This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft File: Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json) Hash identifier: UTl5YSpyuHxnHZrbXtGAmvNPkwH40+LxwXKVBOgVf+c= Subject key identifier: 51:C4:DB:66:55:52:23:6F:FA:74:D6:1B:F3:9A:2F:C2:C0:C4:88:C8 Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9 Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9 Certificate serial: 019AF1D1E03A9E2209CB227D8787B6C47D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft Manifest number: 1384 Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=) 2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: 8x/etqFMYqYHCXAd594UoA7mZKqwV2LHd+MyBGE+lao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e0:3a:9e:22:09:cb:22:7d:87:87:b6:c4:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9 Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=51c4db665552236ffa74d61bf39a2fc2c0c488c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:b2:5a:f9:51:9d:7e:b4:fe:b1:ab:5f:98: fa:6d:b0:b2:fe:40:31:81:eb:30:7a:e9:0e:18:8d: f6:2a:dd:fa:e3:83:90:c6:e4:ce:f5:c7:b1:1b:8e: f3:6c:db:d4:c1:2c:f1:21:6c:57:dc:34:af:c5:7a: 76:30:23:49:91:24:65:06:a1:0e:d9:9b:08:44:7a: 51:1d:9d:6f:1f:c5:c9:c9:ed:cd:a8:9c:e7:ee:6f: 44:2b:13:37:9d:2e:ab:31:8e:ab:40:e3:ee:3a:cf: d0:e4:f4:62:66:a4:83:ca:f2:74:8c:9c:f3:dd:ec: ef:74:c7:6a:83:ea:0f:af:6f:02:95:c0:5c:16:97: 58:c0:6b:fd:bc:d1:13:5b:69:2d:78:63:98:67:7c: b7:df:0d:33:6d:90:c4:13:42:5e:58:8a:54:36:92: 7c:5c:66:7b:91:75:31:29:8b:6b:9c:01:07:43:5e: c9:c6:36:7d:4b:b5:61:4f:94:b8:80:bd:21:27:27: c7:da:d4:bd:44:cd:7b:6d:91:ac:5c:d8:37:cb:9e: 5a:cc:44:72:e4:77:3d:b7:8a:85:d8:55:c2:45:38: ee:d9:2f:95:c0:f2:a2:82:7b:92:aa:8a:15:85:c0: 29:e8:43:f5:f5:a1:52:ce:ae:0a:78:db:a9:b2:d5: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C4:DB:66:55:52:23:6F:FA:74:D6:1B:F3:9A:2F:C2:C0:C4:88:C8 X509v3 Authority Key Identifier: keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:94:e2:62:1d:df:79:62:c8:c5:17:1f:19:4f:9e:e3:f7:56: 87:95:09:c1:f0:f2:c9:d2:1a:96:ed:89:56:7e:ac:55:3e:13: 29:85:42:59:13:cb:1d:a4:e2:d2:af:fd:e4:a0:c5:a1:3e:f4: 46:08:7f:2d:0a:26:a5:d4:82:2e:7c:7b:57:96:9a:98:3c:12: aa:4f:20:b0:b2:2c:80:a8:ec:58:12:fb:12:b1:5d:d5:6b:10: d0:b2:15:b4:d0:0d:bf:0e:1e:d0:ff:13:5c:7e:96:0d:6e:58: eb:3d:78:e5:b7:d2:66:82:d0:e6:75:d1:de:e6:b2:47:2b:56: 0e:db:a0:66:01:66:9c:93:1d:18:0c:d4:9c:55:cb:19:ff:54: f8:f2:0a:5f:b6:43:0d:db:71:b8:d6:2a:2d:4e:fd:20:d3:16: 36:44:b3:73:f6:ee:1b:de:a0:47:12:8f:a2:44:c0:1c:0e:b6: 0c:22:5d:69:48:b9:e1:39:4d:8f:ed:91:18:e6:69:25:fb:fd: 98:d3:6a:11:e3:74:63:03:9a:67:7e:6e:38:24:ae:3e:5e:ae: 4d:52:ae:17:1f:2b:7b:c6:19:6d:14:a4:1d:e1:56:0a:31:e2: 6b:b4:48:8a:e0:97:c1:76:b6:23:20:bf:fe:2a:20:2e:86:33: 55:a2:3d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eA6niIJyyJ9h4e2xH1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGMyZWRjMTNiYjJhM2M2MzI2MjEyMWI5ZWFhZDE4OGJl ZGJhZTkwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD Eyg1MWM0ZGI2NjU1NTIyMzZmZmE3NGQ2MWJmMzlhMmZjMmMwYzQ4OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2yWvlRnX60/rGrX5j6bbCy/kAx gesweukOGI32Kt3644OQxuTO9cexG47zbNvUwSzxIWxX3DSvxXp2MCNJkSRlBqEO 2ZsIRHpRHZ1vH8XJye3NqJzn7m9EKxM3nS6rMY6rQOPuOs/Q5PRiZqSDyvJ0jJzz 3ezvdMdqg+oPr28ClcBcFpdYwGv9vNETW2kteGOYZ3y33w0zbZDEE0JeWIpUNpJ8 XGZ7kXUxKYtrnAEHQ17JxjZ9S7VhT5S4gL0hJyfH2tS9RM17bZGsXNg3y55azERy 5Hc9t4qF2FXCRTju2S+VwPKignuSqooVhcAp6EP19aFSzq4KeNupstXdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHE22ZVUiNv+nTWG/OaL8LAxIjIMB8GA1UdIwQY MBaAFCaMLtwTuyo8YyYhIbnqrRiL7brpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5Yzct ZjAxMTVjODVmM2JhLzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5YzctZjAxMTVjODVmM2Jh LzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpTiYh3f eWLIxRcfGU+e4/dWh5UJwfDyydIalu2JVn6sVT4TKYVCWRPLHaTi0q/95KDFoT70 Rgh/LQompdSCLnx7V5aamDwSqk8gsLIsgKjsWBL7ErFd1WsQ0LIVtNANvw4e0P8T XH6WDW5Y6z145bfSZoLQ5nXR3uayRytWDtugZgFmnJMdGAzUnFXLGf9U+PIKX7ZD DdtxuNYqLU79INMWNkSzc/buG96gRxKPokTAHA62DCJdaUi54TlNj+2RGOZpJfv9 mNNqEeN0YwOaZ35uOCSuPl6uTVKuFx8re8YZbRSkHeFWCjHia7RIiuCXwXa2IyC/ /iogLoYzVaI9RA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:48 2025 by rpki-client