This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json) Hash identifier: OyIDPdQE80Aqsd5zqxBL1OpmoPxnN0CIptAnl7Ggluo= Subject key identifier: 4C:42:50:D1:53:FA:F5:97:4E:12:DB:26:D5:8B:AF:2A:7C:7A:99:A6 Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Certificate serial: 019B2BC18E324D05DC7505A588B51E521A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft Manifest number: 12DA Signing time: Wed 17 Dec 2025 10:01:03 +0000 Manifest this update: Wed 17 Dec 2025 10:01:03 +0000 Manifest next update: Thu 18 Dec 2025 10:01:03 +0000 Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=) 2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=) 3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: tpvHpzJJk0jd4oFZK0K+grVD0nvuAYz7M9865iMyaeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:8e:32:4d:05:dc:75:05:a5:88:b5:1e:52:1a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Validity Not Before: Dec 17 10:01:03 2025 GMT Not After : Dec 18 10:01:03 2025 GMT Subject: CN=4c4250d153faf5974e12db26d58baf2a7c7a99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:a6:8b:94:05:3c:cc:4d:35:d2:9e:64:f9: 07:5a:7e:5b:81:a2:9c:2a:48:36:7f:58:ca:32:ed: bd:15:b8:a3:58:fe:71:28:92:bf:59:6a:d2:ba:87: dc:19:7a:1b:f6:fb:43:6c:d9:f1:e9:4c:0a:54:2a: 5b:9b:6d:79:f3:c0:7c:48:93:0b:5f:65:1f:79:a0: 4e:51:d9:0e:0e:25:e2:3c:e5:89:ac:05:8f:0c:4e: 3d:bc:40:25:7f:4a:fe:c1:da:9b:4d:44:b3:4d:82: ab:c1:a4:ff:2d:dc:bc:3a:e1:e9:bd:bd:7e:79:01: e4:5a:10:1a:6f:3e:10:25:35:d6:46:7e:54:74:27: 38:84:7d:16:ac:b6:66:65:f2:48:d2:0d:5c:a9:0c: 55:fc:8f:00:54:4a:8b:92:49:17:b9:ee:5f:52:4b: 7c:36:73:8d:06:0d:8f:88:05:4b:ed:56:88:90:b7: e2:c0:b6:dd:82:d4:46:20:15:f1:00:65:cc:1b:da: 5e:4e:18:25:4e:01:ab:38:b8:61:04:32:cb:3a:9f: e0:2e:9c:ac:b5:e7:a3:4e:48:9e:37:f2:59:1d:d1: 59:de:fe:df:a6:0e:b8:d3:fe:18:8a:73:d5:5b:81: 36:05:3e:62:bd:91:02:a4:e8:21:b2:8f:0f:ac:29: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:50:D1:53:FA:F5:97:4E:12:DB:26:D5:8B:AF:2A:7C:7A:99:A6 X509v3 Authority Key Identifier: keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7a:7d:91:66:59:76:ff:85:17:0f:3e:1e:5b:3f:64:c4:0e: e8:a2:13:43:37:75:89:9f:41:42:0b:8d:8a:89:00:78:40:ec: ba:f6:88:f1:3a:bb:43:72:fd:52:21:85:c2:fa:1b:2d:99:23: 10:cc:f9:1e:30:ed:fe:75:83:19:60:0e:a9:29:5b:7e:57:ae: 77:fb:17:a1:5e:64:5e:5d:2b:66:a4:09:ae:c1:02:92:a7:cd: e0:41:e7:43:e4:f5:27:b4:b5:24:99:92:43:1e:f7:0f:4c:0d: bf:ab:20:80:48:26:de:90:47:83:fd:82:83:2b:0f:e7:ef:3f: 0d:78:71:21:2e:19:0b:a8:0a:3e:52:75:37:75:23:dc:7b:28: ab:78:91:41:fd:ac:7b:31:32:d2:82:0a:9d:6d:88:fb:67:7c: 51:53:47:c6:06:0a:d5:23:fd:29:2f:30:71:1d:1d:9e:72:b8: 89:79:2d:64:7f:89:b7:40:3e:54:02:bf:2f:41:66:18:c7:d1: db:dc:10:68:ca:67:85:91:b4:ff:0b:c8:dc:99:90:b6:ee:8a: e9:f1:01:05:04:61:7a:28:d4:bf:b5:76:39:f8:3b:24:da:a3: cc:da:40:f2:73:9e:df:6a:4b:10:25:58:1f:2b:f3:78:12:e7: f6:8d:3f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwY4yTQXcdQWliLUeUhpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm NzQzMTIwHhcNMjUxMjE3MTAwMTAzWhcNMjUxMjE4MTAwMTAzWjAzMTEwLwYDVQQD Eyg0YzQyNTBkMTUzZmFmNTk3NGUxMmRiMjZkNThiYWYyYTdjN2E5OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH+mi5QFPMxNNdKeZPkHWn5bgaKc Kkg2f1jKMu29FbijWP5xKJK/WWrSuofcGXob9vtDbNnx6UwKVCpbm21588B8SJML X2UfeaBOUdkODiXiPOWJrAWPDE49vEAlf0r+wdqbTUSzTYKrwaT/Ldy8OuHpvb1+ eQHkWhAabz4QJTXWRn5UdCc4hH0WrLZmZfJI0g1cqQxV/I8AVEqLkkkXue5fUkt8 NnONBg2PiAVL7VaIkLfiwLbdgtRGIBXxAGXMG9peThglTgGrOLhhBDLLOp/gLpys teejTkieN/JZHdFZ3v7fpg640/4YinPVW4E2BT5ivZECpOghso8PrClh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExCUNFT+vWXThLbJtWLryp8epmmMB8GA1UdIwQY MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXp9kWZZ dv+FFw8+Hls/ZMQO6KITQzd1iZ9BQguNiokAeEDsuvaI8Tq7Q3L9UiGFwvobLZkj EMz5HjDt/nWDGWAOqSlbfleud/sXoV5kXl0rZqQJrsECkqfN4EHnQ+T1J7S1JJmS Qx73D0wNv6sggEgm3pBHg/2CgysP5+8/DXhxIS4ZC6gKPlJ1N3Uj3Hsoq3iRQf2s ezEy0oIKnW2I+2d8UVNHxgYK1SP9KS8wcR0dnnK4iXktZH+Jt0A+VAK/L0FmGMfR 29wQaMpnhZG0/wvI3JmQtu6K6fEBBQRheijUv7V2Ofg7JNqjzNpA8nOe32pLECVY HyvzeBLn9o0/kw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:44 2025 by rpki-client