This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json) Hash identifier: LWeklUwh+mBok7e7sL0bCrPzMJ0wJxoRqBXoZkmX5XU= Subject key identifier: FF:8B:A9:CC:96:7F:B3:6D:8C:47:C1:48:BD:40:68:16:4C:5F:3B:F0 Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f Certificate serial: 019AF35292E3E16BE33AFAF6490C3E501D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=) 2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: bW0MSiydKhDDNZ3gyP7VvaLn2mrfGG1yMXklS6ayIt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:92:e3:e1:6b:e3:3a:fa:f6:49:0c:3e:50:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=ff8ba9cc967fb36d8c47c148bd4068164c5f3bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:4a:41:fb:1f:a0:85:6c:90:7f:78:8b:5f: 53:bc:1c:62:87:77:d6:33:67:21:fb:cc:30:f3:59: fc:c0:b6:1b:8e:ea:04:48:83:a8:3e:14:78:d9:2c: af:0e:97:74:66:5b:ee:e9:96:2e:23:4d:68:f1:2d: 65:7b:b1:db:77:12:16:d7:41:26:0f:2d:5c:d0:43: 6f:44:db:3b:fc:1d:93:05:c9:b8:36:d0:f6:63:c5: 0e:57:c9:09:d7:1c:05:fc:74:2e:dc:09:be:9a:0f: 9f:b9:08:55:46:4c:ed:af:d1:39:4c:a2:f3:d3:05: 4e:91:4f:65:a0:8f:09:d7:a8:63:6e:b6:2d:77:b6: 1f:24:75:c9:54:2e:ca:30:b6:43:33:19:13:0b:09: 02:aa:ae:aa:e5:d0:77:db:a3:41:14:9f:59:c4:86: 8b:f7:06:d0:ca:62:96:b6:ac:1b:57:07:d5:84:5e: 8a:7b:b0:b1:f9:58:6f:0d:48:e5:7e:b9:66:2a:f1: ce:6f:d5:39:b7:69:28:c8:36:9f:83:f4:8a:df:c1: ec:a5:d6:11:2c:93:3c:2d:87:ff:e2:1a:3f:3b:7a: f9:98:ea:41:98:25:4c:88:de:84:d4:63:d2:40:bc: 12:13:b7:94:10:70:40:3d:48:cb:81:64:5c:62:92: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8B:A9:CC:96:7F:B3:6D:8C:47:C1:48:BD:40:68:16:4C:5F:3B:F0 X509v3 Authority Key Identifier: keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:00:be:01:78:13:7d:e8:d9:35:e7:27:12:2e:a0:ea:24:00: 0b:61:72:91:a6:67:84:b3:18:ec:bb:56:74:1d:4e:b6:54:2b: 9b:b7:5b:ba:3e:71:5b:96:0a:be:ae:a9:25:ee:bb:5e:0b:24: f6:38:91:a8:ca:8a:e4:89:ea:86:7f:96:b9:38:86:55:a9:08: c5:ac:b9:f5:ee:be:f3:d3:1c:05:9f:95:ff:74:25:35:b3:3e: 03:fa:4d:f0:02:d7:5c:40:8a:4b:0f:57:67:82:84:2a:96:a4: da:94:14:38:60:1b:ac:7e:fa:4d:00:64:6e:49:e6:5c:e0:46: cd:76:2f:48:1b:e2:06:de:0d:70:51:f5:7e:aa:69:91:30:a0: a6:0a:eb:4b:fd:7b:2d:c5:55:32:13:47:c7:ab:41:e6:01:cc: 74:0c:17:8c:82:ac:d5:83:33:e3:32:97:1c:39:80:ef:4c:28: 57:3c:0d:61:85:b7:fa:33:47:c5:e9:bd:65:01:87:22:70:35: bd:06:e8:c2:81:88:c1:54:32:89:de:66:04:bf:f6:f7:fa:4e: d7:65:dc:0f:e7:66:3a:80:a3:87:58:a3:4d:4d:76:f9:d2:37: 67:cc:d1:1c:ea:4b:d3:c3:9c:56:05:fe:0f:cd:07:91:b2:d8: 35:4a:09:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpLj4WvjOvr2SQw+UB2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzA4OGVlNzFjYjY4MTU5OTBkYzI0ODY3YjRhMGUzMTk2 ODAwMGYwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD EyhmZjhiYTljYzk2N2ZiMzZkOGM0N2MxNDhiZDQwNjgxNjRjNWYzYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUdKQfsfoIVskH94i19TvBxih3fW M2ch+8ww81n8wLYbjuoESIOoPhR42SyvDpd0Zlvu6ZYuI01o8S1le7HbdxIW10Em Dy1c0ENvRNs7/B2TBcm4NtD2Y8UOV8kJ1xwF/HQu3Am+mg+fuQhVRkztr9E5TKLz 0wVOkU9loI8J16hjbrYtd7YfJHXJVC7KMLZDMxkTCwkCqq6q5dB326NBFJ9ZxIaL 9wbQymKWtqwbVwfVhF6Ke7Cx+VhvDUjlfrlmKvHOb9U5t2koyDafg/SK38HspdYR LJM8LYf/4ho/O3r5mOpBmCVMiN6E1GPSQLwSE7eUEHBAPUjLgWRcYpLIJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+LqcyWf7NtjEfBSL1AaBZMXzvwMB8GA1UdIwQY MBaAFI4wiO5xy2gVmQ3CSGe0oOMZaAAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2Et OWVjMmEyYTA5NGQ3LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2EtOWVjMmEyYTA5NGQ3 LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwC+AXgT fejZNecnEi6g6iQAC2FykaZnhLMY7LtWdB1OtlQrm7dbuj5xW5YKvq6pJe67Xgsk 9jiRqMqK5Inqhn+WuTiGVakIxay59e6+89McBZ+V/3QlNbM+A/pN8ALXXECKSw9X Z4KEKpak2pQUOGAbrH76TQBkbknmXOBGzXYvSBviBt4NcFH1fqppkTCgpgrrS/17 LcVVMhNHx6tB5gHMdAwXjIKs1YMz4zKXHDmA70woVzwNYYW3+jNHxem9ZQGHInA1 vQbowoGIwVQyid5mBL/29/pO12XcD+dmOoCjh1ijTU12+dI3Z8zRHOpL08OcVgX+ D80HkbLYNUoJXw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:55 2025 by rpki-client