This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft File: Jjw1B3YMW4KVGjB875MrCk02s2M.mft (raw, json) Hash identifier: C89jW0EBRtG4l5H/WwCcPdJNb5axwSP5cUCvnr+XL5s= Subject key identifier: A8:46:0D:2E:A6:27:C3:2B:1B:22:89:EA:58:12:3E:4D:8B:CA:C2:A5 Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 Certificate issuer: /CN=263c3507760c5b82951a307cef932b0a4d36b363 Certificate serial: 019AF1646329C4AEF5EFE6D93A174AADAF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft Manifest number: 11D1 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: Jjw1B3YMW4KVGjB875MrCk02s2M.crl (hash: NWvRGUCohLKJTsfjGe3cP+dixjILDzd3tL2K0ph2HCQ=) 2: w_RZsVQnV5c6Jlesd2-orRCXsVU.roa (hash: wXbhIxP+hDaVa5GS4+mSO9iYIDEjwaRB2ZNKaMWBSnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:63:29:c4:ae:f5:ef:e6:d9:3a:17:4a:ad:af:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=a8460d2ea627c32b1b2289ea58123e4d8bcac2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:75:0b:d0:ee:54:3f:e4:bb:53:fd:09:b1:da: 0d:38:28:e9:61:30:2a:58:57:83:8e:7a:50:14:4b: dd:d5:82:d1:ba:34:9e:5e:92:9f:cc:c4:69:ac:96: b9:f2:fa:a9:3c:89:09:43:a2:ef:99:44:38:41:13: 1f:ff:cd:6c:67:93:ac:31:97:49:49:92:37:71:d1: 9c:cc:32:4c:8c:e1:c0:81:dc:8f:7d:c2:c2:81:26: 98:54:e4:c3:68:0c:94:e1:44:5b:99:03:e5:d9:71: 0e:fb:75:d1:50:84:55:31:d6:3f:61:a3:8c:30:ad: 46:93:86:fc:fd:c9:f3:fb:38:d4:ce:be:e9:21:bb: 71:ed:6d:b0:83:09:4f:99:76:7c:84:ac:14:d5:6a: c4:6b:69:07:83:4b:bf:6d:14:bc:54:38:e9:3c:07: e2:64:16:4c:9b:29:25:a2:8a:46:13:90:95:f4:54: d1:24:3a:27:d0:5c:31:eb:49:50:41:f9:e2:37:14: 2c:7b:6d:42:07:14:dd:93:e5:09:86:df:49:c4:4a: 4b:e1:42:64:dd:6d:a6:c4:da:ca:bb:90:c5:a8:02: 7d:90:ec:ac:a2:99:77:5a:67:ef:92:90:ba:8d:1f: 82:53:ff:28:1a:26:63:e9:e6:71:2b:a6:4c:c6:d2: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:46:0D:2E:A6:27:C3:2B:1B:22:89:EA:58:12:3E:4D:8B:CA:C2:A5 X509v3 Authority Key Identifier: keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9c:61:b8:48:05:86:ac:23:4f:a2:60:53:78:ad:c7:78:5e: 0a:99:b1:95:92:3e:51:f0:a8:60:35:af:d8:e2:ea:60:1a:a9: b4:3c:6b:92:57:ad:1e:ae:e2:37:85:7d:8e:9c:d4:fe:de:bf: 27:ba:9d:85:a1:d4:e3:68:54:4f:c3:c1:d1:dc:38:93:b0:42: 7e:cb:7d:2a:85:9f:35:48:be:47:cd:f7:7c:e7:bf:28:39:29: 6d:d8:7f:31:7d:66:d4:aa:27:18:16:01:55:ab:e8:fa:50:19: 05:f4:02:ca:c1:1b:6a:48:c6:96:a5:a2:9e:da:49:f2:05:3b: f2:0f:a2:b1:63:4e:73:e7:b9:94:94:0c:d6:ac:04:52:64:d7: 4f:94:93:be:c7:9c:dd:58:3f:b4:62:b9:55:d1:e6:74:cf:69: 50:98:cf:21:62:62:af:e2:e0:9d:69:44:51:d7:a6:59:11:e4: 8b:11:b9:5a:8b:a3:9d:0d:7d:8a:1d:59:62:8a:ff:e4:9f:ff: cf:a1:58:c8:a5:fa:04:bd:7f:b4:e4:23:93:17:6d:88:ea:4b: a6:4a:c4:3e:cf:8b:05:ff:77:b8:3a:33:1b:de:27:bb:a2:81: 95:a8:19:b9:43:64:08:dd:07:19:ba:0c:78:bb:87:69:91:18: ca:59:39:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGMpxK717+bZOhdKra+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2M2MzNTA3NzYwYzViODI5NTFhMzA3Y2VmOTMyYjBhNGQz NmIzNjMwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EyhhODQ2MGQyZWE2MjdjMzJiMWIyMjg5ZWE1ODEyM2U0ZDhiY2FjMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHUL0O5UP+S7U/0JsdoNOCjpYTAq WFeDjnpQFEvd1YLRujSeXpKfzMRprJa58vqpPIkJQ6LvmUQ4QRMf/81sZ5OsMZdJ SZI3cdGczDJMjOHAgdyPfcLCgSaYVOTDaAyU4URbmQPl2XEO+3XRUIRVMdY/YaOM MK1Gk4b8/cnz+zjUzr7pIbtx7W2wgwlPmXZ8hKwU1WrEa2kHg0u/bRS8VDjpPAfi ZBZMmykloopGE5CV9FTRJDon0Fwx60lQQfniNxQse21CBxTdk+UJht9JxEpL4UJk 3W2mxNrKu5DFqAJ9kOysopl3WmfvkpC6jR+CU/8oGiZj6eZxK6ZMxtIb8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhGDS6mJ8MrGyKJ6lgSPk2LysKlMB8GA1UdIwQY MBaAFCY8NQd2DFuClRowfO+TKwpNNrNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUt OTBiNGYyZDRjNTU2LzEvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUtOTBiNGYyZDRjNTU2 LzEvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJxhuEgF hqwjT6JgU3itx3heCpmxlZI+UfCoYDWv2OLqYBqptDxrkletHq7iN4V9jpzU/t6/ J7qdhaHU42hUT8PB0dw4k7BCfst9KoWfNUi+R833fOe/KDkpbdh/MX1m1KonGBYB Vavo+lAZBfQCysEbakjGlqWintpJ8gU78g+isWNOc+e5lJQM1qwEUmTXT5STvsec 3Vg/tGK5VdHmdM9pUJjPIWJir+LgnWlEUdemWRHkixG5WoujnQ19ih1ZYor/5J// z6FYyKX6BL1/tOQjkxdtiOpLpkrEPs+LBf93uDozG94nu6KBlagZuUNkCN0HGboM eLuHaZEYylk5Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:06 2025 by rpki-client