This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json) Hash identifier: QKBDmC3VM/9/6mGrhvnkugj3Jnv4m2RaXpZSdJkG6qM= Subject key identifier: 8E:BA:C8:34:2C:18:E2:28:D4:6D:E0:33:DF:BD:D4:D1:4B:F2:3E:2A Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20 Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620 Certificate serial: 019AF23FBCCACF2BAB97C2E45429B0D5C3A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft Manifest number: 1071 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=) 2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: wddrMLuFvkLXas8kuzzhM9k49KAamkIkLr3r1fA/fpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bc:ca:cf:2b:ab:97:c2:e4:54:29:b0:d5:c3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=8ebac8342c18e228d46de033dfbdd4d14bf23e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:dd:37:f5:97:f6:fe:a1:46:d3:2c:27:fb: 7d:af:2f:fe:12:9b:b4:d8:b0:be:67:5d:fa:14:6e: c3:e9:5d:da:70:03:58:2b:3f:84:ea:23:1f:e6:26: 5c:05:a9:c3:b2:d9:6a:8e:fb:a1:f0:f9:62:f8:03: d3:9a:69:cc:06:56:f0:36:27:4d:62:d9:02:4b:59: fd:4c:28:b0:67:a9:2f:51:65:e5:07:66:64:ba:30: 9f:13:b7:5a:d2:7a:b2:f6:d2:9d:64:1f:2b:bb:1a: 16:d1:40:47:d9:9b:0f:1d:19:48:8b:0a:fc:13:cd: 02:8c:cd:62:11:36:d6:ef:cb:eb:b8:cb:65:c1:1d: 6f:b3:1d:9c:e7:14:6a:3e:4a:e8:f8:eb:8b:ad:15: 78:0c:e5:fe:b4:f4:d8:bb:59:18:e5:4d:26:86:25: 3a:69:22:d8:0e:c7:5e:71:87:0d:24:25:84:12:e8: 94:a2:e5:46:a4:7a:3a:42:de:6b:02:1b:27:cc:27: 48:c9:4d:3d:14:50:3e:74:87:8b:ba:31:ef:99:e6: 40:6f:95:22:4f:05:00:88:16:ae:e4:c1:a4:93:4d: b9:e4:d4:75:fb:52:2e:7e:77:db:dd:98:39:35:06: 5a:0a:c8:5e:df:1b:04:2f:b1:d2:46:84:e9:6d:5c: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:C8:34:2C:18:E2:28:D4:6D:E0:33:DF:BD:D4:D1:4B:F2:3E:2A X509v3 Authority Key Identifier: keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:33:c7:e2:81:42:1f:7b:77:9b:d9:6c:3c:c8:d1:08:cc:d7: d3:cd:22:47:a3:5a:ba:08:bb:3c:ff:20:c4:c8:5d:8a:84:3e: 02:bf:9e:80:e9:6e:1f:b4:61:36:43:0a:df:e4:09:d8:43:56: b5:a6:30:a9:b2:ce:84:5c:b2:01:92:4f:27:bf:db:c3:99:65: a7:84:53:6f:8f:5d:aa:33:6d:ee:78:29:e6:d6:2d:e0:05:34: 1c:bc:02:b4:37:fe:35:99:0e:37:97:d5:e9:04:67:a4:6c:29: 4d:12:9f:c2:91:40:34:3d:6c:55:c1:66:53:06:68:aa:6a:7c: c1:77:2a:c4:bd:dc:ec:de:67:c4:5f:06:74:88:79:75:77:5e: c0:3a:e9:c0:05:e4:2d:a9:71:8e:e7:8d:bf:a1:a3:04:07:61: c0:c5:c0:76:b5:35:df:4f:8a:7e:b8:fa:24:f6:04:29:47:9b: ac:cd:f7:9f:6d:57:79:6b:fc:2e:f3:16:f8:6a:0e:8e:d3:50: 16:4e:0b:be:c9:97:62:30:04:ad:ff:f7:27:e7:d8:e6:2a:b5: d0:2e:a3:ff:f2:71:5d:ac:90:13:22:04:d4:ca:20:8a:7f:eb: 56:38:6d:1d:eb:f7:1a:54:04:47:5f:40:2d:0d:97:77:69:d2: c2:0c:13:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7zKzyurl8LkVCmw1cOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTFmMjMwYTBlMmVlZGEzODEwNTIyZTc0YTY5ODIwMDcx M2U2MjAwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD Eyg4ZWJhYzgzNDJjMThlMjI4ZDQ2ZGUwMzNkZmJkZDRkMTRiZjIzZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ7dN/WX9v6hRtMsJ/t9ry/+Epu0 2LC+Z136FG7D6V3acANYKz+E6iMf5iZcBanDstlqjvuh8Pli+APTmmnMBlbwNidN YtkCS1n9TCiwZ6kvUWXlB2ZkujCfE7da0nqy9tKdZB8ruxoW0UBH2ZsPHRlIiwr8 E80CjM1iETbW78vruMtlwR1vsx2c5xRqPkro+OuLrRV4DOX+tPTYu1kY5U0mhiU6 aSLYDsdecYcNJCWEEuiUouVGpHo6Qt5rAhsnzCdIyU09FFA+dIeLujHvmeZAb5Ui TwUAiBau5MGkk0255NR1+1Iufnfb3Zg5NQZaCshe3xsEL7HSRoTpbVw3QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI66yDQsGOIo1G3gM9+91NFL8j4qMB8GA1UdIwQY MBaAFKyR8jCg4u7aOBBSLnSmmCAHE+YgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEt Y2RmOTJmYmU4ZjBiLzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEtY2RmOTJmYmU4ZjBi LzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezPH4oFC H3t3m9lsPMjRCMzX080iR6Naugi7PP8gxMhdioQ+Ar+egOluH7RhNkMK3+QJ2ENW taYwqbLOhFyyAZJPJ7/bw5llp4RTb49dqjNt7ngp5tYt4AU0HLwCtDf+NZkON5fV 6QRnpGwpTRKfwpFAND1sVcFmUwZoqmp8wXcqxL3c7N5nxF8GdIh5dXdewDrpwAXk LalxjueNv6GjBAdhwMXAdrU130+Kfrj6JPYEKUebrM33n21XeWv8LvMW+GoOjtNQ Fk4LvsmXYjAErf/3J+fY5iq10C6j//JxXayQEyIE1Mogin/rVjhtHev3GlQER19A LQ2Xd2nSwgwTFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:28 2025 by rpki-client