This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json) Hash identifier: XSHgOg5lMvoF+JNVvVk3J9nq1hyiHHdXieMzJtFOneQ= Subject key identifier: F9:40:1D:5B:68:53:8A:0B:89:C8:14:5D:8A:FE:63:E7:30:D8:94:39 Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e Certificate serial: 019AF23FA4CCA6A254C458647B8EA4BB027B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: txpNs9FXi0elQ1OQvf/ZXA2iE6RJXxp15zjbOFRh5Vk=) 2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a4:cc:a6:a2:54:c4:58:64:7b:8e:a4:bb:02:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=f9401d5b68538a0b89c8145d8afe63e730d89439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:17:45:c6:f6:9d:9e:96:b7:2e:a8:bd:d8: 35:6d:86:49:b0:b9:e7:f4:cf:e3:52:4f:e0:4e:e5: ae:0a:bf:ba:e8:0a:ac:a4:0b:4e:42:eb:a5:fc:09: 05:ba:62:68:c3:6f:fb:aa:1e:ed:fd:b8:e6:68:a3: 4a:81:ae:5d:75:2e:3e:2b:d5:48:95:76:8a:49:d1: 9e:db:3c:22:9b:01:aa:40:cf:66:c7:3d:b6:a4:a6: 3d:db:8e:49:00:b2:56:82:42:71:a8:64:8b:41:2e: 6a:73:a7:ab:de:70:3f:0e:41:c0:0d:c9:4b:7d:a6: 87:79:fc:e5:a2:c5:3f:aa:50:f1:4f:73:94:65:1b: dc:b2:f2:9a:3f:76:56:64:c2:cb:fc:28:83:4a:9f: 31:1b:60:af:c5:fd:e9:9d:cc:5e:b1:02:e1:79:70: b3:6d:2d:d0:dc:77:a3:23:88:38:3a:e1:62:ca:bb: 5c:4d:01:b6:e5:8a:ad:1c:ca:be:b0:52:98:c1:9f: a1:4f:0b:1a:95:b7:83:85:55:1d:df:43:6b:b7:11: 30:44:b7:92:5d:ba:70:a8:89:20:ea:04:7b:9a:af: 8d:ae:ce:33:40:52:8e:89:d6:01:09:11:40:19:6f: 8e:16:06:74:11:5b:6c:a0:50:3e:9e:a1:63:d1:48: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:1D:5B:68:53:8A:0B:89:C8:14:5D:8A:FE:63:E7:30:D8:94:39 X509v3 Authority Key Identifier: keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f2:3d:3a:b2:03:d3:99:4c:f6:25:ca:5c:79:e0:a9:19:7c: e4:91:f9:c7:8d:43:30:43:7a:29:e5:71:5c:a1:db:c6:cc:63: 96:67:3d:85:c9:fe:1d:81:07:98:2e:e5:ad:72:d9:5b:f6:ea: 7a:5c:8b:0e:49:11:c9:25:9a:58:f8:6f:d5:3b:f8:e1:d5:0d: 37:f5:ff:5e:24:1a:d7:86:75:df:7b:77:0a:2e:64:0a:51:28: 08:f3:4e:10:03:80:69:59:b9:23:27:3c:6d:94:a3:07:66:c9: 01:fc:9e:c3:14:cc:d9:bd:61:87:fd:f5:19:f0:e6:2e:6d:6c: 89:b0:04:13:0a:e1:0f:e7:c2:25:12:b7:6f:3c:d9:e1:8e:02: 45:cc:41:18:72:f9:49:a8:52:62:24:9f:97:90:e4:10:e5:fb: b1:7b:ac:d7:da:fc:69:1d:e9:a4:37:17:72:bf:c6:0d:d7:6b: 0a:b8:18:cd:e7:eb:7a:22:3d:50:c2:c5:14:fa:04:e2:58:ec: 56:db:2e:13:a9:45:e7:2b:74:a2:e5:17:16:0d:ae:25:7c:48: b2:bb:6f:ab:78:6e:38:52:4c:4f:a9:a9:43:90:65:5f:41:12: 83:8d:ce:3e:4e:66:2f:a8:74:df:ac:f3:4d:71:cb:5e:f0:3c: 9e:9b:fc:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6TMpqJUxFhke46kuwJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Y2Y0ZDUzZWQ1YzBhNGJkM2ZlMjQyMjAxYTk2NjY1NWM4 MGNjMGUwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhmOTQwMWQ1YjY4NTM4YTBiODljODE0NWQ4YWZlNjNlNzMwZDg5NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4sXRcb2nZ6Wty6ovdg1bYZJsLnn 9M/jUk/gTuWuCr+66AqspAtOQuul/AkFumJow2/7qh7t/bjmaKNKga5ddS4+K9VI lXaKSdGe2zwimwGqQM9mxz22pKY9245JALJWgkJxqGSLQS5qc6er3nA/DkHADclL faaHefzlosU/qlDxT3OUZRvcsvKaP3ZWZMLL/CiDSp8xG2Cvxf3pncxesQLheXCz bS3Q3HejI4g4OuFiyrtcTQG25YqtHMq+sFKYwZ+hTwsalbeDhVUd30NrtxEwRLeS XbpwqIkg6gR7mq+Nrs4zQFKOidYBCRFAGW+OFgZ0EVtsoFA+nqFj0UhrhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlAHVtoU4oLicgUXYr+Y+cw2JQ5MB8GA1UdIwQY MBaAFCbPTVPtXApL0/4kIgGpZmVcgMwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAt YTc4OGZkYzcwOTQ4LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAtYTc4OGZkYzcwOTQ4 LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPI9OrID 05lM9iXKXHngqRl85JH5x41DMEN6KeVxXKHbxsxjlmc9hcn+HYEHmC7lrXLZW/bq elyLDkkRySWaWPhv1Tv44dUNN/X/XiQa14Z133t3Ci5kClEoCPNOEAOAaVm5Iyc8 bZSjB2bJAfyewxTM2b1hh/31GfDmLm1sibAEEwrhD+fCJRK3bzzZ4Y4CRcxBGHL5 SahSYiSfl5DkEOX7sXus19r8aR3ppDcXcr/GDddrCrgYzefreiI9UMLFFPoE4ljs VtsuE6lF5yt0ouUXFg2uJXxIsrtvq3huOFJMT6mpQ5BlX0ESg43OPk5mL6h036zz TXHLXvA8npv8Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:59 2025 by rpki-client