This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json) Hash identifier: JisEpZljJ7pyoZD+CwWtuOt+AwuHo24IS8rMR6Q9c/0= Subject key identifier: D2:81:13:9C:78:71:8F:55:2F:56:BE:48:3A:7C:2F:BC:A8:45:81:B0 Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4 Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4 Certificate serial: 019AF0BF3ABE1B95D34D47EC64AED257BF82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=) 2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: 8bvrL7Z9SML6bxRGcW5RUuPQZJEMg4HDwRCWtBbNclY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3a:be:1b:95:d3:4d:47:ec:64:ae:d2:57:bf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4 Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=d281139c78718f552f56be483a7c2fbca84581b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:d3:c6:ce:66:38:76:88:06:f4:4c:4d:af: 77:1d:eb:c5:fd:6c:29:4a:19:4c:90:50:f6:b6:be: 7b:05:98:9d:08:b7:cd:8c:b4:02:96:50:7a:0c:05: e8:c6:4d:a2:ad:e2:6e:6e:5c:b7:48:74:e6:cb:22: b3:e2:b8:9c:c2:33:ca:ae:ac:fa:fb:f9:8c:4d:74: 71:68:5f:7a:9a:ca:1c:a0:9b:8a:bc:6e:37:7e:be: f8:b2:9d:f8:50:41:6f:15:ad:10:60:71:65:1f:39: d6:9e:04:31:77:01:e2:d6:58:df:4c:bc:b4:82:b6: a3:c8:6a:76:81:bc:cd:00:0e:11:47:76:29:20:c6: dc:17:5b:9e:43:f4:ca:1c:20:3b:77:06:98:9c:a8: c5:88:5a:dc:ed:c8:10:6c:e7:15:54:7a:14:8f:9d: 5b:b7:1a:5d:91:11:fc:61:12:74:f1:7e:77:63:45: 60:5a:c7:7f:cf:11:72:63:60:b2:a0:55:57:40:26: 58:1d:10:f7:15:2c:41:f1:4f:87:8f:8b:ac:5d:b7: aa:dd:b1:03:aa:bf:54:79:36:ae:40:81:57:f6:6c: b3:34:04:af:5f:55:77:24:0c:1d:92:f8:ee:eb:4b: 56:26:a0:6a:54:dc:ff:27:f7:06:e2:fd:3f:f2:5a: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:13:9C:78:71:8F:55:2F:56:BE:48:3A:7C:2F:BC:A8:45:81:B0 X509v3 Authority Key Identifier: keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:57:b5:0a:48:55:1e:17:94:01:cd:71:6d:91:04:04:23: 7c:25:a1:23:15:a6:a0:1d:a7:7d:1e:cb:f3:e3:08:db:59:2a: b4:5b:9b:18:61:03:b5:52:04:e8:c3:fe:6f:a1:54:c5:8a:c8: c9:f1:e1:86:f3:22:ca:f2:17:d7:80:a7:99:0b:cb:c6:02:08: 50:cb:46:54:09:bd:33:0d:3b:d2:b0:a9:68:11:7e:a4:32:63: 12:c4:ba:d2:56:14:f4:46:d3:ea:fc:50:f3:87:9d:db:62:aa: 86:89:d2:cf:c2:86:50:39:93:dd:c8:bc:06:f3:1a:8d:46:8c: f0:2f:28:bf:0a:7f:8a:c7:64:3b:87:1c:a1:9e:65:87:e5:ea: 50:58:35:41:58:d8:6d:cc:ca:8e:f3:9f:20:1f:86:1d:01:8c: b4:08:59:8c:ef:7d:5f:72:05:ea:d1:e7:0a:b5:75:19:4c:ff: 8e:0c:84:d0:ec:c9:6d:a2:b4:eb:1f:ae:9e:c0:e1:ca:6f:74: 77:aa:8a:26:a8:07:dc:a7:8d:a4:62:12:44:0c:65:7a:c9:7a: f2:8c:79:ed:9e:15:c8:72:9e:02:ff:4b:96:1c:d0:57:bc:6f: cb:fa:b8:62:87:c6:53:cd:c0:c8:27:72:96:a4:f2:1f:b5:e1: dc:f4:80:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzq+G5XTTUfsZK7SV7+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi MjkwYjQwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD EyhkMjgxMTM5Yzc4NzE4ZjU1MmY1NmJlNDgzYTdjMmZiY2E4NDU4MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwTTxs5mOHaIBvRMTa93HevF/Wwp ShlMkFD2tr57BZidCLfNjLQCllB6DAXoxk2ireJubly3SHTmyyKz4ricwjPKrqz6 +/mMTXRxaF96msocoJuKvG43fr74sp34UEFvFa0QYHFlHznWngQxdwHi1ljfTLy0 grajyGp2gbzNAA4RR3YpIMbcF1ueQ/TKHCA7dwaYnKjFiFrc7cgQbOcVVHoUj51b txpdkRH8YRJ08X53Y0VgWsd/zxFyY2CyoFVXQCZYHRD3FSxB8U+Hj4usXbeq3bED qr9UeTauQIFX9myzNASvX1V3JAwdkvju60tWJqBqVNz/J/cG4v0/8loIVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKBE5x4cY9VL1a+SDp8L7yoRYGwMB8GA1UdIwQY MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1hXtQpI VR4XlAHNcW2RBAQjfCWhIxWmoB2nfR7L8+MI21kqtFubGGEDtVIE6MP+b6FUxYrI yfHhhvMiyvIX14CnmQvLxgIIUMtGVAm9Mw070rCpaBF+pDJjEsS60lYU9EbT6vxQ 84ed22KqhonSz8KGUDmT3ci8BvMajUaM8C8ovwp/isdkO4ccoZ5lh+XqUFg1QVjY bczKjvOfIB+GHQGMtAhZjO99X3IF6tHnCrV1GUz/jgyE0OzJbaK06x+unsDhym90 d6qKJqgH3KeNpGISRAxlesl68ox57Z4VyHKeAv9LlhzQV7xvy/q4YofGU83AyCdy lqTyH7Xh3PSAcg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:11 2025 by rpki-client