This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json) Hash identifier: e73ErnMb/k6j3yPTYu6yTLsBhRJqouUmjMX6UQdn/0E= Subject key identifier: A6:4F:14:1B:18:43:07:01:DD:41:EE:5B:D2:60:F5:04:8C:D5:B5:DE Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Certificate serial: 019AF3C054C2917B9414AA6E4468A1383736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa (hash: iwMpY36khSGjNTrmpB2B0AqQ83qJVqJRDA0DSjAiZW0=) 2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: +WLdr85Ww9sr6FscAF+gBg4TPwaPQZh9hUsQBZQSsU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:54:c2:91:7b:94:14:aa:6e:44:68:a1:38:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=a64f141b18430701dd41ee5bd260f5048cd5b5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:ad:d1:ce:70:ba:13:c2:a0:74:0f:ee:da: d8:50:8d:d2:2a:fa:a5:06:4b:7e:b9:fa:88:76:c7: 81:29:97:44:24:1a:0a:73:e9:fa:d7:77:f8:cc:fc: 3e:87:3e:fe:72:ba:b9:47:4b:f6:24:cb:f0:30:72: dc:1a:f8:3a:a1:66:e3:be:92:2f:96:a0:5d:db:76: ba:db:1c:18:c0:bb:76:e6:b8:6e:61:b1:1b:b3:f1: ed:13:02:34:87:bf:32:dc:90:d5:f8:30:b3:d5:c5: 5c:66:fe:b2:a6:48:7c:b1:73:8b:71:c1:cf:29:59: c4:55:b6:c5:9f:8c:a2:1a:50:36:45:49:a9:b8:59: d3:5f:27:64:1e:da:45:fd:3f:56:79:ab:cf:f7:f8: 4e:1a:78:64:08:aa:50:10:88:62:44:d4:a3:1f:e2: 19:62:41:02:5a:b2:c4:f5:7a:62:b3:7a:86:14:65: 6c:69:38:7f:e0:63:8e:e0:40:68:63:ec:c9:e8:aa: e0:b8:41:b9:8c:3c:c5:4f:41:b7:63:15:f1:22:54: 67:99:8c:26:df:f4:0c:f5:1e:7f:d7:78:75:4e:65: ae:8d:7e:57:df:74:46:44:98:0e:f2:f5:6e:8b:58: d7:f0:65:f2:a5:3b:b2:87:52:d7:d1:07:2b:61:8f: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4F:14:1B:18:43:07:01:DD:41:EE:5B:D2:60:F5:04:8C:D5:B5:DE X509v3 Authority Key Identifier: keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:95:b1:56:2d:1f:5b:29:61:dd:33:ff:b7:92:e7:05:70:6c: 16:1b:d1:b3:69:6c:30:60:61:68:54:d7:a1:25:86:2f:0c:be: 62:df:6b:af:db:ed:9a:1d:4a:8f:dd:9c:df:e3:55:92:a5:61: f1:26:f8:54:11:6e:77:48:1d:09:fe:08:44:8d:d6:ec:a6:b2: 9c:2c:e6:95:88:c1:90:47:48:5f:5c:d1:62:a9:2f:d3:8e:4f: dc:43:e5:94:eb:63:fb:04:28:78:41:0d:f0:3a:ed:af:06:bb: e8:fa:c6:d1:b4:da:ea:73:3d:e1:f5:65:31:c7:fa:87:ea:8d: d0:93:1f:c6:2c:ab:3f:5a:64:21:c8:83:2f:81:58:9f:5a:8c: b5:0e:d0:83:00:0a:96:cf:cf:12:db:65:75:eb:88:2b:2c:e2: ad:19:e6:a0:3e:ab:55:60:a5:a8:74:84:5d:77:89:5c:f1:62: 1b:86:be:2e:a0:c9:66:b3:95:55:18:a6:85:de:3f:a4:3c:69: 8f:27:b8:4e:cc:c5:69:ed:34:a4:6b:6e:ba:e1:2e:51:b0:4c: 9c:25:04:25:c2:99:91:fb:12:7d:6c:57:2a:2a:54:92:64:8e: 77:bc:4d:52:58:c4:bc:28:e4:73:66:7f:a8:57:b4:af:a3:d1: 5b:a5:18:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFTCkXuUFKpuRGihODc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2 M2MwYTkwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD EyhhNjRmMTQxYjE4NDMwNzAxZGQ0MWVlNWJkMjYwZjUwNDhjZDViNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26mt0c5wuhPCoHQP7trYUI3SKvql Bkt+ufqIdseBKZdEJBoKc+n613f4zPw+hz7+crq5R0v2JMvwMHLcGvg6oWbjvpIv lqBd23a62xwYwLt25rhuYbEbs/HtEwI0h78y3JDV+DCz1cVcZv6ypkh8sXOLccHP KVnEVbbFn4yiGlA2RUmpuFnTXydkHtpF/T9WeavP9/hOGnhkCKpQEIhiRNSjH+IZ YkECWrLE9Xpis3qGFGVsaTh/4GOO4EBoY+zJ6KrguEG5jDzFT0G3YxXxIlRnmYwm 3/QM9R5/13h1TmWujX5X33RGRJgO8vVui1jX8GXypTuyh1LX0QcrYY8rWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZPFBsYQwcB3UHuW9Jg9QSM1bXeMB8GA1UdIwQY MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZWxVi0f Wylh3TP/t5LnBXBsFhvRs2lsMGBhaFTXoSWGLwy+Yt9rr9vtmh1Kj92c3+NVkqVh 8Sb4VBFud0gdCf4IRI3W7KaynCzmlYjBkEdIX1zRYqkv045P3EPllOtj+wQoeEEN 8Drtrwa76PrG0bTa6nM94fVlMcf6h+qN0JMfxiyrP1pkIciDL4FYn1qMtQ7QgwAK ls/PEttldeuIKyzirRnmoD6rVWClqHSEXXeJXPFiG4a+LqDJZrOVVRimhd4/pDxp jye4TszFae00pGtuuuEuUbBMnCUEJcKZkfsSfWxXKipUkmSOd7xNUljEvCjkc2Z/ qFe0r6PRW6UY0g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:51 2025 by rpki-client