This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json) Hash identifier: UFD3jbDg1CBALMhdwPe3pjZjT9qTmy2JIdS2k1nH5cw= Subject key identifier: 35:0A:0E:04:A7:B3:87:29:EA:A5:E1:E9:1C:56:37:B4:62:6C:20:AD Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8 Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8 Certificate serial: 019AF24009F6D4C1C94820AFD81322D374F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=) 2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: W2r2GSINHeZ8VpvE9LZKPByaFwt33MF6oh1x6fcDIQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:09:f6:d4:c1:c9:48:20:af:d8:13:22:d3:74:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8 Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=350a0e04a7b38729eaa5e1e91c5637b4626c20ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:8f:af:bb:0d:90:85:9a:b7:ea:87:a9:84: 01:43:db:2a:5f:e5:20:31:05:dd:99:4e:b3:80:88: 3f:ee:fe:e5:ae:90:04:96:75:21:ce:b6:52:fb:75: 07:cc:4f:93:6d:b1:c2:c2:75:4c:37:5b:0d:66:99: 96:db:9e:a0:c2:32:e5:6b:61:b2:75:cb:78:bc:dc: 02:1b:dd:aa:2f:b5:43:46:d8:94:bf:9b:41:82:71: c8:3f:f0:41:2e:20:9e:96:88:26:0b:b5:4f:d0:9c: 86:e7:d9:73:93:16:c9:59:b4:6c:53:0d:80:4f:9e: 79:2f:5e:99:92:b1:2a:76:f5:b3:4f:2e:1b:e6:88: cf:85:0f:c0:5a:77:f1:de:61:2b:fc:a2:ab:88:08: 8b:36:63:9b:16:99:ce:89:3e:71:9f:ec:16:8c:77: bf:64:e8:ea:a6:4b:fa:53:fc:64:0c:ef:02:4b:6d: 4b:e7:b8:07:2d:12:e3:c8:9f:57:0b:c3:26:86:0f: 69:d8:a8:b9:ac:40:c1:31:f4:03:75:d1:08:c4:9a: 15:33:1b:f8:a6:1f:46:23:cd:3d:d0:53:92:32:33: b6:c8:83:4b:5c:63:f2:6c:e5:b6:6b:ef:ff:57:48: 7b:2b:cd:75:e7:df:f8:51:ef:1a:c6:a3:e5:d3:68: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0A:0E:04:A7:B3:87:29:EA:A5:E1:E9:1C:56:37:B4:62:6C:20:AD X509v3 Authority Key Identifier: keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:a5:5a:f2:75:60:ec:e1:a8:6b:94:43:0f:fa:ac:09:78: 6e:f0:5e:01:35:d3:89:eb:55:f5:4a:47:75:1f:51:c8:b8:e5: 9d:c4:04:57:9f:da:76:9a:7e:9a:01:0e:67:93:c5:a3:15:ac: 44:2a:b0:84:5c:cc:aa:80:2f:3f:4b:9e:68:76:ed:a4:d1:4b: db:9d:71:53:a3:e4:4c:51:9d:4c:f8:c1:5f:31:54:ca:26:f5: c6:c0:37:bc:59:45:fb:f7:90:91:80:25:65:dc:56:f6:6e:8c: 62:e0:04:30:52:4b:11:1e:c9:b8:42:3b:40:95:56:94:3a:d0: ba:69:7c:3b:55:d0:0a:8e:88:9a:3a:b5:77:31:58:3c:c7:b4: b0:70:82:68:8c:93:38:3f:15:7c:40:3c:a4:9b:83:76:62:9e: ee:e1:f9:7b:7d:fc:b0:70:9e:ba:41:c7:40:1d:1f:7c:c9:b7: 0d:e3:d0:e0:42:ee:f8:ba:67:fc:0e:3d:02:17:cb:67:4f:67: 4c:52:50:b0:e9:bd:79:9d:da:45:7a:19:cd:ac:41:0b:aa:b1: ea:3f:12:0b:fd:7b:a4:84:1c:84:90:ee:79:b8:02:28:51:86: df:1a:54:3c:97:38:86:e9:18:27:d1:91:c8:a0:ce:fd:52:12: 11:57:00:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAn21MHJSCCv2BMi03TxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZjFjOThkM2E3NzgyNGUyMzZiMmM0Y2RkOTM3OGMwNTA5 YTNkZTgwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD EygzNTBhMGUwNGE3YjM4NzI5ZWFhNWUxZTkxYzU2MzdiNDYyNmMyMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EmPr7sNkIWat+qHqYQBQ9sqX+Ug MQXdmU6zgIg/7v7lrpAElnUhzrZS+3UHzE+TbbHCwnVMN1sNZpmW256gwjLla2Gy dct4vNwCG92qL7VDRtiUv5tBgnHIP/BBLiCelogmC7VP0JyG59lzkxbJWbRsUw2A T555L16ZkrEqdvWzTy4b5ojPhQ/AWnfx3mEr/KKriAiLNmObFpnOiT5xn+wWjHe/ ZOjqpkv6U/xkDO8CS21L57gHLRLjyJ9XC8Mmhg9p2Ki5rEDBMfQDddEIxJoVMxv4 ph9GI8090FOSMjO2yINLXGPybOW2a+//V0h7K81159/4Ue8axqPl02hpMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUKDgSns4cp6qXh6RxWN7RibCCtMB8GA1UdIwQY MBaAFI/xyY06d4JOI2ssTN2TeMBQmj3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEt ZmJkNzAzZWU2YzkzLzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEtZmJkNzAzZWU2Yzkz LzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXKlWvJ1 YOzhqGuUQw/6rAl4bvBeATXTietV9UpHdR9RyLjlncQEV5/adpp+mgEOZ5PFoxWs RCqwhFzMqoAvP0ueaHbtpNFL251xU6PkTFGdTPjBXzFUyib1xsA3vFlF+/eQkYAl ZdxW9m6MYuAEMFJLER7JuEI7QJVWlDrQuml8O1XQCo6Imjq1dzFYPMe0sHCCaIyT OD8VfEA8pJuDdmKe7uH5e338sHCeukHHQB0ffMm3DePQ4ELu+Lpn/A49AhfLZ09n TFJQsOm9eZ3aRXoZzaxBC6qx6j8SC/17pIQchJDuebgCKFGG3xpUPJc4hukYJ9GR yKDO/VISEVcA6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:53 2025 by rpki-client