This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json) Hash identifier: Hzt4iygEqJnMtmOvGxbrzBBKucZ22wOtah2ca2mNjtU= Subject key identifier: F8:7E:F7:84:15:15:DD:7C:4A:07:A4:18:3B:FE:C7:34:41:BD:42:2D Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Certificate serial: 019AF0BF938E1510D18A795DCCBF53EC9CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft Manifest number: 1294 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=) 2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: 2yqSav0jsSPSOhafGRJNdqIKsGAL1HC0mbdHfbfEhbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:93:8e:15:10:d1:8a:79:5d:cc:bf:53:ec:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7 Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=f87ef7841515dd7c4a07a4183bfec73441bd422d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:f6:18:3d:d0:c0:cf:d5:ab:22:1b:56:3d: b6:36:61:a0:01:ff:81:01:a3:dd:0b:24:fa:e5:5f: c6:76:ba:7b:84:20:4f:0c:0d:2a:a7:18:c7:c7:38: 39:a0:4a:8e:1c:d9:90:cd:90:cb:9a:a2:1b:e6:91: f0:5c:81:37:75:4e:e9:93:dc:04:4d:5b:e1:20:96: 68:1d:7f:b9:5f:0e:0e:27:dc:01:b4:0f:40:75:9c: 42:95:93:2c:30:77:6a:3a:b1:d8:9b:8b:65:0a:23: 6b:4b:91:46:24:6c:7f:ee:0a:80:f3:93:36:b8:e6: 05:ad:ae:ed:9b:5f:21:39:71:e8:01:c1:0f:ad:72: ea:65:9f:6c:c0:3d:af:b6:a5:14:a5:b7:1b:4f:60: ac:5e:bd:52:3d:22:e2:f8:09:26:ca:2b:fd:7c:d1: 10:84:7b:56:c7:d5:3c:49:c9:32:61:27:e2:c8:45: 1e:f3:20:c9:ac:e0:32:a9:fd:24:bf:84:5d:da:b0: 3a:60:cb:c2:6a:e7:a1:41:87:43:79:c6:44:f1:a8: d5:5e:ae:22:9b:01:d7:5d:52:77:fa:2f:8d:ff:aa: 8a:bb:56:18:0b:99:ce:5b:dc:c6:d4:e1:ae:4b:ef: 47:84:47:24:de:67:46:28:30:a7:7c:ac:39:f8:ac: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:F7:84:15:15:DD:7C:4A:07:A4:18:3B:FE:C7:34:41:BD:42:2D X509v3 Authority Key Identifier: keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:cb:64:99:c3:b7:10:64:8b:3a:eb:d5:2e:f5:fb:11:23:06: 45:82:1c:8c:0d:25:8b:22:df:7e:17:6f:3c:39:e0:91:30:c1: bc:42:94:af:6e:2d:76:24:81:66:7f:d1:4d:91:d5:a7:8a:ce: d0:4c:86:d1:bd:bd:2d:ab:9f:54:42:b1:f6:f3:b9:04:7e:f5: a0:53:af:34:33:0d:b1:69:a2:dc:cd:64:6d:be:b9:e6:ff:e7: 18:11:c9:fd:1e:29:2d:8c:3c:84:df:06:50:5b:e3:28:cb:df: 8e:73:2f:a0:bf:dc:1b:73:ff:fa:82:02:12:21:39:0d:47:8d: 5e:3f:fb:b6:77:61:36:c5:9f:58:9e:c2:ba:01:5a:38:54:52: ea:90:64:9c:34:ba:ec:28:17:85:8b:bd:d7:9e:51:b2:b6:12: 00:1d:b6:a9:3b:bd:20:98:27:58:7b:1f:f2:bc:47:48:89:be: 29:40:b5:0f:e0:96:12:14:ae:ca:6c:61:62:90:b1:b3:f6:fe: 6f:ef:26:34:30:cf:d7:fa:45:4b:72:46:d4:eb:65:5e:2c:89: bd:cc:b5:2b:44:02:36:df:bb:a6:f0:6a:10:65:89:3c:7a:33: 4f:7e:f5:80:fd:f3:31:14:56:08:4e:fc:ae:39:64:70:df:57: d6:80:a4:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5OOFRDRinldzL9T7Jz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTdmYTk1NmYwZjUzOTgwZDc5YzMyY2UxZTZlOTNlZmQ0 ODhmZDcwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhmODdlZjc4NDE1MTVkZDdjNGEwN2E0MTgzYmZlYzczNDQxYmQ0MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmr2GD3QwM/VqyIbVj22NmGgAf+B AaPdCyT65V/Gdrp7hCBPDA0qpxjHxzg5oEqOHNmQzZDLmqIb5pHwXIE3dU7pk9wE TVvhIJZoHX+5Xw4OJ9wBtA9AdZxClZMsMHdqOrHYm4tlCiNrS5FGJGx/7gqA85M2 uOYFra7tm18hOXHoAcEPrXLqZZ9swD2vtqUUpbcbT2CsXr1SPSLi+Akmyiv9fNEQ hHtWx9U8SckyYSfiyEUe8yDJrOAyqf0kv4Rd2rA6YMvCauehQYdDecZE8ajVXq4i mwHXXVJ3+i+N/6qKu1YYC5nOW9zG1OGuS+9HhEck3mdGKDCnfKw5+Kwk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh+94QVFd18SgekGDv+xzRBvUItMB8GA1UdIwQY MBaAFCVX+pVvD1OYDXnDLOHm6T79SI/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAt NmQ3MTYzNDQyMjQ0LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAtNmQ3MTYzNDQyMjQ0 LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMtkmcO3 EGSLOuvVLvX7ESMGRYIcjA0liyLffhdvPDngkTDBvEKUr24tdiSBZn/RTZHVp4rO 0EyG0b29LaufVEKx9vO5BH71oFOvNDMNsWmi3M1kbb655v/nGBHJ/R4pLYw8hN8G UFvjKMvfjnMvoL/cG3P/+oICEiE5DUeNXj/7tndhNsWfWJ7CugFaOFRS6pBknDS6 7CgXhYu9155RsrYSAB22qTu9IJgnWHsf8rxHSIm+KUC1D+CWEhSuymxhYpCxs/b+ b+8mNDDP1/pFS3JG1OtlXiyJvcy1K0QCNt+7pvBqEGWJPHozT371gP3zMRRWCE78 rjlkcN9X1oCkew== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:54 2025 by rpki-client