This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json) Hash identifier: 8nELdzS7oz5cbnyJTZHcbWjj3fYb10xzVxy7f+VPwxA= Subject key identifier: FA:3A:87:BA:28:0D:F2:85:ED:FE:B6:F5:3E:80:26:56:F5:D7:98:06 Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Certificate serial: 019AF5409AA519C427556DCE59EB350A1EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft Manifest number: 168A Signing time: Sat 06 Dec 2025 20:00:43 +0000 Manifest this update: Sat 06 Dec 2025 20:00:43 +0000 Manifest next update: Sun 07 Dec 2025 20:00:43 +0000 Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=) 2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: nHzB6mLZzq1yW+EswWdLVpFkdoeYEmuB//7nvJj0B9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9a:a5:19:c4:27:55:6d:ce:59:eb:35:0a:1e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Validity Not Before: Dec 6 20:00:43 2025 GMT Not After : Dec 7 20:00:43 2025 GMT Subject: CN=fa3a87ba280df285edfeb6f53e802656f5d79806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:25:35:6a:53:12:2c:98:b3:d6:b5:5a:be: 81:54:f7:44:61:5d:4e:b4:cc:c7:09:70:6a:db:58: 06:33:0f:2a:e4:d3:c0:11:28:78:8f:f4:25:12:5a: 9f:a4:2f:0d:04:87:45:3f:d1:e1:47:03:85:e5:3b: 5e:9e:a9:56:2a:05:99:72:63:59:3c:45:41:84:2e: 8f:33:45:09:23:f6:64:f1:24:f1:a9:8b:ca:f2:cf: 85:ea:94:4e:12:94:3d:0a:b2:e8:05:d2:e6:a5:aa: dc:e2:31:6c:7e:03:55:af:2c:60:87:49:32:da:aa: e7:95:2d:75:a3:84:ea:53:a5:f7:6f:78:11:80:59: d5:c9:57:0b:02:be:5f:39:21:b2:f4:2e:cf:72:58: 3c:a3:9c:1a:20:ff:df:61:40:12:75:15:e5:65:31: 7b:de:81:37:16:d1:0b:50:fa:db:88:4f:6e:1c:6d: d8:de:5d:79:b6:d9:85:f5:dc:81:12:f8:03:1e:cf: 85:f9:07:7e:84:83:86:e5:26:c1:1e:09:49:00:e1: 2d:7c:89:c6:6a:aa:e0:ac:3e:5b:19:f2:86:e3:e7: 8e:e8:23:d9:42:80:b9:e9:78:9d:42:df:ec:ee:73: 79:02:65:9c:34:6f:fe:0d:5b:f2:eb:46:5f:9e:4b: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:87:BA:28:0D:F2:85:ED:FE:B6:F5:3E:80:26:56:F5:D7:98:06 X509v3 Authority Key Identifier: keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ee:c5:b8:3a:2a:71:8d:e4:3a:97:09:cf:46:3e:b3:18:94: a8:e9:bc:c5:84:da:ce:44:b4:0f:44:e6:fd:96:79:b3:df:14: 91:43:20:f8:c8:32:95:cb:d5:8c:a0:31:a1:fd:bf:8b:c2:0e: 43:0a:c2:5d:d8:af:6a:e4:d6:af:0a:e0:da:88:a1:fe:21:6f: 93:6b:d2:36:dd:5e:bb:e5:30:88:91:e3:7f:e7:41:54:56:9c: 6e:41:ff:ae:b0:fb:4b:62:e3:c7:f1:70:8c:9e:c2:74:29:ae: 79:ce:39:5e:9d:1a:ff:24:8e:52:bf:e1:68:82:70:72:e4:c6: fd:40:34:d4:bc:e7:e5:f8:58:28:94:1f:92:99:86:7c:8b:78: e1:73:cc:16:33:71:17:d0:91:3e:6a:e3:4b:0f:83:53:aa:7e: 94:09:45:8d:9f:cb:18:04:cc:94:4d:17:ba:5d:f9:fc:1a:e6: 2e:2e:b4:c2:03:42:ce:a2:a0:b8:b3:1c:29:a5:7f:75:28:c3: 21:ab:db:79:6a:b0:47:51:b5:59:e6:d8:d5:d4:5f:58:27:e5: d5:b3:47:7d:4d:02:d3:a5:a8:cf:e0:37:93:1d:b6:65:26:0a: d0:7c:71:20:a6:9d:ad:25:74:79:3d:d1:fd:bf:84:1d:25:ed: 5b:93:12:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJqlGcQnVW3OWes1Ch70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh MjkxMzUwHhcNMjUxMjA2MjAwMDQzWhcNMjUxMjA3MjAwMDQzWjAzMTEwLwYDVQQD EyhmYTNhODdiYTI4MGRmMjg1ZWRmZWI2ZjUzZTgwMjY1NmY1ZDc5ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ4lNWpTEiyYs9a1Wr6BVPdEYV1O tMzHCXBq21gGMw8q5NPAESh4j/QlElqfpC8NBIdFP9HhRwOF5TtenqlWKgWZcmNZ PEVBhC6PM0UJI/Zk8STxqYvK8s+F6pROEpQ9CrLoBdLmparc4jFsfgNVryxgh0ky 2qrnlS11o4TqU6X3b3gRgFnVyVcLAr5fOSGy9C7Pclg8o5waIP/fYUASdRXlZTF7 3oE3FtELUPrbiE9uHG3Y3l15ttmF9dyBEvgDHs+F+Qd+hIOG5SbBHglJAOEtfInG aqrgrD5bGfKG4+eO6CPZQoC56XidQt/s7nN5AmWcNG/+DVvy60Zfnkt/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo6h7ooDfKF7f629T6AJlb115gGMB8GA1UdIwQY MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqu7FuDoq cY3kOpcJz0Y+sxiUqOm8xYTazkS0D0Tm/ZZ5s98UkUMg+MgylcvVjKAxof2/i8IO QwrCXdivauTWrwrg2oih/iFvk2vSNt1eu+UwiJHjf+dBVFacbkH/rrD7S2Ljx/Fw jJ7CdCmuec45Xp0a/ySOUr/haIJwcuTG/UA01Lzn5fhYKJQfkpmGfIt44XPMFjNx F9CRPmrjSw+DU6p+lAlFjZ/LGATMlE0Xul35/BrmLi60wgNCzqKguLMcKaV/dSjD IavbeWqwR1G1WebY1dRfWCfl1bNHfU0C06Woz+A3kx22ZSYK0HxxIKadrSV0eT3R /b+EHSXtW5MS3w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:22 2025 by rpki-client