This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json) Hash identifier: N/tOqxvywRhMVHLNUoaFp5ene/8NqAMSUrnVBG9dMg8= Subject key identifier: 4F:46:56:94:9E:5F:9C:96:4A:9B:B6:72:AD:41:FD:EB:55:EA:17:D7 Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c Certificate serial: 019AF276EA086344C8AD6F3E4841E8888EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft Manifest number: 86 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=) 2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 7KBOhYZCzaG0wNyVSM8sMGTd4UjXDkgZOjV5yN4djic=) 3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:08:63:44:c8:ad:6f:3e:48:41:e8:88:8e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=4f4656949e5f9c964a9bb672ad41fdeb55ea17d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:8b:4c:66:51:a6:b9:d4:8b:64:53:18:9a: 9d:1d:04:4e:53:9e:ec:36:8b:ba:ad:60:c9:7a:4c: c1:a6:10:50:7f:51:43:cf:a7:76:d6:c0:56:38:05: 7e:56:bb:fd:3c:32:c8:10:3b:03:b9:bb:98:10:de: 74:b6:48:b2:c8:f7:b7:8e:36:da:18:44:28:48:a1: 02:7c:5c:77:00:ec:38:4e:4f:d2:19:8c:4f:e1:64: 59:c3:0b:f4:c7:18:63:79:b3:2a:bf:85:ac:ce:65: 96:a3:3c:41:08:ec:73:37:7c:0f:7a:71:e0:f7:2c: 5e:5c:87:6d:0c:ad:c2:68:d5:a6:e7:0d:16:ac:09: 63:ad:e6:dd:78:12:cd:bd:d9:50:c9:33:ce:d0:c5: 0f:9e:3d:57:bd:47:ce:79:9d:cf:b7:9c:3a:7d:8b: 66:66:ad:ff:a8:74:c8:b7:f9:2c:74:be:fc:e5:08: 41:1d:d6:7f:17:0c:5b:b7:70:c8:29:94:aa:ea:fe: 55:21:54:07:19:cb:dd:f0:51:7d:40:56:c1:91:8d: 5d:25:6c:19:58:eb:d7:84:e4:1f:3f:c4:d5:a7:a6: b7:93:7b:c1:e2:ad:63:7f:87:64:15:29:63:01:e1: 16:36:79:74:7e:72:d2:b0:e7:84:f3:f9:e3:e8:8a: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:56:94:9E:5F:9C:96:4A:9B:B6:72:AD:41:FD:EB:55:EA:17:D7 X509v3 Authority Key Identifier: keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cb:6b:1b:89:49:30:81:8d:c3:e1:23:7f:e4:ed:5f:88:29: 25:15:5b:7b:b1:05:2c:80:df:2a:d3:1b:66:f3:33:16:0b:1b: e6:8f:c1:a5:80:7b:e9:34:fc:a1:a2:ce:f4:94:ef:05:a4:ba: 46:61:b8:89:91:9a:28:3c:8b:17:b4:5e:46:8b:32:9a:64:fa: bf:15:26:84:25:7c:72:1a:7a:e8:25:bd:e4:9f:fe:aa:1f:81: fe:cf:e7:46:d2:5d:fd:8b:74:f2:93:e4:98:9b:58:b2:94:78: f3:e9:9f:3d:1a:75:ce:a9:34:8d:9b:a3:bd:9c:b8:e6:ca:34: 62:ee:9a:2c:79:b0:9d:37:4e:20:d0:19:4f:9b:43:ae:65:75: 4d:2b:43:24:af:33:b8:e6:7c:74:43:16:61:6a:08:cf:c1:c0: c3:92:b0:e2:a5:a5:54:27:b0:28:0c:42:b5:8e:95:c3:97:63: 38:39:2e:72:7c:bf:77:57:e3:80:64:1b:82:1b:9a:33:55:2f: e1:da:4b:56:65:e1:ce:d1:f7:f2:6d:95:2d:40:be:51:71:87: 84:33:86:d7:68:96:a7:e3:b3:97:4d:c5:ea:a7:88:e5:75:18: cc:46:f6:9f:ef:fb:73:3f:42:7e:d8:0a:46:03:11:8c:90:67: fe:2b:f2:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduoIY0TIrW8+SEHoiI7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi Nzk2MWMwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg0ZjQ2NTY5NDllNWY5Yzk2NGE5YmI2NzJhZDQxZmRlYjU1ZWExN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlCLTGZRprnUi2RTGJqdHQROU57s Nou6rWDJekzBphBQf1FDz6d21sBWOAV+Vrv9PDLIEDsDubuYEN50tkiyyPe3jjba GEQoSKECfFx3AOw4Tk/SGYxP4WRZwwv0xxhjebMqv4WszmWWozxBCOxzN3wPenHg 9yxeXIdtDK3CaNWm5w0WrAljrebdeBLNvdlQyTPO0MUPnj1XvUfOeZ3Pt5w6fYtm Zq3/qHTIt/ksdL785QhBHdZ/Fwxbt3DIKZSq6v5VIVQHGcvd8FF9QFbBkY1dJWwZ WOvXhOQfP8TVp6a3k3vB4q1jf4dkFSljAeEWNnl0fnLSsOeE8/nj6IqfSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9GVpSeX5yWSpu2cq1B/etV6hfXMB8GA1UdIwQY MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt M2MzMGEwYWQxM2Y2LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2 LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAActrG4lJ MIGNw+Ejf+TtX4gpJRVbe7EFLIDfKtMbZvMzFgsb5o/BpYB76TT8oaLO9JTvBaS6 RmG4iZGaKDyLF7ReRosymmT6vxUmhCV8chp66CW95J/+qh+B/s/nRtJd/Yt08pPk mJtYspR48+mfPRp1zqk0jZujvZy45so0Yu6aLHmwnTdOINAZT5tDrmV1TStDJK8z uOZ8dEMWYWoIz8HAw5Kw4qWlVCewKAxCtY6Vw5djODkucny/d1fjgGQbghuaM1Uv 4dpLVmXhztH38m2VLUC+UXGHhDOG12iWp+Ozl03F6qeI5XUYzEb2n+/7cz9CftgK RgMRjJBn/ivycQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:29 2025 by rpki-client