This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json) Hash identifier: ZpOH8SQHCS6FtguZ7eR6VfQjJ+dik3XRNCFcNll8Npc= Subject key identifier: 0F:01:9B:A5:1B:02:8F:94:E0:2D:1D:EF:7C:AA:53:DA:91:3C:B0:4B Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Certificate serial: 019AF31B32B4A5B74D3858D483880F8B8D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=) 2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: u+t3OtrR5iSiy6XK47rovgdNmbRHhktbqF77gpNAmXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:32:b4:a5:b7:4d:38:58:d4:83:88:0f:8b:8d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=0f019ba51b028f94e02d1def7caa53da913cb04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:c3:76:c8:eb:21:33:a0:5a:2a:c2:da:4c: 58:a8:ff:d3:e0:4b:b1:a3:86:2d:5e:78:7a:06:2a: fd:f9:d0:5d:8b:6d:cb:57:e7:67:99:83:e0:54:9f: e3:e3:77:71:10:76:be:44:52:22:8e:10:b2:e8:fd: 19:44:66:f8:bc:d0:75:bb:33:4d:6c:46:b8:46:d1: b7:41:3d:e7:51:9e:10:4e:38:6e:d3:ed:f8:2b:d2: 0d:a2:12:5c:1a:67:0e:6f:f5:d8:08:b2:58:b5:1d: 32:8d:90:d1:94:82:9e:62:8f:92:c5:bf:35:08:bb: aa:36:58:93:36:c8:83:89:7c:fa:da:44:4c:6c:da: 67:99:ee:a1:d4:1f:5a:bc:75:01:e6:29:1f:1a:f6: bb:40:64:1b:30:d5:17:e4:1d:93:91:66:31:8a:c3: a5:ab:83:b0:e9:41:1a:ec:c9:2e:58:47:2d:36:6d: 26:9b:1c:0c:d3:eb:26:60:c5:39:ed:57:0f:5b:35: 02:16:6d:d3:ee:61:7c:2e:f5:0d:e9:61:1a:19:03: 09:48:db:e7:c9:0d:b9:5d:45:83:54:29:fc:8c:a2: fe:f2:49:59:0d:5c:2d:91:e5:04:d4:74:c0:7f:b4: 57:79:13:b4:5e:55:3c:2c:78:23:49:03:e3:f5:c3: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:01:9B:A5:1B:02:8F:94:E0:2D:1D:EF:7C:AA:53:DA:91:3C:B0:4B X509v3 Authority Key Identifier: keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:77:6d:02:52:67:09:6f:1f:99:e4:85:21:25:ae:72:19:db: 6f:05:c0:9f:d5:22:ae:6f:fc:6e:4a:3b:04:04:e0:69:90:14: 1d:be:ae:41:f3:96:f6:93:57:39:66:2a:03:83:8b:11:50:a5: c3:f6:51:41:32:fa:b2:c7:54:f7:3b:a4:d2:22:38:8e:73:97: 34:b9:03:22:28:41:86:78:fe:dc:41:f1:b8:99:a3:68:f3:f3: bf:11:cd:64:f7:18:3e:82:de:1c:df:34:4a:a6:1a:86:59:e3: 2d:d1:d5:5c:06:93:83:95:ec:28:b4:ff:14:ae:71:8c:a0:ba: cd:44:4f:05:86:2a:16:0c:ae:f9:a7:39:02:44:08:96:5c:28: b5:0a:3e:7a:69:73:8d:6d:c7:8e:5d:06:04:d0:29:13:43:21: b8:ae:07:e4:c4:3c:41:de:30:9f:1d:21:3c:e2:6d:7f:d9:50: 64:bb:22:db:cd:86:fd:96:af:7e:39:8b:8e:ed:9a:8b:47:a8: 9b:8d:ff:eb:41:a1:24:2c:6a:63:ff:7f:2f:0d:40:fc:4d:ad: b0:ac:40:46:ee:56:d2:30:97:89:ff:33:c6:e9:07:5d:aa:19: db:ec:48:b7:e1:3b:fb:e8:79:7e:d4:57:75:80:4f:06:c4:d0: 4d:74:ef:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzK0pbdNOFjUg4gPi42YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz MjA4MjkwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EygwZjAxOWJhNTFiMDI4Zjk0ZTAyZDFkZWY3Y2FhNTNkYTkxM2NiMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskHDdsjrITOgWirC2kxYqP/T4Eux o4YtXnh6Bir9+dBdi23LV+dnmYPgVJ/j43dxEHa+RFIijhCy6P0ZRGb4vNB1uzNN bEa4RtG3QT3nUZ4QTjhu0+34K9INohJcGmcOb/XYCLJYtR0yjZDRlIKeYo+Sxb81 CLuqNliTNsiDiXz62kRMbNpnme6h1B9avHUB5ikfGva7QGQbMNUX5B2TkWYxisOl q4Ow6UEa7MkuWEctNm0mmxwM0+smYMU57VcPWzUCFm3T7mF8LvUN6WEaGQMJSNvn yQ25XUWDVCn8jKL+8klZDVwtkeUE1HTAf7RXeRO0XlU8LHgjSQPj9cMD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8Bm6UbAo+U4C0d73yqU9qRPLBLMB8GA1UdIwQY MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0 LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXdtAlJn CW8fmeSFISWuchnbbwXAn9Uirm/8bko7BATgaZAUHb6uQfOW9pNXOWYqA4OLEVCl w/ZRQTL6ssdU9zuk0iI4jnOXNLkDIihBhnj+3EHxuJmjaPPzvxHNZPcYPoLeHN80 SqYahlnjLdHVXAaTg5XsKLT/FK5xjKC6zURPBYYqFgyu+ac5AkQIllwotQo+emlz jW3Hjl0GBNApE0MhuK4H5MQ8Qd4wnx0hPOJtf9lQZLsi282G/ZavfjmLju2ai0eo m43/60GhJCxqY/9/Lw1A/E2tsKxARu5W0jCXif8zxukHXaoZ2+xIt+E7++h5ftRX dYBPBsTQTXTvFg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:15 2025 by rpki-client