This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft File: j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json) Hash identifier: 3lfb2Ep5p07CvLBJRrv07QGukINzNrf06nr0mgnpq6A= Subject key identifier: 36:17:A8:B6:5E:64:38:CD:82:2A:29:61:97:DF:66:54:68:5C:A5:7A Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019AF1D1BEC07C2384F3802C1547ACD1BC59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft Manifest number: 29 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: 6EQIFIIz4eVB1v8p21Y5Q01aDfY.roa (hash: /sMnLvdiABHbPxVn8864gLT5hAyS0Ct/uJsVDDKF+8Q=) 2: AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa (hash: OZ6QBv+zxDqSDgPNFre5KHlZb7+L1tiUGuy777egw9o=) 3: BVQLcuQ2z_bNWh8-bphHvzehfD8.roa (hash: 7yeAKow0/HvGyL5Krz9LW+Di5af53xxZoND+qyE9qtM=) 4: cHpfX0_t1J4Sr6t7l47Me39APq8.roa (hash: 3q7Dq5MsTjXzsun+uYmj2RIabdMqLzzUDrI1AmlzX50=) 5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: kDF30aPCi3erjOhV0Jz/mXc8DvrMRnSU9ouz72K1YLo=) 6: sQoQACAf02a3Uyz7FUKHyPEeAfA.roa (hash: XhP1EIMCcccz67L2gI2c+RwNj3wfvxnqDJpYQj6utD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:be:c0:7c:23:84:f3:80:2c:15:47:ac:d1:bc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=3617a8b65e6438cd822a296197df6654685ca57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:5d:2c:6a:35:3c:64:4c:a2:36:3a:56:0d: 7a:3e:46:59:45:87:b4:a4:c6:3e:61:45:2a:76:a5: 9d:fe:73:63:c2:c8:59:1a:35:0b:1b:0c:bd:8a:96: c6:5f:b7:2f:fe:82:66:ba:7f:49:c0:d5:c4:06:de: 15:ce:d8:f4:fd:c2:3d:ee:14:b4:d2:ae:99:97:31: 1e:4c:00:ae:28:96:35:74:00:8b:d2:ef:b2:cc:b0: eb:a6:75:d1:a5:ce:6e:e3:62:6b:ed:a3:bf:78:b8: b3:ff:1b:9b:7c:b4:c0:80:0a:9d:38:73:85:e0:91: d7:36:af:30:49:0f:75:5b:08:81:e4:52:89:51:dc: 61:db:2e:ad:a7:fb:df:6e:fc:e0:09:b4:6a:34:1f: 95:bb:35:c3:f7:91:68:f4:41:3f:ee:1b:c2:7e:4c: ee:9f:ee:dc:a4:6c:35:91:73:4a:c9:e1:fd:30:92: aa:5e:e6:ea:a9:25:7a:4e:67:dd:50:00:e4:d3:fe: d7:84:10:6b:9a:0b:c0:b5:0d:14:25:60:60:92:db: f5:8d:46:62:76:0a:8f:2f:c9:b8:69:dc:58:9b:e7: 8b:34:cc:c5:ff:27:44:d9:39:7b:f5:23:33:40:fc: 6d:a4:1a:c9:ac:25:6c:e7:48:70:eb:46:71:22:e1: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:17:A8:B6:5E:64:38:CD:82:2A:29:61:97:DF:66:54:68:5C:A5:7A X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:88:20:69:24:f3:99:4e:b7:b0:0b:02:72:f1:cf:20:95:43: 80:64:2b:37:44:8e:96:65:02:0f:cb:aa:a2:77:50:7c:66:54: de:83:70:a5:d4:fd:59:de:7d:d2:16:7f:cb:04:54:83:fb:2c: 90:a7:7e:e0:85:16:a4:f7:95:b5:9c:ae:d3:90:16:fc:23:a9: ce:51:9c:b3:bd:82:0b:20:b0:8c:55:d4:8a:8b:e2:e2:c4:3b: bf:c3:51:f3:40:b7:a2:bd:2c:c4:46:57:e7:69:8f:59:9a:96: 72:b3:c8:4b:97:d1:62:bc:04:f4:f3:6c:d5:f2:55:85:3c:b8: 3c:50:92:fd:dd:c2:85:9b:c4:60:de:df:6a:39:78:20:a7:37: d1:03:66:8e:9b:b8:47:4a:37:03:3e:a1:d6:63:b4:dc:e1:16: 62:19:8a:35:18:d7:12:ee:b5:84:d9:d8:75:ef:4f:fd:1a:ac: f4:26:62:56:c8:c7:a4:5e:1a:a8:6f:2d:8f:a4:9a:07:59:6a: e0:c7:aa:0c:af:82:eb:93:40:ca:9c:11:d8:a4:79:04:70:2a: 01:21:39:d0:0e:ff:f9:d3:b0:ac:c9:ec:55:69:2b:83:b4:98: 29:4f:04:76:4d:2c:54:8b:a3:bd:72:74:1d:84:30:7b:48:05: 02:06:c8:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b7AfCOE84AsFUes0bxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EygzNjE3YThiNjVlNjQzOGNkODIyYTI5NjE5N2RmNjY1NDY4NWNhNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w5dLGo1PGRMojY6Vg16PkZZRYe0 pMY+YUUqdqWd/nNjwshZGjULGwy9ipbGX7cv/oJmun9JwNXEBt4Vztj0/cI97hS0 0q6ZlzEeTACuKJY1dACL0u+yzLDrpnXRpc5u42Jr7aO/eLiz/xubfLTAgAqdOHOF 4JHXNq8wSQ91WwiB5FKJUdxh2y6tp/vfbvzgCbRqNB+VuzXD95Fo9EE/7hvCfkzu n+7cpGw1kXNKyeH9MJKqXubqqSV6TmfdUADk0/7XhBBrmgvAtQ0UJWBgktv1jUZi dgqPL8m4adxYm+eLNMzF/ydE2Tl79SMzQPxtpBrJrCVs50hw60ZxIuFZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYXqLZeZDjNgiopYZffZlRoXKV6MB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIggaSTz mU63sAsCcvHPIJVDgGQrN0SOlmUCD8uqondQfGZU3oNwpdT9Wd590hZ/ywRUg/ss kKd+4IUWpPeVtZyu05AW/COpzlGcs72CCyCwjFXUiovi4sQ7v8NR80C3or0sxEZX 52mPWZqWcrPIS5fRYrwE9PNs1fJVhTy4PFCS/d3ChZvEYN7fajl4IKc30QNmjpu4 R0o3Az6h1mO03OEWYhmKNRjXEu61hNnYde9P/Rqs9CZiVsjHpF4aqG8tj6SaB1lq 4MeqDK+C65NAypwR2KR5BHAqASE50A7/+dOwrMnsVWkrg7SYKU8Edk0sVIujvXJ0 HYQwe0gFAgbIiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:10 2025 by rpki-client