This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json) Hash identifier: p5OLO6/sD8/vy3JP0zk54K7lJXoRVh5o3xoX+uburRU= Subject key identifier: 16:D0:93:23:28:9F:7B:27:0A:FF:BA:94:24:FC:50:45:92:24:0A:6D Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Certificate serial: 019AF1D232AB3657C89DBBCA047BC679247C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft Manifest number: 17C5 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=) 2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: Me6gRi3HJdNRFbfeqgpWJDiziMfLC6VcWOM/2QTOg5I=) 3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=) 4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:32:ab:36:57:c8:9d:bb:ca:04:7b:c6:79:24:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=16d09323289f7b270affba9424fc504592240a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:7c:0d:3d:af:8b:d0:3f:38:09:c3:39:2b: db:f4:cd:46:11:45:c1:62:a8:81:62:b7:6b:b3:76: 64:e7:c2:6c:5b:26:79:96:43:60:ab:bb:cd:3a:ac: f9:80:5b:d3:f8:2c:c1:15:c1:27:23:61:eb:52:76: 50:35:9b:0e:ce:fe:3d:ca:08:89:17:46:2e:7c:34: 39:37:21:2f:7c:d9:d1:07:2d:12:91:bc:29:e7:26: 95:58:ec:3a:c6:bb:ef:3a:44:e6:7e:16:db:6d:19: 78:49:4d:13:ca:fc:54:48:19:1d:9c:6a:55:4b:44: a4:ab:5f:88:f1:88:42:72:c1:a9:82:40:e0:66:5a: c2:a7:96:27:37:1f:7f:54:06:dc:42:e1:b5:67:69: 9c:29:69:6b:a0:0b:b6:fc:24:cd:07:ce:2b:57:af: f8:d6:45:b5:32:82:9c:0a:2e:b8:e1:7c:20:b2:9f: 7a:57:47:ff:cd:26:d1:31:4c:2b:72:f0:bb:fb:36: 2c:c4:88:5c:09:c9:98:9f:e3:6a:ad:d8:a1:c5:b9: 0c:c8:22:06:51:2a:b9:d1:06:14:62:e1:a4:32:bb: ea:c8:13:18:a2:77:1c:b2:81:41:eb:4b:13:0d:74: f1:cb:c4:33:37:fd:f1:f3:84:d4:1b:88:21:f4:ef: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:93:23:28:9F:7B:27:0A:FF:BA:94:24:FC:50:45:92:24:0A:6D X509v3 Authority Key Identifier: keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ae:f7:ff:26:f2:c3:7c:e9:84:43:aa:0d:5f:ca:2d:c4:04: 2c:b0:ab:73:9d:ed:7f:8e:33:10:18:d7:b9:d4:fa:56:39:76: 58:7b:94:26:1f:60:04:94:bc:80:68:6b:66:80:45:4e:74:f3: 30:b2:80:62:f1:84:9f:11:7d:6e:4d:1a:2d:63:99:72:56:3e: 64:95:8f:12:cf:62:e4:30:63:62:79:b0:e3:5d:1c:15:90:d9: 2f:6b:d4:92:7f:49:ae:3c:f5:2f:92:60:6c:c8:61:e4:10:b6: bd:73:48:cf:53:b8:87:d9:5c:7d:57:e7:30:8f:5f:5b:76:3a: f4:ba:87:81:97:97:10:20:89:34:30:f0:91:86:82:05:35:a4: 8c:ca:71:4c:7c:29:8d:d1:29:25:a7:e7:f0:ea:e7:03:af:e0: 02:d6:b4:6d:0a:c0:16:4c:67:3c:c4:4c:35:01:58:1e:57:28: 12:b1:6d:cb:aa:61:72:e3:ba:df:d2:30:f1:72:21:1c:00:32: 08:55:b4:45:c5:be:57:eb:1b:2c:bf:2f:7b:dd:56:0a:09:33: ca:05:b7:09:f9:22:ef:aa:ae:df:52:0e:20:95:b3:f4:50:01: 1a:7f:60:33:9b:64:e5:23:70:8d:6a:99:a9:7e:7b:54:46:63: 6f:90:90:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jKrNlfInbvKBHvGeSR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm OGVmZTIwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD EygxNmQwOTMyMzI4OWY3YjI3MGFmZmJhOTQyNGZjNTA0NTkyMjQwYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukx8DT2vi9A/OAnDOSvb9M1GEUXB YqiBYrdrs3Zk58JsWyZ5lkNgq7vNOqz5gFvT+CzBFcEnI2HrUnZQNZsOzv49ygiJ F0YufDQ5NyEvfNnRBy0Skbwp5yaVWOw6xrvvOkTmfhbbbRl4SU0TyvxUSBkdnGpV S0Skq1+I8YhCcsGpgkDgZlrCp5YnNx9/VAbcQuG1Z2mcKWlroAu2/CTNB84rV6/4 1kW1MoKcCi644Xwgsp96V0f/zSbRMUwrcvC7+zYsxIhcCcmYn+NqrdihxbkMyCIG USq50QYUYuGkMrvqyBMYonccsoFB60sTDXTxy8QzN/3x84TUG4gh9O9PuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbQkyMon3snCv+6lCT8UEWSJAptMB8GA1UdIwQY MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa73/yby w3zphEOqDV/KLcQELLCrc53tf44zEBjXudT6Vjl2WHuUJh9gBJS8gGhrZoBFTnTz MLKAYvGEnxF9bk0aLWOZclY+ZJWPEs9i5DBjYnmw410cFZDZL2vUkn9Jrjz1L5Jg bMhh5BC2vXNIz1O4h9lcfVfnMI9fW3Y69LqHgZeXECCJNDDwkYaCBTWkjMpxTHwp jdEpJafn8OrnA6/gAta0bQrAFkxnPMRMNQFYHlcoErFty6phcuO639Iw8XIhHAAy CFW0RcW+V+sbLL8ve91WCgkzygW3Cfki76qu31IOIJWz9FABGn9gM5tk5SNwjWqZ qX57VEZjb5CQAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:03 2025 by rpki-client