This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json) Hash identifier: QF5QUX21ZRkJJkVz2uf+ekqus4YhJV9jY2Z4vgpfd+0= Subject key identifier: 37:48:C8:88:B7:00:C9:A0:99:CE:80:76:32:0F:2F:F0:D6:58:DF:D9 Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b Certificate serial: 019AF6F9C6C5C132B0B6D97838616BBF30A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft Manifest number: 1631 Signing time: Sun 07 Dec 2025 04:02:35 +0000 Manifest this update: Sun 07 Dec 2025 04:02:35 +0000 Manifest next update: Mon 08 Dec 2025 04:02:35 +0000 Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=) 2: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: vvctiEXJqQ7AzIbs1Wt8yCj2bH3jYiJhA0A9/6etYpM=) 3: mUUPpPDeJpWxy2ucZtADUwPu1vE.roa (hash: SlWed8R0jkI4ahY1r3sLHRR3VTAWW5qh1xFw8CiSbrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:c6:c5:c1:32:b0:b6:d9:78:38:61:6b:bf:30:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b Validity Not Before: Dec 7 04:02:35 2025 GMT Not After : Dec 8 04:02:35 2025 GMT Subject: CN=3748c888b700c9a099ce8076320f2ff0d658dfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:f1:75:02:60:aa:2b:1e:b1:99:27:51:43: 9f:dd:64:92:bd:4d:e0:b6:cf:f0:27:2f:ef:0f:b3: d8:e7:0c:dc:60:a0:60:51:67:f1:b2:79:6a:e6:bc: 01:82:17:4b:ac:29:8f:e8:29:e1:68:0c:74:87:4b: cc:c8:9f:52:5b:1b:c6:cf:68:20:8d:f7:8c:26:6d: bb:2b:e5:3e:1a:20:ba:26:5f:db:af:45:43:19:ff: 8f:6f:a5:a1:e2:b0:60:1a:b6:89:15:25:fa:4d:ce: 91:81:0b:32:dc:f9:50:40:19:11:20:26:cf:30:cb: e0:69:ad:66:b8:65:c1:c6:d9:14:fd:5c:4c:92:6b: 68:ee:ac:41:f1:d7:41:bf:ab:f5:9d:38:d9:9b:50: ab:0f:54:b8:65:c9:d7:02:b1:44:e0:08:f4:86:5a: 8c:0b:3b:04:89:c6:cb:56:c0:28:4f:eb:fb:c2:0f: c9:e8:09:e7:6a:39:dd:71:72:68:43:c1:84:d2:bd: 06:94:e1:74:ef:74:91:c8:d0:dc:02:76:78:73:57: f3:b7:dc:51:c9:eb:00:85:a1:a6:a4:66:bd:80:02: 51:8a:0b:c4:26:be:aa:87:91:16:d6:b2:c4:92:e3: be:dd:46:2b:3f:c4:d1:87:48:4c:e0:bc:86:b7:9d: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:48:C8:88:B7:00:C9:A0:99:CE:80:76:32:0F:2F:F0:D6:58:DF:D9 X509v3 Authority Key Identifier: keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:40:e5:64:45:8c:36:1b:87:71:97:05:33:fd:b5:e9:a1:f8: 1e:75:8d:5c:fd:0c:27:8d:b7:8a:ee:ff:16:5f:d0:71:5e:6a: 55:ab:d0:b3:3b:3b:6b:82:27:60:32:81:6d:46:01:93:1c:f3: b0:f5:68:74:ad:15:1f:13:e0:7e:2a:f8:bc:06:8b:a4:8c:fd: 6b:95:42:d8:27:a6:db:9d:65:cc:60:3e:6f:c0:de:f0:b4:30: 7b:df:64:6f:5f:97:ad:9d:df:3f:18:73:4a:30:9d:b7:40:79: d2:23:be:1e:18:21:f1:94:48:6d:7f:60:bd:2d:58:f7:f0:4b: bf:d1:54:81:69:5a:83:82:fd:67:4c:6d:5f:d7:48:c7:45:46: e2:17:c5:98:77:9d:e1:98:e9:71:9a:72:90:48:2a:30:13:57: d7:9a:62:a5:59:b5:fb:4f:16:08:62:27:ba:71:23:f7:8e:c9: 6a:a3:a7:b6:89:f6:14:08:72:e3:fb:2c:ad:cf:3e:d0:73:e6: de:c8:2d:b7:26:95:08:58:aa:c5:08:7e:87:7f:e5:ed:a7:ba: b8:bf:b1:74:af:f3:cf:71:db:28:c1:c1:fb:c5:b8:52:cd:80: 53:b1:91:f2:9e:44:1f:8c:9e:ec:33:24:29:fd:98:ce:b4:a7: cf:a2:da:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+cbFwTKwttl4OGFrvzClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi MDVjM2IwHhcNMjUxMjA3MDQwMjM1WhcNMjUxMjA4MDQwMjM1WjAzMTEwLwYDVQQD EygzNzQ4Yzg4OGI3MDBjOWEwOTljZTgwNzYzMjBmMmZmMGQ2NThkZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjxdQJgqisesZknUUOf3WSSvU3g ts/wJy/vD7PY5wzcYKBgUWfxsnlq5rwBghdLrCmP6CnhaAx0h0vMyJ9SWxvGz2gg jfeMJm27K+U+GiC6Jl/br0VDGf+Pb6Wh4rBgGraJFSX6Tc6RgQsy3PlQQBkRICbP MMvgaa1muGXBxtkU/VxMkmto7qxB8ddBv6v1nTjZm1CrD1S4ZcnXArFE4Aj0hlqM CzsEicbLVsAoT+v7wg/J6AnnajndcXJoQ8GE0r0GlOF073SRyNDcAnZ4c1fzt9xR yesAhaGmpGa9gAJRigvEJr6qh5EW1rLEkuO+3UYrP8TRh0hM4LyGt51aRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdIyIi3AMmgmc6AdjIPL/DWWN/ZMB8GA1UdIwQY MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et Yzc0M2Q3YzBiYjIyLzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0DlZEWM NhuHcZcFM/216aH4HnWNXP0MJ423iu7/Fl/QcV5qVavQszs7a4InYDKBbUYBkxzz sPVodK0VHxPgfir4vAaLpIz9a5VC2Cem251lzGA+b8De8LQwe99kb1+XrZ3fPxhz SjCdt0B50iO+Hhgh8ZRIbX9gvS1Y9/BLv9FUgWlag4L9Z0xtX9dIx0VG4hfFmHed 4ZjpcZpykEgqMBNX15pipVm1+08WCGInunEj947JaqOnton2FAhy4/ssrc8+0HPm 3sgttyaVCFiqxQh+h3/l7ae6uL+xdK/zz3HbKMHB+8W4Us2AU7GR8p5EH4ye7DMk Kf2YzrSnz6LaZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:37 2025 by rpki-client