This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json) Hash identifier: WOlJNj0ET1f6SnSTX2H3QaauQN+5g//gPfUMOdK4WbA= Subject key identifier: DE:B1:C2:67:4F:AE:40:6E:1F:73:1F:28:B0:16:18:8C:13:C6:96:57 Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Certificate serial: 019AF49C51252DC03B37DE153147CDF87A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft Manifest number: 048B Signing time: Sat 06 Dec 2025 17:01:16 +0000 Manifest this update: Sat 06 Dec 2025 17:01:16 +0000 Manifest next update: Sun 07 Dec 2025 17:01:16 +0000 Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=) 2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: dZ/QSI4AAhm+5PsRcLo52fpEszgdI11rjmHldMCYkVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:51:25:2d:c0:3b:37:de:15:31:47:cd:f8:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Validity Not Before: Dec 6 17:01:16 2025 GMT Not After : Dec 7 17:01:16 2025 GMT Subject: CN=deb1c2674fae406e1f731f28b016188c13c69657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:50:b5:ed:f6:56:9d:fd:7e:6d:0a:bb:78: 65:c4:08:d3:21:ce:b1:4c:dc:7f:09:a5:87:bf:e1: 53:fd:1b:4f:3e:56:6d:74:18:0d:b1:aa:bd:76:c9: f5:a2:53:6e:06:fc:21:6e:67:47:5f:5e:72:21:d7: a8:46:f4:0f:27:5b:91:dd:08:5c:5b:76:a0:f4:2e: f1:fd:99:1c:eb:5e:99:29:34:4c:e4:46:15:03:ac: 6d:66:0f:6c:fe:bb:e7:83:6c:9f:c0:24:b1:2f:07: aa:58:3b:93:46:4a:40:40:6b:a6:08:17:e1:67:79: 96:81:ec:fd:b1:57:f1:58:3f:c3:9a:7c:c3:06:3e: be:1c:f1:23:12:4c:4e:d0:c7:7b:ea:61:a8:98:4e: 8c:64:94:48:f7:c6:16:ee:13:b0:3f:e2:24:d8:7a: 9b:21:b6:11:63:15:97:20:58:1a:02:cf:c1:42:fd: 95:22:b0:af:da:b4:b4:46:4c:3b:da:66:15:97:cf: 19:47:5f:cc:89:57:ec:91:6c:65:93:3b:ea:bc:ce: 4e:db:13:8e:fb:b3:1d:f5:31:7b:5e:6c:2f:0f:d1: aa:55:b1:d9:b7:df:6b:1f:a7:6a:c2:53:f7:4f:53: 0e:d9:c3:4d:b0:ad:b6:c4:fa:2b:d0:4b:06:8f:23: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:C2:67:4F:AE:40:6E:1F:73:1F:28:B0:16:18:8C:13:C6:96:57 X509v3 Authority Key Identifier: keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:4a:72:6b:36:91:47:08:4f:6c:8f:3c:42:7d:8a:2f:c3: 6a:b6:32:e9:d5:b2:f2:7e:9f:6e:fd:7b:c7:f5:2f:55:7d:8c: a6:72:1e:38:c2:56:18:41:68:cf:e8:4b:cf:2d:75:b2:36:b8: 21:e7:86:dd:d6:98:44:9c:63:37:c6:7f:30:4b:1d:ef:85:53: 36:9e:dd:97:71:39:d3:13:17:2a:33:b2:e8:45:a2:5d:73:d6: 90:bc:58:55:0a:c3:34:7e:ce:6b:9a:ef:7e:1c:05:96:35:52: be:ad:f5:53:a2:28:c1:16:8e:00:cc:bd:c0:ea:84:c8:4d:46: bf:05:b9:97:58:49:64:38:f5:ff:18:28:69:bd:f2:9f:09:f9: 0c:ec:d7:65:df:68:49:65:c5:2f:10:f8:cf:a2:9e:b0:1e:9b: ab:b7:c2:3e:6a:78:4a:03:f5:9d:98:f4:e5:08:c2:19:f7:f6: 71:34:81:89:5c:1a:ce:36:67:5a:53:ca:e1:0c:e0:a3:7b:1c: 49:e1:3f:e8:71:86:ea:88:3f:b5:08:99:91:3b:55:78:ef:87: 99:f3:e3:df:ed:70:2b:7e:02:b9:8e:4a:fb:ea:f0:d6:fe:ea: 15:d2:51:86:05:ab:dc:19:a7:0c:28:92:af:d5:61:81:c9:2b: ae:4e:30:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFElLcA7N94VMUfN+HoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl MWQxNmIwHhcNMjUxMjA2MTcwMTE2WhcNMjUxMjA3MTcwMTE2WjAzMTEwLwYDVQQD EyhkZWIxYzI2NzRmYWU0MDZlMWY3MzFmMjhiMDE2MTg4YzEzYzY5NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFhQte32Vp39fm0Ku3hlxAjTIc6x TNx/CaWHv+FT/RtPPlZtdBgNsaq9dsn1olNuBvwhbmdHX15yIdeoRvQPJ1uR3Qhc W3ag9C7x/Zkc616ZKTRM5EYVA6xtZg9s/rvng2yfwCSxLweqWDuTRkpAQGumCBfh Z3mWgez9sVfxWD/DmnzDBj6+HPEjEkxO0Md76mGomE6MZJRI98YW7hOwP+Ik2Hqb IbYRYxWXIFgaAs/BQv2VIrCv2rS0Rkw72mYVl88ZR1/MiVfskWxlkzvqvM5O2xOO +7Md9TF7XmwvD9GqVbHZt99rH6dqwlP3T1MO2cNNsK22xPor0EsGjyPJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6xwmdPrkBuH3MfKLAWGIwTxpZXMB8GA1UdIwQY MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpRKcms2 kUcIT2yPPEJ9ii/DarYy6dWy8n6fbv17x/UvVX2MpnIeOMJWGEFoz+hLzy11sja4 IeeG3daYRJxjN8Z/MEsd74VTNp7dl3E50xMXKjOy6EWiXXPWkLxYVQrDNH7Oa5rv fhwFljVSvq31U6IowRaOAMy9wOqEyE1GvwW5l1hJZDj1/xgoab3ynwn5DOzXZd9o SWXFLxD4z6KesB6bq7fCPmp4SgP1nZj05QjCGff2cTSBiVwazjZnWlPK4Qzgo3sc SeE/6HGG6og/tQiZkTtVeO+HmfPj3+1wK34CuY5K++rw1v7qFdJRhgWr3BmnDCiS r9Vhgckrrk4wFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:40 2025 by rpki-client