This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json) Hash identifier: bcWNpqUPMckUTdn0Wtx+1L0wGMVhwz6SEFc+GDfRKtc= Subject key identifier: 78:93:6B:DE:66:C4:10:BD:E9:1D:47:C4:23:69:73:68:0D:17:B6:01 Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a Certificate serial: 019AF2E430564D4AFB8D40CC65B5515C4B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft Manifest number: 0513 Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa (hash: v5GClXo0hTRItLv1LLR9D2MpJboOBKsEHK/lxMtobJ4=) 2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: 8Un3SMXahjNdy8hWinqMIFkA5pJEqVZkl3Oi0SjO5n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:30:56:4d:4a:fb:8d:40:cc:65:b5:51:5c:4b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=78936bde66c410bde91d47c4236973680d17b601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:d1:e3:82:ae:82:da:f6:af:fb:c6:72:c8: 32:e5:a2:1d:f4:3b:72:3d:f6:2d:33:d8:59:4b:ff: 06:af:14:ea:a8:2e:64:d4:54:86:93:8b:1c:3e:42: 9d:ef:85:f4:d4:fb:e9:50:63:72:46:28:b9:67:6a: e9:fe:bd:f6:62:01:b3:6d:c9:72:65:76:a5:f3:8e: d1:36:93:4c:7a:dc:6c:f1:8f:2c:54:f4:a5:c1:c8: af:fa:c5:fd:12:67:a2:e4:09:38:c6:35:1e:19:39: d4:8c:94:5a:39:7a:9b:7e:2e:df:5c:40:5d:c0:48: 7e:71:a7:a7:da:10:22:32:da:5e:8a:8b:d4:40:65: a8:8e:ff:0a:43:90:db:67:39:a2:f8:de:a4:aa:47: 60:3d:a6:1c:b1:0e:29:30:9a:bd:1e:ac:cf:3e:b9: 57:3e:1b:0c:dc:ac:d7:31:6e:56:35:b4:5b:f4:39: 38:17:87:19:7f:74:7d:44:c5:71:ef:05:dc:72:40: 98:1d:d4:b4:12:e1:7f:d4:ad:49:8c:8b:ce:86:44: e9:b6:bd:ae:ac:d2:98:62:c0:69:0b:d4:f7:2b:ac: b6:d8:39:0e:b3:40:c6:a4:0a:e5:1d:65:a5:f7:df: 61:ac:c6:b3:55:c7:72:3f:0e:b1:76:3f:7e:a3:2d: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:93:6B:DE:66:C4:10:BD:E9:1D:47:C4:23:69:73:68:0D:17:B6:01 X509v3 Authority Key Identifier: keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3e:33:19:ba:1a:ff:c7:f6:98:2b:b1:f9:a2:fa:38:25:5a: ff:e4:fe:d5:a6:df:3c:5e:bf:97:cd:d3:e0:f6:ff:d0:18:39: de:db:13:cf:10:d7:88:b1:0f:bf:bb:a5:ab:4b:54:f2:0c:cc: 3c:b5:24:47:b3:ca:d5:c2:cc:87:89:2a:b8:fb:a7:d1:f5:2f: 87:a9:f5:c4:41:7f:90:78:3b:32:9c:9a:24:f8:20:33:1f:a0: b0:a9:42:e3:21:f7:1a:a2:20:32:e0:cc:9d:08:ee:a5:d3:25: d8:6c:fa:cd:ab:4b:43:75:cb:17:3a:91:39:51:bc:aa:7b:22: ce:2d:fb:e0:ca:d0:ed:e5:26:1b:f5:97:d5:d5:41:2a:2a:ac: 1c:70:58:85:83:5e:1f:af:36:64:d2:31:af:74:09:3e:cb:6b: df:2e:bb:0d:90:19:c3:50:65:58:38:2b:35:89:7a:e5:f3:26: 9a:d1:99:1c:63:7d:25:34:d4:86:4a:e8:f9:2d:cf:a5:f6:ad: 35:17:81:7e:aa:0e:bd:ed:e3:2f:67:4a:c1:89:94:d1:08:79: f6:f4:5d:d0:49:33:d1:75:e8:ba:d7:20:15:9b:6c:6c:30:68: 8b:8e:b0:97:6e:18:dc:3c:11:ee:96:de:6f:59:e5:3e:9e:af: 04:d0:d9:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DBWTUr7jUDMZbVRXEttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm MTcwOWEwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD Eyg3ODkzNmJkZTY2YzQxMGJkZTkxZDQ3YzQyMzY5NzM2ODBkMTdiNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+jR44Kugtr2r/vGcsgy5aId9Dty PfYtM9hZS/8GrxTqqC5k1FSGk4scPkKd74X01PvpUGNyRii5Z2rp/r32YgGzbcly ZXal847RNpNMetxs8Y8sVPSlwciv+sX9Emei5Ak4xjUeGTnUjJRaOXqbfi7fXEBd wEh+caen2hAiMtpeiovUQGWojv8KQ5DbZzmi+N6kqkdgPaYcsQ4pMJq9HqzPPrlX PhsM3KzXMW5WNbRb9Dk4F4cZf3R9RMVx7wXcckCYHdS0EuF/1K1JjIvOhkTptr2u rNKYYsBpC9T3K6y22DkOs0DGpArlHWWl999hrMazVcdyPw6xdj9+oy0LVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiTa95mxBC96R1HxCNpc2gNF7YBMB8GA1UdIwQY MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD4zGboa /8f2mCux+aL6OCVa/+T+1abfPF6/l83T4Pb/0Bg53tsTzxDXiLEPv7ulq0tU8gzM PLUkR7PK1cLMh4kquPun0fUvh6n1xEF/kHg7MpyaJPggMx+gsKlC4yH3GqIgMuDM nQjupdMl2Gz6zatLQ3XLFzqROVG8qnsizi374MrQ7eUmG/WX1dVBKiqsHHBYhYNe H682ZNIxr3QJPstr3y67DZAZw1BlWDgrNYl65fMmmtGZHGN9JTTUhkro+S3Ppfat NReBfqoOve3jL2dKwYmU0Qh59vRd0Ekz0XXoutcgFZtsbDBoi46wl24Y3DwR7pbe b1nlPp6vBNDZig== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:59 2025 by rpki-client