This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json) Hash identifier: jbwTxI0qWCVi2j0ekEnwhx+43XWF7p4qj1hPIDNp4vA= Subject key identifier: 2F:D9:42:48:4C:77:BE:87:C9:FA:1D:B8:73:10:D8:A3:94:86:43:FD Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34 Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34 Certificate serial: 019AF23F625C4B7E90A726C70B2B71F7209E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft Manifest number: 0E1A Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: xe8LECoQn2PVfjCV/mm1FWjGtSxoRQvr932WmfIETtM=) 2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:62:5c:4b:7e:90:a7:26:c7:0b:2b:71:f7:20:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34 Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=2fd942484c77be87c9fa1db87310d8a3948643fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:51:55:d3:40:4e:4d:dc:47:9f:42:40:25: c5:c1:b5:d1:f3:c3:3e:6f:6d:a7:99:ae:e9:61:4a: 58:7a:48:b9:da:42:0f:00:58:c1:b5:cb:47:05:88: 29:df:03:1c:be:a9:7b:51:9a:d3:4f:dc:67:84:d8: 3a:5b:fc:61:00:d3:c2:0f:46:fb:b5:e7:e4:e2:44: 30:96:fb:b7:45:c0:80:42:03:47:f0:01:e9:8a:9e: f5:05:af:a6:20:f0:79:65:fb:6b:ec:2b:f1:2b:f5: bd:98:1e:fe:c9:47:a9:65:67:db:6c:1e:d5:ef:04: 38:60:4f:e0:27:03:16:93:0d:41:d1:2b:71:d8:43: e8:5f:c1:8a:91:fb:1b:7b:18:1a:3a:6d:f9:04:5b: ef:2f:0c:5b:98:6e:2d:3f:10:24:64:7a:85:88:ab: ff:be:1a:7d:bd:4d:6b:47:93:be:c3:6a:f6:45:c1: e6:d8:43:65:16:89:a0:81:d8:e2:a5:6b:9a:a9:d7: bb:03:47:ba:f7:ed:06:5a:39:d7:7b:e2:87:23:98: 7d:d0:cc:af:c7:c9:7f:50:4b:ed:09:e0:9d:c3:4d: 18:e1:5a:84:35:9d:57:dc:35:99:9e:72:7b:73:cc: 5d:72:58:28:4c:74:01:88:0b:aa:11:3a:43:72:09: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D9:42:48:4C:77:BE:87:C9:FA:1D:B8:73:10:D8:A3:94:86:43:FD X509v3 Authority Key Identifier: keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b5:03:db:90:74:cd:bc:9e:1a:12:b4:a4:d6:5c:0c:89:41: b2:75:ba:f4:6e:f2:56:8f:51:21:46:2f:85:ff:1c:28:e8:dd: f6:fe:8d:6a:a1:16:d7:be:f7:c1:3d:45:9d:38:65:23:4f:23: 38:3f:83:fd:65:86:dd:63:a1:d0:08:f1:13:6d:bb:d3:29:40: e9:4c:ad:07:79:81:f1:f5:81:26:68:d1:ec:5d:88:1e:5d:ff: 8a:ad:d9:c4:bd:02:42:68:b9:bd:3d:93:11:8d:36:f1:d3:c5: 77:bd:6d:d8:ee:9c:83:43:f3:0b:94:51:1c:21:80:1f:00:80: a5:fb:48:31:9a:2b:d9:ff:b6:fc:5f:21:57:11:f0:6c:5f:dc: 51:87:68:bf:f0:60:30:62:c3:71:1a:1c:5a:25:3a:0a:f6:e4: 18:98:36:0f:01:0a:a6:f4:e3:f6:dc:e1:87:e3:a1:2a:f7:7d: 73:1a:4e:5e:cf:cf:a2:b5:61:15:49:ec:23:fe:2f:3e:4c:6a: 27:04:da:ac:6e:a3:8e:a5:94:55:f2:73:c6:c8:2c:6d:27:6e: 41:bb:83:bd:5f:f5:0a:f9:8d:45:50:2d:8c:73:34:90:88:9f: 74:56:01:49:b5:0a:cb:39:9d:32:a0:e1:f1:a1:f0:63:88:5c: f0:ed:56:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2JcS36QpybHCytx9yCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzY3NGFiMTgwNmRkNmFmZTIxM2JlMzhlOTJhMzVmYmM2 NGNlMzQwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD EygyZmQ5NDI0ODRjNzdiZTg3YzlmYTFkYjg3MzEwZDhhMzk0ODY0M2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ1RVdNATk3cR59CQCXFwbXR88M+ b22nma7pYUpYeki52kIPAFjBtctHBYgp3wMcvql7UZrTT9xnhNg6W/xhANPCD0b7 tefk4kQwlvu3RcCAQgNH8AHpip71Ba+mIPB5Zftr7CvxK/W9mB7+yUepZWfbbB7V 7wQ4YE/gJwMWkw1B0Stx2EPoX8GKkfsbexgaOm35BFvvLwxbmG4tPxAkZHqFiKv/ vhp9vU1rR5O+w2r2RcHm2ENlFomggdjipWuaqde7A0e69+0GWjnXe+KHI5h90Myv x8l/UEvtCeCdw00Y4VqENZ1X3DWZnnJ7c8xdclgoTHQBiAuqETpDcglURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/ZQkhMd76HyfoduHMQ2KOUhkP9MB8GA1UdIwQY MBaAFCXGdKsYBt1q/iE7446So1+8ZM40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2Mt ZjVjZDBkNzExNmViLzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2MtZjVjZDBkNzExNmVi LzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrUD25B0 zbyeGhK0pNZcDIlBsnW69G7yVo9RIUYvhf8cKOjd9v6NaqEW1773wT1FnThlI08j OD+D/WWG3WOh0AjxE2270ylA6UytB3mB8fWBJmjR7F2IHl3/iq3ZxL0CQmi5vT2T EY028dPFd71t2O6cg0PzC5RRHCGAHwCApftIMZor2f+2/F8hVxHwbF/cUYdov/Bg MGLDcRocWiU6CvbkGJg2DwEKpvTj9tzhh+OhKvd9cxpOXs/PorVhFUnsI/4vPkxq JwTarG6jjqWUVfJzxsgsbSduQbuDvV/1CvmNRVAtjHM0kIifdFYBSbUKyzmdMqDh 8aHwY4hc8O1WGA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:28 2025 by rpki-client