This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json) Hash identifier: 6p0J4PgwVc+RwEl023sRt9H2Ac1oGKDc99Rl2MgHjnI= Subject key identifier: 76:8E:E9:FE:D3:17:A7:13:38:EE:20:94:D1:40:78:E0:A3:52:50:39 Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52 Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252 Certificate serial: 019AF38969353D6F0EB9A7EE97CBC57174FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft Manifest number: 1208 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: lQjWDWaV/lvno2JWXDACfvk7HxQ0rnXMqrU0SXJ4kE0=) 2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:35:3d:6f:0e:b9:a7:ee:97:cb:c5:71:74:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd003af04774dd3e39730497989a3a171516252 Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=768ee9fed317a71338ee2094d14078e0a3525039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:96:09:3b:eb:d0:b5:59:a3:86:40:f6:a9: c8:eb:5c:a0:59:50:2b:77:f3:a9:36:13:e8:c6:f5: fb:bc:c1:93:04:1c:11:e9:ee:b4:88:57:ac:b3:8d: e5:53:46:7d:1a:45:fb:92:cd:c1:95:ae:9d:c4:16: 06:72:47:b9:6e:1e:6f:87:e1:bb:ac:71:4e:45:4b: 5d:a7:12:f7:01:d0:56:2c:99:cf:18:ee:5e:e5:5c: dc:6a:fa:0b:df:7c:9c:5c:86:e4:23:56:b1:35:5e: 8c:7f:50:ed:3f:27:e6:e7:5c:dc:b4:1a:2f:4e:e3: 90:26:ae:1c:7b:f8:b3:52:f2:81:29:c3:f0:74:3b: bd:d9:83:cd:f3:ad:b5:5e:2c:0d:d3:b4:b9:b1:52: f0:ea:95:b5:42:17:a6:09:74:d4:be:57:6a:18:9b: e2:46:89:8e:9d:ad:fd:c3:1c:60:1a:c8:0e:d7:53: 42:07:0d:1a:db:ac:64:37:22:d9:a2:cb:2e:f4:80: 1a:d7:f1:b0:14:bb:cc:1c:e6:f3:01:05:c4:e0:e0: e0:d4:a3:d2:5f:5b:b5:7e:3a:16:f0:19:3a:c8:cd: 8a:fd:93:7e:6b:56:15:19:6d:47:a8:18:e9:c0:fb: e7:54:73:3b:f7:ef:01:0c:80:73:58:db:c9:ad:51: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:E9:FE:D3:17:A7:13:38:EE:20:94:D1:40:78:E0:A3:52:50:39 X509v3 Authority Key Identifier: keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:83:3c:31:98:e3:84:46:ab:3b:4d:bf:90:d0:e0:34:8e:db: 45:42:f6:df:e5:04:4b:4a:d4:44:ae:ab:e1:65:a0:bb:34:99: ef:e3:78:2e:e7:62:77:96:29:4f:26:3a:6e:2f:c2:92:42:a9: 4b:c1:f1:14:2a:e0:9c:d6:d5:b6:4f:b6:20:a6:ad:4f:39:d6: c7:4c:8a:4e:e8:99:f6:bb:de:5f:fb:e7:e1:2a:4b:09:ec:59: 54:ad:c8:47:5d:90:1e:e8:4f:a8:ed:6f:73:2a:5f:33:b2:e3: 36:b3:6f:63:84:9b:77:1b:6c:9f:56:f3:ef:20:8a:64:4e:ca: 3f:e9:c6:b5:5c:cd:ea:cc:33:f1:ea:26:91:69:7e:37:52:5c: 43:33:58:58:b0:dd:da:aa:85:5c:81:37:a5:3d:82:10:22:f7: 3e:42:97:f7:30:da:e2:6b:9f:e3:00:9d:fe:57:ec:28:b0:7d: 27:5c:6c:cd:90:bb:0a:55:67:b6:4a:3b:f1:d1:af:5a:af:e7: 3a:a7:2e:4d:3d:c2:09:cd:5a:45:b8:d8:26:96:3a:36:a8:80: ce:dc:81:18:7c:c8:e7:d8:6c:f3:c0:e6:98:a7:17:0a:50:40: 0e:bd:52:d4:1b:5b:0f:fc:0b:16:d6:e6:42:82:3d:4d:2d:6a: 80:0c:b2:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWk1PW8Ouaful8vFcXT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1 MTYyNTIwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg3NjhlZTlmZWQzMTdhNzEzMzhlZTIwOTRkMTQwNzhlMGEzNTI1MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3CWCTvr0LVZo4ZA9qnI61ygWVAr d/OpNhPoxvX7vMGTBBwR6e60iFess43lU0Z9GkX7ks3Bla6dxBYGcke5bh5vh+G7 rHFORUtdpxL3AdBWLJnPGO5e5VzcavoL33ycXIbkI1axNV6Mf1DtPyfm51zctBov TuOQJq4ce/izUvKBKcPwdDu92YPN8621XiwN07S5sVLw6pW1QhemCXTUvldqGJvi RomOna39wxxgGsgO11NCBw0a26xkNyLZossu9IAa1/GwFLvMHObzAQXE4ODg1KPS X1u1fjoW8Bk6yM2K/ZN+a1YVGW1HqBjpwPvnVHM79+8BDIBzWNvJrVHDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaO6f7TF6cTOO4glNFAeOCjUlA5MB8GA1UdIwQY MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt NjdjZDJiNDU5YWFlLzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyoM8MZjj hEarO02/kNDgNI7bRUL23+UES0rURK6r4WWguzSZ7+N4Ludid5YpTyY6bi/CkkKp S8HxFCrgnNbVtk+2IKatTznWx0yKTuiZ9rveX/vn4SpLCexZVK3IR12QHuhPqO1v cypfM7LjNrNvY4Sbdxtsn1bz7yCKZE7KP+nGtVzN6swz8eomkWl+N1JcQzNYWLDd 2qqFXIE3pT2CECL3PkKX9zDa4muf4wCd/lfsKLB9J1xszZC7ClVntko78dGvWq/n OqcuTT3CCc1aRbjYJpY6NqiAztyBGHzI59hs88DmmKcXClBADr1S1BtbD/wLFtbm QoI9TS1qgAyy/A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:19 2025 by rpki-client