This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json) Hash identifier: iNxMT4aB9v37xdhNP52Mt44ReTY340+c/SYiOCQ9OOo= Subject key identifier: D7:32:E1:FE:03:BA:F8:86:CE:CC:E8:41:45:2B:67:B1:B6:50:40:4B Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Certificate serial: 019AF61CB07CD17529598F3E430EDD82895D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft Manifest number: 0644 Signing time: Sun 07 Dec 2025 00:01:06 +0000 Manifest this update: Sun 07 Dec 2025 00:01:06 +0000 Manifest next update: Mon 08 Dec 2025 00:01:06 +0000 Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=) 2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: HoGxR0sEdhd0i75jdUjote+CeYEiGj74RmLz/YuGKyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:b0:7c:d1:75:29:59:8f:3e:43:0e:dd:82:89:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Validity Not Before: Dec 7 00:01:06 2025 GMT Not After : Dec 8 00:01:06 2025 GMT Subject: CN=d732e1fe03baf886cecce841452b67b1b650404b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:25:1a:3e:f4:3e:46:f5:c3:5f:05:4e:13: c5:2e:c8:d3:4a:a6:0e:cf:bc:3e:24:0b:dc:a5:36: e0:b8:33:41:9b:78:84:e0:4e:70:b6:b4:95:ed:2e: cb:00:17:e6:53:d9:d8:c0:eb:c5:dd:79:ac:e7:ec: 48:8b:15:9b:a9:27:16:28:4a:19:d5:3c:f7:96:7a: 11:2b:d6:7f:5e:15:d8:86:f3:2a:be:09:d6:3d:67: bf:88:02:71:e3:4d:31:1f:aa:2a:fd:f3:a7:dc:4a: cd:71:ed:52:80:0f:41:e8:dc:81:f6:a7:85:d8:89: f5:18:0a:1d:6b:e7:da:8f:0d:29:67:3a:1e:29:bf: 2a:f4:8a:64:ce:e7:f1:dc:7b:29:cd:26:ff:7c:6c: 18:70:a3:e0:59:de:f2:d8:a7:0f:1a:d6:25:a0:ae: f4:95:e5:8a:6b:2d:48:87:b1:96:d6:02:25:ce:b4: de:d9:b5:17:6c:55:f1:d6:ea:7f:85:49:de:66:ed: 8d:a9:5f:f0:59:7b:7f:15:08:b5:e6:61:9f:c7:7f: e4:c6:79:98:9e:15:05:e3:7c:af:48:52:05:67:8e: d5:d4:4e:c6:a6:54:d1:93:4e:99:bc:e9:3e:2e:0c: 82:27:37:6d:d5:a1:6f:9a:e6:c7:87:8e:ef:25:2d: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:E1:FE:03:BA:F8:86:CE:CC:E8:41:45:2B:67:B1:B6:50:40:4B X509v3 Authority Key Identifier: keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:90:cc:3e:a4:fb:bf:b1:af:23:f5:73:d2:fb:2f:06:0b: e3:a2:f7:2d:16:41:c5:46:ad:ca:b3:f0:5d:b9:4d:fc:fa:9e: 37:4f:bd:6e:7c:31:87:eb:6a:27:bb:fc:b7:4b:d0:2b:db:d6: 33:1a:3f:e9:b4:c4:e3:b5:2c:4b:a3:f8:f9:05:44:5a:7b:d1: cc:23:5a:60:f4:ec:0e:3a:7d:7d:a6:30:19:69:0b:e7:a0:18: 51:bb:78:97:e4:b6:30:24:5b:7f:58:b7:b0:15:6a:59:9c:a4: 27:39:d2:f9:58:70:16:6b:fa:7e:43:a9:db:5f:d5:d4:25:cd: 86:a4:99:02:52:0b:37:b1:6e:34:bf:15:be:3d:fd:d0:73:8e: 6f:3d:24:93:84:5a:05:5d:ab:11:5d:b0:1a:dd:3d:20:b2:32: 3a:41:0b:e7:1b:79:93:3e:7d:be:db:46:d6:65:b1:39:a0:ab: c9:75:03:29:0b:b6:4b:14:13:8d:8a:80:28:c8:a6:35:7e:dd: bd:87:7e:77:10:4d:aa:e5:b8:c8:20:e8:f4:30:45:db:05:2d: 5e:ee:ab:86:77:45:9f:19:08:2a:8f:e6:af:c4:b9:4e:71:06: 59:47:d4:38:dd:9f:00:ab:e0:4c:64:8d:fe:2e:95:12:8b:e8: 49:3c:a6:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HLB80XUpWY8+Qw7dgoldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0 YTM4MjcwHhcNMjUxMjA3MDAwMTA2WhcNMjUxMjA4MDAwMTA2WjAzMTEwLwYDVQQD EyhkNzMyZTFmZTAzYmFmODg2Y2VjY2U4NDE0NTJiNjdiMWI2NTA0MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJElGj70Pkb1w18FThPFLsjTSqYO z7w+JAvcpTbguDNBm3iE4E5wtrSV7S7LABfmU9nYwOvF3Xms5+xIixWbqScWKEoZ 1Tz3lnoRK9Z/XhXYhvMqvgnWPWe/iAJx400xH6oq/fOn3ErNce1SgA9B6NyB9qeF 2In1GAoda+fajw0pZzoeKb8q9Ipkzufx3HspzSb/fGwYcKPgWd7y2KcPGtYloK70 leWKay1Ih7GW1gIlzrTe2bUXbFXx1up/hUneZu2NqV/wWXt/FQi15mGfx3/kxnmY nhUF43yvSFIFZ47V1E7GplTRk06ZvOk+LgyCJzdt1aFvmubHh47vJS1yJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcy4f4DuviGzszoQUUrZ7G2UEBLMB8GA1UdIwQY MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt ZDlhODA4ZWMxYWIxLzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnuQzD6k +7+xryP1c9L7LwYL46L3LRZBxUatyrPwXblN/PqeN0+9bnwxh+tqJ7v8t0vQK9vW Mxo/6bTE47UsS6P4+QVEWnvRzCNaYPTsDjp9faYwGWkL56AYUbt4l+S2MCRbf1i3 sBVqWZykJznS+VhwFmv6fkOp21/V1CXNhqSZAlILN7FuNL8Vvj390HOObz0kk4Ra BV2rEV2wGt09ILIyOkEL5xt5kz59vttG1mWxOaCryXUDKQu2SxQTjYqAKMimNX7d vYd+dxBNquW4yCDo9DBF2wUtXu6rhndFnxkIKo/mr8S5TnEGWUfUON2fAKvgTGSN /i6VEovoSTymog== -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:58 2025 by rpki-client