This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft File: js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json) Hash identifier: OCFrkYH+ABHKu1YD93fFZTubfI5yvRLOTxq7WHZbwto= Subject key identifier: D8:6F:9D:F0:EB:3C:FB:02:77:81:28:FE:69:48:48:5E:73:73:D1:75 Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Certificate serial: 019AF12E9D8B699E8657E7976161E2B13D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft Manifest number: 099F Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (hash: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=) 2: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (hash: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=) 3: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: BJw0EU//qufSluyqAsvptJ8qCxPmCXdikF8OWy2PXP8=) 4: kWqQsigWLE-Ov88YUeZJL-x7iCw.roa (hash: Ge/EMSQE9osHtx1/BzfNSCkBRWxNw3C0d8zRkadzqgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:9d:8b:69:9e:86:57:e7:97:61:61:e2:b1:3d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=d86f9df0eb3cfb02778128fe6948485e7373d175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:4b:03:ab:ce:af:9a:f3:86:05:45:e1:2e: 58:e5:f3:5d:3a:c7:4d:05:a6:58:e2:e5:fb:1b:7b: ca:9a:9d:5a:ae:78:bb:5e:70:7c:17:aa:08:18:27: 0e:f6:be:fb:a1:86:a8:77:41:83:d3:0c:eb:c9:55: c2:e7:e2:36:ad:d3:95:68:f7:25:32:d8:5a:3a:34: 25:87:5d:4d:4b:89:1b:7b:c2:a2:4b:cc:7e:fb:9c: 62:19:be:32:af:a9:db:4d:c9:7a:25:4a:92:5c:1e: 5d:4b:a4:e1:67:2b:91:59:6f:51:8b:1c:d8:de:64: c3:88:2c:5b:3b:d9:a5:4e:d2:d6:0c:61:49:58:e8: 8d:b6:89:36:90:83:91:8d:50:09:6f:05:1b:fc:fb: 31:12:1e:1c:0f:73:14:b2:1f:83:e2:3c:11:ea:36: b6:16:39:a5:d1:8d:73:4a:08:ca:f2:2a:2e:d5:e6: e2:5e:db:2d:26:d5:3d:ba:46:79:93:cf:f3:60:76: 91:be:7f:e2:f6:4e:0c:45:0b:aa:79:77:3b:19:df: 2f:73:d4:36:76:93:2c:e3:fd:90:1a:16:bd:eb:c7: 5d:f0:35:f4:e8:65:9c:77:60:17:db:39:cd:72:4a: 59:5d:0d:79:c3:ea:e9:24:a1:64:d6:a5:c2:24:c4: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:9D:F0:EB:3C:FB:02:77:81:28:FE:69:48:48:5E:73:73:D1:75 X509v3 Authority Key Identifier: keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:72:d5:ed:4d:3d:2b:f5:29:86:af:6c:36:49:15:ab:86:c1: 19:e2:01:cc:6a:1d:9a:a2:68:e8:4f:f2:69:66:61:36:f6:5e: 36:9c:31:df:21:f4:4d:58:a8:c0:b8:57:9c:8d:e1:dd:f0:c9: 5d:bb:bb:a2:73:5c:60:6d:1e:b3:27:9a:a5:4c:ef:d7:9a:15: 38:24:32:6a:2f:93:c1:73:27:04:a4:43:26:74:1f:ea:4e:ba: 31:c6:27:d9:c5:3d:c7:f8:51:af:5c:e2:8d:e8:e0:e9:58:cb: 11:24:e6:44:5c:85:bd:d6:59:8f:42:57:08:fd:93:28:64:2d: 62:ff:aa:ed:44:13:e5:01:1e:f1:3c:dc:d4:c3:33:f4:c6:7a: a5:63:a1:cc:ae:41:28:81:a2:f4:23:c6:4e:5e:36:6a:fb:c3: f6:1b:4d:e2:bc:b3:2a:4f:d4:6a:6c:e2:9f:04:0a:13:64:a9: ff:1e:64:84:66:6f:a9:9a:25:4d:6b:04:7a:f7:a2:e1:50:5e: f3:b0:a6:33:9f:92:52:b2:85:20:d0:78:7c:4a:e2:e8:d1:6b: ac:97:41:5a:a1:02:ec:c0:ea:a9:0c:84:e4:ab:3e:8e:fe:33: e7:d1:b9:eb:3b:3e:6d:6e:a6:f8:7f:2c:f0:08:cf:fa:8d:00: c4:41:32:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLp2LaZ6GV+eXYWHisT0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz MDZhMTcwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EyhkODZmOWRmMGViM2NmYjAyNzc4MTI4ZmU2OTQ4NDg1ZTczNzNkMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lVLA6vOr5rzhgVF4S5Y5fNdOsdN BaZY4uX7G3vKmp1arni7XnB8F6oIGCcO9r77oYaod0GD0wzryVXC5+I2rdOVaPcl MthaOjQlh11NS4kbe8KiS8x++5xiGb4yr6nbTcl6JUqSXB5dS6ThZyuRWW9RixzY 3mTDiCxbO9mlTtLWDGFJWOiNtok2kIORjVAJbwUb/PsxEh4cD3MUsh+D4jwR6ja2 Fjml0Y1zSgjK8iou1ebiXtstJtU9ukZ5k8/zYHaRvn/i9k4MRQuqeXc7Gd8vc9Q2 dpMs4/2QGha968dd8DX06GWcd2AX2znNckpZXQ15w+rpJKFk1qXCJMS1LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhvnfDrPPsCd4Eo/mlISF5zc9F1MB8GA1UdIwQY MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt MmJiZjhmYWEwMGNhLzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXLV7U09 K/Uphq9sNkkVq4bBGeIBzGodmqJo6E/yaWZhNvZeNpwx3yH0TViowLhXnI3h3fDJ Xbu7onNcYG0esyeapUzv15oVOCQyai+TwXMnBKRDJnQf6k66McYn2cU9x/hRr1zi jejg6VjLESTmRFyFvdZZj0JXCP2TKGQtYv+q7UQT5QEe8Tzc1MMz9MZ6pWOhzK5B KIGi9CPGTl42avvD9htN4ryzKk/UamzinwQKE2Sp/x5khGZvqZolTWsEevei4VBe 87CmM5+SUrKFINB4fEri6NFrrJdBWqEC7MDqqQyE5Ks+jv4z59G56zs+bW6m+H8s 8AjP+o0AxEEyog== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:51 2025 by rpki-client