This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json) Hash identifier: 0fut/gi7gmpE5EEn6XvmbfXGbdPU4dlN/pWFHKEo+0Y= Subject key identifier: F4:44:1D:94:75:A3:87:AE:57:02:35:44:9C:4B:A1:A7:1B:17:81:12 Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Certificate serial: 019AF208EC34FFD49DB60C6078FE36EDA895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft Manifest number: 14A7 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: 0V3uWhwLUevamFF+Vk3VTSufaAx4oeOxLQRxCB7VWUE=) 2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ec:34:ff:d4:9d:b6:0c:60:78:fe:36:ed:a8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=f4441d9475a387ae570235449c4ba1a71b178112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:ff:fb:85:14:2e:c2:5f:e7:0d:d0:29:f1: d1:59:f9:37:8f:04:ea:19:d5:0f:6c:ed:01:8b:13: 99:20:d5:02:50:8b:b0:bf:5e:4a:c5:5e:de:c7:e3: 35:69:ee:5d:10:0d:4f:fe:c3:47:f2:53:71:18:1c: 6a:71:62:ff:11:46:ee:6b:f7:2d:8d:49:c4:58:b7: 25:47:26:bb:dd:c5:a3:29:e3:5e:c3:f1:62:0d:96: f6:ab:72:a8:7c:da:16:cb:8e:63:1c:fc:ec:7f:18: be:07:67:7e:86:bb:12:83:3b:1e:2c:23:ab:b4:0e: 68:a3:a5:cb:cf:77:b6:7b:8e:c5:20:50:ca:ca:1c: a7:70:f2:f9:e5:6b:42:7b:d2:c4:f1:a9:03:da:0a: 6c:87:57:88:ff:41:bd:ea:52:c7:90:bd:38:a7:4a: a7:6c:19:57:cc:3f:fd:f2:ee:8c:36:0e:de:aa:99: 9a:5e:f9:2e:2a:9d:6d:66:34:4f:6e:30:6a:ed:10: be:3c:b6:09:c0:af:f0:78:2c:8a:2e:50:bf:c3:2a: cd:75:f4:06:7f:86:c1:2d:c8:a9:12:fa:d9:20:92: 37:50:f4:17:06:9e:0f:1e:1d:ec:9e:96:39:25:06: 7a:8f:86:cb:0e:1f:49:cc:4c:c5:b7:04:8a:ee:80: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:1D:94:75:A3:87:AE:57:02:35:44:9C:4B:A1:A7:1B:17:81:12 X509v3 Authority Key Identifier: keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:8c:71:44:51:1f:8c:d8:43:e9:06:9b:07:66:ea:04:cf: 33:6e:a8:1b:ff:f3:8d:be:25:0f:65:58:0c:b6:45:5a:0e:c1: fa:40:71:b2:2a:e4:b1:5b:80:34:d8:c3:26:a3:92:da:ec:d0: c2:b6:7f:91:a3:6f:d6:6b:25:f7:c5:f3:fe:62:07:cd:98:ed: 6f:66:5e:ff:04:b3:2e:37:3d:c5:ad:16:ef:0a:36:aa:7b:ba: da:84:31:76:f0:85:56:e9:ef:ee:b1:d4:78:92:f9:b1:cc:73: 52:d8:f8:08:32:0e:5f:85:8e:03:9a:4b:74:e1:74:49:f3:17: cc:66:63:6c:90:5f:7f:8d:2a:40:02:3c:8d:db:48:25:09:25: 08:73:23:d2:bb:fc:55:b0:68:cc:0d:c1:f1:b0:e7:1c:e0:90: 72:6b:0d:3f:5a:05:9b:2d:d7:7b:35:68:38:1f:c6:25:4a:33: 12:20:88:e7:5b:e8:13:cc:bf:a0:db:6f:29:38:1c:60:c4:65: 3e:eb:5a:3d:59:1a:43:9a:f5:e2:11:2a:a1:b5:c4:59:b2:be: da:bc:03:f8:6d:98:4c:ee:f4:33:97:79:c4:84:05:94:75:5e: 81:11:3e:83:61:39:57:ce:64:5c:93:9f:9a:88:d4:3a:54:26: 7c:87:91:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOw0/9SdtgxgeP427aiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTdlZTViZWE5NWI2ZmNhOTJkN2M4MDA1YjI1MzFkMGQ1 MTA0NjgwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EyhmNDQ0MWQ5NDc1YTM4N2FlNTcwMjM1NDQ5YzRiYTFhNzFiMTc4MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6z/+4UULsJf5w3QKfHRWfk3jwTq GdUPbO0BixOZINUCUIuwv15KxV7ex+M1ae5dEA1P/sNH8lNxGBxqcWL/EUbua/ct jUnEWLclRya73cWjKeNew/FiDZb2q3KofNoWy45jHPzsfxi+B2d+hrsSgzseLCOr tA5oo6XLz3e2e47FIFDKyhyncPL55WtCe9LE8akD2gpsh1eI/0G96lLHkL04p0qn bBlXzD/98u6MNg7eqpmaXvkuKp1tZjRPbjBq7RC+PLYJwK/weCyKLlC/wyrNdfQG f4bBLcipEvrZIJI3UPQXBp4PHh3snpY5JQZ6j4bLDh9JzEzFtwSK7oBRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPREHZR1o4euVwI1RJxLoacbF4ESMB8GA1UdIwQY MBaAFCaX7lvqlbb8qS18gAWyUx0NUQRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt ODdmMTI5ZGMwZmYyLzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy LzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH+McURR H4zYQ+kGmwdm6gTPM26oG//zjb4lD2VYDLZFWg7B+kBxsirksVuANNjDJqOS2uzQ wrZ/kaNv1msl98Xz/mIHzZjtb2Ze/wSzLjc9xa0W7wo2qnu62oQxdvCFVunv7rHU eJL5scxzUtj4CDIOX4WOA5pLdOF0SfMXzGZjbJBff40qQAI8jdtIJQklCHMj0rv8 VbBozA3B8bDnHOCQcmsNP1oFmy3XezVoOB/GJUozEiCI51voE8y/oNtvKTgcYMRl PutaPVkaQ5r14hEqobXEWbK+2rwD+G2YTO70M5d5xIQFlHVegRE+g2E5V85kXJOf mojUOlQmfIeRBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:40 2025 by rpki-client