This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json) Hash identifier: 61JJqPaDaYRpaCgcyvvlaIKukPgMZiFTtfeJOOJHE9E= Subject key identifier: 0F:9A:79:F6:57:EC:11:97:12:B1:EC:12:36:AC:D8:0F:A6:2A:A3:14 Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09 Certificate serial: 019AF12E6D3A7779EA30F3B83143BBEF93A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft Manifest number: 0E6F Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=) 2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: NvIuqrHxnMKGnHJK4bVnBKJIvxJeQTCblbVEJkKPFsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6d:3a:77:79:ea:30:f3:b8:31:43:bb:ef:93:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09 Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=0f9a79f657ec119712b1ec1236acd80fa62aa314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:82:45:34:36:76:e1:1f:5f:14:85:48:05:b1: cf:69:a8:9a:5a:78:08:b8:68:19:05:18:dd:7b:89: bd:63:fd:1d:24:3f:74:5f:1c:81:4c:40:9d:43:8b: 3e:e3:3f:e4:f0:fd:7a:b1:5a:99:7d:22:ae:69:9a: a2:88:6c:c1:61:fa:97:84:cc:15:41:4b:ec:44:61: 0a:a4:c5:df:d8:67:a9:aa:57:d2:9c:79:8c:b7:40: f6:de:d5:74:39:78:8b:3d:57:40:bf:14:dc:8f:37: 7f:31:07:c5:ef:ad:e9:bf:1a:55:d7:07:45:a5:56: 87:34:0e:fc:cf:0e:dd:15:17:98:bf:37:f3:21:36: e1:36:3e:c9:a9:9a:46:e8:aa:de:a5:a7:01:73:63: aa:86:96:0a:5f:71:b1:ed:7a:56:5b:f9:30:53:b1: f0:7f:7c:03:9f:b9:6e:12:e2:5a:26:9e:36:3a:88: b2:95:6b:ee:1b:41:27:b7:63:42:c9:52:bd:0e:89: d7:b0:67:36:0a:fd:29:36:30:e0:12:ad:f1:93:62: 3d:94:7a:8c:c5:1e:e7:4c:5c:3a:f1:cc:0b:25:22: 51:07:c9:28:f8:9f:4b:61:ad:e0:4a:2d:8b:ca:08: 93:65:20:15:ff:c3:13:5b:0c:d1:40:47:be:34:0d: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9A:79:F6:57:EC:11:97:12:B1:EC:12:36:AC:D8:0F:A6:2A:A3:14 X509v3 Authority Key Identifier: keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d1:12:47:24:63:dc:cf:91:74:7e:47:c5:fc:8f:7d:d4:b7: fe:66:ab:83:85:a1:42:65:03:1b:d1:ee:97:86:11:a6:de:c8: 0c:08:27:9a:f0:c2:51:5d:0f:97:82:ac:88:31:aa:f4:32:e9: 5e:05:ed:99:a8:25:15:f2:ee:e3:23:fe:77:b8:54:09:66:4a: 60:2b:e4:a3:09:94:93:83:87:2d:24:3b:c9:9d:94:62:1b:d5: 76:c4:77:ae:31:f5:f5:d8:94:dc:e4:e6:b9:70:16:45:d4:97: c0:ab:76:f4:bc:f0:88:bc:38:6a:a1:38:26:5e:74:52:20:fe: ad:ac:06:da:d4:e7:01:d9:ec:49:50:dd:b9:f2:ef:79:22:77: 43:2e:14:9a:9b:bb:ab:65:50:94:58:17:16:d4:3e:1c:a1:7b: d4:a7:cd:9d:29:3e:b3:b0:a1:1b:5b:30:f5:26:24:0f:75:72: 7c:74:73:6e:1c:a6:9b:1d:a3:e8:83:be:8b:d3:d3:f7:fd:2e: 54:2c:a2:d8:92:da:34:bd:ce:5f:8c:22:52:f6:0c:f1:08:82: 7e:cd:17:b9:d7:c8:79:3e:9e:2c:15:8c:b7:46:4b:0c:af:e0: 3f:75:2d:fb:44:d2:34:63:b4:df:32:81:d8:bc:90:a1:d8:a7: 9d:b2:f8:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm06d3nqMPO4MUO775OhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODEwZWRjNTFhYmQ2MWU2OWYzYzY5ZWU0OWQ4OGU5ODk2 YTZmMDkwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD EygwZjlhNzlmNjU3ZWMxMTk3MTJiMWVjMTIzNmFjZDgwZmE2MmFhMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IJFNDZ24R9fFIVIBbHPaaiaWngI uGgZBRjde4m9Y/0dJD90XxyBTECdQ4s+4z/k8P16sVqZfSKuaZqiiGzBYfqXhMwV QUvsRGEKpMXf2GepqlfSnHmMt0D23tV0OXiLPVdAvxTcjzd/MQfF763pvxpV1wdF pVaHNA78zw7dFReYvzfzITbhNj7JqZpG6KrepacBc2OqhpYKX3Gx7XpWW/kwU7Hw f3wDn7luEuJaJp42OoiylWvuG0Ent2NCyVK9DonXsGc2Cv0pNjDgEq3xk2I9lHqM xR7nTFw68cwLJSJRB8ko+J9LYa3gSi2LygiTZSAV/8MTWwzRQEe+NA26cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+aefZX7BGXErHsEjas2A+mKqMUMB8GA1UdIwQY MBaAFIyBDtxRq9YeafPGnuSdiOmJam8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEt NDAxNDQ3OGJiNmM4LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEtNDAxNDQ3OGJiNmM4 LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtESRyRj 3M+RdH5HxfyPfdS3/marg4WhQmUDG9Hul4YRpt7IDAgnmvDCUV0Pl4KsiDGq9DLp XgXtmaglFfLu4yP+d7hUCWZKYCvkowmUk4OHLSQ7yZ2UYhvVdsR3rjH19diU3OTm uXAWRdSXwKt29LzwiLw4aqE4Jl50UiD+rawG2tTnAdnsSVDdufLveSJ3Qy4Umpu7 q2VQlFgXFtQ+HKF71KfNnSk+s7ChG1sw9SYkD3VyfHRzbhymmx2j6IO+i9PT9/0u VCyi2JLaNL3OX4wiUvYM8QiCfs0XudfIeT6eLBWMt0ZLDK/gP3Ut+0TSNGO03zKB 2LyQodinnbL4KA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:05 2025 by rpki-client