This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json) Hash identifier: PNMs3pdwtemb8sMtkkwdU1tpyhIR8dnJJEYSvvnnlF4= Subject key identifier: C4:B3:51:A3:38:A2:A7:A2:3E:DC:48:4E:1D:E5:1F:61:5B:32:A5:90 Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e Certificate serial: 019AF208CA748C0FB3842739F32147AA9960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft Manifest number: 087B Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (hash: GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=) 2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: IwlEE6QLrtYv08kV8kC+XqzJyZS/lWPiEx1jdFLYUNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ca:74:8c:0f:b3:84:27:39:f3:21:47:aa:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=c4b351a338a2a7a23edc484e1de51f615b32a590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:9d:60:2a:0f:1d:83:9f:43:b9:b1:1d:fd: 8c:ba:9e:64:45:77:b5:95:13:f4:d9:a9:3a:ae:24: a6:9a:6f:fb:4a:ce:f0:48:c3:a2:23:ed:7e:0c:e7: 7f:f5:0c:a1:23:b9:39:f0:7b:19:00:5f:3a:99:62: d0:fc:ea:31:81:5c:dc:59:d7:f6:dd:fc:dc:6b:3d: be:42:12:45:e4:86:b7:da:8a:66:86:41:6b:96:da: d9:5f:f7:d0:cb:8a:6c:54:6e:a4:04:39:19:c6:82: 25:53:c1:e7:23:0b:77:0a:51:ec:30:4d:d2:9d:de: 67:09:bd:c0:17:ba:04:dd:34:f8:e2:5c:5d:24:d0: da:8d:76:34:45:44:f7:95:04:d9:01:17:fa:32:cd: 56:ed:4a:09:e0:08:8a:3c:c2:69:3f:3d:a2:89:54: 9b:d8:e6:90:cb:36:0f:35:c4:d0:23:d8:91:e2:47: ad:ef:0b:99:48:d7:3f:cb:0b:60:2d:51:1c:de:c1: db:63:fb:2c:d1:f0:a9:30:bf:6a:a2:33:9c:0d:95: 67:46:ed:be:cb:bb:cc:9b:6b:02:2e:b6:cc:69:fd: 89:fb:db:13:bd:23:0c:95:77:c5:34:9a:44:63:10: e2:d8:82:76:da:6a:09:cf:8e:69:f7:c1:d9:89:65: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:51:A3:38:A2:A7:A2:3E:DC:48:4E:1D:E5:1F:61:5B:32:A5:90 X509v3 Authority Key Identifier: keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ad:08:76:9f:cb:90:1f:d3:e5:1e:b2:f3:16:2f:8e:9a:6c: b1:24:99:e2:12:e6:29:d5:93:16:dd:38:b8:0f:dc:93:ee:b3: d2:36:ad:bd:97:6e:44:7b:6e:e4:80:33:1a:57:68:0e:26:c1: bb:3b:54:27:99:93:a0:89:b0:37:38:07:0a:a7:64:49:aa:5d: b0:1d:24:d9:4f:fd:68:e3:c9:38:0c:25:a9:38:b0:0e:f2:e1: c5:8b:e0:94:49:66:b6:f7:56:bb:13:14:b4:25:d0:f1:5b:00: ae:79:26:9a:cf:7b:8b:f7:e7:3b:d0:6f:75:95:c7:05:0d:fa: 00:02:a6:d2:50:33:37:12:81:70:d6:f9:f9:13:4e:e8:eb:dc: ae:4e:ce:88:c3:24:6e:35:84:d7:e8:e5:b8:dd:a8:82:19:c2: e3:7c:9d:d7:ad:95:88:08:d1:10:61:a7:78:25:29:e7:ce:4e: 47:34:bf:ee:bd:60:72:a6:6f:56:86:40:ad:03:56:99:e6:e6: 1d:37:ed:28:4b:eb:66:23:e9:c1:a2:50:54:b6:36:d0:5c:6e: d7:1f:67:ec:f1:4a:a6:44:0b:f4:6b:97:51:dd:56:9f:33:91: a3:4b:f1:99:5f:42:fb:f2:cc:f9:00:43:d5:2d:60:f1:30:92: 7e:e2:a8:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMp0jA+zhCc58yFHqplgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTQ2MmZlZjQ5NTI0OGZkYmQ5NzM0MjFmZGViZTIxNjI1 Y2RmMWUwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhjNGIzNTFhMzM4YTJhN2EyM2VkYzQ4NGUxZGU1MWY2MTViMzJhNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT2dYCoPHYOfQ7mxHf2Mup5kRXe1 lRP02ak6riSmmm/7Ss7wSMOiI+1+DOd/9QyhI7k58HsZAF86mWLQ/OoxgVzcWdf2 3fzcaz2+QhJF5Ia32opmhkFrltrZX/fQy4psVG6kBDkZxoIlU8HnIwt3ClHsME3S nd5nCb3AF7oE3TT44lxdJNDajXY0RUT3lQTZARf6Ms1W7UoJ4AiKPMJpPz2iiVSb 2OaQyzYPNcTQI9iR4ket7wuZSNc/ywtgLVEc3sHbY/ss0fCpML9qojOcDZVnRu2+ y7vMm2sCLrbMaf2J+9sTvSMMlXfFNJpEYxDi2IJ22moJz45p98HZiWUgmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSzUaM4oqeiPtxITh3lH2FbMqWQMB8GA1UdIwQY MBaAFPyUYv70lSSP29lzQh/eviFiXN8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYmE4NjgtYWZkOS00MWU0LTk1YWIt Yjk3YmE4YjY3OWJhLzEvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYmE4NjgtYWZkOS00MWU0LTk1YWItYjk3YmE4YjY3OWJh LzEvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe60Idp/L kB/T5R6y8xYvjppssSSZ4hLmKdWTFt04uA/ck+6z0jatvZduRHtu5IAzGldoDibB uztUJ5mToImwNzgHCqdkSapdsB0k2U/9aOPJOAwlqTiwDvLhxYvglElmtvdWuxMU tCXQ8VsArnkmms97i/fnO9BvdZXHBQ36AAKm0lAzNxKBcNb5+RNO6Ovcrk7OiMMk bjWE1+jluN2oghnC43yd162ViAjREGGneCUp585ORzS/7r1gcqZvVoZArQNWmebm HTftKEvrZiPpwaJQVLY20Fxu1x9n7PFKpkQL9GuXUd1WnzORo0vxmV9C+/LM+QBD 1S1g8TCSfuKofA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:10 2025 by rpki-client