This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json) Hash identifier: RtcqN5Pb1ONNqudzL0aJ85Xhobc18A93/6d3ejJYq38= Subject key identifier: D2:0E:30:8A:62:63:02:DA:6B:89:41:5E:C1:03:1E:A8:8F:1C:FA:5C Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d Certificate serial: 019AF163EA438B3F9D1D0535B6A1F2817187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft Manifest number: 0A67 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: a4xqhq8t/F8DEeRbQIZcjvhXIjqyOK+/58n/pdUgqO4=) 2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ea:43:8b:3f:9d:1d:05:35:b6:a1:f2:81:71:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=d20e308a626302da6b89415ec1031ea88f1cfa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:55:3c:4e:ee:65:1f:34:ca:58:d9:e3:99: 6d:b2:dd:c0:88:f4:69:a8:8d:03:b8:eb:8f:b1:f6: 2a:db:4b:e4:79:31:9b:47:50:b4:b1:ed:74:47:a2: 71:4b:4d:2f:32:46:09:2f:37:7c:b0:6c:a2:2b:7f: 45:74:88:2c:a9:a3:12:e8:1c:6a:b2:39:20:d6:bc: ea:4f:40:3a:ed:c8:df:e6:3a:2c:d0:5c:22:c1:40: 48:d5:6e:a7:da:a2:29:6a:41:37:da:41:f4:63:b7: bb:40:0d:25:80:cf:52:73:87:78:59:59:d7:58:06: 8b:c4:2d:b0:88:5a:47:97:01:5d:30:f8:8c:c0:36: 3d:4a:e7:6c:6e:ba:55:a5:d1:fe:68:a6:d8:ec:cd: 17:18:a2:d4:09:d3:c9:cf:3c:da:d1:47:db:d8:be: c2:7d:1a:c7:e8:bd:a9:dd:b5:69:08:ef:26:77:dd: e2:29:bd:1f:aa:4f:c8:2a:5d:81:fd:92:58:be:fa: 1e:e6:04:3a:20:33:f5:ce:52:66:6a:4d:ac:99:00: 47:38:18:3a:aa:83:bc:11:ce:f1:55:05:0e:e0:97: 65:15:0f:83:b9:84:1f:51:ce:91:33:48:97:aa:74: 86:81:5d:85:fa:56:dc:d0:8e:41:ea:4f:7b:df:26: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0E:30:8A:62:63:02:DA:6B:89:41:5E:C1:03:1E:A8:8F:1C:FA:5C X509v3 Authority Key Identifier: keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a9:ee:bb:01:74:47:2c:49:79:c5:40:a1:d4:5b:71:fc:58: 51:18:6f:1e:b2:87:8a:2d:b6:a1:b5:80:21:36:b3:eb:69:f2: 86:1d:cb:23:64:02:c5:fa:63:c4:6b:61:04:c5:44:dd:aa:ed: 9d:11:be:44:2c:cc:4d:0b:a1:73:ad:80:ed:c4:74:47:46:18: be:bc:4e:21:a4:46:04:38:91:7f:81:b1:ec:9b:7e:bd:83:66: e5:88:1d:9a:1a:8c:69:40:79:11:d5:bb:cd:cd:23:38:23:c3: ba:dc:92:7f:a7:cc:f2:a4:68:a1:06:39:c6:05:35:9c:d5:30: 1e:de:cc:bb:ae:61:6b:fd:51:85:6a:2a:5d:ab:e4:d3:bb:98: 38:02:ba:81:34:bd:df:b1:5d:fd:20:f5:a1:34:07:69:86:0c: a3:c7:09:70:6e:9d:c2:ba:e9:2c:0f:66:9e:b6:a8:0d:a8:09: 04:de:60:05:56:a1:65:4f:98:5e:fe:1d:fc:84:9d:27:d7:d6: c4:7f:59:b1:19:6c:16:f8:77:79:a9:45:fe:76:f9:8d:8d:92: d1:22:27:d7:5d:97:be:8c:77:59:90:0d:ee:25:45:22:e3:bb: df:b6:3e:68:27:15:dc:1a:1f:cc:c3:15:cc:8f:1c:91:28:3b: ab:be:b8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+pDiz+dHQU1tqHygXGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTgyNzdkMWZlYWI1MjM4N2VhYjI2ZjhkY2NhOTI2MGMy NThhM2QwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhkMjBlMzA4YTYyNjMwMmRhNmI4OTQxNWVjMTAzMWVhODhmMWNmYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK5VPE7uZR80yljZ45ltst3AiPRp qI0DuOuPsfYq20vkeTGbR1C0se10R6JxS00vMkYJLzd8sGyiK39FdIgsqaMS6Bxq sjkg1rzqT0A67cjf5jos0FwiwUBI1W6n2qIpakE32kH0Y7e7QA0lgM9Sc4d4WVnX WAaLxC2wiFpHlwFdMPiMwDY9SudsbrpVpdH+aKbY7M0XGKLUCdPJzzza0Ufb2L7C fRrH6L2p3bVpCO8md93iKb0fqk/IKl2B/ZJYvvoe5gQ6IDP1zlJmak2smQBHOBg6 qoO8Ec7xVQUO4JdlFQ+DuYQfUc6RM0iXqnSGgV2F+lbc0I5B6k973yZoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIOMIpiYwLaa4lBXsEDHqiPHPpcMB8GA1UdIwQY MBaAFCXoJ30f6rUjh+qyb43MqSYMJYo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMt YmFmMjU3MmU4MDkzLzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMtYmFmMjU3MmU4MDkz LzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6nuuwF0 RyxJecVAodRbcfxYURhvHrKHii22obWAITaz62nyhh3LI2QCxfpjxGthBMVE3art nRG+RCzMTQuhc62A7cR0R0YYvrxOIaRGBDiRf4Gx7Jt+vYNm5YgdmhqMaUB5EdW7 zc0jOCPDutySf6fM8qRooQY5xgU1nNUwHt7Mu65ha/1RhWoqXavk07uYOAK6gTS9 37Fd/SD1oTQHaYYMo8cJcG6dwrrpLA9mnraoDagJBN5gBVahZU+YXv4d/ISdJ9fW xH9ZsRlsFvh3ealF/nb5jY2S0SIn112Xvox3WZAN7iVFIuO737Y+aCcV3BofzMMV zI8ckSg7q764OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:46 2025 by rpki-client