This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json) Hash identifier: pZGQb+8S49/d2733etofimasjM6JmyicPWMqJedA91M= Subject key identifier: A3:9A:63:25:3D:8D:6B:35:B3:92:47:97:E7:F5:64:7F:98:AB:68:3D Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Certificate serial: 019AF0BF17BF0FA41A9571F4E1BAC23871CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft Manifest number: 1721 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=) 2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: pXf/QP7yTOKrCGs8B/Pn/8cNt24sgo/SJgZUmJafB1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:17:bf:0f:a4:1a:95:71:f4:e1:ba:c2:38:71:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=a39a63253d8d6b35b3924797e7f5647f98ab683d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:85:60:20:80:1a:1b:fe:69:e3:95:86:c1: 73:ce:20:32:05:8c:d1:9d:ab:45:16:36:19:29:b4: 0a:e8:be:13:4b:43:dc:c9:87:78:f0:68:72:97:f6: 9a:79:fd:2a:92:a4:f4:c6:97:97:a0:fe:29:76:32: 9a:13:6d:ea:66:f3:df:f6:05:c8:67:b9:e8:42:bd: 3b:11:15:7f:d8:fe:74:0a:b1:50:54:4a:42:b0:ae: 40:b5:ed:d7:67:50:09:dc:f0:9b:fe:c3:9b:fc:54: a8:e0:77:bb:c7:7d:90:f8:45:f0:56:20:88:3e:76: e5:57:06:8a:5e:b4:6e:dc:15:8a:b9:2d:3e:3a:da: 41:ed:84:1a:ed:a8:6f:ce:00:db:31:b5:fa:71:1b: 9c:a3:b1:df:35:7b:ed:43:26:b0:a4:f9:4c:b7:ba: 87:1b:ba:29:a2:a2:3f:0f:8a:1c:f2:d8:a8:18:96: 9e:d2:40:11:96:2b:eb:e8:42:e1:6a:b2:4e:24:fd: e2:ad:cb:61:e6:35:48:8d:53:2c:a4:e3:32:c4:62: bb:64:12:23:dd:7d:0f:02:6f:73:88:7a:d8:0e:6c: 33:fd:50:aa:a1:2f:39:24:fe:09:6c:9b:c6:b7:53: dc:ff:89:61:d5:e6:a3:73:0b:36:18:b8:1f:e0:11: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:63:25:3D:8D:6B:35:B3:92:47:97:E7:F5:64:7F:98:AB:68:3D X509v3 Authority Key Identifier: keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fa:c0:18:bb:6b:18:61:c9:5f:b9:53:fb:08:84:c8:cf:ed: 40:a8:bc:29:e2:4c:5c:96:cc:4e:4b:74:44:77:65:ac:32:21: 55:5d:c4:46:72:41:47:bb:5c:6b:89:b6:d8:a2:a4:3f:65:1c: 51:9e:cd:73:d7:6a:28:a6:c5:91:90:e7:fe:db:72:47:6d:0f: cf:87:d0:25:d3:f7:d2:e6:7e:40:dc:d1:39:42:33:7e:1c:96: 18:8a:1b:58:0a:dd:e9:39:83:24:7b:bb:32:7a:81:8f:16:28: 7d:5d:b9:6a:16:35:46:b6:fe:23:72:ef:54:49:c5:98:ed:86: 8f:43:52:01:7e:30:28:07:17:17:59:ef:e0:70:11:53:a4:6e: 0f:d7:d3:e1:d0:c0:56:3c:86:b2:fd:8e:62:10:e0:98:df:f8: ca:d3:10:6c:1d:f8:94:a0:80:10:0c:73:00:c4:5f:26:3c:78: db:24:d3:da:1a:fb:05:a4:86:0e:f0:fc:98:a6:b3:20:b1:28: 0c:5d:ff:b9:c4:b4:20:e9:27:2a:07:84:a7:b1:7c:79:ab:71: 9b:7d:ce:8b:5e:00:58:b4:8d:56:4f:fa:b9:bb:ba:73:bf:1c: 4b:60:92:3e:a3:10:64:da:f6:b7:02:65:84:1e:c3:91:1e:46: df:e8:eb:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxe/D6QalXH04brCOHHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl ZDMxODkwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhhMzlhNjMyNTNkOGQ2YjM1YjM5MjQ3OTdlN2Y1NjQ3Zjk4YWI2ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPuFYCCAGhv+aeOVhsFzziAyBYzR natFFjYZKbQK6L4TS0PcyYd48Ghyl/aaef0qkqT0xpeXoP4pdjKaE23qZvPf9gXI Z7noQr07ERV/2P50CrFQVEpCsK5Ate3XZ1AJ3PCb/sOb/FSo4He7x32Q+EXwViCI PnblVwaKXrRu3BWKuS0+OtpB7YQa7ahvzgDbMbX6cRuco7HfNXvtQyawpPlMt7qH G7opoqI/D4oc8tioGJae0kARlivr6ELharJOJP3ircth5jVIjVMspOMyxGK7ZBIj 3X0PAm9ziHrYDmwz/VCqoS85JP4JbJvGt1Pc/4lh1eajcws2GLgf4BG8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOaYyU9jWs1s5JHl+f1ZH+Yq2g9MB8GA1UdIwQY MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt NmI3MDE2OWNkYTFiLzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPrAGLtr GGHJX7lT+wiEyM/tQKi8KeJMXJbMTkt0RHdlrDIhVV3ERnJBR7tca4m22KKkP2Uc UZ7Nc9dqKKbFkZDn/ttyR20Pz4fQJdP30uZ+QNzROUIzfhyWGIobWArd6TmDJHu7 MnqBjxYofV25ahY1Rrb+I3LvVEnFmO2Gj0NSAX4wKAcXF1nv4HARU6RuD9fT4dDA VjyGsv2OYhDgmN/4ytMQbB34lKCAEAxzAMRfJjx42yTT2hr7BaSGDvD8mKazILEo DF3/ucS0IOknKgeEp7F8eatxm33Oi14AWLSNVk/6ubu6c78cS2CSPqMQZNr2twJl hB7DkR5G3+jrnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:43 2025 by rpki-client