This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json) Hash identifier: v80Tk6TSljTuxZy05RWspLeHW30LU3w4vOqF9y/967A= Subject key identifier: 7B:00:C8:78:E4:CB:60:41:0E:E9:B3:E1:73:67:3C:33:2F:3C:99:CB Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb Certificate serial: 019AF50AE2F85C197182D96A7644415482A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft Manifest number: 05A5 Signing time: Sat 06 Dec 2025 19:02:02 +0000 Manifest this update: Sat 06 Dec 2025 19:02:02 +0000 Manifest next update: Sun 07 Dec 2025 19:02:02 +0000 Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=) 2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: s5BPlihvS+H5w1vUqS0MtaJioBgUFUw3E+ZiTVKHMVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e2:f8:5c:19:71:82:d9:6a:76:44:41:54:82:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb Validity Not Before: Dec 6 19:02:02 2025 GMT Not After : Dec 7 19:02:02 2025 GMT Subject: CN=7b00c878e4cb60410ee9b3e173673c332f3c99cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:2f:b5:9b:a5:30:4d:31:7f:6d:c1:88:c7: b7:cc:d0:5e:f1:4b:47:ce:92:ce:4d:b0:80:3b:de: 54:b0:26:bd:94:3c:41:c5:95:08:41:ee:a7:b0:e0: 82:e2:52:f2:60:af:38:0c:2c:e8:f6:01:5e:71:b8: 84:58:43:18:a6:f9:86:f3:b5:34:c4:d1:40:8d:53: 4c:71:6a:8c:5e:6c:79:6e:6d:71:00:5a:c4:46:e3: 29:8e:c9:86:3e:8f:97:d5:11:75:ae:78:32:1d:4a: da:fa:b5:43:ec:e7:2a:20:df:9a:84:85:1f:52:51: f8:71:5e:b0:3c:f2:58:38:7e:4c:e4:d8:57:3c:bf: d7:15:e2:5f:21:9b:e3:1f:e6:e0:85:e6:d4:05:14: 6a:21:af:ef:51:49:79:1a:d4:84:04:b8:09:50:e5: a1:f8:e3:10:9b:46:ad:7c:26:3b:f2:a0:35:14:43: d7:57:18:a0:17:fe:aa:8e:14:8e:95:df:e6:d9:7a: 8c:6c:43:ed:f4:c2:8f:b2:20:02:3a:0f:00:90:b3: fb:04:09:b5:37:e5:03:fa:8d:ec:53:36:22:ef:64: 58:8f:e2:90:a3:f8:79:4a:e2:2a:5c:b6:0f:48:4a: d4:ae:8d:54:2a:de:68:eb:3e:26:49:09:4b:eb:69: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:00:C8:78:E4:CB:60:41:0E:E9:B3:E1:73:67:3C:33:2F:3C:99:CB X509v3 Authority Key Identifier: keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9b:d7:75:f6:ab:50:cd:7c:55:10:b0:30:a0:f6:90:5c:99: ef:b4:83:84:89:f4:c9:e3:96:88:b5:30:cd:20:b8:43:89:82: 09:ea:ea:79:ee:ac:d7:08:52:04:3c:fb:09:31:ee:50:37:b6: 78:6b:a4:af:2c:8e:dd:2d:d0:37:21:ce:26:5c:3f:8b:89:82: 0b:d2:3d:c2:81:67:1f:26:d8:2d:6a:bc:bd:60:47:e0:05:f5: 17:fe:b3:1f:58:63:1a:c0:ff:36:c3:49:1d:df:80:e5:69:db: 6c:d2:ee:ae:a8:70:8a:0f:27:55:40:5a:98:cf:77:b4:24:46: b7:b4:62:e0:82:21:c2:9d:90:5a:ca:a8:19:c9:63:10:39:06: 27:86:3f:b8:2b:ca:03:28:c3:e3:76:f1:a0:a9:4d:47:fe:3e: ec:09:3f:29:00:55:e4:c6:c2:ee:ac:47:e3:93:8c:4c:4b:a0: c6:a2:68:b4:4c:7a:2a:37:e3:0e:79:ab:b7:23:e3:bd:9f:12: 37:22:97:86:51:95:f9:9f:ea:83:d7:ee:0e:9b:be:c7:31:58: 30:a5:8f:e4:0f:3c:17:20:49:61:c8:3e:8e:fc:c0:74:8a:65: cd:b1:fb:76:b3:8b:62:06:1b:ec:04:68:a1:94:54:49:d3:ff: ad:c0:60:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuL4XBlxgtlqdkRBVIKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3 Y2M5YmIwHhcNMjUxMjA2MTkwMjAyWhcNMjUxMjA3MTkwMjAyWjAzMTEwLwYDVQQD Eyg3YjAwYzg3OGU0Y2I2MDQxMGVlOWIzZTE3MzY3M2MzMzJmM2M5OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CIvtZulME0xf23BiMe3zNBe8UtH zpLOTbCAO95UsCa9lDxBxZUIQe6nsOCC4lLyYK84DCzo9gFecbiEWEMYpvmG87U0 xNFAjVNMcWqMXmx5bm1xAFrERuMpjsmGPo+X1RF1rngyHUra+rVD7OcqIN+ahIUf UlH4cV6wPPJYOH5M5NhXPL/XFeJfIZvjH+bghebUBRRqIa/vUUl5GtSEBLgJUOWh +OMQm0atfCY78qA1FEPXVxigF/6qjhSOld/m2XqMbEPt9MKPsiACOg8AkLP7BAm1 N+UD+o3sUzYi72RYj+KQo/h5SuIqXLYPSErUro1UKt5o6z4mSQlL62mv7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsAyHjky2BBDumz4XNnPDMvPJnLMB8GA1UdIwQY MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZvXdfar UM18VRCwMKD2kFyZ77SDhIn0yeOWiLUwzSC4Q4mCCerqee6s1whSBDz7CTHuUDe2 eGukryyO3S3QNyHOJlw/i4mCC9I9woFnHybYLWq8vWBH4AX1F/6zH1hjGsD/NsNJ Hd+A5WnbbNLurqhwig8nVUBamM93tCRGt7Ri4IIhwp2QWsqoGcljEDkGJ4Y/uCvK AyjD43bxoKlNR/4+7Ak/KQBV5MbC7qxH45OMTEugxqJotEx6KjfjDnmrtyPjvZ8S NyKXhlGV+Z/qg9fuDpu+xzFYMKWP5A88FyBJYcg+jvzAdIplzbH7drOLYgYb7ARo oZRUSdP/rcBg1g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:43 2025 by rpki-client