This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json) Hash identifier: A+afkaADNOBDNzmkC63NlbppzLmWYqylf09QfZ+kydE= Subject key identifier: C9:45:90:2F:4B:E1:79:96:71:0A:E3:45:23:E7:CB:15:DF:5C:AA:30 Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Certificate serial: 019AF19AD39B27BC4A25C502A1F7A86CEE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft Manifest number: 16B3 Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: XhoC9j0fiZJazZ4Iq1LmwSaS0Jy1SptZFmvXmp9QFDM=) 2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:9b:27:bc:4a:25:c5:02:a1:f7:a8:6c:ee:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=c945902f4be17996710ae34523e7cb15df5caa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:1f:93:b6:3b:8e:3e:95:84:1d:bb:de:85: 27:14:31:18:77:c6:fc:37:1b:77:48:60:57:c5:48: 48:4b:c7:ff:ec:11:82:3b:71:96:0c:6d:6e:e8:ec: 17:73:b7:1c:88:f3:86:d8:17:f6:9c:03:4a:b1:fa: 35:36:0f:8a:a1:cf:ac:6a:bb:15:23:89:ea:dd:bf: 6e:65:5c:da:cc:15:b5:c1:79:fe:17:04:7c:f4:11: 4e:ac:35:f4:30:c5:c1:95:45:91:3a:b7:92:31:0a: ed:2e:97:08:43:e2:a4:ce:79:ac:d3:ce:56:6d:72: c4:53:5d:08:33:97:53:5b:73:f3:ff:b8:25:6f:27: 7a:42:24:d7:fe:d6:91:da:53:2f:56:26:5b:eb:6d: f7:47:71:ae:33:2f:1b:b6:d0:77:a5:bc:92:f0:32: f1:8f:f6:c9:6b:07:9b:97:5b:9d:5b:aa:6a:aa:a2: f3:a3:b3:71:55:d2:9f:39:99:a1:03:07:d3:c7:a2: 22:88:57:08:7e:52:39:07:1a:92:52:4b:7c:63:00: a0:34:f7:49:a0:51:70:b5:24:a3:56:ed:8e:32:8c: 3c:d0:8f:fb:69:5e:af:07:e1:54:58:d1:c9:d1:e6: 09:7d:b9:5a:88:11:a3:98:b4:bc:4f:2a:e6:1e:88: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:45:90:2F:4B:E1:79:96:71:0A:E3:45:23:E7:CB:15:DF:5C:AA:30 X509v3 Authority Key Identifier: keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9d:1b:24:c8:a4:ec:81:7d:63:ba:13:e1:17:94:ee:15:c7: 1a:a7:64:fd:77:a6:e6:3e:10:93:98:cc:41:66:95:58:9e:fc: c4:18:b7:3d:fc:f9:d2:13:45:4d:06:4d:ef:5c:b0:2d:62:d0: 2d:e7:49:a4:21:6d:45:6a:36:6f:50:f2:2c:f8:e8:43:1b:91: 67:25:95:0d:33:a6:88:04:84:e7:cc:46:60:c4:40:e2:05:96: 29:b4:73:b6:81:9d:de:7f:91:db:0b:67:5b:31:f4:c5:d9:1a: 17:c5:a4:18:f2:a6:44:69:b1:b5:54:0c:62:d2:5b:a6:6b:d2: b3:65:66:bf:a4:8a:da:b3:a6:43:41:71:bf:1a:5a:83:e7:aa: ec:46:f8:b5:89:7f:fe:4c:c6:f6:f1:25:3d:cb:c1:e8:6f:4a: 24:ee:72:92:75:f3:99:b3:d6:76:33:a6:6c:f5:33:d2:7c:25: e7:ca:87:0b:b5:7e:42:24:b9:2d:58:1c:1a:cb:f3:5d:23:90: f8:23:a4:09:71:07:4f:08:7b:86:3d:f3:68:3b:af:87:4d:01: 99:31:de:a1:eb:87:9b:a8:5d:21:6b:cd:74:f4:19:32:33:d4: 60:d6:8a:a3:e3:af:e3:50:d4:21:37:70:01:97:af:2d:ab:0a: 19:c3:76:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtObJ7xKJcUCofeobO6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi YzEwZjcwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhjOTQ1OTAyZjRiZTE3OTk2NzEwYWUzNDUyM2U3Y2IxNWRmNWNhYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ofk7Y7jj6VhB273oUnFDEYd8b8 Nxt3SGBXxUhIS8f/7BGCO3GWDG1u6OwXc7cciPOG2Bf2nANKsfo1Ng+Koc+sarsV I4nq3b9uZVzazBW1wXn+FwR89BFOrDX0MMXBlUWROreSMQrtLpcIQ+Kkznms085W bXLEU10IM5dTW3Pz/7glbyd6QiTX/taR2lMvViZb6233R3GuMy8bttB3pbyS8DLx j/bJawebl1udW6pqqqLzo7NxVdKfOZmhAwfTx6IiiFcIflI5BxqSUkt8YwCgNPdJ oFFwtSSjVu2OMow80I/7aV6vB+FUWNHJ0eYJfblaiBGjmLS8TyrmHojqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlFkC9L4XmWcQrjRSPnyxXfXKowMB8GA1UdIwQY MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ0bJMik 7IF9Y7oT4ReU7hXHGqdk/Xem5j4Qk5jMQWaVWJ78xBi3Pfz50hNFTQZN71ywLWLQ LedJpCFtRWo2b1DyLPjoQxuRZyWVDTOmiASE58xGYMRA4gWWKbRztoGd3n+R2wtn WzH0xdkaF8WkGPKmRGmxtVQMYtJbpmvSs2Vmv6SK2rOmQ0Fxvxpag+eq7Eb4tYl/ /kzG9vElPcvB6G9KJO5yknXzmbPWdjOmbPUz0nwl58qHC7V+QiS5LVgcGsvzXSOQ +COkCXEHTwh7hj3zaDuvh00BmTHeoeuHm6hdIWvNdPQZMjPUYNaKo+Ov41DUITdw AZevLasKGcN2qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:31 2025 by rpki-client