This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json) Hash identifier: sHBoNIys1/2mEGbBgK/onAkYHUQ1s/wShDs+0xUeIh8= Subject key identifier: FE:16:4D:2A:AA:EF:C0:C3:D5:42:9B:2D:7F:A6:13:12:F0:74:5D:98 Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232 Certificate serial: 019AF3F7F3EA323C91D2D5131D51178A6CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft Manifest number: 09EE Signing time: Sat 06 Dec 2025 14:01:44 +0000 Manifest this update: Sat 06 Dec 2025 14:01:44 +0000 Manifest next update: Sun 07 Dec 2025 14:01:44 +0000 Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=) 2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: 46YH0AdqZ2uliuSpwAX8a1tQb3dyds4DXm07ejzVP0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f3:ea:32:3c:91:d2:d5:13:1d:51:17:8a:6c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232 Validity Not Before: Dec 6 14:01:44 2025 GMT Not After : Dec 7 14:01:44 2025 GMT Subject: CN=fe164d2aaaefc0c3d5429b2d7fa61312f0745d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:96:ea:6f:b1:9d:98:f2:0d:49:85:f1:3b: 20:43:81:bd:7b:b2:02:67:63:94:48:84:73:d0:70: 7a:25:1a:3c:6c:c7:90:51:58:1e:55:fb:ad:54:6f: 15:29:d4:30:54:c6:5f:e0:98:9d:db:3d:78:cd:c9: 51:bc:bd:74:c6:25:ad:14:01:be:f9:51:a3:70:d0: 51:99:69:cc:49:16:d2:be:78:69:bc:e1:ce:b0:18: 55:ea:96:7c:27:35:bc:76:fc:0c:c7:28:57:e7:b0: 4f:48:45:15:cb:ca:fd:a9:96:7c:9f:7f:2a:a5:bc: 8b:00:0b:26:4c:64:11:c4:f4:9d:13:e7:97:d7:8c: 3e:16:4c:cb:d2:65:80:7e:7c:18:33:8f:0b:6a:c8: 94:96:c6:1d:13:db:c4:c4:99:8c:5a:36:a0:44:af: b7:0a:9f:84:9d:cc:d6:f9:06:81:dc:7a:53:8c:4d: 27:57:15:b9:de:a7:bf:5e:80:68:ba:dd:ca:ae:57: a0:75:d5:b7:6f:ea:9a:68:c1:a0:40:43:8c:7a:ae: f2:8d:d2:75:ac:cd:88:5a:bd:28:65:bf:9e:5a:f8: 85:02:42:25:98:a6:64:ef:52:26:2a:09:19:28:cc: 3a:6c:63:b0:4a:75:23:0e:0e:3d:8d:51:27:73:aa: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:4D:2A:AA:EF:C0:C3:D5:42:9B:2D:7F:A6:13:12:F0:74:5D:98 X509v3 Authority Key Identifier: keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:59:9f:d0:92:aa:54:df:a9:3d:38:5a:e5:fe:cb:56:cb:0d: 28:2e:c7:61:65:1d:34:42:00:6b:10:b7:9b:26:7e:05:4a:fb: 2e:69:d5:e1:c9:af:a0:00:a1:c9:42:d3:78:f6:3f:84:86:03: d1:db:a2:98:15:52:8e:2c:d0:ce:29:22:9c:00:87:b8:17:ae: 5f:9f:8a:9d:45:5b:b4:84:b0:03:2c:4f:de:b7:51:dc:3f:38: 3b:55:15:a1:ea:5d:31:63:1a:7f:ef:82:8a:a3:f5:fb:86:b3: 1a:2a:49:91:d7:3e:53:ad:ac:34:2a:c8:4b:77:17:bb:44:17: 16:76:a2:23:44:dd:7c:62:b0:01:44:11:08:b2:17:eb:fd:e5: 1e:ee:a9:e9:25:da:cf:06:6a:81:9f:f8:3a:9b:5c:03:10:34: 35:fc:28:e3:0c:be:39:88:79:d4:ab:25:3c:c5:ad:94:c7:f9: 91:7f:6d:76:5d:7f:c8:d0:f5:65:a0:38:19:df:d0:3f:49:e7: 54:12:ca:3e:6f:6d:03:99:f1:db:8c:72:3d:cb:43:5a:73:fe: 86:b3:bd:8e:81:ae:d1:3f:67:a4:f0:40:e6:c6:48:ce:f5:f6: f2:9c:2e:f2:11:66:ea:ce:0a:8b:bf:01:3d:cb:9a:6f:e7:ce: a2:6b:2a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/PqMjyR0tUTHVEXimzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2 NmYyMzIwHhcNMjUxMjA2MTQwMTQ0WhcNMjUxMjA3MTQwMTQ0WjAzMTEwLwYDVQQD EyhmZTE2NGQyYWFhZWZjMGMzZDU0MjliMmQ3ZmE2MTMxMmYwNzQ1ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp96W6m+xnZjyDUmF8TsgQ4G9e7IC Z2OUSIRz0HB6JRo8bMeQUVgeVfutVG8VKdQwVMZf4Jid2z14zclRvL10xiWtFAG+ +VGjcNBRmWnMSRbSvnhpvOHOsBhV6pZ8JzW8dvwMxyhX57BPSEUVy8r9qZZ8n38q pbyLAAsmTGQRxPSdE+eX14w+FkzL0mWAfnwYM48LasiUlsYdE9vExJmMWjagRK+3 Cp+EnczW+QaB3HpTjE0nVxW53qe/XoBout3KrlegddW3b+qaaMGgQEOMeq7yjdJ1 rM2IWr0oZb+eWviFAkIlmKZk71ImKgkZKMw6bGOwSnUjDg49jVEnc6rAtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4WTSqq78DD1UKbLX+mExLwdF2YMB8GA1UdIwQY MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt Y2RlNzAyYzBlYzhiLzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1mf0JKq VN+pPTha5f7LVssNKC7HYWUdNEIAaxC3myZ+BUr7LmnV4cmvoAChyULTePY/hIYD 0duimBVSjizQzikinACHuBeuX5+KnUVbtISwAyxP3rdR3D84O1UVoepdMWMaf++C iqP1+4azGipJkdc+U62sNCrIS3cXu0QXFnaiI0TdfGKwAUQRCLIX6/3lHu6p6SXa zwZqgZ/4OptcAxA0Nfwo4wy+OYh51KslPMWtlMf5kX9tdl1/yND1ZaA4Gd/QP0nn VBLKPm9tA5nx24xyPctDWnP+hrO9joGu0T9npPBA5sZIzvX28pwu8hFm6s4Ki78B Pcuab+fOomsq3g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:03 2025 by rpki-client