This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json) Hash identifier: g0CfTfSdEQ2KNcS2592jJpbe+gdUYRz+MIyqIu5ZNN8= Subject key identifier: B9:34:33:90:CB:16:1D:71:C5:CA:D5:68:CE:E4:B8:5C:10:9D:60:0F Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Certificate serial: 019AF46549B46A7CD7F21D4E58A93DC12FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft Manifest number: 0C93 Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=) 2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: t6quu3d9uQCL7JGuqQ7FmPILGuPFKLofiRyK6I+A72I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:49:b4:6a:7c:d7:f2:1d:4e:58:a9:3d:c1:2f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=b9343390cb161d71c5cad568cee4b85c109d600f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:97:c2:b5:c8:8e:3a:5f:7d:6a:dc:97:50: cb:fc:a5:f7:ec:6a:50:eb:07:b3:ee:4d:a0:33:30: c9:f2:29:9b:58:e1:d9:24:f0:aa:6f:aa:a4:d2:e0: 80:67:fa:14:54:99:c9:1f:8a:af:83:11:b9:f0:32: 34:de:2c:a4:a4:e1:d5:bd:41:de:0f:6a:43:df:c8: dd:0a:5b:3b:96:3d:92:0c:50:2e:a0:d8:07:29:2e: 9b:64:5e:bd:9f:dd:47:4f:aa:6a:8d:c1:7a:3d:6e: 6c:0d:20:c8:dc:f8:dc:e9:5e:3a:6c:3f:2d:d4:31: d8:2a:11:75:50:93:19:b8:14:1a:2e:b0:fc:8c:db: 7b:de:b8:43:21:d8:b6:33:c0:dd:e7:1b:62:fe:53: e0:35:86:2a:75:8a:8c:3e:38:39:d0:21:49:02:87: 7f:62:18:29:79:40:b4:de:6e:4c:f0:35:79:dc:c7: b4:02:37:bc:af:08:95:fb:f0:15:6c:1c:ea:53:bf: 53:89:0b:18:f7:a5:c9:0d:c5:9c:0a:50:47:89:28: f5:cb:d9:ae:31:ad:53:f7:15:51:28:85:fa:c0:7a: 5c:d6:e3:47:ae:1c:e7:82:b3:e0:bf:cb:14:e5:30: 21:8a:36:2f:c2:9b:ff:91:88:11:3a:f8:53:23:32: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:34:33:90:CB:16:1D:71:C5:CA:D5:68:CE:E4:B8:5C:10:9D:60:0F X509v3 Authority Key Identifier: keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:60:c1:99:42:64:b8:86:e6:36:01:b5:78:34:e5:29:01:29: 1e:c0:52:98:9f:df:dc:b8:b6:a6:be:04:82:74:21:fa:03:c9: 7f:e2:a4:17:51:86:ac:16:af:f8:12:e0:bf:01:ac:08:4f:30: bc:7b:50:73:c5:e4:24:b5:22:96:f9:a3:54:9b:fc:72:21:5b: 29:20:c4:78:2c:e7:0b:c1:bd:22:56:ea:bd:d8:34:40:60:ea: 17:0e:27:90:99:3a:03:72:d7:04:fb:bf:3e:97:de:f5:8b:f0: cc:c4:e5:eb:e5:0a:24:c7:44:0c:f6:10:42:5f:4f:d3:31:21: 38:51:88:12:e6:db:22:9b:cb:fa:05:d2:fc:db:ab:4f:f6:03: ae:6d:c4:9c:cc:58:7a:ea:d1:19:de:93:8d:22:9b:c1:a5:4a: 6f:a9:e8:b5:17:e1:66:9a:dc:d4:e8:ff:ac:b1:df:b3:7c:9f: 87:0a:9c:5a:78:a6:cc:51:59:01:d1:98:84:15:6e:bb:21:7b: 6e:5f:6f:4d:fa:23:16:57:83:4f:0e:8c:05:13:dc:ca:1d:fe: bb:49:87:ce:a3:63:fd:f0:39:9d:03:3b:80:24:e0:0d:f0:a6: 0a:ab:f7:8f:f7:ec:f7:8f:37:4d:8f:8c:fa:97:14:e3:0a:6e: b1:84:1f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUm0anzX8h1OWKk9wS/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm NmE1Y2YwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD EyhiOTM0MzM5MGNiMTYxZDcxYzVjYWQ1NjhjZWU0Yjg1YzEwOWQ2MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFSXwrXIjjpffWrcl1DL/KX37GpQ 6wez7k2gMzDJ8imbWOHZJPCqb6qk0uCAZ/oUVJnJH4qvgxG58DI03iykpOHVvUHe D2pD38jdCls7lj2SDFAuoNgHKS6bZF69n91HT6pqjcF6PW5sDSDI3Pjc6V46bD8t 1DHYKhF1UJMZuBQaLrD8jNt73rhDIdi2M8Dd5xti/lPgNYYqdYqMPjg50CFJAod/ YhgpeUC03m5M8DV53Me0Aje8rwiV+/AVbBzqU79TiQsY96XJDcWcClBHiSj1y9mu Ma1T9xVRKIX6wHpc1uNHrhzngrPgv8sU5TAhijYvwpv/kYgROvhTIzIooQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk0M5DLFh1xxcrVaM7kuFwQnWAPMB8GA1UdIwQY MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWDBmUJk uIbmNgG1eDTlKQEpHsBSmJ/f3Li2pr4EgnQh+gPJf+KkF1GGrBav+BLgvwGsCE8w vHtQc8XkJLUilvmjVJv8ciFbKSDEeCznC8G9Ilbqvdg0QGDqFw4nkJk6A3LXBPu/ Ppfe9YvwzMTl6+UKJMdEDPYQQl9P0zEhOFGIEubbIpvL+gXS/NurT/YDrm3EnMxY eurRGd6TjSKbwaVKb6notRfhZprc1Oj/rLHfs3yfhwqcWnimzFFZAdGYhBVuuyF7 bl9vTfojFleDTw6MBRPcyh3+u0mHzqNj/fA5nQM7gCTgDfCmCqv3j/fs9483TY+M +pcU4wpusYQfTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:43 2025 by rpki-client