This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json) Hash identifier: RM/gk+iZs/cX7eOF+azU8UKoPktidwvO0cDlba/LLAQ= Subject key identifier: E3:00:7F:FE:D0:85:63:95:01:5B:17:26:E5:5D:12:EC:B7:44:E3:D5 Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03 Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803 Certificate serial: 019AF72F0567F40A1C58CA1679E8F218C453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft Manifest number: 0B9F Signing time: Sun 07 Dec 2025 05:00:45 +0000 Manifest this update: Sun 07 Dec 2025 05:00:45 +0000 Manifest next update: Mon 08 Dec 2025 05:00:45 +0000 Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=) 2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: 8JyxHv6V5qWnCqnSPNJ0M2B46yXTpFhi9KYaFbDsuvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:05:67:f4:0a:1c:58:ca:16:79:e8:f2:18:c4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803 Validity Not Before: Dec 7 05:00:45 2025 GMT Not After : Dec 8 05:00:45 2025 GMT Subject: CN=e3007ffed0856395015b1726e55d12ecb744e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:06:db:f2:0b:10:56:df:f7:c6:ac:f3:08: 24:47:db:18:81:63:5b:02:77:07:c0:8b:fb:3c:2d: d1:78:ef:ec:6e:b7:05:ae:ec:d6:95:91:ce:0a:3d: e9:c7:05:01:a2:8f:49:c1:d4:4e:07:32:33:2e:98: de:cb:28:50:35:9d:ae:2a:01:d5:5a:16:32:73:9a: e2:c4:19:d4:3a:e6:28:39:44:05:57:46:fd:c5:e0: b8:20:64:44:bd:10:ac:88:ad:ea:87:4a:ba:0e:cf: da:80:49:12:de:ba:be:ff:44:48:e0:66:58:62:9f: 95:04:bb:de:f0:06:14:7f:98:36:bd:7e:27:b2:47: ac:a1:af:7d:b7:8b:50:35:79:0d:e4:aa:82:4c:e1: a4:d3:12:3b:1c:29:c2:3a:af:25:57:29:cb:59:4d: 2c:95:96:2d:6b:c4:c6:32:30:8e:03:d1:eb:76:ff: 5f:04:45:70:bd:f0:30:d7:fb:96:51:f5:95:91:7e: 6b:54:76:b8:57:d6:70:d5:be:13:6b:c4:4c:2e:78: 5d:a8:87:09:7f:f4:a0:65:86:bf:33:e7:4c:7f:fb: 15:3c:fd:65:eb:de:27:6a:b0:da:37:94:96:36:e7: 02:cd:22:a2:00:66:18:a7:00:42:46:c8:4a:d0:71: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:00:7F:FE:D0:85:63:95:01:5B:17:26:E5:5D:12:EC:B7:44:E3:D5 X509v3 Authority Key Identifier: keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:16:13:55:4b:4c:50:8b:b5:61:0e:32:59:ea:8c:94:18:bb: 80:e3:76:1a:79:b0:ca:8a:65:0d:95:dd:8f:7c:20:ba:d9:e7: c8:2e:23:1c:20:47:45:39:46:3b:dd:fa:51:6a:1d:52:c1:d1: 08:1a:35:c9:91:c3:b1:e1:7d:71:47:a1:bb:cf:9a:7e:2b:ac: 2f:b3:83:a2:72:4c:cb:c4:2d:d1:09:cc:59:ae:c5:2a:f5:e5: a1:8b:2a:29:e5:b5:fc:06:b5:ab:b7:f4:09:30:97:64:17:ac: bc:93:d1:ff:7b:83:86:23:a7:4e:17:c1:f8:96:f2:b9:a0:c2: 1f:92:61:20:f7:e2:67:9a:42:51:7b:f1:76:63:ba:ad:25:20: 7d:6d:de:0f:7d:3b:26:8f:61:1c:4f:af:6b:10:9b:55:89:0b: 57:6c:49:78:53:7e:8a:65:5c:fc:2c:a6:71:0d:8c:6b:cc:06: 3b:f3:32:d2:f5:c5:09:98:9f:93:a1:e3:2d:50:5d:c1:da:ca: 44:0f:90:dd:a5:d6:8d:58:63:63:0a:73:a1:2f:ce:bd:05:d8: 43:c7:cf:f3:20:19:cb:1a:dc:a2:49:50:c3:60:e9:7a:28:75: 8f:ae:88:37:11:a7:9f:6a:8b:ef:a7:82:6c:c8:15:f3:fd:8e: 6c:20:9d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LwVn9AocWMoWeejyGMRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTg3ZmExZjM2M2VkOGQ4MTc4MjgyYzY3NDgwODFkY2Mz NDI4MDMwHhcNMjUxMjA3MDUwMDQ1WhcNMjUxMjA4MDUwMDQ1WjAzMTEwLwYDVQQD EyhlMzAwN2ZmZWQwODU2Mzk1MDE1YjE3MjZlNTVkMTJlY2I3NDRlM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNUG2/ILEFbf98as8wgkR9sYgWNb AncHwIv7PC3ReO/sbrcFruzWlZHOCj3pxwUBoo9JwdROBzIzLpjeyyhQNZ2uKgHV WhYyc5rixBnUOuYoOUQFV0b9xeC4IGREvRCsiK3qh0q6Ds/agEkS3rq+/0RI4GZY Yp+VBLve8AYUf5g2vX4nskesoa99t4tQNXkN5KqCTOGk0xI7HCnCOq8lVynLWU0s lZYta8TGMjCOA9Hrdv9fBEVwvfAw1/uWUfWVkX5rVHa4V9Zw1b4Ta8RMLnhdqIcJ f/SgZYa/M+dMf/sVPP1l694narDaN5SWNucCzSKiAGYYpwBCRshK0HFLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMAf/7QhWOVAVsXJuVdEuy3ROPVMB8GA1UdIwQY MBaAFKyYf6HzY+2NgXgoLGdICB3MNCgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3Nzct OWNlNzk4ZDAxZjhkLzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3NzctOWNlNzk4ZDAxZjhk LzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRYTVUtM UIu1YQ4yWeqMlBi7gON2GnmwyoplDZXdj3wgutnnyC4jHCBHRTlGO936UWodUsHR CBo1yZHDseF9cUehu8+afiusL7ODonJMy8Qt0QnMWa7FKvXloYsqKeW1/Aa1q7f0 CTCXZBesvJPR/3uDhiOnThfB+JbyuaDCH5JhIPfiZ5pCUXvxdmO6rSUgfW3eD307 Jo9hHE+vaxCbVYkLV2xJeFN+imVc/CymcQ2Ma8wGO/My0vXFCZifk6HjLVBdwdrK RA+Q3aXWjVhjYwpzoS/OvQXYQ8fP8yAZyxrcoklQw2Dpeih1j66INxGnn2qL76eC bMgV8/2ObCCdVA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:22:47 2025 by rpki-client