This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json) Hash identifier: UVYQP9CQnvIeiRZpfxOExg7Tt0c1LScEF1dlpFKympM= Subject key identifier: F7:DF:E8:D1:A7:3F:C2:4F:E5:81:81:0C:A0:2A:F5:18:BD:58:3B:3A Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Certificate serial: 019AF2E4432E1D214475929C9EBBFB723D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft Manifest number: 0EC1 Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=) 2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: MepFLzq2imxZOdY+3jg8MfXM9+nGnBG/d+c9D1wnThI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:43:2e:1d:21:44:75:92:9c:9e:bb:fb:72:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=f7dfe8d1a73fc24fe581810ca02af518bd583b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:f2:ef:d2:02:7d:d4:3a:00:5b:0d:bf:61: ac:3b:77:b6:8a:c5:90:97:d4:5a:3c:33:9a:b2:4a: fe:67:69:6d:1a:72:64:c8:42:c8:f2:fd:84:db:e9: 2f:26:38:d2:9e:db:51:89:ad:15:a1:cd:33:fc:4e: c6:19:be:15:dc:89:d7:4c:15:19:1b:6f:e0:3d:7e: 2d:fc:e0:4e:4d:54:c2:ab:d9:cb:e5:42:e1:f9:20: 56:fd:02:13:6a:e7:94:4f:ea:5f:8a:0d:4e:29:58: e3:3e:29:fb:21:7a:12:13:ba:45:1b:cb:2e:45:32: 6e:0a:a1:03:b4:d0:ef:e0:8d:50:a7:26:a3:6b:fe: 39:30:d1:a6:fc:5d:4e:bc:1f:3e:a3:6d:d4:7f:e6: ef:53:bb:6f:1b:25:a3:a8:85:0c:ee:c7:74:8a:d7: a6:0a:be:73:ef:60:f7:0d:6e:4a:98:d0:c5:b2:db: 3c:5f:02:5a:84:b6:4b:e6:25:0d:4f:66:b1:38:1f: 68:f4:6b:20:43:93:f5:9f:64:38:26:b4:17:2c:bc: fb:4f:32:60:39:eb:ae:8d:bb:24:06:5a:2c:25:9e: a4:89:46:0d:fc:9f:1a:dd:ae:f8:70:7e:4e:24:5e: 27:7f:5c:83:9d:1d:c8:be:15:d2:4f:b3:41:b2:3b: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:E8:D1:A7:3F:C2:4F:E5:81:81:0C:A0:2A:F5:18:BD:58:3B:3A X509v3 Authority Key Identifier: keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:48:17:f4:ca:ac:e5:78:08:e6:ac:46:7b:14:d3:32:78:83: 5e:2f:aa:7b:c5:bd:fb:e0:7a:8f:5a:66:8c:1a:f2:8c:ad:d6: 9e:1f:d5:95:60:ec:47:96:fc:a9:d1:c0:f9:34:2d:37:31:49: 21:cf:c5:a2:00:00:5a:e1:da:b3:bb:d3:c4:78:ad:ba:c7:1a: 57:e1:4d:e8:82:32:fe:d3:e2:e9:71:ee:2e:51:f4:e7:7c:83: 8c:8a:fc:ef:19:6a:31:fd:30:63:83:4b:42:d9:4e:37:f8:9c: bd:69:66:a8:cd:8c:86:a8:ce:d0:2f:1f:a9:c4:60:23:84:c2: 39:59:6f:65:98:e2:e6:8b:6e:e5:c6:67:69:01:bb:7c:93:e8: 30:64:5a:be:a3:c4:34:8a:97:22:db:c3:0e:1c:0b:96:f9:b3: d2:6f:5e:58:a4:21:a7:37:74:3f:a0:cf:0a:e1:d8:1a:a8:88: 9e:cd:5d:db:af:e7:94:62:98:78:af:a0:16:8e:d4:7f:e4:0c: 15:39:3f:5a:31:6c:7d:27:a6:ba:ba:72:84:3d:c0:1a:06:13: a3:e2:96:91:dd:bf:00:fa:96:04:e2:2a:77:34:2b:06:15:8e: bb:da:83:01:6a:29:04:39:bf:78:0b:05:f3:42:e9:07:02:0d: e2:73:16:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EMuHSFEdZKcnrv7cj1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmQ3NGM2ZDExZDYzY2E1ZGUzY2M2MzdjZTk2N2VlOTc2 MDRjNjcwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EyhmN2RmZThkMWE3M2ZjMjRmZTU4MTgxMGNhMDJhZjUxOGJkNTgzYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7svy79ICfdQ6AFsNv2GsO3e2isWQ l9RaPDOaskr+Z2ltGnJkyELI8v2E2+kvJjjSnttRia0Voc0z/E7GGb4V3InXTBUZ G2/gPX4t/OBOTVTCq9nL5ULh+SBW/QITaueUT+pfig1OKVjjPin7IXoSE7pFG8su RTJuCqEDtNDv4I1Qpyaja/45MNGm/F1OvB8+o23Uf+bvU7tvGyWjqIUM7sd0item Cr5z72D3DW5KmNDFsts8XwJahLZL5iUNT2axOB9o9GsgQ5P1n2Q4JrQXLLz7TzJg OeuujbskBlosJZ6kiUYN/J8a3a74cH5OJF4nf1yDnR3IvhXST7NBsjslAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPff6NGnP8JP5YGBDKAq9Ri9WDs6MB8GA1UdIwQY MBaAFIy9dMbRHWPKXePMY3zpZ+6XYExnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUt NmM4ZTVkMTkzNzdlLzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUtNmM4ZTVkMTkzNzdl LzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREgX9Mqs 5XgI5qxGexTTMniDXi+qe8W9++B6j1pmjBryjK3Wnh/VlWDsR5b8qdHA+TQtNzFJ Ic/FogAAWuHas7vTxHituscaV+FN6IIy/tPi6XHuLlH053yDjIr87xlqMf0wY4NL QtlON/icvWlmqM2MhqjO0C8fqcRgI4TCOVlvZZji5otu5cZnaQG7fJPoMGRavqPE NIqXItvDDhwLlvmz0m9eWKQhpzd0P6DPCuHYGqiIns1d26/nlGKYeK+gFo7Uf+QM FTk/WjFsfSemurpyhD3AGgYTo+KWkd2/APqWBOIqdzQrBhWOu9qDAWopBDm/eAsF 80LpBwIN4nMWSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:06 2025 by rpki-client