This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json) Hash identifier: 6pJOr7gp/CsmGMuqudSwQ1mIthP4IlCRYb2977dTx8Q= Subject key identifier: 51:F3:1B:5D:B1:11:C6:62:B1:60:52:F4:89:E2:C1:7C:79:E7:23:ED Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Certificate serial: 019AF0BEE688BFE3C60145BBE3B13737CC89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft Manifest number: 151E Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=) 2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=) 3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: rf7xpWnUyNtPtQvekn0hEoXWuEm6iYM7DpLYHe8njSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:88:bf:e3:c6:01:45:bb:e3:b1:37:37:cc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=51f31b5db111c662b16052f489e2c17c79e723ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:5b:f4:d8:04:9d:47:b9:35:02:e3:a8:44: a0:97:90:46:c6:21:6f:c8:37:a6:b0:6f:fb:99:2b: 9a:67:de:83:4e:f0:22:e1:04:ca:23:67:99:4e:07: 80:ce:2d:79:eb:3d:04:d9:ef:4f:8d:c0:90:55:76: 2b:ab:fb:10:89:66:7c:c0:60:bd:72:8a:3f:17:c9: 76:aa:b1:c0:00:9d:39:ac:86:b1:ac:f5:66:64:92: 76:64:09:3b:c3:69:64:ef:50:34:83:ae:c9:72:54: 96:56:cb:f3:fc:74:24:98:bc:70:2a:06:16:82:05: 55:f3:d4:42:77:01:9f:60:90:02:9e:1a:94:29:9f: a5:84:d6:c7:84:4e:d9:cf:eb:f0:f2:2a:4d:7a:3e: df:35:7b:e2:14:bf:ce:8c:c0:1b:d0:62:44:62:34: a7:2a:38:ef:89:28:30:d6:60:a2:23:58:cf:d8:6a: d3:af:f8:47:1b:1d:04:0e:4b:2b:f0:a3:fc:49:68: c7:83:69:a5:5a:37:39:a2:ad:2d:9b:9f:45:8d:70: 75:12:e6:7a:31:16:04:23:42:11:8d:01:70:42:72: 77:67:4e:9e:46:31:95:0c:64:23:64:a9:fd:3d:0a: 28:d0:54:9a:cd:f5:89:0f:8f:b4:23:a8:28:13:c2: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:1B:5D:B1:11:C6:62:B1:60:52:F4:89:E2:C1:7C:79:E7:23:ED X509v3 Authority Key Identifier: keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:76:2a:6e:10:d4:61:77:aa:7b:12:7b:2c:14:d8:09:68:84: 3a:a7:f8:ca:38:6c:9f:4e:d1:c3:15:2c:d2:af:ca:8d:a1:4f: 18:03:e8:55:57:b7:ec:62:5a:ba:5e:59:53:3b:84:80:fb:fb: aa:bb:ca:a8:bd:9d:72:62:6d:fe:6f:e6:3c:02:bb:3b:1e:46: e1:87:87:40:8d:39:e4:ba:a7:fd:90:35:55:92:80:f5:29:98: ba:66:74:fb:bb:a5:87:5a:c9:60:6d:14:bf:85:f6:88:63:b5: fd:c7:8e:02:5a:83:ff:b9:74:4f:53:3a:dc:e3:71:fa:f4:94: a7:f7:b8:e0:99:fe:dd:e1:f4:72:08:bc:22:d4:2e:d1:71:78: 66:ec:42:0d:21:a1:54:24:aa:5d:1b:f8:81:ef:07:f5:24:eb: d0:a6:06:0d:82:6a:64:fc:50:b1:21:28:57:29:ca:b6:0a:5a: 65:96:f3:35:61:2c:2a:98:a8:c9:af:01:51:ba:65:25:da:c4: 2c:bf:39:9c:eb:7b:a3:a2:c6:e1:29:0d:08:44:81:eb:eb:d1: 97:df:de:89:04:1c:a7:2c:87:31:db:47:4b:7a:96:fa:9b:f4: da:99:ab:01:33:29:68:ef:47:7c:03:c8:ca:74:ab:07:59:ba: b4:6e:cb:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuaIv+PGAUW747E3N8yJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw ZjQ1MWYwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD Eyg1MWYzMWI1ZGIxMTFjNjYyYjE2MDUyZjQ4OWUyYzE3Yzc5ZTcyM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9b9NgEnUe5NQLjqESgl5BGxiFv yDemsG/7mSuaZ96DTvAi4QTKI2eZTgeAzi156z0E2e9PjcCQVXYrq/sQiWZ8wGC9 coo/F8l2qrHAAJ05rIaxrPVmZJJ2ZAk7w2lk71A0g67JclSWVsvz/HQkmLxwKgYW ggVV89RCdwGfYJACnhqUKZ+lhNbHhE7Zz+vw8ipNej7fNXviFL/OjMAb0GJEYjSn KjjviSgw1mCiI1jP2GrTr/hHGx0EDksr8KP8SWjHg2mlWjc5oq0tm59FjXB1EuZ6 MRYEI0IRjQFwQnJ3Z06eRjGVDGQjZKn9PQoo0FSazfWJD4+0I6goE8KGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHzG12xEcZisWBS9IniwXx55yPtMB8GA1UdIwQY MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1 LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXYqbhDU YXeqexJ7LBTYCWiEOqf4yjhsn07RwxUs0q/KjaFPGAPoVVe37GJaul5ZUzuEgPv7 qrvKqL2dcmJt/m/mPAK7Ox5G4YeHQI055Lqn/ZA1VZKA9SmYumZ0+7ulh1rJYG0U v4X2iGO1/ceOAlqD/7l0T1M63ONx+vSUp/e44Jn+3eH0cgi8ItQu0XF4ZuxCDSGh VCSqXRv4ge8H9STr0KYGDYJqZPxQsSEoVynKtgpaZZbzNWEsKpioya8BUbplJdrE LL85nOt7o6LG4SkNCESB6+vRl9/eiQQcpyyHMdtHS3qW+pv02pmrATMpaO9HfAPI ynSrB1m6tG7LlA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:48 2025 by rpki-client