This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft File: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json) Hash identifier: GvTW4BHONiuntnMjes7kNo01IFaT7EnXRWZpmEuufdg= Subject key identifier: 85:E9:F7:F3:0E:96:8A:CB:11:2B:AB:F5:C3:1C:19:AD:B0:5F:F3:A7 Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Certificate serial: 019AF088535BB7ECA2E131593DABCD21D664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft Manifest number: 67 Signing time: Fri 05 Dec 2025 22:00:57 +0000 Manifest this update: Fri 05 Dec 2025 22:00:57 +0000 Manifest next update: Sat 06 Dec 2025 22:00:57 +0000 Files and hashes: 1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: 9Ts2UgukUwKWEsTMYYDoLr+bwUUKpiCobdl8wXyhoM0=) 2: qw8TLEqYHaKBZBXFc5_8HznbM4o.roa (hash: FycBWVqpPD9Dfru3H19RNGBygXIpUYhq0CqBiwxgUUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:53:5b:b7:ec:a2:e1:31:59:3d:ab:cd:21:d6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2 Validity Not Before: Dec 5 22:00:57 2025 GMT Not After : Dec 6 22:00:57 2025 GMT Subject: CN=85e9f7f30e968acb112babf5c31c19adb05ff3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:1b:f1:cd:42:42:04:cf:d4:d3:7e:19:44: 92:c1:2c:fd:64:ff:10:f9:5f:3c:f0:eb:c9:46:f0: 02:43:b9:f8:f2:e4:17:83:61:4a:3d:fd:21:30:75: f5:fe:7b:33:a1:30:6a:7e:f8:26:27:02:07:94:ee: 65:da:73:8e:f1:77:b1:dd:3a:4b:f7:dd:44:69:09: 6c:1f:e6:11:76:da:54:72:54:e2:37:81:6b:b4:d7: 7d:7c:4d:79:f3:d2:5f:49:68:6e:5d:ba:c5:0f:1e: 8a:58:eb:3c:45:0e:d6:e2:93:b1:9c:3e:e3:0b:7b: 39:b7:2f:1b:db:16:97:bb:9b:b8:c4:6f:57:42:b2: 3f:5f:5b:10:6c:2e:84:4c:1e:7f:b2:bf:23:23:e0: 88:85:27:48:b2:59:fd:0a:96:57:2c:9b:cc:d8:47: f7:50:ca:96:23:82:8e:4d:29:ad:3b:02:59:92:d3: a6:c1:7b:e4:c4:02:05:8b:83:61:2f:b9:ad:26:9b: 42:7b:86:70:82:aa:1a:45:04:22:dd:14:c9:f2:eb: e0:6a:5b:cf:6e:c3:cb:89:0e:ed:82:1f:36:3a:a3: 6b:ea:e0:50:2e:d8:ca:95:15:55:d5:15:04:98:0f: 2d:90:11:94:80:fa:0a:c3:fb:9c:3c:64:07:a6:31: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E9:F7:F3:0E:96:8A:CB:11:2B:AB:F5:C3:1C:19:AD:B0:5F:F3:A7 X509v3 Authority Key Identifier: keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f9:d9:5a:b3:cd:4a:22:e9:09:de:2a:40:ac:0d:1a:7f:51: 91:10:71:e4:8c:da:34:b4:54:72:d5:ea:6c:07:6f:2d:e6:23: 79:95:da:6d:62:ed:fd:09:25:5b:cb:e5:dd:ed:aa:e8:ef:77: ad:fa:ed:bb:f1:62:bb:9c:56:41:20:b7:f4:d4:43:1e:ae:ee: 44:0a:30:67:bd:3f:2b:58:52:ca:3d:34:db:db:bb:12:2b:a7: 28:0c:45:b2:dd:e4:e1:fc:5a:2d:87:81:57:c2:e5:76:5e:ef: 71:3b:4a:37:e3:6e:b6:bd:4e:05:97:59:b8:d3:3f:e1:f9:45: e4:e5:4d:74:12:f8:f1:f4:a8:80:16:ac:92:6d:2e:f3:71:0e: fb:84:b3:42:a2:7d:b8:2f:e2:d1:dd:6a:be:f5:53:4b:b5:57: fa:ba:d7:4d:83:64:36:e5:a2:81:3c:1f:4c:32:ad:e6:49:ce: 1c:16:95:cc:73:97:cb:13:5c:a0:64:c4:a7:ef:f1:83:22:2c: 51:92:1f:1c:55:b6:6e:18:a1:67:97:b9:25:38:07:e8:d1:97: 7b:a9:2e:01:ca:33:31:cd:56:e0:36:9c:2e:70:d3:a6:13:75: 27:66:8b:d6:64:c0:aa:1c:27:91:16:ac:ba:a3:bf:11:34:a8: 2b:eb:c8:36 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwiFNbt+yi4TFZPavNIdZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OThkODlmOTI1Mjk5YjUxZjNiYzgyYWNjZDhjNmI5NjJk Y2MyZTIwHhcNMjUxMjA1MjIwMDU3WhcNMjUxMjA2MjIwMDU3WjAzMTEwLwYDVQQD Eyg4NWU5ZjdmMzBlOTY4YWNiMTEyYmFiZjVjMzFjMTlhZGIwNWZmM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8b8c1CQgTP1NN+GUSSwSz9ZP8Q +V888OvJRvACQ7n48uQXg2FKPf0hMHX1/nszoTBqfvgmJwIHlO5l2nOO8Xex3TpL 991EaQlsH+YRdtpUclTiN4FrtNd9fE1589JfSWhuXbrFDx6KWOs8RQ7W4pOxnD7j C3s5ty8b2xaXu5u4xG9XQrI/X1sQbC6ETB5/sr8jI+CIhSdIsln9CpZXLJvM2Ef3 UMqWI4KOTSmtOwJZktOmwXvkxAIFi4NhL7mtJptCe4ZwgqoaRQQi3RTJ8uvgalvP bsPLiQ7tgh82OqNr6uBQLtjKlRVV1RUEmA8tkBGUgPoKw/ucPGQHpjHNvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIXp9/MOlorLESur9cMcGa2wX/OnMB8GA1UdIwQY MBaAFPiY2J+SUpm1HzvIKszYxrli3MLiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KalluNUpTbWJVZk84Z3F6TmpHdVdMY3d1SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvYjg4YTYwLWFhZjQtNDkxYS1hYjgy LWM1OTI5NDk5MWIyNS8xLzEtSmpZbjVKU21iVWZPOGdxek5qR3VXTGN3dUkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VjL2I4OGE2MC1hYWY0LTQ5MWEtYWI4Mi1jNTkyOTQ5OTFi MjUvMS8xLUpqWW41SlNtYlVmTzhncXpOakd1V0xjd3VJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfnZ WrPNSiLpCd4qQKwNGn9RkRBx5IzaNLRUctXqbAdvLeYjeZXabWLt/QklW8vl3e2q 6O93rfrtu/Fiu5xWQSC39NRDHq7uRAowZ70/K1hSyj0029u7EiunKAxFst3k4fxa LYeBV8Lldl7vcTtKN+Nutr1OBZdZuNM/4flF5OVNdBL48fSogBaskm0u83EO+4Sz QqJ9uC/i0d1qvvVTS7VX+rrXTYNkNuWigTwfTDKt5knOHBaVzHOXyxNcoGTEp+/x gyIsUZIfHFW2bhihZ5e5JTgH6NGXe6kuAcozMc1W4DacLnDTphN1J2aL1mTAqhwn kRasuqO/ETSoK+vINg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:50 2025 by rpki-client