This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json) Hash identifier: 3iRrqsBA+GStTZlFBH/KInZ9bHQg1kAJsWRafqw0Uig= Subject key identifier: EC:72:1D:23:0C:A1:2A:B9:96:F5:D2:E4:D1:B0:A3:E2:82:3E:20:B8 Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a Certificate serial: 019AF2AD4D27ED3C4590B8E2AA657B726C9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft Manifest number: 0347 Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=) 2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: yeUutB2Egt1fhyKSdD3T53MNzdjy6XFtAS+oPfoLWkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:27:ed:3c:45:90:b8:e2:aa:65:7b:72:6c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=ec721d230ca12ab996f5d2e4d1b0a3e2823e20b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:55:97:72:c1:e4:c5:08:49:1b:fe:50:4a: 73:6c:52:90:a9:d5:ee:6e:c9:59:46:87:aa:e3:29: e8:6f:00:6a:7b:35:03:e3:fc:a6:da:80:d9:dd:97: 5e:f2:71:6c:c8:7a:77:19:18:21:db:f1:de:20:a9: 30:41:e8:18:35:9e:76:56:ea:c6:c1:86:5a:38:9f: 00:bc:18:b0:1c:8b:b9:34:cc:08:16:2e:ee:59:f4: df:aa:bb:83:9d:31:fe:da:c0:15:57:7a:6c:3a:6c: 30:8f:36:9b:e3:d1:32:b1:dc:e1:96:d6:10:95:78: 69:58:38:0b:03:6a:b1:9c:67:db:c2:bc:8e:88:cd: 3c:51:82:24:ca:6c:da:d6:6c:92:18:88:80:8b:24: 36:50:35:1c:f4:59:5a:bc:0a:9e:c8:65:5d:6d:3e: d2:4d:d6:2a:f5:10:fd:92:42:9f:cd:bb:9b:fc:2e: 56:18:d3:23:42:c5:a0:eb:bc:41:b0:b3:09:16:b3: 49:f9:a6:42:db:59:66:80:1e:34:de:ae:4c:f1:1f: ee:6f:70:72:95:0d:f7:95:11:33:7d:7b:a5:83:92: db:4e:23:35:54:43:d7:90:c8:fe:f0:2c:81:0f:fa: 15:81:c9:3b:75:97:03:78:77:23:50:df:cd:33:d8: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:1D:23:0C:A1:2A:B9:96:F5:D2:E4:D1:B0:A3:E2:82:3E:20:B8 X509v3 Authority Key Identifier: keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:e8:fc:29:5a:02:c5:d4:10:9f:94:54:e9:99:f9:4a:0f: 30:c6:6b:cc:e8:96:c7:8c:75:25:6f:01:a2:c7:fa:3d:b0:5f: eb:a3:55:79:cd:1c:f3:fa:02:6e:4c:f1:91:4e:ff:a4:5a:8a: 57:48:d8:b2:2e:3b:40:b5:cb:b8:1d:e1:0c:54:41:19:d5:ae: 75:6d:4b:ac:88:44:4b:67:7d:78:10:6c:e6:63:02:48:4e:c7: 70:3f:28:f6:4a:65:ab:1f:a5:24:0e:45:57:04:0b:1a:ca:50: dc:fc:27:93:72:f7:ac:eb:4f:7e:90:05:66:95:2e:f1:a1:b4: 43:d7:26:13:a7:fa:a2:71:15:b9:fa:a8:98:a7:4b:b9:cd:e9: 1c:33:95:df:cf:d8:db:9f:d6:c6:7b:60:68:5d:ad:3e:c2:07: c8:81:cb:d1:05:90:74:5e:e6:69:a8:4a:40:12:4c:de:fe:f9: b9:6f:14:07:4f:c6:72:a7:de:14:7d:cc:90:82:e5:3f:a6:47: 44:8a:1e:25:3f:ec:3f:ed:5e:8b:c5:c0:17:a2:8f:d7:cb:8c: e1:b6:f7:9c:9c:f6:89:fc:9e:9f:a0:ef:4d:30:5f:e0:5b:11: 24:6e:88:47:d5:d4:0f:f7:56:25:06:a1:67:9c:b4:19:76:5b: d6:19:d7:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU0n7TxFkLjiqmV7cmyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDI5ZmIxOGUxOWM1Njc3MjQ0MDU3ZWRhMzhjNjNkYzE4 ZGExMmEwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD EyhlYzcyMWQyMzBjYTEyYWI5OTZmNWQyZTRkMWIwYTNlMjgyM2UyMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQNVl3LB5MUISRv+UEpzbFKQqdXu bslZRoeq4ynobwBqezUD4/ym2oDZ3Zde8nFsyHp3GRgh2/HeIKkwQegYNZ52VurG wYZaOJ8AvBiwHIu5NMwIFi7uWfTfqruDnTH+2sAVV3psOmwwjzab49EysdzhltYQ lXhpWDgLA2qxnGfbwryOiM08UYIkymza1mySGIiAiyQ2UDUc9FlavAqeyGVdbT7S TdYq9RD9kkKfzbub/C5WGNMjQsWg67xBsLMJFrNJ+aZC21lmgB403q5M8R/ub3By lQ33lREzfXulg5LbTiM1VEPXkMj+8CyBD/oVgck7dZcDeHcjUN/NM9gk/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxyHSMMoSq5lvXS5NGwo+KCPiC4MB8GA1UdIwQY MBaAFIwCn7GOGcVnckQFfto4xj3BjaEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2Mt NGQzYjZjMWYzYTg5LzEvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84MDAxNjEtY2I2Mi00YjdjLWFjN2MtNGQzYjZjMWYzYTg5 LzEvakFLZnNZNFp4V2R5UkFWLTJqakdQY0dOb1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlDo/Cla AsXUEJ+UVOmZ+UoPMMZrzOiWx4x1JW8Bosf6PbBf66NVec0c8/oCbkzxkU7/pFqK V0jYsi47QLXLuB3hDFRBGdWudW1LrIhES2d9eBBs5mMCSE7HcD8o9kplqx+lJA5F VwQLGspQ3Pwnk3L3rOtPfpAFZpUu8aG0Q9cmE6f6onEVufqomKdLuc3pHDOV38/Y 25/WxntgaF2tPsIHyIHL0QWQdF7maahKQBJM3v75uW8UB0/GcqfeFH3MkILlP6ZH RIoeJT/sP+1ei8XAF6KP18uM4bb3nJz2ifyen6DvTTBf4FsRJG6IR9XUD/dWJQah Z5y0GXZb1hnXKA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:49 2025 by rpki-client