This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json) Hash identifier: /JcXiW12RRz6YZoy8GD9f5bdR+jB6D/NccfprY0aIFs= Subject key identifier: 3A:CE:4A:0A:DA:F2:28:B8:8A:5B:0C:D6:3E:05:FD:81:CA:E2:DF:A6 Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45 Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45 Certificate serial: 019AF12D50379F741F464EDBEF28525B769B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft Manifest number: 13FB Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=) 2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: aMXhewmsUB6JfnnDLFwoFn17AeV0+p2WreCjaSHpIdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:50:37:9f:74:1f:46:4e:db:ef:28:52:5b:76:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=3ace4a0adaf228b88a5b0cd63e05fd81cae2dfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:96:b5:09:8e:dc:67:52:73:93:83:53:9d: d0:fb:03:e9:71:68:a0:d1:ec:fd:71:e9:8b:bf:47: 17:1b:65:74:e5:60:52:f3:c6:64:88:63:73:1e:f8: b6:3a:17:b7:b9:b6:0f:f6:dc:6e:7a:d2:8a:99:b1: 16:81:95:dd:8b:80:38:89:3d:84:eb:bb:ff:77:b2: 29:2f:dc:aa:38:33:d0:87:c4:37:50:cc:c5:dc:e8: 0b:82:2e:8e:83:0c:1c:47:80:9d:07:1c:91:96:8b: 46:87:24:f3:e3:a3:df:10:1a:d5:87:ac:41:70:ba: f8:57:60:e4:03:4a:62:8f:6d:5f:d4:16:85:a3:8b: 47:5d:8f:89:53:ad:dd:37:2a:f5:a1:fc:89:d2:8f: c7:b1:1b:1b:cb:b0:8e:39:20:3c:19:c2:1e:68:bf: 27:45:f4:14:29:b1:f9:b5:c6:e4:f0:3c:7f:72:37: 4f:f9:58:86:4e:56:41:ba:55:98:c0:ff:36:6b:94: 58:1f:46:4e:95:ed:e0:41:8b:d6:66:4a:2e:f1:85: 9b:9f:d8:f7:7b:b7:62:b8:2f:00:7e:cf:ad:dc:67: 75:59:fa:be:29:0c:6d:ac:d6:90:4c:e0:8d:f5:2d: 0a:71:40:d6:3c:d3:13:7b:80:60:ca:d5:45:a2:94: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CE:4A:0A:DA:F2:28:B8:8A:5B:0C:D6:3E:05:FD:81:CA:E2:DF:A6 X509v3 Authority Key Identifier: keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d4:da:5b:e4:2d:8b:6c:c1:42:70:43:8a:14:5c:cb:07:77: 7e:75:a3:67:0f:13:f0:1a:29:91:f5:1d:a7:a1:1e:54:1c:ac: f2:ec:0a:6a:d7:9b:a4:d6:a7:b2:b5:d0:17:3b:68:80:eb:9c: 10:94:04:6e:ef:3b:93:8d:ad:d8:02:7b:99:d6:df:f8:64:5f: aa:c2:e3:36:ac:da:7e:0f:6d:c2:bb:a9:72:2e:8a:7b:48:6e: 73:95:75:6b:2a:b8:9a:e7:43:3e:56:41:36:72:62:dd:a9:e9: 3b:2d:7c:54:b9:63:11:8c:19:b7:21:e2:0e:b1:17:be:69:02: 18:c1:fa:57:20:65:50:34:08:c7:6c:53:a9:35:bd:14:e4:6a: 82:2b:95:78:6e:8c:92:8f:2c:47:e4:0f:23:3b:38:da:d8:82: b7:72:96:ba:b2:ff:4d:98:1e:58:7c:d7:e1:87:ae:06:5e:cb: f9:be:0c:0c:86:cd:72:56:4d:97:8c:31:ad:07:42:37:fa:41: 1a:bb:01:9a:a6:94:c2:97:c0:f5:8e:62:a8:4f:c1:3f:cd:c9: 2d:97:66:46:54:1b:46:f1:31:d2:c3:8f:18:46:1d:61:e4:04: a9:28:c3:7f:72:33:1f:46:6f:94:f7:59:9b:59:c8:58:d5:9f: ca:2e:fc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVA3n3QfRk7b7yhSW3abMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDdlY2Q3NjY2Y2NlZjkxZTgyZjdlY2JjZTBiYTI4NTMz NmZiNDUwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EygzYWNlNGEwYWRhZjIyOGI4OGE1YjBjZDYzZTA1ZmQ4MWNhZTJkZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDSWtQmO3GdSc5ODU53Q+wPpcWig 0ez9cemLv0cXG2V05WBS88ZkiGNzHvi2Ohe3ubYP9txuetKKmbEWgZXdi4A4iT2E 67v/d7IpL9yqODPQh8Q3UMzF3OgLgi6OgwwcR4CdBxyRlotGhyTz46PfEBrVh6xB cLr4V2DkA0pij21f1BaFo4tHXY+JU63dNyr1ofyJ0o/HsRsby7COOSA8GcIeaL8n RfQUKbH5tcbk8Dx/cjdP+ViGTlZBulWYwP82a5RYH0ZOle3gQYvWZkou8YWbn9j3 e7diuC8Afs+t3Gd1Wfq+KQxtrNaQTOCN9S0KcUDWPNMTe4BgytVFopTMpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrOSgra8ii4ilsM1j4F/YHK4t+mMB8GA1UdIwQY MBaAFIwH7NdmbM75HoL37LzguihTNvtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2Ut NWQyN2M3NWFhZTZmLzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2UtNWQyN2M3NWFhZTZm LzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNTaW+Qt i2zBQnBDihRcywd3fnWjZw8T8BopkfUdp6EeVBys8uwKatebpNansrXQFztogOuc EJQEbu87k42t2AJ7mdbf+GRfqsLjNqzafg9twrupci6Ke0huc5V1ayq4mudDPlZB NnJi3anpOy18VLljEYwZtyHiDrEXvmkCGMH6VyBlUDQIx2xTqTW9FORqgiuVeG6M ko8sR+QPIzs42tiCt3KWurL/TZgeWHzX4YeuBl7L+b4MDIbNclZNl4wxrQdCN/pB GrsBmqaUwpfA9Y5iqE/BP83JLZdmRlQbRvEx0sOPGEYdYeQEqSjDf3IzH0ZvlPdZ m1nIWNWfyi78Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:45 2025 by rpki-client