This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json) Hash identifier: 1H/ix2QgyZ3Za+huqZZwCoA/Q69lg7QJSdfIGJJy1C0= Subject key identifier: 4C:1F:33:F2:30:30:3B:6F:E1:EA:B1:9C:4D:B0:27:60:BD:27:E0:11 Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019AF0BF809CE139B5223786CDE0A36BB9DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft Manifest number: 0145 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: gWrAQ+VUihVm2If7jyWTGcn+AisftN5Q/FmDDc82ags=) 2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:80:9c:e1:39:b5:22:37:86:cd:e0:a3:6b:b9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=4c1f33f230303b6fe1eab19c4db02760bd27e011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:9a:a1:9b:3f:f7:0e:dc:11:cf:fe:a4:9e: 2c:e9:94:3a:67:66:1e:ac:59:e3:82:b0:84:8d:96: 4c:d2:0f:5e:df:ff:1f:02:91:ef:8b:79:98:5e:62: c4:4f:5c:2f:f2:e3:e9:16:eb:2d:a5:f3:3d:ff:5c: 7d:27:30:19:f0:c5:73:ea:47:1e:dc:09:bd:c8:d2: 28:1a:7d:2a:36:4c:d2:65:24:9b:87:a3:e7:b2:41: 34:54:cf:11:2c:64:58:78:6a:6e:a1:77:19:27:2b: 44:8b:c4:c4:65:e3:5d:75:84:d9:39:bd:bc:94:00: bb:ab:ad:a3:50:23:8b:77:a8:22:04:ab:08:7b:c3: 78:18:05:de:5f:58:20:8b:85:8c:f1:fa:71:d9:6e: 29:c0:ae:21:70:ab:c0:80:61:4e:6a:e1:98:d9:18: dd:5d:e7:0c:49:2e:92:04:4a:3f:2a:3d:a7:ae:d3: e9:d9:3e:92:c6:e7:fb:ae:bd:c4:80:90:9f:c1:ca: f9:76:e3:5f:cc:eb:cc:18:7f:be:51:3e:98:74:e5: 6a:e3:83:1a:c9:a8:70:f5:67:ee:98:ba:47:80:d2: 78:69:04:40:a9:5a:b7:50:d2:7d:50:dc:7a:8e:b9: 1b:62:68:67:1c:9f:7e:7b:55:59:49:af:b0:b7:bb: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1F:33:F2:30:30:3B:6F:E1:EA:B1:9C:4D:B0:27:60:BD:27:E0:11 X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:29:d8:4b:e7:42:57:8d:ae:ef:e7:4e:8b:68:ed:49:c7:18: 5a:f8:c6:7c:92:04:d2:70:db:fb:15:bf:b5:cf:c5:fe:32:47: f2:26:00:98:0e:a0:31:81:77:22:1d:9c:73:b0:b2:3f:2e:d6: 16:bd:b1:a0:01:78:f2:b2:9a:21:35:58:35:05:63:71:db:39: 67:76:fc:8f:9a:ab:b4:e1:c5:6a:8b:76:16:42:3a:7a:c1:b5: d7:66:a8:54:6f:31:58:aa:03:06:91:3f:45:a3:47:51:bd:1b: cc:69:db:ba:14:66:58:1d:50:db:2d:2a:54:22:6e:a4:2e:b8: e4:64:c1:a8:c8:a6:42:70:27:bf:6f:0f:32:79:c6:f2:1c:45: a6:9b:7b:39:9c:70:05:c9:00:74:0c:f9:1f:c8:4b:86:47:33: 31:b1:f1:d5:5f:b6:31:4b:42:fa:64:9b:f9:5b:57:c9:63:0c: 3e:71:09:1d:e3:ae:42:f9:e9:04:1d:d4:f5:c8:69:1f:23:0a: 41:74:10:36:29:d0:b1:2e:4a:8c:a0:40:a2:29:b2:cb:01:9e: 71:2e:e5:6a:47:49:09:22:a0:8f:af:07:2c:c1:19:b5:9b:0b: f8:dd:98:04:b0:bf:38:50:24:a6:b9:39:f2:a1:71:0b:97:19: 17:17:1b:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4Cc4Tm1IjeGzeCja7naMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD Eyg0YzFmMzNmMjMwMzAzYjZmZTFlYWIxOWM0ZGIwMjc2MGJkMjdlMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rmaoZs/9w7cEc/+pJ4s6ZQ6Z2Ye rFnjgrCEjZZM0g9e3/8fApHvi3mYXmLET1wv8uPpFustpfM9/1x9JzAZ8MVz6kce 3Am9yNIoGn0qNkzSZSSbh6PnskE0VM8RLGRYeGpuoXcZJytEi8TEZeNddYTZOb28 lAC7q62jUCOLd6giBKsIe8N4GAXeX1ggi4WM8fpx2W4pwK4hcKvAgGFOauGY2Rjd XecMSS6SBEo/Kj2nrtPp2T6Sxuf7rr3EgJCfwcr5duNfzOvMGH++UT6YdOVq44Ma yahw9WfumLpHgNJ4aQRAqVq3UNJ9UNx6jrkbYmhnHJ9+e1VZSa+wt7tQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwfM/IwMDtv4eqxnE2wJ2C9J+ARMB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPynYS+dC V42u7+dOi2jtSccYWvjGfJIE0nDb+xW/tc/F/jJH8iYAmA6gMYF3Ih2cc7CyPy7W Fr2xoAF48rKaITVYNQVjcds5Z3b8j5qrtOHFaot2FkI6esG112aoVG8xWKoDBpE/ RaNHUb0bzGnbuhRmWB1Q2y0qVCJupC645GTBqMimQnAnv28PMnnG8hxFppt7OZxw BckAdAz5H8hLhkczMbHx1V+2MUtC+mSb+VtXyWMMPnEJHeOuQvnpBB3U9chpHyMK QXQQNinQsS5KjKBAoimyywGecS7lakdJCSKgj68HLMEZtZsL+N2YBLC/OFAkprk5 8qFxC5cZFxcbIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:51 2025 by rpki-client