This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json) Hash identifier: EDk/vTQzIprdD4wLYnmM35TRYyHqwkDs+qa6B4p9P00= Subject key identifier: 13:01:70:3B:7B:F5:C5:06:6C:56:26:60:4A:18:2B:EA:3F:3C:1A:F5 Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Certificate serial: 019AF12D853714BCD27AD735588F9B3B8508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft Manifest number: 0627 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: wMg4ZY3WJhjxhm+ju+ugTWwAvRhr9riGzvh+k4kuAks=) 2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:85:37:14:bc:d2:7a:d7:35:58:8f:9b:3b:85:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=1301703b7bf5c5066c5626604a182bea3f3c1af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:28:bb:d9:48:a5:9c:4a:b0:c9:bd:10:d9: 8b:8e:b8:47:02:a9:67:94:24:6d:6f:ba:3c:27:a8: a1:00:ba:36:4e:cd:79:fa:9a:1f:96:c6:53:4c:00: 16:53:67:27:29:45:65:10:80:0f:c1:b0:e6:d2:3a: 99:fd:a9:6b:64:18:d9:e6:32:17:db:a9:c6:36:a4: 8e:1f:52:be:f8:1f:e0:dd:9b:3d:11:ac:ad:fe:1b: da:7e:ad:c6:24:6e:b9:63:35:a0:a5:d5:dc:b3:ab: 89:dd:15:84:cf:c5:58:dd:f1:08:58:a0:9a:2b:a4: 05:25:14:71:46:6b:90:41:a1:71:2f:cf:48:92:95: db:4a:0a:60:1c:17:b4:00:7e:14:79:3d:a8:ee:ed: 96:8d:03:54:f2:22:90:ea:0d:a8:b2:e0:02:7f:ff: f1:a4:4f:71:6a:b6:c7:5a:93:b8:a0:e1:61:8e:93: 73:d9:f0:10:11:b7:c9:61:40:1d:b8:ac:0d:4a:8e: 05:7b:70:8c:a8:cd:2b:f0:e7:66:d5:99:06:76:95: 4b:50:aa:03:d8:f2:9b:d2:ab:ea:89:b2:24:b6:9a: 0d:9b:42:0f:fb:a1:a1:d8:0c:e9:ed:52:dc:e4:f1: 48:28:14:18:fd:24:fa:ca:ef:50:7e:d0:1b:39:a8: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:70:3B:7B:F5:C5:06:6C:56:26:60:4A:18:2B:EA:3F:3C:1A:F5 X509v3 Authority Key Identifier: keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ca:ed:4b:8d:8f:08:b8:94:44:a7:c0:19:55:cf:06:fa:59: 5b:85:89:bf:45:f5:0d:bc:5d:49:30:12:ca:10:ef:f1:89:f6: d3:3b:c3:7d:4b:a8:b1:cd:70:25:85:96:85:f8:08:7d:10:e6: 75:7b:b1:2b:86:63:e7:ea:06:20:80:fc:d5:5a:0a:3c:f5:a2: fd:ef:d2:b6:b5:c7:6e:7c:d1:45:5c:9c:a2:63:6a:47:a7:31: 4f:c6:48:60:05:9f:ed:36:4d:bc:e3:3f:ee:8b:92:9b:a8:08: e3:fa:5f:a6:85:8a:62:a6:65:ef:de:78:2f:ce:04:22:84:b9: f1:b9:95:ad:69:39:a6:43:d7:08:ea:b1:e4:cb:ee:0b:cc:78: 65:29:9e:59:e5:70:07:df:d6:70:de:52:9b:8f:1e:4b:84:55: bf:af:77:5d:6a:1a:72:a2:e1:d4:59:a0:c0:32:25:41:40:ea: 7d:fc:b8:f8:82:f6:da:a6:ca:e9:13:c6:dc:8c:01:c5:96:7f: 2c:12:17:54:e2:2d:71:71:cd:c2:42:a9:70:39:8c:2d:ae:d8: fd:49:1a:ec:00:fa:fd:19:d7:97:5f:c6:bf:93:ae:e8:a4:70: 6f:c9:0a:ec:d0:14:9e:3b:8a:18:9d:f1:d9:90:10:d2:0a:59: d6:35:8d:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYU3FLzSetc1WI+bO4UIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw YWFkMmYwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EygxMzAxNzAzYjdiZjVjNTA2NmM1NjI2NjA0YTE4MmJlYTNmM2MxYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRcou9lIpZxKsMm9ENmLjrhHAqln lCRtb7o8J6ihALo2Ts15+poflsZTTAAWU2cnKUVlEIAPwbDm0jqZ/alrZBjZ5jIX 26nGNqSOH1K++B/g3Zs9Eayt/hvafq3GJG65YzWgpdXcs6uJ3RWEz8VY3fEIWKCa K6QFJRRxRmuQQaFxL89IkpXbSgpgHBe0AH4UeT2o7u2WjQNU8iKQ6g2osuACf//x pE9xarbHWpO4oOFhjpNz2fAQEbfJYUAduKwNSo4Fe3CMqM0r8Odm1ZkGdpVLUKoD 2PKb0qvqibIktpoNm0IP+6Gh2Azp7VLc5PFIKBQY/ST6yu9QftAbOajESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMBcDt79cUGbFYmYEoYK+o/PBr1MB8GA1UdIwQY MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2 LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsrtS42P CLiURKfAGVXPBvpZW4WJv0X1DbxdSTASyhDv8Yn20zvDfUuosc1wJYWWhfgIfRDm dXuxK4Zj5+oGIID81VoKPPWi/e/StrXHbnzRRVycomNqR6cxT8ZIYAWf7TZNvOM/ 7ouSm6gI4/pfpoWKYqZl7954L84EIoS58bmVrWk5pkPXCOqx5MvuC8x4ZSmeWeVw B9/WcN5Sm48eS4RVv693XWoacqLh1FmgwDIlQUDqffy4+IL22qbK6RPG3IwBxZZ/ LBIXVOItcXHNwkKpcDmMLa7Y/Uka7AD6/RnXl1/Gv5Ou6KRwb8kK7NAUnjuKGJ3x 2ZAQ0gpZ1jWNYA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:06 2025 by rpki-client