This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json) Hash identifier: nnm8tK15AvYVrVCIEg6pt7FETYmWSY1hADy7uwufY5s= Subject key identifier: 74:69:F6:C7:56:28:3E:2D:9C:43:C3:A9:2C:26:50:52:33:99:BD:BC Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Certificate serial: 019AF23F933FBCFAB12022B09C357DC318F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft Manifest number: 0349 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=) 2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: f4ParrFp7UCjweOqJbvjndzyYEcychBAycdLaPahdGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:3f:bc:fa:b1:20:22:b0:9c:35:7d:c3:18:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=7469f6c756283e2d9c43c3a92c2650523399bdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:b5:06:32:14:a7:30:43:3b:92:16:55:6b: 1e:76:1f:f3:e0:60:a5:82:2e:2c:48:69:7c:d2:84: c6:b2:4e:27:7b:c9:ed:20:92:fd:44:47:8f:19:37: af:a1:55:f7:9b:62:b8:e1:89:d2:b0:d6:e4:69:96: d8:15:83:90:f0:d0:dc:0c:54:9a:e3:15:7e:d3:06: 4e:a8:50:b1:5b:0f:60:29:1d:71:e1:28:0a:24:39: af:7b:95:ac:3a:84:d0:3c:7d:53:85:50:df:d6:ab: ab:f9:e5:6e:95:02:66:90:78:5a:f6:12:14:bf:bf: c6:9f:7a:4a:af:fa:0a:a9:63:67:c3:ea:25:4d:87: e6:9d:db:d6:46:d6:b0:09:80:20:78:a5:be:b5:93: cf:7d:19:27:fd:1c:f0:17:28:07:9a:7f:bc:53:02: 8c:be:5a:45:f8:58:bd:97:a2:6a:57:b7:d3:0e:12: d7:d3:f7:56:fa:73:af:85:90:4a:99:45:00:b3:8b: 3a:1a:10:a6:4f:ad:1e:0f:6e:7f:d2:f9:fc:0f:d0: 90:88:5b:28:16:13:44:42:a3:12:11:7d:a1:90:47: f0:6b:6c:85:5d:7d:1f:b2:4e:8d:ab:9d:67:7f:58: fc:bc:ef:03:75:e6:e6:c0:91:77:cf:24:e3:1b:8f: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:F6:C7:56:28:3E:2D:9C:43:C3:A9:2C:26:50:52:33:99:BD:BC X509v3 Authority Key Identifier: keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:a4:81:21:26:82:f2:67:19:d5:21:f0:bf:21:c0:a7:2a: c7:d6:dd:44:d2:0d:af:3a:e0:f1:11:34:3e:da:28:95:06:ec: a5:1c:72:ec:0a:88:2d:c3:1c:31:e7:03:27:77:94:86:a9:92: 52:80:1c:e5:e3:2b:f7:20:32:92:0a:e9:db:e6:4a:1b:75:c3: 19:dc:7e:17:7e:f8:e1:5c:b4:d6:22:d3:0c:73:b7:72:5c:99: 17:41:06:d7:c9:a5:d1:c5:00:bd:88:09:7c:84:3e:cb:a3:63: d2:76:de:03:77:a0:67:80:fe:fd:9a:d2:de:ec:0d:8f:6a:b8: 47:f0:81:90:32:9a:dc:85:aa:d1:c0:13:2e:1d:dd:58:77:2b: 89:d5:17:65:80:8d:86:3c:ee:2a:17:dd:aa:e7:f4:b2:b3:23: fa:8b:4d:6b:d3:ae:c3:96:ce:10:28:9b:7e:3c:25:38:4b:d2: 2e:28:04:06:20:3c:32:73:92:33:33:16:ba:0b:31:70:0b:05: d3:cd:64:6d:72:e1:b7:8e:cd:f6:ec:29:c3:13:04:b5:cb:0c: f3:fd:24:71:c8:b5:3c:17:d5:7d:dc:e5:3d:f7:62:c7:a2:fc: d1:eb:58:ff:1a:25:6b:5f:22:e7:26:9e:8f:6a:30:ac:5d:1b: 10:c5:19:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5M/vPqxICKwnDV9wxj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj Zjc2M2YwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD Eyg3NDY5ZjZjNzU2MjgzZTJkOWM0M2MzYTkyYzI2NTA1MjMzOTliZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljq1BjIUpzBDO5IWVWsedh/z4GCl gi4sSGl80oTGsk4ne8ntIJL9REePGTevoVX3m2K44YnSsNbkaZbYFYOQ8NDcDFSa 4xV+0wZOqFCxWw9gKR1x4SgKJDmve5WsOoTQPH1ThVDf1qur+eVulQJmkHha9hIU v7/Gn3pKr/oKqWNnw+olTYfmndvWRtawCYAgeKW+tZPPfRkn/RzwFygHmn+8UwKM vlpF+Fi9l6JqV7fTDhLX0/dW+nOvhZBKmUUAs4s6GhCmT60eD25/0vn8D9CQiFso FhNEQqMSEX2hkEfwa2yFXX0fsk6Nq51nf1j8vO8DdebmwJF3zyTjG49TKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRp9sdWKD4tnEPDqSwmUFIzmb28MB8GA1UdIwQY MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXikgSEm gvJnGdUh8L8hwKcqx9bdRNINrzrg8RE0PtoolQbspRxy7AqILcMcMecDJ3eUhqmS UoAc5eMr9yAykgrp2+ZKG3XDGdx+F3744Vy01iLTDHO3clyZF0EG18ml0cUAvYgJ fIQ+y6Nj0nbeA3egZ4D+/ZrS3uwNj2q4R/CBkDKa3IWq0cATLh3dWHcridUXZYCN hjzuKhfdquf0srMj+otNa9Ouw5bOECibfjwlOEvSLigEBiA8MnOSMzMWugsxcAsF 081kbXLht47N9uwpwxMEtcsM8/0kcci1PBfVfdzlPfdix6L80etY/xola18i5yae j2owrF0bEMUZjA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:25 2025 by rpki-client