This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json) Hash identifier: rw8DFKDsEynM2JIX1NPlo9TsgPRtc0dAbp2ZWMxddnk= Subject key identifier: 68:58:31:37:9A:92:F0:7A:E4:41:AF:BD:F1:E7:95:34:5C:85:73:B6 Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Certificate serial: 019AF5E6242A0F5E3FE5425FB3CBA6539DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 23:01:31 +0000 Manifest this update: Sat 06 Dec 2025 23:01:31 +0000 Manifest next update: Sun 07 Dec 2025 23:01:31 +0000 Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=) 2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=) 3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=) 4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: NSA7GWcIB6oFw8iW90L0IfQHOiJH217Q7JV8Iv8kCMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:24:2a:0f:5e:3f:e5:42:5f:b3:cb:a6:53:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b Validity Not Before: Dec 6 23:01:31 2025 GMT Not After : Dec 7 23:01:31 2025 GMT Subject: CN=685831379a92f07ae441afbdf1e795345c8573b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:7e:b9:84:be:a0:bc:9a:1e:40:6a:e3:04: 02:a4:4e:c3:75:e8:7a:93:7b:9b:d9:0a:0b:ab:92: 4b:af:da:ab:91:5f:50:6e:2b:1d:65:70:4f:53:8d: 76:8d:fd:fa:94:92:60:e2:e4:f7:86:bf:ca:ce:dd: 84:25:13:c6:d5:dc:df:71:bc:9f:c3:be:47:39:22: 17:15:da:50:51:74:30:8f:ed:9b:fd:b9:d0:92:ca: 3f:38:e2:84:9f:48:2d:f8:5e:03:01:50:07:b9:23: bd:94:52:1c:49:53:1f:d7:83:18:44:2d:e3:0e:6a: e4:d9:9f:1b:3f:ab:3d:cf:cd:8d:e8:5b:b9:37:50: 1d:64:4a:34:d5:5c:db:2c:23:aa:0a:05:3b:69:3a: cf:27:1f:e8:ba:38:a0:0f:19:cf:d8:81:b1:90:b3: 2d:81:3f:ac:17:99:af:4d:9e:4c:1b:1e:c8:57:f5: 4e:54:e3:68:51:3e:33:26:ba:75:29:33:e6:ab:2d: 08:6d:83:74:c9:5a:1a:ce:3a:1e:09:a0:a5:da:dd: 1c:5b:27:68:87:5c:c5:03:e1:a5:1c:75:89:a4:e3: 64:07:56:33:1b:5d:38:1b:a9:0d:3f:06:98:1e:47: 26:79:58:82:af:69:91:cc:69:24:05:ca:94:c5:13: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:31:37:9A:92:F0:7A:E4:41:AF:BD:F1:E7:95:34:5C:85:73:B6 X509v3 Authority Key Identifier: keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:36:43:07:59:bc:83:de:05:0a:4f:66:8e:22:f6:d4:ad:9e: 60:be:33:7a:c5:cb:50:9a:02:0e:0b:be:63:eb:94:ee:d5:92: 95:05:af:fd:3b:18:0f:29:38:14:f9:f0:1e:5c:5b:0c:0f:8a: 95:76:81:cd:57:da:b8:72:c8:07:57:d4:ef:93:85:34:08:dd: db:59:c7:3c:06:f0:b2:a7:80:76:83:5f:5d:c7:96:de:98:1c: 75:ac:a5:76:bb:ad:ab:e1:cb:e5:54:59:7a:3d:69:fe:c7:3f: c7:6a:85:36:b6:2f:48:aa:82:5f:5d:ff:8e:60:1f:89:9a:c8: d2:e2:19:f6:b7:cf:1f:4d:f3:c4:41:b9:ea:92:d5:01:90:40: f5:64:49:81:29:d9:23:56:50:32:53:c6:72:eb:68:ab:fe:8d: 40:65:7e:18:22:6a:5b:af:8e:03:43:cd:33:54:e8:a0:59:da: 9b:b6:7f:aa:7b:53:58:0b:ef:82:11:3e:00:fd:45:46:af:ec: 0c:12:43:95:c5:86:19:3e:01:fe:f9:50:1d:8c:40:64:65:f4: b7:6d:a0:19:b6:c3:6e:b9:8f:7b:47:0c:2a:d7:09:2c:c2:4c: fc:e0:d6:67:a9:64:6e:53:37:b5:9b:e0:1a:0e:84:e4:da:fe: c9:1e:8a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iQqD14/5UJfs8umU53gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZThkOTU5ZjFjOTU2NGEzM2YyOGZlNDRhYjYxNGI4ZjYy YjAwMWIwHhcNMjUxMjA2MjMwMTMxWhcNMjUxMjA3MjMwMTMxWjAzMTEwLwYDVQQD Eyg2ODU4MzEzNzlhOTJmMDdhZTQ0MWFmYmRmMWU3OTUzNDVjODU3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstF+uYS+oLyaHkBq4wQCpE7Ddeh6 k3ub2QoLq5JLr9qrkV9QbisdZXBPU412jf36lJJg4uT3hr/Kzt2EJRPG1dzfcbyf w75HOSIXFdpQUXQwj+2b/bnQkso/OOKEn0gt+F4DAVAHuSO9lFIcSVMf14MYRC3j Dmrk2Z8bP6s9z82N6Fu5N1AdZEo01VzbLCOqCgU7aTrPJx/oujigDxnP2IGxkLMt gT+sF5mvTZ5MGx7IV/VOVONoUT4zJrp1KTPmqy0IbYN0yVoazjoeCaCl2t0cWydo h1zFA+GlHHWJpONkB1YzG104G6kNPwaYHkcmeViCr2mRzGkkBcqUxRPoIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhYMTeakvB65EGvvfHnlTRchXO2MB8GA1UdIwQY MBaAFMfo2VnxyVZKM/KP5Eq2FLj2KwAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAt YjFjOWI3ODlhYWE5LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAtYjFjOWI3ODlhYWE5 LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTZDB1m8 g94FCk9mjiL21K2eYL4zesXLUJoCDgu+Y+uU7tWSlQWv/TsYDyk4FPnwHlxbDA+K lXaBzVfauHLIB1fU75OFNAjd21nHPAbwsqeAdoNfXceW3pgcdayldrutq+HL5VRZ ej1p/sc/x2qFNrYvSKqCX13/jmAfiZrI0uIZ9rfPH03zxEG56pLVAZBA9WRJgSnZ I1ZQMlPGcutoq/6NQGV+GCJqW6+OA0PNM1TooFnam7Z/qntTWAvvghE+AP1FRq/s DBJDlcWGGT4B/vlQHYxAZGX0t22gGbbDbrmPe0cMKtcJLMJM/ODWZ6lkblM3tZvg Gg6E5Nr+yR6Kzw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:15 2025 by rpki-client