This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json) Hash identifier: VBilIFLEmuI7Zu4kBcx8+KknftzJmN0H8mhkCZI6eK0= Subject key identifier: E2:06:6E:2B:F8:F7:C1:85:D5:60:51:2E:CA:7F:73:87:AE:CA:7D:03 Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5 Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5 Certificate serial: 019AF49BBE1A6914ABD69FA90FEFBE002B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft Manifest number: 0BDA Signing time: Sat 06 Dec 2025 17:00:38 +0000 Manifest this update: Sat 06 Dec 2025 17:00:38 +0000 Manifest next update: Sun 07 Dec 2025 17:00:38 +0000 Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: d050LqsvTnzOZZI03kfWJIQdKq0iZcGVxpZeY6msZzA=) 2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:be:1a:69:14:ab:d6:9f:a9:0f:ef:be:00:2b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5 Validity Not Before: Dec 6 17:00:38 2025 GMT Not After : Dec 7 17:00:38 2025 GMT Subject: CN=e2066e2bf8f7c185d560512eca7f7387aeca7d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:89:88:7c:fc:f0:78:89:23:34:86:00:20: 3e:7b:4c:e2:5d:e5:85:5a:1a:2b:38:a3:f1:8f:2e: 31:5d:19:15:e4:3e:ba:77:fd:1c:f6:bd:4c:ab:4c: 9d:7c:7d:60:c0:11:cf:17:4d:ff:22:ec:a2:a6:ad: 9f:e1:d6:2c:63:0a:6d:bd:1f:b5:3c:db:8e:33:a2: 61:91:a1:e2:00:f5:e2:84:94:3a:a6:ac:c5:a1:04: 9c:b3:2e:67:25:6b:63:34:c3:09:a5:0d:d8:ad:12: 4d:fb:a2:bf:66:6b:af:40:35:2c:f2:27:1e:f6:d7: be:58:ef:c9:48:69:44:8f:f9:d1:d8:a6:e2:a2:e4: b5:0d:c7:ed:8d:dd:98:0b:ac:76:2d:b3:41:1a:d0: 04:4d:e6:fc:37:b3:43:d8:1d:82:84:18:b2:48:0f: 64:39:3a:f4:8b:41:fc:69:8e:5b:68:b8:6b:a8:ea: 53:54:15:4b:b6:33:90:e3:b7:25:d9:ca:af:81:98: 76:28:db:c9:83:69:1b:e7:63:e0:11:aa:7b:28:94: 04:80:9a:1e:df:12:6b:40:04:ea:b0:21:2b:e8:58: 5f:f3:02:ce:9e:b6:2a:6e:f8:22:27:75:39:9c:2a: eb:b3:46:9b:0a:e7:46:e9:05:74:e5:dc:da:3b:de: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:6E:2B:F8:F7:C1:85:D5:60:51:2E:CA:7F:73:87:AE:CA:7D:03 X509v3 Authority Key Identifier: keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3e:73:e6:a9:6c:5f:99:f6:c7:3c:05:6a:26:52:8a:12:3b: 33:31:76:e9:31:b1:16:6d:99:91:83:e9:99:b8:c5:07:45:ae: 7c:3e:9b:5a:2c:9c:7f:d7:25:50:be:b0:a1:01:5c:ff:a0:bc: 8d:8a:1a:a7:4e:57:57:05:2e:11:65:aa:bf:4b:41:dc:14:41: 07:68:d0:a7:75:b1:eb:da:67:c6:50:26:46:2f:8f:65:7e:bc: c1:0f:70:3f:64:a6:94:d0:95:3e:33:cd:eb:49:45:35:8b:b6: b2:ba:ab:d2:cf:4f:1e:35:d1:9f:f8:69:9b:02:16:73:3d:82: 7c:61:3a:bc:dd:d3:a6:92:73:fe:ba:bf:1a:32:3d:5e:d5:a2: 9d:d2:74:eb:ed:a4:2a:00:75:1a:cf:e4:1f:cd:fe:3a:45:dc: 07:aa:64:85:60:f1:a7:e6:16:99:de:1c:64:f4:7e:1f:6e:11: 98:ae:49:91:d5:33:51:c9:bd:36:57:73:f9:c8:9b:d6:d6:9e: e1:05:a6:ea:ce:27:04:5b:b8:3c:9d:fc:c6:61:36:32:7a:4e: ad:95:31:43:e1:fa:8c:7e:57:ea:05:a8:0d:c5:02:f6:e8:41: 10:51:b0:07:c4:52:59:f6:fd:8e:69:ea:85:c4:e8:55:b5:42: 8f:31:48:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m74aaRSr1p+pD+++ACsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh ZGE5ZTUwHhcNMjUxMjA2MTcwMDM4WhcNMjUxMjA3MTcwMDM4WjAzMTEwLwYDVQQD EyhlMjA2NmUyYmY4ZjdjMTg1ZDU2MDUxMmVjYTdmNzM4N2FlY2E3ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKKJiHz88HiJIzSGACA+e0ziXeWF WhorOKPxjy4xXRkV5D66d/0c9r1Mq0ydfH1gwBHPF03/Iuyipq2f4dYsYwptvR+1 PNuOM6JhkaHiAPXihJQ6pqzFoQScsy5nJWtjNMMJpQ3YrRJN+6K/ZmuvQDUs8ice 9te+WO/JSGlEj/nR2KbiouS1Dcftjd2YC6x2LbNBGtAETeb8N7ND2B2ChBiySA9k OTr0i0H8aY5baLhrqOpTVBVLtjOQ47cl2cqvgZh2KNvJg2kb52PgEap7KJQEgJoe 3xJrQATqsCEr6Fhf8wLOnrYqbvgiJ3U5nCrrs0abCudG6QV05dzaO95jOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIGbiv498GF1WBRLsp/c4euyn0DMB8GA1UdIwQY MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz5z5qls X5n2xzwFaiZSihI7MzF26TGxFm2ZkYPpmbjFB0WufD6bWiycf9clUL6woQFc/6C8 jYoap05XVwUuEWWqv0tB3BRBB2jQp3Wx69pnxlAmRi+PZX68wQ9wP2SmlNCVPjPN 60lFNYu2srqr0s9PHjXRn/hpmwIWcz2CfGE6vN3TppJz/rq/GjI9XtWindJ06+2k KgB1Gs/kH83+OkXcB6pkhWDxp+YWmd4cZPR+H24RmK5JkdUzUcm9Nldz+cib1tae 4QWm6s4nBFu4PJ38xmE2MnpOrZUxQ+H6jH5X6gWoDcUC9uhBEFGwB8RSWfb9jmnq hcToVbVCjzFIbg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:45 2025 by rpki-client