This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json) Hash identifier: sMNAdRlu3m6N/kHzeDlV4uC59Kejv/WzQktHdOraaus= Subject key identifier: 60:EC:7E:92:AA:52:0D:12:0A:54:DA:5D:0D:31:E1:F2:12:B8:DD:61 Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d Certificate serial: 019AF164815139A2D868A46B869E06A1461C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft Manifest number: 03DB Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=) 2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: 5eUeNAmmX7KulR619szS9XgsdKNGJqwVV1SfBEQuKi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:81:51:39:a2:d8:68:a4:6b:86:9e:06:a1:46:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=60ec7e92aa520d120a54da5d0d31e1f212b8dd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:23:98:1a:fb:60:c6:b3:e6:a4:33:71:8a:ed: c1:5f:a3:47:82:bf:97:42:30:d4:b3:04:85:52:ed: 49:84:ce:59:da:27:85:a3:78:85:b1:2c:a5:fe:d2: 89:81:52:ba:08:2c:b7:cf:f2:aa:1b:4e:85:33:5f: 10:a8:b1:36:b1:85:0a:a9:a9:13:44:c9:ec:c9:8b: 03:4e:41:7a:55:ba:69:e6:b9:b3:4e:34:5b:39:e4: ce:3e:3a:dc:88:54:93:be:fd:a7:67:70:7b:ae:b7: df:73:50:d0:30:a0:1c:ea:f5:70:4e:88:6a:70:a7: 13:6f:ca:f2:08:5b:39:eb:94:94:99:10:5b:73:00: dc:53:44:fc:50:4f:5b:4f:46:de:02:d7:8f:9b:23: d5:72:0d:0b:78:ec:7e:1e:3c:37:27:22:1b:33:42: d6:7f:af:ab:71:a5:1f:e0:9f:0a:0a:1a:de:0a:b0: 0c:d0:ea:4e:d7:56:27:94:15:d5:1e:c6:db:05:a8: 5e:6b:8d:4a:23:2c:e2:d1:14:ce:56:27:72:89:fc: 6c:c5:68:72:b0:0d:95:c4:d7:07:ce:7e:e3:43:a9: 70:53:f8:9d:83:24:7b:a7:fe:d3:cd:6f:e7:30:3c: 20:fd:7a:51:11:a5:8c:89:80:a5:a5:75:93:9d:e6: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:7E:92:AA:52:0D:12:0A:54:DA:5D:0D:31:E1:F2:12:B8:DD:61 X509v3 Authority Key Identifier: keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:45:cc:35:d4:c6:0e:14:c5:22:6f:77:47:f1:38:e7:9a:0c: e7:73:b0:c6:c2:3a:f6:82:6c:a1:1f:18:35:ce:e4:49:55:fd: 92:78:01:5b:28:9b:bb:34:a6:42:cf:f9:cb:bd:da:5a:cc:a6: 23:a1:5e:e0:9f:01:ad:f0:94:45:ef:c3:88:32:7a:55:96:2a: e8:a0:22:3c:8d:78:b6:47:b7:db:53:0a:65:75:31:c6:91:d1: 07:6a:aa:b5:e4:db:0a:98:11:9e:99:90:fa:2a:b1:4b:33:5a: dc:43:95:8d:e3:70:72:07:71:b9:8d:38:8d:0b:51:9e:e2:04: 0a:9b:79:c5:a4:e5:97:20:8c:fc:d5:45:15:ea:51:6f:49:49: cc:61:4b:81:3d:69:77:98:95:0c:bd:ea:48:e1:3b:67:f9:47: 0c:91:2d:08:d7:00:e7:e0:6e:f9:48:ba:44:64:4c:37:94:a3: 8e:71:08:09:2c:ea:15:42:d9:38:67:bb:5c:c2:4c:c6:94:07: cd:19:08:b6:e0:e4:24:c1:0f:d2:58:c6:4d:4f:02:fc:80:8c: ed:e1:b4:79:72:93:17:8d:07:9a:91:42:8c:44:bc:7c:b2:2b: d7:bc:2e:ba:61:6e:17:36:a4:dc:f1:04:d5:f8:35:6b:7e:6f: 2a:f5:ac:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIFROaLYaKRrhp4GoUYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTBiM2E5YTA1MDM5MDU1OTZjNzdmNTgwMmJlZjlmYzcz ZDY0N2QwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD Eyg2MGVjN2U5MmFhNTIwZDEyMGE1NGRhNWQwZDMxZTFmMjEyYjhkZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7COYGvtgxrPmpDNxiu3BX6NHgr+X QjDUswSFUu1JhM5Z2ieFo3iFsSyl/tKJgVK6CCy3z/KqG06FM18QqLE2sYUKqakT RMnsyYsDTkF6Vbpp5rmzTjRbOeTOPjrciFSTvv2nZ3B7rrffc1DQMKAc6vVwTohq cKcTb8ryCFs565SUmRBbcwDcU0T8UE9bT0beAtePmyPVcg0LeOx+Hjw3JyIbM0LW f6+rcaUf4J8KChreCrAM0OpO11YnlBXVHsbbBahea41KIyzi0RTOVidyifxsxWhy sA2VxNcHzn7jQ6lwU/idgyR7p/7TzW/nMDwg/XpREaWMiYClpXWTneb8KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDsfpKqUg0SClTaXQ0x4fISuN1hMB8GA1UdIwQY MBaAFI1Qs6mgUDkFWWx39YAr75/HPWR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTIt Y2VmMDFkODc3ZWJlLzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTItY2VmMDFkODc3ZWJl LzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUXMNdTG DhTFIm93R/E455oM53OwxsI69oJsoR8YNc7kSVX9kngBWyibuzSmQs/5y73aWsym I6Fe4J8BrfCURe/DiDJ6VZYq6KAiPI14tke321MKZXUxxpHRB2qqteTbCpgRnpmQ +iqxSzNa3EOVjeNwcgdxuY04jQtRnuIECpt5xaTllyCM/NVFFepRb0lJzGFLgT1p d5iVDL3qSOE7Z/lHDJEtCNcA5+Bu+Ui6RGRMN5SjjnEICSzqFULZOGe7XMJMxpQH zRkItuDkJMEP0ljGTU8C/ICM7eG0eXKTF40HmpFCjES8fLIr17wuumFuFzak3PEE 1fg1a35vKvWsnA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:35 2025 by rpki-client