:3c:b8:23:32:fe:92:d8:fa:f7:a4: 96:b2:04:84:77:73:f8:e5:5b:ac:8c:e4:e1:b9:01: 61:72:55:1e:76:e9:c4:09:a3:e2:01:60:b3:ff:02: 57:4e:18:14:b9:15:98:22:47:bb:5f:58:27:93:d6: 27:b0:83:8b:67:10:5c:16:b7:90:be:d8:f6:61:af: d3:73:26:b0:cf:27:59:c9:e1:a7:2a:ec:9c:af:e3: 4d:57:d0:6c:4a:b6:9f:03:1e:83:c1:59:41:63:9f: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EF:06:1C:65:5F:DF:51:C0:36:30:F6:95:FF:73:46:A1:79:FC:5C X509v3 Authority Key Identifier: keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:52:b9:b9:91:49:51:ef:4e:04:40:00:81:ef:92:a7:42:cc: 84:68:6a:05:ef:18:7e:9c:fc:7f:82:fe:f5:ab:3a:b9:c2:ee: ec:5a:75:88:be:6d:71:54:49:7e:2f:35:0f:53:52:56:c8:8e: 1c:f8:50:4c:00:60:8a:11:d7:c8:1a:a8:51:a4:27:96:60:92: f9:08:e5:6d:9b:88:c4:4c:b2:5b:3c:08:1d:e2:05:ba:b8:ed: 69:fe:b3:32:db:5d:79:d7:a7:88:dd:9d:4f:75:27:00:4b:ec: 9b:f2:c9:f8:e6:ca:db:17:41:af:dc:53:27:ca:63:b7:46:82: 75:74:ec:92:06:07:5d:6d:2a:ff:88:e0:44:9b:74:c7:64:ef: 43:8e:0e:e6:76:38:82:19:a8:d9:9f:7d:d7:c4:68:34:cb:82: bc:8c:42:c7:c2:9e:6f:65:e3:f4:e1:ac:8f:2c:e6:36:c3:98: 30:70:62:40:3e:6c:b3:ba:0c:7d:16:e5:46:29:2f:e4:ea:5a: 94:21:41:ae:b2:65:ed:18:83:f5:a2:1b:86:5b:7f:ef:80:4c: 9e:48:4b:2b:91:62:bc:d9:a6:9d:7d:6e:43:0d:38:ed:34:46: cb:d4:dc:ca:ff:4d:0c:ab:a8:b8:c8:0e:0e:c4:51:7f:05:27: 9c:8c:0a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZjutZQG4u2bvEAL9V67jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWYyNGViZWYxMThiOTE2NWU1MmY2MWNhOTkzYmVlNDMw NjRlYzIwHhcNMjUxMjA3MDYwMTAzWhcNMjUxMjA4MDYwMTAzWjAzMTEwLwYDVQQD Eyg2MWVmMDYxYzY1NWZkZjUxYzAzNjMwZjY5NWZmNzM0NmExNzlmYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/hMTYw3el++YWCWvZzhxM++kPed 7I9WHxqx2ro2mFWdJGLdu2ax+ueQVYyRqgLW/1euQA6kBgQbCfGXv/DnQPe8X5L7 Py0pjKG4JIO40HBWmbAATPMQnFa0oc14nhA3jh9EIVM0VM5xkJPDqg1w91EnI0Ah uJpyDeAyhu8pkdaZYva77yPdQNO7Z/muW1d/s7o1qkETdxsxATy4IzL+ktj696SW sgSEd3P45VusjOThuQFhclUedunECaPiAWCz/wJXThgUuRWYIke7X1gnk9YnsIOL ZxBcFreQvtj2Ya/TcyawzydZyeGnKuycr+NNV9BsSrafAx6DwVlBY5+O6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHvBhxlX99RwDYw9pX/c0ahefxcMB8GA1UdIwQY MBaAFPyfJOvvEYuRZeUvYcqZO+5DBk7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDct MTUzYmY3ZTdlYzJhLzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDctMTUzYmY3ZTdlYzJh LzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVK5uZFJ Ue9OBEAAge+Sp0LMhGhqBe8Yfpz8f4L+9as6ucLu7Fp1iL5tcVRJfi81D1NSVsiO HPhQTABgihHXyBqoUaQnlmCS+QjlbZuIxEyyWzwIHeIFurjtaf6zMttdedeniN2d T3UnAEvsm/LJ+ObK2xdBr9xTJ8pjt0aCdXTskgYHXW0q/4jgRJt0x2TvQ44O5nY4 ghmo2Z9918RoNMuCvIxCx8Keb2Xj9OGsjyzmNsOYMHBiQD5ss7oMfRblRikv5Opa lCFBrrJl7RiD9aIbhlt/74BMnkhLK5FivNmmnX1uQw047TRGy9Tcyv9NDKuouMgO DsRRfwUnnIwKDA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:50 2025 by rpki-client