This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json) Hash identifier: eRExt2/s+g9c7Nwci2cOM4VYw9nUHuWk77XQco0VHS4= Subject key identifier: 34:5B:2B:02:70:3E:A5:2F:E2:69:B5:74:B5:E7:C2:6E:A3:84:E5:4A Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Certificate serial: 019AF389702866ACFF4230FF0B55CF029650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 12:01:01 +0000 Manifest this update: Sat 06 Dec 2025 12:01:01 +0000 Manifest next update: Sun 07 Dec 2025 12:01:01 +0000 Files and hashes: 1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: OvnZKTPw23n3S/qmlIlj20BP4bvrnv2uBykQquvExlw=) 2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:70:28:66:ac:ff:42:30:ff:0b:55:cf:02:96:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Validity Not Before: Dec 6 12:01:01 2025 GMT Not After : Dec 7 12:01:01 2025 GMT Subject: CN=345b2b02703ea52fe269b574b5e7c26ea384e54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:5f:cd:12:85:91:62:5f:90:1c:e4:36:20: 3a:e7:5f:4d:b1:63:35:1d:51:0d:c7:36:1a:26:dc: f5:b5:3e:f7:12:38:3e:81:61:bf:9f:7c:8a:d9:3b: f9:50:c8:36:97:6a:ac:1b:f7:05:be:a1:f5:73:4f: ef:b5:a3:82:12:b7:3d:d6:63:3d:da:53:d5:a0:0e: eb:44:73:69:5c:dd:20:de:c6:af:fc:16:e5:e0:e0: ba:1e:5f:85:25:8f:0f:61:0c:22:e3:24:0c:8f:66: b5:32:a7:39:31:f7:17:9c:08:1d:e3:12:a1:4d:e3: 02:6c:f9:e2:28:e7:e9:d3:5c:ca:3d:3e:b5:96:7d: a1:37:a2:01:e1:93:9b:87:37:11:55:63:64:b8:60: bc:35:45:c6:9b:78:71:3a:ce:2f:ba:63:0c:06:ca: 5d:7d:e1:d2:ad:1e:91:26:a2:d9:8b:5f:83:f9:48: af:e2:41:f9:b8:23:1d:a1:2b:91:70:5d:b2:e4:b0: 56:f0:e8:4a:cf:fc:bb:eb:11:73:e2:9b:87:d5:6b: 4f:4e:68:99:93:74:7c:ce:96:21:70:67:b3:55:c1: c5:b7:e4:47:91:5b:f7:0c:3b:12:d6:3a:c9:1a:02: 6e:4d:6e:1c:9a:31:b1:45:77:cf:15:da:bf:66:85: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:2B:02:70:3E:A5:2F:E2:69:B5:74:B5:E7:C2:6E:A3:84:E5:4A X509v3 Authority Key Identifier: keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bf:1e:e5:57:9f:de:05:08:6c:64:e0:27:c5:70:cc:1a:a9: cc:bd:ef:5a:aa:95:1c:1a:e5:74:9d:6c:88:29:ad:4e:3e:a7: 41:51:65:f4:85:7e:29:c0:67:0f:ec:d2:98:ff:0c:7a:a4:60: f6:02:ae:c9:17:a5:f9:28:6e:d6:2b:b3:24:7f:e5:ae:0d:b3: a8:60:ac:e7:e9:f9:4e:f5:ad:b5:64:8c:9d:e1:56:cf:55:52: c1:0b:d7:6c:24:ea:f9:e5:6c:05:a7:1f:13:4a:8b:7b:a9:98: c3:f9:91:21:b5:a3:b6:23:22:3c:f5:b6:86:7c:b9:ba:16:62: 03:fe:08:8a:8e:c9:7f:08:91:e5:65:71:c0:16:2f:94:ac:09: 55:88:14:42:22:82:53:f3:0c:cb:47:56:c9:6f:9c:9f:e8:06: ed:cb:35:96:4b:ee:4b:44:2b:ec:0d:7c:2c:18:22:e9:a9:07: 48:20:e6:de:de:29:97:f1:3a:a9:11:a9:e7:d9:0c:3b:bd:34: 29:f4:f0:aa:d5:2d:12:e5:38:99:b1:28:ff:14:39:c6:9c:e6: 06:a6:f6:d6:ec:47:a4:11:6b:d3:6f:1f:f3:07:91:47:92:00: be:cc:51:ff:ab:f7:6b:9c:da:b9:9c:93:8c:89:5f:3f:c5:f2: 74:2c:a8:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXAoZqz/QjD/C1XPApZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTYxZGZjNWY3MGJmMWI3NmYwNWU0NGE3NGVkMDI5MzEy NWU0YmUwHhcNMjUxMjA2MTIwMTAxWhcNMjUxMjA3MTIwMTAxWjAzMTEwLwYDVQQD EygzNDViMmIwMjcwM2VhNTJmZTI2OWI1NzRiNWU3YzI2ZWEzODRlNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNxfzRKFkWJfkBzkNiA6519NsWM1 HVENxzYaJtz1tT73Ejg+gWG/n3yK2Tv5UMg2l2qsG/cFvqH1c0/vtaOCErc91mM9 2lPVoA7rRHNpXN0g3sav/Bbl4OC6Hl+FJY8PYQwi4yQMj2a1Mqc5MfcXnAgd4xKh TeMCbPniKOfp01zKPT61ln2hN6IB4ZObhzcRVWNkuGC8NUXGm3hxOs4vumMMBspd feHSrR6RJqLZi1+D+Uiv4kH5uCMdoSuRcF2y5LBW8OhKz/y76xFz4puH1WtPTmiZ k3R8zpYhcGezVcHFt+RHkVv3DDsS1jrJGgJuTW4cmjGxRXfPFdq/ZoXb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRbKwJwPqUv4mm1dLXnwm6jhOVKMB8GA1UdIwQY MBaAFPyWHfxfcL8bdvBeRKdO0CkxJeS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDIt NTAyOWQwYzk5OWI2LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDItNTAyOWQwYzk5OWI2 LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB78e5Vef 3gUIbGTgJ8VwzBqpzL3vWqqVHBrldJ1siCmtTj6nQVFl9IV+KcBnD+zSmP8MeqRg 9gKuyRel+Shu1iuzJH/lrg2zqGCs5+n5TvWttWSMneFWz1VSwQvXbCTq+eVsBacf E0qLe6mYw/mRIbWjtiMiPPW2hny5uhZiA/4Iio7JfwiR5WVxwBYvlKwJVYgUQiKC U/MMy0dWyW+cn+gG7cs1lkvuS0Qr7A18LBgi6akHSCDm3t4pl/E6qRGp59kMO700 KfTwqtUtEuU4mbEo/xQ5xpzmBqb21uxHpBFr028f8weRR5IAvsxR/6v3a5zauZyT jIlfP8XydCyo/g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:03 2025 by rpki-client