This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json) Hash identifier: 8DNiQOJ9Lpdb6xaE1fASlferInvbzn2y08gTmnPV5/U= Subject key identifier: 3C:20:24:90:12:2C:38:94:FF:8E:09:34:64:0B:08:99:32:BA:BE:67 Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Certificate serial: 019AF0BF9DBA678A9C4E4AB5043D4079FC9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft Manifest number: 10B3 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 5xkSFIUM2-7hXEmjURvZ3pW_4PI.roa (hash: hW0i5BsgQ5UrD2S0pv3z9rff3/ny0hoS1QSzxKqmgvw=) 2: BffCIhRumIf23j4KUVM6Jsy3kfA.roa (hash: PqvhKnUp58OF2UCOQS1QMhDarSDGbuKqzo/oQf0jV9g=) 3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: SLmcEFDyLUrbLOyCrK8qkP+Q8itdlYxCmq8FEnUKJS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9d:ba:67:8a:9c:4e:4a:b5:04:3d:40:79:fc:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=3c202490122c3894ff8e0934640b089932babe67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:68:28:1c:8e:67:2d:3b:60:ad:a1:1e:3e: 09:63:98:ca:79:26:85:8a:01:68:d1:fb:e2:48:0a: a4:de:d7:b9:75:42:aa:0e:cf:9d:7d:be:7d:03:25: 7d:eb:f9:44:b2:4c:08:f5:73:04:5f:bb:2f:55:50: 1b:56:08:64:31:71:1b:3e:38:e2:5f:12:5e:9f:55: 42:c3:ba:f2:66:82:17:82:b9:8d:58:fa:34:ff:d5: c1:e6:13:fa:5c:a1:4d:05:3c:12:49:dc:e0:09:32: 69:87:68:8a:aa:b2:4d:e6:91:42:6f:73:b6:27:6d: 29:95:9f:06:ac:28:cb:9b:67:f1:26:c2:e2:97:8e: 56:92:97:ab:83:22:80:11:86:d9:33:71:6b:6f:2a: c2:c8:9b:19:f1:dc:28:01:89:c4:76:64:ca:12:72: 23:f4:98:47:17:b7:db:ba:ff:65:79:df:76:56:56: 20:e3:c9:51:7f:e8:33:13:03:fe:3e:09:48:47:7e: be:cd:4c:c8:2e:7c:2b:2f:c4:bf:aa:2b:44:6d:f1: 61:30:a5:48:df:14:24:47:f9:e6:89:69:3b:b4:93: 27:db:ad:e6:32:3b:a0:bb:09:5f:58:3f:87:10:8f: 21:ad:06:18:c8:1d:02:0f:b9:dc:20:81:b0:78:df: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:24:90:12:2C:38:94:FF:8E:09:34:64:0B:08:99:32:BA:BE:67 X509v3 Authority Key Identifier: keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b2:37:d1:66:bb:22:ce:f6:cc:2e:55:c5:c1:6c:28:71:8c: 71:d3:e9:be:35:72:23:e0:05:c7:ba:47:f8:9c:9c:ec:bb:8a: d1:c8:75:09:6d:d8:4d:a0:43:91:37:77:bb:74:86:77:f5:ac: 4c:0a:a2:91:e3:be:51:c1:f0:30:8f:38:f6:7f:52:cc:9a:4e: 45:6e:30:d4:50:0d:22:38:db:55:7c:69:48:54:b1:2f:c3:d8: 69:12:33:7f:4b:3a:79:80:56:67:75:75:66:bd:d2:20:f4:92: e9:f8:12:17:21:ff:7d:d5:75:89:42:80:03:71:f3:b8:a3:dc: c9:aa:aa:3d:bb:2a:2c:94:5e:57:99:46:4a:cc:87:ba:8a:c1: 65:f5:0d:06:03:6d:7e:29:be:02:09:5d:c9:36:0d:32:94:74: 5b:70:90:13:40:b8:34:ca:be:ac:83:c6:65:fb:f7:a4:b2:a7: ae:e8:23:36:f3:49:9a:57:80:23:34:d4:b5:dc:52:98:68:e4: 94:f7:76:98:50:2b:33:84:c1:50:40:bf:62:12:03:29:cc:c9: c9:7f:e3:99:6b:37:47:43:7c:69:2d:32:82:6b:94:c0:ab:f0: 35:66:25:c0:ae:8b:ba:cc:ff:e8:77:36:6c:2d:dc:eb:7e:89: f5:e8:7c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv526Z4qcTkq1BD1AefycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjJmODFiOGM0N2MyYjU4OGY0NTFkNDAzN2M2ODM3ODcw YjM5N2YwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EygzYzIwMjQ5MDEyMmMzODk0ZmY4ZTA5MzQ2NDBiMDg5OTMyYmFiZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ5oKByOZy07YK2hHj4JY5jKeSaF igFo0fviSAqk3te5dUKqDs+dfb59AyV96/lEskwI9XMEX7svVVAbVghkMXEbPjji XxJen1VCw7ryZoIXgrmNWPo0/9XB5hP6XKFNBTwSSdzgCTJph2iKqrJN5pFCb3O2 J20plZ8GrCjLm2fxJsLil45WkpergyKAEYbZM3FrbyrCyJsZ8dwoAYnEdmTKEnIj 9JhHF7fbuv9led92VlYg48lRf+gzEwP+PglIR36+zUzILnwrL8S/qitEbfFhMKVI 3xQkR/nmiWk7tJMn263mMjuguwlfWD+HEI8hrQYYyB0CD7ncIIGweN8RxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwgJJASLDiU/44JNGQLCJkyur5nMB8GA1UdIwQY MBaAFI6y+BuMR8K1iPRR1AN8aDeHCzl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgt NDgzZmM5MDcwOGQ1LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgtNDgzZmM5MDcwOGQ1 LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLI30Wa7 Is72zC5VxcFsKHGMcdPpvjVyI+AFx7pH+Jyc7LuK0ch1CW3YTaBDkTd3u3SGd/Ws TAqikeO+UcHwMI849n9SzJpORW4w1FANIjjbVXxpSFSxL8PYaRIzf0s6eYBWZ3V1 Zr3SIPSS6fgSFyH/fdV1iUKAA3HzuKPcyaqqPbsqLJReV5lGSsyHuorBZfUNBgNt fim+AgldyTYNMpR0W3CQE0C4NMq+rIPGZfv3pLKnrugjNvNJmleAIzTUtdxSmGjk lPd2mFArM4TBUEC/YhIDKczJyX/jmWs3R0N8aS0ygmuUwKvwNWYlwK6Lusz/6Hc2 bC3c636J9eh8Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:11 2025 by rpki-client