This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json) Hash identifier: y4M4gY/nH1hwuCvLYiwgJBRya6l/2fpaXQ/dUnFawEQ= Subject key identifier: C9:BB:F7:CC:5B:EC:AD:97:75:A2:28:98:FA:97:9E:08:5C:CC:F9:C9 Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d Certificate serial: 019AF0BF01353317CAAD3B459A82BC905492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=) 2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: uQ7dJfA1amX2uKG2hNnyPX/q7SO3O9y9gr9yg03TmJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:01:35:33:17:ca:ad:3b:45:9a:82:bc:90:54:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=c9bbf7cc5becad9775a22898fa979e085cccf9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:0e:09:a1:b9:03:9e:70:99:67:23:1b:19: 39:04:68:00:4a:6e:f4:ab:38:a3:11:3a:33:8f:2b: f0:5d:d1:ab:1e:93:3e:d4:6b:f2:73:8f:54:35:73: bf:e4:f3:28:55:57:89:46:d1:79:89:34:ef:40:d5: 8c:17:9e:32:8b:c6:0e:7a:88:b0:03:00:86:da:88: 35:a4:b0:ec:74:ca:25:d4:29:14:51:70:98:9a:41: 01:fa:4f:29:0a:3b:a1:e7:ae:35:80:f2:42:dd:23: 7b:ff:3c:d3:c5:63:63:9c:4c:f3:9d:80:80:aa:d4: 78:50:12:15:a5:8b:04:fd:bf:5a:7c:5e:42:47:b7: 15:4e:b6:ee:93:87:cb:c8:06:9f:3a:83:ba:11:d2: 8e:8e:f9:70:b6:cd:df:d8:3b:b6:e6:c1:54:6f:21: e8:60:33:c5:8b:f9:2f:e5:20:f2:b1:d2:47:b7:4d: bc:de:8a:1d:19:eb:b0:54:4c:b5:6f:b8:d5:17:21: 21:d5:74:90:7a:45:13:38:f6:e6:e7:98:8f:1f:f0: f9:7c:f3:c2:f8:4c:13:c7:77:50:46:b9:c5:4d:f3: 29:0a:c5:51:ba:5c:4e:ab:39:b7:aa:e3:2f:a2:53: 88:79:50:d7:31:6c:d3:b2:c7:0b:1a:5e:e3:6c:fc: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:F7:CC:5B:EC:AD:97:75:A2:28:98:FA:97:9E:08:5C:CC:F9:C9 X509v3 Authority Key Identifier: keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6d:83:98:d5:ef:fb:7c:4c:54:54:56:1d:ec:d8:aa:ce:e3: 65:e1:7b:32:db:33:7f:4b:a3:4b:df:2b:2c:71:c9:e1:61:31: e2:cd:1b:a3:d3:ce:50:5c:e8:78:57:3c:25:ea:9e:a7:d3:0f: 87:1e:82:5a:d3:bc:62:cc:fc:ca:2e:9d:e3:2e:84:07:e1:2e: 2b:fb:f2:70:44:53:bf:01:a9:6c:0a:46:fe:33:b4:2e:af:23: bb:28:88:57:45:3b:10:5a:b2:7d:b9:be:f8:9c:97:0b:4f:c9: d5:f3:19:dd:92:e3:2b:e6:19:af:a4:08:ae:6c:cd:06:a1:33: 4b:2f:bb:8a:ce:6f:8d:c3:d1:58:35:7b:a9:35:5c:67:58:ab: 96:ad:86:d3:94:65:7d:52:86:99:2e:dc:f8:35:02:36:ea:fd: df:76:8d:64:72:ea:73:b0:82:15:ff:b1:d0:62:50:75:2a:6b: 0e:23:8f:1c:87:ad:7e:ac:89:fd:5c:2b:f7:89:80:ea:79:56: 4c:73:e9:69:3d:20:c4:36:0f:c8:34:8d:96:8d:87:fc:44:fd: 20:41:fc:19:aa:82:fb:07:89:5d:f1:6c:98:11:05:ef:04:d5: c5:8b:3d:df:b3:fa:5a:43:19:11:f1:52:29:61:5b:a8:90:10: 22:99:46:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwE1MxfKrTtFmoK8kFSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh ZDMzNWQwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD EyhjOWJiZjdjYzViZWNhZDk3NzVhMjI4OThmYTk3OWUwODVjY2NmOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqoOCaG5A55wmWcjGxk5BGgASm70 qzijETozjyvwXdGrHpM+1Gvyc49UNXO/5PMoVVeJRtF5iTTvQNWMF54yi8YOeoiw AwCG2og1pLDsdMol1CkUUXCYmkEB+k8pCjuh5641gPJC3SN7/zzTxWNjnEzznYCA qtR4UBIVpYsE/b9afF5CR7cVTrbuk4fLyAafOoO6EdKOjvlwts3f2Du25sFUbyHo YDPFi/kv5SDysdJHt0283oodGeuwVEy1b7jVFyEh1XSQekUTOPbm55iPH/D5fPPC +EwTx3dQRrnFTfMpCsVRulxOqzm3quMvolOIeVDXMWzTsscLGl7jbPwVfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm798xb7K2XdaIomPqXnghczPnJMB8GA1UdIwQY MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3 LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJW2DmNXv +3xMVFRWHezYqs7jZeF7Mtszf0ujS98rLHHJ4WEx4s0bo9POUFzoeFc8Jeqep9MP hx6CWtO8Ysz8yi6d4y6EB+EuK/vycERTvwGpbApG/jO0Lq8juyiIV0U7EFqyfbm+ +JyXC0/J1fMZ3ZLjK+YZr6QIrmzNBqEzSy+7is5vjcPRWDV7qTVcZ1irlq2G05Rl fVKGmS7c+DUCNur933aNZHLqc7CCFf+x0GJQdSprDiOPHIetfqyJ/Vwr94mA6nlW THPpaT0gxDYPyDSNlo2H/ET9IEH8GaqC+weJXfFsmBEF7wTVxYs937P6WkMZEfFS KWFbqJAQIplG9w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:59 2025 by rpki-client