This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft File: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json) Hash identifier: TKZzByw5/bqJzQEeFZDtv/GHuynU3Ed5J0etYRGySP8= Subject key identifier: E6:3C:EC:CE:E1:5E:AD:B8:89:85:A5:6A:CF:A6:A0:0A:55:3F:A0:97 Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35 Certificate issuer: /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835 Certificate serial: 019AF27719920B5E18484E1ECDE5EF92347E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft Manifest number: 08F8 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: YRQFS9G4Qf//Is48iAJRuAM2SWvI4Jk5lWWfZZep6/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:19:92:0b:5e:18:48:4e:1e:cd:e5:ef:92:34:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=e63ceccee15eadb88985a56acfa6a00a553fa097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:e8:40:b5:37:12:ff:6f:81:1e:19:98:61: 60:8a:cf:96:c6:91:9c:fd:be:a2:f9:bd:03:95:cd: 29:e5:a2:54:4f:b5:54:7c:5e:79:1b:d1:dd:97:29: de:58:3f:96:09:02:ed:6e:ee:8b:40:0e:85:5e:b1: a1:37:66:ab:c7:d2:7e:09:47:3d:9c:40:8d:f9:25: 20:44:26:30:1a:67:3e:ff:43:27:4b:04:39:30:39: 0c:a7:27:a7:9d:6e:9a:0e:ad:69:f1:65:98:9b:01: 5e:ce:05:d2:b7:af:f2:6c:78:34:91:93:51:85:70: 5a:4e:ac:6b:51:ef:25:28:4d:22:43:26:b9:6b:02: f8:4a:9a:12:ba:86:a6:f3:46:f1:e8:09:cd:29:c2: 40:e2:e2:a5:23:0f:14:ff:ca:17:60:1c:04:87:af: db:89:92:d9:d3:92:ad:41:19:81:fd:d7:97:67:61: 1b:6d:74:73:69:93:90:2d:20:5d:5b:f9:0b:16:62: c2:0a:4d:eb:99:fd:0d:91:04:25:15:b5:df:e8:6d: 02:ca:72:52:f0:bf:e6:eb:c5:75:1c:ad:dc:5e:0b: 89:17:ae:65:aa:b6:c6:6e:2a:6c:09:f0:2d:b2:8a: c6:54:64:7f:a9:a8:bf:ba:b9:41:f9:8f:5a:6e:83: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3C:EC:CE:E1:5E:AD:B8:89:85:A5:6A:CF:A6:A0:0A:55:3F:A0:97 X509v3 Authority Key Identifier: keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2d:45:17:49:78:de:1b:74:f3:48:d2:75:49:03:9f:84:12: 08:86:34:75:fe:0a:1a:9f:d9:f4:62:24:f7:28:d8:b1:5b:51: 2d:3f:16:2c:88:16:bd:4c:23:5d:45:d7:db:3e:b8:34:c8:aa: 38:d0:45:56:0d:6d:8c:be:39:79:ee:14:9f:7a:75:b6:96:2e: 05:00:8b:46:d5:58:b7:fb:df:9e:19:9f:12:67:67:a9:e4:95: 56:d4:00:4f:7f:88:c5:a6:aa:a5:04:e3:4e:33:3e:14:57:d7: 0b:df:39:e1:b9:e5:df:7d:89:71:92:7d:bb:75:48:db:db:4d: 29:92:22:4b:a9:e1:bc:31:92:d2:36:f9:89:9e:5e:51:a9:25: 85:1f:d9:cb:c8:bc:5a:d5:33:1a:e0:a6:4d:42:c2:76:0e:24: fb:4c:5f:8e:01:f8:1f:17:e5:25:fd:4e:00:df:d1:92:c4:13: 8d:af:91:af:f9:00:41:a0:8b:f6:70:62:2b:d7:94:91:2b:8c: b4:90:ea:51:7c:ca:28:6c:58:3a:f4:8d:36:79:be:4c:74:68: 32:6d:7e:e2:0d:21:5a:15:f6:15:12:86:51:57:fb:d6:2b:b1: 7e:c1:23:e3:fd:59:5d:af:31:52:a4:1e:b7:b4:2e:ea:76:76: 03:6c:9e:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxmSC14YSE4ezeXvkjR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODdiYmFhMDIyYzM5OWZkZGM0MzUxYmIyZTBhZmEwOTg1 YTU4MzUwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhlNjNjZWNjZWUxNWVhZGI4ODk4NWE1NmFjZmE2YTAwYTU1M2ZhMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ToQLU3Ev9vgR4ZmGFgis+WxpGc /b6i+b0Dlc0p5aJUT7VUfF55G9HdlyneWD+WCQLtbu6LQA6FXrGhN2arx9J+CUc9 nECN+SUgRCYwGmc+/0MnSwQ5MDkMpyennW6aDq1p8WWYmwFezgXSt6/ybHg0kZNR hXBaTqxrUe8lKE0iQya5awL4SpoSuoam80bx6AnNKcJA4uKlIw8U/8oXYBwEh6/b iZLZ05KtQRmB/deXZ2EbbXRzaZOQLSBdW/kLFmLCCk3rmf0NkQQlFbXf6G0CynJS 8L/m68V1HK3cXguJF65lqrbGbipsCfAtsorGVGR/qai/urlB+Y9aboMRaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY87M7hXq24iYWlas+moApVP6CXMB8GA1UdIwQY MBaAFCSHu6oCLDmf3cQ1G7Lgr6CYWlg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEt MjljY2VhNmU5YTU4LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEtMjljY2VhNmU5YTU4 LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy1FF0l4 3ht080jSdUkDn4QSCIY0df4KGp/Z9GIk9yjYsVtRLT8WLIgWvUwjXUXX2z64NMiq ONBFVg1tjL45ee4Un3p1tpYuBQCLRtVYt/vfnhmfEmdnqeSVVtQAT3+IxaaqpQTj TjM+FFfXC9854bnl332JcZJ9u3VI29tNKZIiS6nhvDGS0jb5iZ5eUaklhR/Zy8i8 WtUzGuCmTULCdg4k+0xfjgH4HxflJf1OAN/RksQTja+Rr/kAQaCL9nBiK9eUkSuM tJDqUXzKKGxYOvSNNnm+THRoMm1+4g0hWhX2FRKGUVf71iuxfsEj4/1ZXa8xUqQe t7Qu6nZ2A2yeMA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:15 2025 by rpki-client