This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json) Hash identifier: PuekFhCzb20No7a0yJer0KDXn2wYj2WlrDL5JsFIsW8= Subject key identifier: 15:84:FF:8D:C7:EC:6D:5F:8A:EB:18:D2:C7:6B:93:EC:3A:03:DC:4C Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Certificate serial: 019AF31BED17E6DC994C51512D75D99B5407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=) 2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: WkDY+zpH7tYRs5rw+pSCWwfe/fjMxamS3HiNflg/MiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ed:17:e6:dc:99:4c:51:51:2d:75:d9:9b:54:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=1584ff8dc7ec6d5f8aeb18d2c76b93ec3a03dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:a6:5e:78:2b:97:f6:8e:fe:16:22:91:66: 4b:e8:09:c4:c4:31:31:91:58:75:44:06:91:14:c0: 14:f6:23:72:ba:ae:74:ac:ff:9b:d9:7a:67:c9:c9: 31:1d:5e:d8:40:cb:5c:5b:e9:41:be:12:7f:77:90: b1:5d:6a:89:ac:24:53:ac:a6:af:93:0f:eb:79:54: 11:8e:b9:43:37:f1:4e:05:19:bc:07:2b:9d:36:08: e9:96:bd:5a:33:6e:fc:58:c8:de:f9:b3:54:39:61: d4:bf:65:9b:98:f5:01:81:cd:8b:b0:e0:cb:91:1c: b3:ba:03:09:98:a2:79:46:ea:7a:e3:18:f5:fa:88: 4f:95:e4:19:37:8c:df:01:cf:47:ad:a2:a0:08:e5: 6d:46:e9:36:4a:e3:e8:6d:c6:c4:d2:49:97:9b:f5: d7:d2:d3:88:fe:fd:05:49:92:77:c4:a6:aa:c7:3c: fb:87:4f:18:5a:a7:7c:dc:83:b5:39:01:89:81:4b: 6f:60:c0:3d:45:17:98:43:e5:ac:f1:57:84:c1:18: d8:8c:b8:a9:54:d7:56:77:dd:a6:a6:15:7f:88:7b: 17:2c:1e:02:af:2a:c6:fd:0f:cf:d5:55:d6:77:fe: ea:19:05:1e:16:c7:e6:b2:33:91:dc:f5:e4:48:de: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:FF:8D:C7:EC:6D:5F:8A:EB:18:D2:C7:6B:93:EC:3A:03:DC:4C X509v3 Authority Key Identifier: keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:72:27:04:00:a4:d7:dd:8b:38:06:4c:83:dd:4c:31:ab:08: 8d:d5:cb:2e:a6:a8:ee:e4:23:a0:9e:78:c6:0c:35:9d:29:d9: 11:b1:9d:70:45:79:96:6c:19:52:b4:7f:a4:40:25:10:32:22: 60:44:08:ce:10:46:1b:0d:e7:b8:be:91:92:48:bc:6d:8c:9c: 36:d5:7c:04:72:52:84:8f:c9:a4:85:8f:64:24:10:ef:f6:06: a2:a7:c1:20:9c:a7:58:6c:20:8e:0a:54:b9:b0:0a:6a:68:12: eb:77:c5:29:8d:33:5f:b5:41:29:7c:84:d6:6a:a0:04:00:31: 25:28:9d:ef:a3:ed:15:7e:b9:7e:e8:82:c0:95:60:1d:25:af: 71:c6:73:54:55:61:cb:cf:48:ac:b0:8a:16:c6:7b:ef:44:49: ac:32:be:55:fa:70:52:55:6d:f3:f9:ec:70:37:35:2e:1d:04: 38:b0:46:7c:36:8a:7f:55:7d:ee:df:b1:a6:64:66:bc:55:c1: e5:73:2d:52:29:26:c9:94:b9:df:c5:12:fd:05:4d:f4:bc:04: 73:32:b5:92:73:7e:1e:cb:81:f6:1c:8d:d2:fe:8f:27:99:44: 02:7f:dc:bb:1b:3d:b9:18:df:db:c8:4a:dc:d7:00:c2:51:e6: 72:2f:2e:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+0X5tyZTFFRLXXZm1QHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5 ZDhkN2MwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EygxNTg0ZmY4ZGM3ZWM2ZDVmOGFlYjE4ZDJjNzZiOTNlYzNhMDNkYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlimXngrl/aO/hYikWZL6AnExDEx kVh1RAaRFMAU9iNyuq50rP+b2XpnyckxHV7YQMtcW+lBvhJ/d5CxXWqJrCRTrKav kw/reVQRjrlDN/FOBRm8ByudNgjplr1aM278WMje+bNUOWHUv2WbmPUBgc2LsODL kRyzugMJmKJ5Rup64xj1+ohPleQZN4zfAc9HraKgCOVtRuk2SuPobcbE0kmXm/XX 0tOI/v0FSZJ3xKaqxzz7h08YWqd83IO1OQGJgUtvYMA9RReYQ+Ws8VeEwRjYjLip VNdWd92mphV/iHsXLB4CryrG/Q/P1VXWd/7qGQUeFsfmsjOR3PXkSN6KmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWE/43H7G1fiusY0sdrk+w6A9xMMB8GA1UdIwQY MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt NzI4ZTk5NjdkYWNhLzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHInBACk 192LOAZMg91MMasIjdXLLqao7uQjoJ54xgw1nSnZEbGdcEV5lmwZUrR/pEAlEDIi YEQIzhBGGw3nuL6Rkki8bYycNtV8BHJShI/JpIWPZCQQ7/YGoqfBIJynWGwgjgpU ubAKamgS63fFKY0zX7VBKXyE1mqgBAAxJSid76PtFX65fuiCwJVgHSWvccZzVFVh y89IrLCKFsZ770RJrDK+VfpwUlVt8/nscDc1Lh0EOLBGfDaKf1V97t+xpmRmvFXB 5XMtUikmyZS538US/QVN9LwEczK1knN+HsuB9hyN0v6PJ5lEAn/cuxs9uRjf28hK 3NcAwlHmci8uhA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:57 2025 by rpki-client