This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json) Hash identifier: zRhXPI7lWQT1cC3cqmq2KS1M9Tahn22WWf92IBWNPto= Subject key identifier: 59:D0:BE:0D:3F:38:21:EB:0D:73:D0:EB:47:0B:50:1C:91:D7:8A:F5 Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Certificate serial: 019AF1D23821EC4D8600E1CCE622895BCBAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=) 2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: fORjwAjf/0bKdnZC/vqa/FS8TtrmTJJNCA6uYZXLdUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:38:21:ec:4d:86:00:e1:cc:e6:22:89:5b:cb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=59d0be0d3f3821eb0d73d0eb470b501c91d78af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:3a:32:32:81:bd:2f:ba:d1:9e:61:74:70: f9:6e:b4:85:7d:05:ed:5c:6b:4b:ed:6a:85:66:e1: 7c:44:48:4c:79:67:cd:1c:17:e6:44:8b:f9:f8:ab: a3:ba:b4:97:cb:b7:f7:cb:5f:13:15:93:67:f3:b4: 3f:3c:21:fb:74:12:65:3d:5b:f4:39:bf:93:0e:5f: a3:a4:06:b4:ad:05:a1:8f:e1:b6:57:94:bd:19:a9: cc:ca:5a:5a:2b:20:29:98:23:27:b0:b9:78:6d:92: 6e:40:17:06:9a:a2:30:6d:74:83:32:a0:ec:1f:98: 2c:d7:d7:6f:ef:6b:22:c5:54:92:52:6d:53:4c:9c: 0e:6b:77:5f:d3:c7:99:23:f2:4d:ac:88:0b:62:e7: fc:ce:ff:9b:d9:47:b4:95:bb:67:3a:2a:73:a1:a1: fa:51:59:90:19:da:d9:1f:91:66:8a:88:a2:3c:a9: 60:f8:0c:38:1c:f8:d5:c4:e5:99:c2:ce:25:2f:58: 59:62:a2:b0:07:96:fc:68:09:24:2f:64:80:21:25: 87:3e:78:ad:d3:da:be:ac:72:ca:31:ef:d7:ef:ba: 55:93:2e:2a:72:c3:75:d7:bc:70:ba:d9:4a:42:d0: a5:4e:bb:54:c7:7b:24:51:47:97:b5:66:0f:b2:0a: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:BE:0D:3F:38:21:EB:0D:73:D0:EB:47:0B:50:1C:91:D7:8A:F5 X509v3 Authority Key Identifier: keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3d:50:e3:8b:3a:a6:05:31:55:f8:d2:01:fc:2d:79:2f:24: ca:79:9c:75:42:97:5c:f1:53:80:fb:05:0c:41:b4:aa:1e:88: 1f:c9:4d:eb:a0:89:e3:19:39:54:9b:4f:c2:b4:1a:ff:10:5b: 33:e8:3a:27:27:a5:60:91:09:0a:b1:71:81:b1:ec:a8:4b:c4: bd:b9:8b:66:f0:5c:91:92:83:ea:c2:d7:20:da:7f:e4:2f:dc: 8c:ae:33:f6:fe:4e:3f:11:f6:bc:f2:b3:cb:05:a6:85:21:f9: 1c:b0:e1:e6:6a:47:ed:dd:ba:b9:4b:4d:6c:e1:25:e2:b4:9e: 78:39:48:d7:9e:86:42:be:40:e7:9e:fe:12:57:cc:86:cb:5a: a5:26:42:0a:aa:c8:43:93:50:3b:2f:f9:43:cd:09:d9:e1:9b: e0:84:eb:14:d5:13:c7:03:8e:05:2f:38:56:e2:ee:0e:8a:4d: 21:c2:3a:c8:f1:f9:ad:d1:2d:03:00:71:78:ac:f5:b0:fa:d1: 18:31:3a:9b:4e:50:5a:6f:03:03:a4:a6:a6:13:19:84:92:10: ca:b0:3b:9f:4a:d6:a2:f0:bd:f9:4e:6e:31:09:fc:78:a8:c4: 2c:c8:17:ce:03:0a:6d:f2:36:35:75:40:74:ae:06:99:5c:c9: 8b:46:c8:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jgh7E2GAOHM5iKJW8uqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi YzdiYTMwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg1OWQwYmUwZDNmMzgyMWViMGQ3M2QwZWI0NzBiNTAxYzkxZDc4YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRY6MjKBvS+60Z5hdHD5brSFfQXt XGtL7WqFZuF8REhMeWfNHBfmRIv5+KujurSXy7f3y18TFZNn87Q/PCH7dBJlPVv0 Ob+TDl+jpAa0rQWhj+G2V5S9GanMylpaKyApmCMnsLl4bZJuQBcGmqIwbXSDMqDs H5gs19dv72sixVSSUm1TTJwOa3df08eZI/JNrIgLYuf8zv+b2Ue0lbtnOipzoaH6 UVmQGdrZH5FmioiiPKlg+Aw4HPjVxOWZws4lL1hZYqKwB5b8aAkkL2SAISWHPnit 09q+rHLKMe/X77pVky4qcsN117xwutlKQtClTrtUx3skUUeXtWYPsgpu7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnQvg0/OCHrDXPQ60cLUByR14r1MB8GA1UdIwQY MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4 LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj1Q44s6 pgUxVfjSAfwteS8kynmcdUKXXPFTgPsFDEG0qh6IH8lN66CJ4xk5VJtPwrQa/xBb M+g6JyelYJEJCrFxgbHsqEvEvbmLZvBckZKD6sLXINp/5C/cjK4z9v5OPxH2vPKz ywWmhSH5HLDh5mpH7d26uUtNbOEl4rSeeDlI156GQr5A557+ElfMhstapSZCCqrI Q5NQOy/5Q80J2eGb4ITrFNUTxwOOBS84VuLuDopNIcI6yPH5rdEtAwBxeKz1sPrR GDE6m05QWm8DA6SmphMZhJIQyrA7n0rWovC9+U5uMQn8eKjELMgXzgMKbfI2NXVA dK4GmVzJi0bIaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:31 2025 by rpki-client