This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft File: jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json) Hash identifier: mfdb3KmhAv83bovZ6sV3e7i0y+DEbjaT7fvhYcU6Y60= Subject key identifier: E1:27:51:EC:86:3B:BD:DF:3C:8A:33:72:03:F9:3B:72:14:AE:49:5E Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09 Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509 Certificate serial: 019AF23F9F270D7EAB03231AAE520BAE3F75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=) 2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: 0GdOMMqRwFUOD61LL0m0CxayeakkWC+ZVHNVaQAeaqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9f:27:0d:7e:ab:03:23:1a:ae:52:0b:ae:3f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=e12751ec863bbddf3c8a337203f93b7214ae495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:4e:5c:48:cc:04:92:29:a9:01:4e:40:e1: a0:81:4a:e0:a5:ad:d1:dc:5b:f7:fb:d2:65:35:75: 41:0d:a9:bb:58:07:ca:97:cf:d7:36:f8:f2:d8:9b: c9:67:4f:b8:b1:56:df:ff:4c:38:a4:0f:d0:04:3d: 17:e5:dc:5b:64:85:29:36:37:69:cc:57:82:f6:2f: 17:7a:53:02:86:be:17:12:ac:e7:87:83:58:f4:f3: 1f:98:97:02:f9:ea:cb:33:cc:d1:d9:ad:c0:9c:22: ff:8b:e6:fa:c9:a0:78:dc:cf:42:8f:99:2e:fc:61: 20:85:95:d7:3a:0c:34:0a:96:be:e3:1e:f1:9f:77: 20:c4:05:4b:07:2b:ed:e3:3f:b6:31:1d:85:55:bc: ab:53:03:dc:3c:2c:37:3f:66:ab:38:83:54:ab:d7: 5d:e8:ac:fa:90:4b:a3:97:36:f4:ad:3d:0f:e3:4a: 04:ed:8d:37:8a:37:61:f3:16:ba:43:25:cc:eb:3f: 5c:7d:2a:9e:a6:81:91:e7:35:af:c0:33:c7:b9:9f: 08:53:5e:66:44:06:7f:5b:7e:04:4d:01:a5:8c:29: 33:53:4b:7c:af:3f:7e:47:1a:6c:0a:3e:be:a2:fb: 9e:97:70:71:fe:62:ec:52:4c:13:3c:2d:6d:55:c2: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:51:EC:86:3B:BD:DF:3C:8A:33:72:03:F9:3B:72:14:AE:49:5E X509v3 Authority Key Identifier: keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:37:0a:4f:cb:7f:c4:fb:66:82:b7:9a:65:e3:6c:c0:c2:49: f9:70:5e:67:a3:3f:5e:5f:0a:96:b7:b4:64:da:9c:51:cf:87: 60:84:18:47:fd:da:90:59:5a:71:24:fc:9a:50:d3:fc:20:59: c8:d5:5e:eb:33:db:35:ad:7f:6b:f9:dd:d4:d7:fb:a4:7e:fc: 09:c0:0c:6a:f4:e1:97:27:17:79:76:9e:0a:45:12:54:75:32: 48:07:cc:61:6f:63:ca:c5:94:7c:f6:99:1b:9e:53:96:77:12: 07:98:48:ac:af:17:15:7b:e7:65:b7:38:a4:6e:e4:9f:ab:52: 04:9a:2c:4a:56:b4:a1:9b:07:b8:50:e1:ac:ca:2c:a5:d5:ee: 1f:8a:2b:c9:64:e5:a8:41:3e:9a:a1:67:8a:40:50:2f:ad:7f: 07:04:85:de:9a:58:92:5f:91:a5:87:16:e4:21:7e:bf:9c:a0: 91:99:c9:42:02:77:45:a9:32:cd:21:90:cc:ff:4a:4a:c4:b1: 2e:65:65:a1:a1:73:55:cd:d2:8b:d6:d9:e9:dc:50:fc:b9:bb: 25:95:06:01:31:18:c0:bf:3a:b5:a2:81:57:a6:61:5c:43:70: b0:9c:4d:ce:4d:f2:07:64:3d:f1:b2:1c:9e:d6:57:85:8e:d1: e4:17:b3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP58nDX6rAyMarlILrj91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm ZGQ1MDkwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhlMTI3NTFlYzg2M2JiZGRmM2M4YTMzNzIwM2Y5M2I3MjE0YWU0OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdZOXEjMBJIpqQFOQOGggUrgpa3R 3Fv3+9JlNXVBDam7WAfKl8/XNvjy2JvJZ0+4sVbf/0w4pA/QBD0X5dxbZIUpNjdp zFeC9i8XelMChr4XEqznh4NY9PMfmJcC+erLM8zR2a3AnCL/i+b6yaB43M9Cj5ku /GEghZXXOgw0Cpa+4x7xn3cgxAVLByvt4z+2MR2FVbyrUwPcPCw3P2arOINUq9dd 6Kz6kEujlzb0rT0P40oE7Y03ijdh8xa6QyXM6z9cfSqepoGR5zWvwDPHuZ8IU15m RAZ/W34ETQGljCkzU0t8rz9+RxpsCj6+ovuel3Bx/mLsUkwTPC1tVcIM5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEnUeyGO73fPIozcgP5O3IUrkleMB8GA1UdIwQY MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt OTJkOTRjZDdiMDI0LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0 LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDcKT8t/ xPtmgreaZeNswMJJ+XBeZ6M/Xl8Klre0ZNqcUc+HYIQYR/3akFlacST8mlDT/CBZ yNVe6zPbNa1/a/nd1Nf7pH78CcAMavThlycXeXaeCkUSVHUySAfMYW9jysWUfPaZ G55TlncSB5hIrK8XFXvnZbc4pG7kn6tSBJosSla0oZsHuFDhrMospdXuH4oryWTl qEE+mqFnikBQL61/BwSF3ppYkl+RpYcW5CF+v5ygkZnJQgJ3RakyzSGQzP9KSsSx LmVloaFzVc3Si9bZ6dxQ/Lm7JZUGATEYwL86taKBV6ZhXENwsJxNzk3yB2Q98bIc ntZXhY7R5BezoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:49 2025 by rpki-client