This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json) Hash identifier: ezwuF9xr6aZ49k1+Nfc3X93IRp1fAbFaMggbwdhYXGE= Subject key identifier: 77:BE:D9:F8:87:D7:AA:F0:E7:91:18:A0:2B:74:35:F6:16:FC:57:9D Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019AF209320E4019C2252991B1E992E8C56D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: jt6gstkJNbQhMXkGqBmm25Ibr1uAG+owGhMw+dapLOM=) 2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:32:0e:40:19:c2:25:29:91:b1:e9:92:e8:c5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=77bed9f887d7aaf0e79118a02b7435f616fc579d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:7b:b1:66:3f:dc:57:38:22:b1:48:22:c1: 18:37:d0:64:ec:24:4e:30:53:ec:8d:fc:c1:c2:cb: de:66:a4:c4:74:49:41:1d:3c:62:3f:6f:d8:81:fc: 79:30:e5:b3:5d:8f:62:c3:75:5a:0e:e6:3f:2c:39: cc:cc:19:39:0d:38:fc:0b:5d:2b:3d:9b:13:9c:20: 56:97:70:25:5e:de:05:78:34:ff:fb:69:07:e8:9b: d3:6b:b6:64:1a:08:b5:e2:44:87:b0:96:12:d2:81: db:72:3d:06:7f:37:86:51:58:73:36:0d:56:99:02: f1:c9:00:6a:20:ff:c2:79:2e:a0:58:72:8d:c2:6c: 3a:6e:a5:70:ad:f9:d8:3c:0c:9c:e3:67:bd:ad:fb: 94:98:af:34:1f:60:39:68:50:97:d1:74:85:29:8a: 69:e1:29:81:1e:f5:dd:3c:a8:98:23:a2:e6:93:e7: 2b:b0:46:b6:f2:f6:6c:a5:2e:9e:1c:28:97:59:e6: 7d:fd:fb:70:2f:49:1e:8e:8d:2f:01:a6:bb:70:30: 66:6b:30:3f:f0:ff:58:92:e6:b5:c9:a1:f9:ee:3e: 74:0b:01:6b:49:c7:b2:4b:44:0c:f6:76:da:d8:a4: 82:df:27:20:08:65:2e:e1:35:fd:06:2e:1a:2d:85: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:D9:F8:87:D7:AA:F0:E7:91:18:A0:2B:74:35:F6:16:FC:57:9D X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ec:53:e5:ad:a0:a1:43:19:51:b7:56:d3:47:c3:e4:d5:b7: 00:ae:9d:da:bb:81:76:b9:5a:7f:ec:50:33:b4:09:e4:36:91: ca:75:c8:33:0b:c2:6b:5f:d6:05:24:39:fd:54:e5:b5:3f:78: 72:8a:2f:d0:e4:84:a2:cd:8d:94:00:4a:34:81:12:76:91:0d: 13:62:e7:82:8e:1a:19:ef:af:77:f1:47:49:ff:b2:a4:58:5a: f6:b6:c0:6d:b7:c5:21:ab:bb:43:7e:39:81:d6:21:8d:31:45: 97:73:0f:d0:ba:6e:b3:17:a9:27:58:08:40:4d:44:ec:bd:4f: f9:7d:2a:9f:93:4a:23:b1:c5:15:1c:bf:ac:75:c0:de:ca:31: 9c:07:e1:0a:99:32:bd:97:7a:cc:99:06:3b:7c:6a:44:54:39: 38:a8:af:12:ec:11:6a:f4:e4:ed:fd:74:4c:7f:50:81:8c:f7: ba:4d:48:81:df:7b:36:85:8b:5f:e8:1b:d1:4c:6f:fe:14:5f: dd:16:b4:50:4b:76:5c:39:f4:8d:fd:b3:0a:88:5f:69:cd:f6: 35:73:ab:e1:6f:b0:f6:44:56:5a:97:a0:d3:f5:3e:57:41:46: 18:ae:df:b3:04:3e:4d:9b:0c:a2:51:97:6c:15:a6:60:7c:46: a1:2a:3d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTIOQBnCJSmRsemS6MVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg3N2JlZDlmODg3ZDdhYWYwZTc5MTE4YTAyYjc0MzVmNjE2ZmM1NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvet7sWY/3Fc4IrFIIsEYN9Bk7CRO MFPsjfzBwsveZqTEdElBHTxiP2/Ygfx5MOWzXY9iw3VaDuY/LDnMzBk5DTj8C10r PZsTnCBWl3AlXt4FeDT/+2kH6JvTa7ZkGgi14kSHsJYS0oHbcj0GfzeGUVhzNg1W mQLxyQBqIP/CeS6gWHKNwmw6bqVwrfnYPAyc42e9rfuUmK80H2A5aFCX0XSFKYpp 4SmBHvXdPKiYI6Lmk+crsEa28vZspS6eHCiXWeZ9/ftwL0kejo0vAaa7cDBmazA/ 8P9Ykua1yaH57j50CwFrSceyS0QM9nba2KSC3ycgCGUu4TX9Bi4aLYVN0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe+2fiH16rw55EYoCt0NfYW/FedMB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+xT5a2g oUMZUbdW00fD5NW3AK6d2ruBdrlaf+xQM7QJ5DaRynXIMwvCa1/WBSQ5/VTltT94 coov0OSEos2NlABKNIESdpENE2Lngo4aGe+vd/FHSf+ypFha9rbAbbfFIau7Q345 gdYhjTFFl3MP0LpusxepJ1gIQE1E7L1P+X0qn5NKI7HFFRy/rHXA3soxnAfhCpky vZd6zJkGO3xqRFQ5OKivEuwRavTk7f10TH9QgYz3uk1Igd97NoWLX+gb0Uxv/hRf 3Ra0UEt2XDn0jf2zCohfac32NXOr4W+w9kRWWpeg0/U+V0FGGK7fswQ+TZsMolGX bBWmYHxGoSo9xQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:50 2025 by rpki-client