This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json) Hash identifier: /3TsZ9A9xYietxBU650cDniheeyzXicQ2X+Ts6mKl9I= Subject key identifier: E3:DD:79:4D:71:B1:86:7A:26:D7:43:A5:59:F6:20:F1:FF:B3:19:67 Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Certificate serial: 019AF088678D1E0BAB1AB92F1219DF5BBA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft Manifest number: 0BDF Signing time: Fri 05 Dec 2025 22:01:02 +0000 Manifest this update: Fri 05 Dec 2025 22:01:02 +0000 Manifest next update: Sat 06 Dec 2025 22:01:02 +0000 Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=) 2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=) 3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: 6k4RPWW1V3wxvLteRSCaj7Zh3af4SoB7fyEWU02m2f0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:67:8d:1e:0b:ab:1a:b9:2f:12:19:df:5b:ba:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Validity Not Before: Dec 5 22:01:02 2025 GMT Not After : Dec 6 22:01:02 2025 GMT Subject: CN=e3dd794d71b1867a26d743a559f620f1ffb31967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:65:db:b1:31:6f:07:00:07:d3:15:69:f7: 76:81:7e:e5:d0:e7:bc:8a:65:2a:4a:ec:c7:45:80: 37:64:35:2f:8e:cb:43:9c:fc:e1:14:34:e9:1d:63: ec:cd:61:a0:13:8b:9b:a7:09:51:21:c3:e9:7f:2f: df:20:ed:60:b6:b0:b4:80:b4:f3:0f:2d:30:f5:c1: 69:4a:9c:13:4b:0f:60:9e:b4:c0:9b:a7:6b:e5:51: 0d:41:f8:3f:bd:41:06:5a:00:34:c3:4d:27:f2:69: 1c:cd:ff:ad:49:63:58:97:8a:4d:55:2f:65:e6:8f: 67:dd:1b:8e:67:01:33:48:45:5b:16:7c:a8:d9:98: 2b:63:e4:e8:6a:af:74:35:97:11:75:e3:81:33:62: 47:2e:93:53:4e:b2:14:af:a3:8c:20:85:62:c6:3d: 4f:34:07:bf:bd:6c:1c:b5:be:ab:b7:81:28:9f:fc: 7b:bb:2f:68:9d:ef:b5:e3:bf:ea:74:1b:87:65:6e: 0f:7c:5a:a5:32:10:db:6a:ce:53:8d:0d:92:8d:69: cd:98:37:80:74:6c:2e:9e:45:c2:77:8a:73:54:da: f7:0e:b3:2f:1a:d8:91:b5:72:74:dd:3b:54:90:21: 02:6f:1c:ef:d4:74:c3:83:15:58:3c:5b:5e:16:3f: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DD:79:4D:71:B1:86:7A:26:D7:43:A5:59:F6:20:F1:FF:B3:19:67 X509v3 Authority Key Identifier: keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:eb:bd:fe:c3:fc:c3:04:71:4b:0f:80:10:35:3a:2a:16:6e: 8f:36:c2:7e:c8:00:25:0f:72:79:01:76:67:5d:79:43:6d:75: 48:7c:bc:42:4a:3f:de:9a:20:5d:8f:6d:7a:ce:c4:41:e6:cb: 4c:67:f3:2b:0d:2b:36:1a:69:14:8b:23:1d:2e:92:10:aa:5d: 08:d9:54:40:db:21:9d:88:46:d1:07:f3:9f:6b:80:d0:ce:70: af:93:38:75:a4:e7:ba:c4:27:fa:32:1b:a2:87:36:16:5f:b1: e1:29:ac:60:4f:ad:3b:08:2e:65:02:b1:1d:4e:d9:07:a6:ff: 0c:c2:53:d1:00:e5:23:31:e7:1f:ef:63:fd:71:8a:41:aa:59: 12:86:4d:5d:fc:ec:80:e8:43:a5:c9:05:b2:74:5b:b0:3d:3d: ac:3c:01:7a:92:36:cf:32:03:d4:4e:2a:14:6e:14:f6:a5:06: 9a:e3:8b:18:51:f5:f4:03:65:28:e9:c3:28:f5:9e:d8:9c:ed: de:8f:d4:3e:6b:86:bb:76:d1:fb:d3:c2:1e:98:46:68:17:32: 73:98:68:80:3b:a3:39:73:08:b5:6a:2d:ca:82:9b:44:6f:12: 5d:71:f9:14:13:92:9f:24:81:f6:71:94:24:51:e7:e1:7e:16: df:6b:ff:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGeNHgurGrkvEhnfW7p8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYThhNGQ0MmEwMTk2ZGY3Y2MwZTE0ZjU5N2NmNTY2MGQ2 M2MwOWYwHhcNMjUxMjA1MjIwMTAyWhcNMjUxMjA2MjIwMTAyWjAzMTEwLwYDVQQD EyhlM2RkNzk0ZDcxYjE4NjdhMjZkNzQzYTU1OWY2MjBmMWZmYjMxOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30hl27ExbwcAB9MVafd2gX7l0Oe8 imUqSuzHRYA3ZDUvjstDnPzhFDTpHWPszWGgE4ubpwlRIcPpfy/fIO1gtrC0gLTz Dy0w9cFpSpwTSw9gnrTAm6dr5VENQfg/vUEGWgA0w00n8mkczf+tSWNYl4pNVS9l 5o9n3RuOZwEzSEVbFnyo2ZgrY+Toaq90NZcRdeOBM2JHLpNTTrIUr6OMIIVixj1P NAe/vWwctb6rt4Eon/x7uy9one+147/qdBuHZW4PfFqlMhDbas5TjQ2SjWnNmDeA dGwunkXCd4pzVNr3DrMvGtiRtXJ03TtUkCECbxzv1HTDgxVYPFteFj9tGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPdeU1xsYZ6JtdDpVn2IPH/sxlnMB8GA1UdIwQY MBaAFIyopNQqAZbffMDhT1l89WYNY8CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMt MTAwNGMxZTUwZGZlLzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMtMTAwNGMxZTUwZGZl LzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieu9/sP8 wwRxSw+AEDU6KhZujzbCfsgAJQ9yeQF2Z115Q211SHy8Qko/3pogXY9tes7EQebL TGfzKw0rNhppFIsjHS6SEKpdCNlUQNshnYhG0Qfzn2uA0M5wr5M4daTnusQn+jIb ooc2Fl+x4SmsYE+tOwguZQKxHU7ZB6b/DMJT0QDlIzHnH+9j/XGKQapZEoZNXfzs gOhDpckFsnRbsD09rDwBepI2zzID1E4qFG4U9qUGmuOLGFH19ANlKOnDKPWe2Jzt 3o/UPmuGu3bR+9PCHphGaBcyc5hogDujOXMItWotyoKbRG8SXXH5FBOSnySB9nGU JFHn4X4W32v/fA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:57 2025 by rpki-client