This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json) Hash identifier: qQ4nTKEBG3k/TSUbQvs4xUWiYkQ3v2pC4B10QaPYstY= Subject key identifier: BE:AD:33:D9:D1:9F:DB:4E:80:F0:00:99:82:E4:19:5C:84:12:DA:4C Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Certificate serial: 019AF1D17F99E8EB4A42632D01FC9C28331D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft Manifest number: 1615 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: 99HsJLp6yhX5dn8K4ZkfsoxI9H09uuwM7wdupChh0CA=) 2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7f:99:e8:eb:4a:42:63:2d:01:fc:9c:28:33:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=bead33d9d19fdb4e80f0009982e4195c8412da4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f1:af:e3:b7:79:b0:41:53:09:5b:b4:50:76: ae:bf:18:1f:6b:4c:50:41:1e:01:b5:8d:12:9e:dd: 74:aa:30:6d:eb:01:f9:42:28:3a:98:12:64:d5:37: e1:80:20:0f:3e:34:d3:e5:c1:b9:89:70:4a:04:7d: 6b:08:0f:d3:80:c4:45:24:19:92:6f:47:22:43:8f: d8:73:43:9d:c8:82:67:45:e1:73:22:8d:e0:f3:7f: fb:b9:ab:4b:70:08:50:a0:83:1a:26:73:d3:7b:fa: 27:4c:9b:89:aa:a4:48:88:df:2c:75:c5:7b:99:ec: 3e:88:a8:a4:38:13:17:63:31:3c:8f:20:6a:4e:ff: 98:6d:20:21:ea:b5:14:24:31:1a:32:c9:ed:43:4c: 6d:26:68:fe:0d:17:85:2b:95:57:57:10:fe:0c:a2: b4:6f:9e:a5:61:eb:a3:2d:80:43:e6:40:26:0b:ef: 5b:06:29:0f:4d:d9:b4:31:f2:a2:66:8d:12:e6:4a: ce:61:53:88:1d:e7:e9:06:78:35:cb:78:ec:d1:24: 3d:5d:85:ab:01:22:91:5f:4e:b8:38:46:b1:38:0f: cb:f3:f7:ce:68:7d:15:63:5c:14:49:ab:18:49:78: 45:50:f7:10:3d:4c:4e:99:91:6a:cb:57:b1:7d:b7: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:33:D9:D1:9F:DB:4E:80:F0:00:99:82:E4:19:5C:84:12:DA:4C X509v3 Authority Key Identifier: keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0f:f5:f6:67:bc:3a:12:91:0c:c7:62:00:3b:17:a6:82:43: 94:ad:5b:33:93:46:b6:b0:a3:38:2f:b0:f8:40:ba:24:9f:d2: 69:dc:76:f7:20:5e:7d:1b:96:eb:cd:ea:27:59:ef:ac:e0:fe: f5:52:18:a4:3b:86:9c:96:a8:b5:e6:02:11:df:d4:c6:a6:eb: 99:38:3c:be:c2:2c:b1:70:6a:e0:30:b4:7a:0b:49:a0:80:98: f9:de:19:ac:83:7b:2a:3d:da:24:0a:4c:0a:a5:08:4f:b7:7b: 0b:c0:f0:4a:63:49:b7:71:8d:1a:fe:06:c5:14:11:bd:bb:61: 4d:e2:ac:07:19:a0:5b:9c:f4:ae:a9:73:07:3d:0e:81:ca:07: d2:c0:4e:e3:6c:9f:00:29:0c:06:87:2a:a1:c2:d4:86:f5:d5: d7:ef:b1:71:24:f9:5f:65:28:90:01:fc:99:ae:78:5d:0d:5c: 51:c2:ca:ab:7c:c4:d5:f5:03:47:b3:95:00:d0:0f:2e:f6:20: 5c:26:db:a6:8a:e8:fd:a7:3d:28:67:f5:a7:f3:bc:26:92:fa: 89:59:41:e7:02:4e:27:9e:cd:76:ce:d0:bf:bb:eb:43:a0:c6: 19:f8:7d:9a:51:57:e1:12:f0:50:03:57:40:9d:50:33:63:30: 87:b0:be:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X+Z6OtKQmMtAfycKDMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4 YWQwYTgwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EyhiZWFkMzNkOWQxOWZkYjRlODBmMDAwOTk4MmU0MTk1Yzg0MTJkYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Gv47d5sEFTCVu0UHauvxgfa0xQ QR4BtY0Snt10qjBt6wH5Qig6mBJk1TfhgCAPPjTT5cG5iXBKBH1rCA/TgMRFJBmS b0ciQ4/Yc0OdyIJnReFzIo3g83/7uatLcAhQoIMaJnPTe/onTJuJqqRIiN8sdcV7 mew+iKikOBMXYzE8jyBqTv+YbSAh6rUUJDEaMsntQ0xtJmj+DReFK5VXVxD+DKK0 b56lYeujLYBD5kAmC+9bBikPTdm0MfKiZo0S5krOYVOIHefpBng1y3js0SQ9XYWr ASKRX064OEaxOA/L8/fOaH0VY1wUSasYSXhFUPcQPUxOmZFqy1exfbfIlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6tM9nRn9tOgPAAmYLkGVyEEtpMMB8GA1UdIwQY MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ/19me8 OhKRDMdiADsXpoJDlK1bM5NGtrCjOC+w+EC6JJ/Sadx29yBefRuW683qJ1nvrOD+ 9VIYpDuGnJaoteYCEd/UxqbrmTg8vsIssXBq4DC0egtJoICY+d4ZrIN7Kj3aJApM CqUIT7d7C8DwSmNJt3GNGv4GxRQRvbthTeKsBxmgW5z0rqlzBz0OgcoH0sBO42yf ACkMBocqocLUhvXV1++xcST5X2UokAH8ma54XQ1cUcLKq3zE1fUDR7OVANAPLvYg XCbbporo/ac9KGf1p/O8JpL6iVlB5wJOJ57Nds7Qv7vrQ6DGGfh9mlFX4RLwUANX QJ1QM2Mwh7C+CQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:24 2025 by rpki-client