This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json) Hash identifier: FaVDEcI5O1RhHgXjS0ByY5KP7e0V4BpbBrajSjBQarU= Subject key identifier: 16:3F:30:48:D8:14:A1:E2:F0:07:12:E7:F5:A3:53:2D:49:DC:3B:04 Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Certificate serial: 019AF1D20EF13FCA4695C92B7C192C00F7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft Manifest number: 12BC Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=) 2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=) 3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: 85khbfCApG0hQoFd08AG++HjW1K6+OLTxZHUMcv1p6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0e:f1:3f:ca:46:95:c9:2b:7c:19:2c:00:f7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=163f3048d814a1e2f00712e7f5a3532d49dc3b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:4a:6b:a7:73:91:02:9b:f2:b4:bf:ef:59: 13:07:85:f1:5d:f2:7d:10:be:5f:e2:9c:bb:21:b2: b9:42:9b:84:ce:9b:ea:15:66:30:89:07:57:90:91: 87:e7:7b:43:fc:f4:dc:db:1b:45:30:10:e3:ff:59: a6:48:42:6b:e3:e2:9f:a2:0e:f6:00:ca:4a:24:d6: 0f:a0:69:66:92:6f:8c:e6:b7:f8:84:c2:95:19:3a: 72:e4:73:11:94:a7:45:b1:fe:1b:2b:cf:3d:1d:ef: 1b:59:79:b4:d6:5f:4b:aa:63:26:2d:1b:c6:d0:f7: 50:05:e5:4d:a2:87:83:0a:b1:49:78:2a:5b:09:10: d2:25:da:33:73:f1:09:5a:ee:0d:25:d6:6e:30:32: b7:84:44:7a:f3:3f:10:14:aa:df:7b:80:f0:3e:71: 86:79:e1:27:1b:ae:43:8b:5e:d7:9e:86:76:97:a3: b0:2f:07:ae:27:05:50:3a:06:34:c8:bb:70:08:ce: 35:19:55:c8:6f:27:cf:db:19:f9:44:64:45:03:70: f5:c6:bf:4e:b8:6c:7e:ed:7c:b7:45:65:40:57:23: 24:e4:55:9f:ea:11:11:fc:e6:62:ad:84:d9:a0:45: 3d:96:bd:1c:8a:91:b4:de:25:cc:53:d2:9f:4d:94: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:30:48:D8:14:A1:E2:F0:07:12:E7:F5:A3:53:2D:49:DC:3B:04 X509v3 Authority Key Identifier: keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5a:55:b1:5f:4f:63:62:2b:8f:cc:5a:7b:62:59:e8:de:01: 6c:87:4a:11:76:05:02:a3:39:70:b7:41:c6:c4:e3:0f:9a:b5: ed:f3:4d:3e:39:e2:1b:9c:47:8a:1d:9f:08:db:58:d5:3b:0a: fb:f5:80:0c:87:df:e4:0c:37:d6:9e:b6:6a:51:61:6d:04:07: 87:a3:74:db:8c:fd:a6:01:1d:ac:60:05:66:06:26:0c:34:c0: bd:c9:9c:37:a6:fa:9a:fd:42:c2:dd:8a:f5:da:b3:8f:18:65: 24:48:0f:f1:07:13:39:45:41:b8:b1:af:28:20:b4:2a:7f:d8: 83:c6:00:08:56:d0:15:b6:2b:31:66:28:d6:73:61:48:44:f3: 86:cf:40:a8:92:d5:fa:98:3c:ab:82:ab:11:72:cc:61:4f:f3: 3b:ba:34:6a:90:76:9f:78:a8:42:1e:9c:71:a6:59:8a:73:fd: 44:64:97:56:e0:04:c9:ba:5c:13:74:53:ce:d2:09:d1:8f:95: 1a:f2:57:b3:25:7b:94:b6:22:12:56:5c:81:f5:f1:14:cb:23: 7c:71:b3:64:25:b0:af:6c:bd:3a:c2:85:df:03:fa:87:7e:bb: 7a:e0:c2:39:a8:d4:2d:d0:08:0b:bc:fa:32:f7:60:11:1a:b2: ea:1f:32:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g7xP8pGlckrfBksAPfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm NzQzMTIwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygxNjNmMzA0OGQ4MTRhMWUyZjAwNzEyZTdmNWEzNTMyZDQ5ZGMzYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3VKa6dzkQKb8rS/71kTB4XxXfJ9 EL5f4py7IbK5QpuEzpvqFWYwiQdXkJGH53tD/PTc2xtFMBDj/1mmSEJr4+Kfog72 AMpKJNYPoGlmkm+M5rf4hMKVGTpy5HMRlKdFsf4bK889He8bWXm01l9LqmMmLRvG 0PdQBeVNooeDCrFJeCpbCRDSJdozc/EJWu4NJdZuMDK3hER68z8QFKrfe4DwPnGG eeEnG65Di17XnoZ2l6OwLweuJwVQOgY0yLtwCM41GVXIbyfP2xn5RGRFA3D1xr9O uGx+7Xy3RWVAVyMk5FWf6hER/OZirYTZoEU9lr0cipG03iXMU9KfTZQbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY/MEjYFKHi8AcS5/WjUy1J3DsEMB8GA1UdIwQY MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVpVsV9P Y2Irj8xae2JZ6N4BbIdKEXYFAqM5cLdBxsTjD5q17fNNPjniG5xHih2fCNtY1TsK +/WADIff5Aw31p62alFhbQQHh6N024z9pgEdrGAFZgYmDDTAvcmcN6b6mv1Cwt2K 9dqzjxhlJEgP8QcTOUVBuLGvKCC0Kn/Yg8YACFbQFbYrMWYo1nNhSETzhs9AqJLV +pg8q4KrEXLMYU/zO7o0apB2n3ioQh6ccaZZinP9RGSXVuAEybpcE3RTztIJ0Y+V GvJXsyV7lLYiElZcgfXxFMsjfHGzZCWwr2y9OsKF3wP6h367euDCOajULdAIC7z6 MvdgERqy6h8ynA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:46 2025 by rpki-client