This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json) Hash identifier: bWwieHK3OjXbCOgNQ4xxH2Si7ZoxpTUilzrNmNuBlGY= Subject key identifier: D1:1F:79:76:F0:18:F7:1B:A3:49:5E:39:FD:60:46:5C:F4:2A:C1:0A Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c Certificate serial: 019AF276DE53EEBD47594D59247D4B5DD686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft Manifest number: 113D Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=) 2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: pGiQDp7UeFV/wiIoGzZCD4Np9GN3FkYwzgDBSIiXkls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:de:53:ee:bd:47:59:4d:59:24:7d:4b:5d:d6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=d11f7976f018f71ba3495e39fd60465cf42ac10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:85:19:cc:cd:8c:f6:f1:7d:c9:73:11:7f: 64:66:ff:fa:15:02:21:95:3f:94:a5:31:ff:d8:99: 1f:1d:ed:f1:de:14:b4:39:cd:17:48:64:56:f5:9f: 11:be:1e:fb:60:e4:55:37:13:69:d3:fe:07:67:da: 14:76:a5:8a:98:71:93:81:64:07:1d:34:d5:e0:0b: 75:79:44:56:67:0a:06:e4:9a:ce:5d:2f:76:88:e9: 22:da:0b:8b:ea:03:6e:93:5b:bd:c8:be:04:52:db: 39:4e:7e:9d:9f:fe:6c:03:de:cb:8d:01:34:b1:ca: bf:f9:69:9d:e2:a9:4c:2e:f2:1f:f4:9d:70:cf:25: 60:a0:e4:1d:a7:f9:84:1b:f9:b2:ef:41:8f:f7:e0: 8b:4f:26:e1:82:60:95:b9:1a:36:15:b3:1b:e8:ab: 36:40:28:02:3f:57:83:8b:65:d0:5a:36:7b:45:16: 02:28:ab:84:ec:a1:f6:e7:8f:05:21:0a:d5:18:0e: ed:30:a0:e2:b6:e1:fb:b9:32:3b:c6:ca:ee:4c:61: 6e:9b:ad:9e:ab:75:12:26:24:c3:64:c8:36:4b:c0: 61:df:2b:b9:59:df:a8:ca:09:da:c4:dd:92:92:11: 26:36:15:4c:4c:46:03:fa:23:ad:5e:04:d2:7c:8d: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:79:76:F0:18:F7:1B:A3:49:5E:39:FD:60:46:5C:F4:2A:C1:0A X509v3 Authority Key Identifier: keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ff:b6:0e:47:45:64:96:46:a2:3d:6d:f4:7c:ca:d3:13:93: 8b:bc:1e:a0:c2:84:d5:c5:47:c3:9e:66:0e:84:62:c5:20:90: cd:b0:75:2b:02:0a:a1:c4:15:64:02:54:1e:e8:01:f6:a8:4c: b4:df:c3:b0:a6:f0:8c:08:71:cc:50:7e:c1:69:6d:31:09:e0: dd:40:87:44:e3:a5:d8:d8:ba:ab:b5:9c:81:84:44:bd:f8:39: 2d:a2:d9:81:6d:f3:c2:70:52:0a:4d:e2:20:43:8c:6e:1d:34: 7c:cf:43:83:a2:49:ce:e1:fc:80:9b:25:74:e3:e8:37:d3:a3: 48:3f:32:aa:88:4a:c8:38:90:8f:66:46:77:cc:fd:59:c4:6f: 38:29:13:84:1f:db:0d:2b:a0:92:5a:05:d6:90:64:2c:2a:1c: fe:3c:d0:8f:83:37:08:f5:85:7d:e1:13:0e:59:58:bd:1e:e2: d1:28:3b:fa:50:e1:7e:bd:1c:30:fd:b4:d6:32:45:c4:b0:63: a6:84:d4:10:c9:28:cd:2f:76:f8:a7:c3:7e:b0:62:22:c7:8a: e7:f0:38:12:53:68:0d:55:40:a7:0d:a4:aa:1f:42:20:c9:f8: 58:b4:f0:4e:97:ed:2d:81:13:86:21:c8:8b:1a:9e:9a:5c:28: cf:11:ac:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt5T7r1HWU1ZJH1LXdaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzNhODZiYmM1YzJiYWI0NTJmZjAzZjQ1YTllYWYwYTYx MGM0MGMwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EyhkMTFmNzk3NmYwMThmNzFiYTM0OTVlMzlmZDYwNDY1Y2Y0MmFjMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UyFGczNjPbxfclzEX9kZv/6FQIh lT+UpTH/2JkfHe3x3hS0Oc0XSGRW9Z8Rvh77YORVNxNp0/4HZ9oUdqWKmHGTgWQH HTTV4At1eURWZwoG5JrOXS92iOki2guL6gNuk1u9yL4EUts5Tn6dn/5sA97LjQE0 scq/+Wmd4qlMLvIf9J1wzyVgoOQdp/mEG/my70GP9+CLTybhgmCVuRo2FbMb6Ks2 QCgCP1eDi2XQWjZ7RRYCKKuE7KH2548FIQrVGA7tMKDituH7uTI7xsruTGFum62e q3USJiTDZMg2S8Bh3yu5Wd+oygnaxN2SkhEmNhVMTEYD+iOtXgTSfI0VVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEfeXbwGPcbo0leOf1gRlz0KsEKMB8GA1UdIwQY MBaAFCQzqGu8XCurRS/wP0Wp6vCmEMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDkt MDViNmM5YzE2NDQxLzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDktMDViNmM5YzE2NDQx LzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif+2DkdF ZJZGoj1t9HzK0xOTi7weoMKE1cVHw55mDoRixSCQzbB1KwIKocQVZAJUHugB9qhM tN/DsKbwjAhxzFB+wWltMQng3UCHROOl2Ni6q7WcgYREvfg5LaLZgW3zwnBSCk3i IEOMbh00fM9Dg6JJzuH8gJsldOPoN9OjSD8yqohKyDiQj2ZGd8z9WcRvOCkThB/b DSugkloF1pBkLCoc/jzQj4M3CPWFfeETDllYvR7i0Sg7+lDhfr0cMP201jJFxLBj poTUEMkozS92+KfDfrBiIseK5/A4ElNoDVVApw2kqh9CIMn4WLTwTpftLYEThiHI ixqemlwozxGskw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:12 2025 by rpki-client