This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json) Hash identifier: vxoVMncmjdlnLg7KUI5yNc7ydBmGDIv57ka2QEDZ8RA= Subject key identifier: 5B:AD:BE:81:09:1B:24:45:79:0D:BD:E2:92:C3:E3:3C:B3:23:43:AA Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7 Certificate serial: 019AF209534F5D1DC96F9CE54F2CAD8B09D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=) 2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: May8MI4EMjuy8bLqRHg8Gyo6XXhiXWCdKz0s0ZQcS6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:53:4f:5d:1d:c9:6f:9c:e5:4f:2c:ad:8b:09:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=5badbe81091b2445790dbde292c3e33cb32343aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:f6:9f:26:b8:fc:1a:2e:68:e3:4c:7a:77: d7:1e:62:34:44:36:df:f9:65:92:a2:50:b7:8d:01: f8:09:cc:bf:8c:32:07:3f:6b:70:e5:27:9d:65:12: 54:4f:79:6b:8b:c0:2e:04:2c:10:30:31:b2:fd:ea: 5c:be:33:11:53:52:65:de:34:0e:f5:3c:b1:fa:11: a4:95:6a:4e:5a:25:81:fb:fc:57:8b:7a:7f:15:dd: dc:4e:e5:ea:95:1e:19:2e:b7:1e:5c:07:dd:9d:7c: 5d:74:d7:38:c7:06:34:8d:78:8b:2d:e1:25:fd:73: 88:55:44:48:df:da:21:74:ef:28:06:2d:fe:36:18: 45:2c:da:8b:f5:6b:28:7b:5b:d8:5a:cb:2f:d1:bd: 38:8d:ac:5d:f7:77:f1:34:dd:37:b8:3d:f8:e9:4e: 71:83:54:09:d5:97:68:bf:7b:ee:61:12:b1:62:8c: 67:35:0f:db:c5:ef:77:f8:29:98:b4:3a:fd:76:53: b3:8a:7c:8f:af:73:3c:a1:58:8e:83:bf:06:f0:23: 67:47:39:b6:f5:6b:57:c3:a4:86:df:9d:02:0a:c1: 36:7f:60:5c:d7:aa:10:c6:f7:f2:0b:68:47:18:87: ed:c2:25:c7:d4:27:5d:0c:b0:9a:01:24:96:41:39: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:BE:81:09:1B:24:45:79:0D:BD:E2:92:C3:E3:3C:B3:23:43:AA X509v3 Authority Key Identifier: keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6f:39:fc:40:36:b8:95:a6:fe:11:25:ae:6c:00:bf:dd:3c: bf:90:0b:08:15:fd:fe:e3:bf:b6:53:ae:72:fb:2b:17:06:7a: 1f:93:aa:11:6f:92:c2:58:6d:e3:c3:38:87:b0:62:c9:71:7f: ce:e1:a2:80:11:8c:ed:b7:26:1c:77:77:3a:36:c0:ab:64:7f: 89:a6:b0:dd:7c:c3:e7:0d:04:fa:09:d8:f9:8d:e0:dd:ac:ba: f1:51:14:22:79:c0:3d:e6:75:73:67:6a:6a:d4:e2:23:e3:62: c8:63:4e:21:38:58:ab:01:60:a7:84:9e:da:83:ba:ac:3c:9f: 06:7e:5b:1a:c6:bb:5b:bd:4a:01:80:b0:c0:d0:39:e6:86:00: 37:e2:30:8f:7a:24:c7:e7:c7:11:34:37:ec:39:7d:0f:89:cd: 09:4f:aa:cd:f7:e9:ef:e2:9f:10:8f:c2:64:38:c9:59:1b:df: 28:a0:5c:ba:7f:f3:f6:57:76:32:11:25:e1:28:66:98:a2:04: 25:80:9e:7a:e8:ad:1a:60:8a:04:10:81:80:0a:f7:0b:85:dd: 36:02:58:c8:f0:ab:43:2d:61:63:dd:38:bb:e4:fd:85:1d:44: a0:50:e4:8e:57:26:28:3b:fe:36:5e:5b:05:54:56:0b:19:6c: 5d:11:be:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVNPXR3Jb5zlTyytiwnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl ZWMyZTcwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg1YmFkYmU4MTA5MWIyNDQ1NzkwZGJkZTI5MmMzZTMzY2IzMjM0M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb72nya4/BouaONMenfXHmI0RDbf +WWSolC3jQH4Ccy/jDIHP2tw5SedZRJUT3lri8AuBCwQMDGy/epcvjMRU1Jl3jQO 9Tyx+hGklWpOWiWB+/xXi3p/Fd3cTuXqlR4ZLrceXAfdnXxddNc4xwY0jXiLLeEl /XOIVURI39ohdO8oBi3+NhhFLNqL9Wsoe1vYWssv0b04jaxd93fxNN03uD346U5x g1QJ1Zdov3vuYRKxYoxnNQ/bxe93+CmYtDr9dlOzinyPr3M8oViOg78G8CNnRzm2 9WtXw6SG350CCsE2f2Bc16oQxvfyC2hHGIftwiXH1CddDLCaASSWQTkjtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFutvoEJGyRFeQ294pLD4zyzI0OqMB8GA1UdIwQY MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2 LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm85/EA2 uJWm/hElrmwAv908v5ALCBX9/uO/tlOucvsrFwZ6H5OqEW+Swlht48M4h7BiyXF/ zuGigBGM7bcmHHd3OjbAq2R/iaaw3XzD5w0E+gnY+Y3g3ay68VEUInnAPeZ1c2dq atTiI+NiyGNOIThYqwFgp4Se2oO6rDyfBn5bGsa7W71KAYCwwNA55oYAN+Iwj3ok x+fHETQ37Dl9D4nNCU+qzffp7+KfEI/CZDjJWRvfKKBcun/z9ld2MhEl4ShmmKIE JYCeeuitGmCKBBCBgAr3C4XdNgJYyPCrQy1hY904u+T9hR1EoFDkjlcmKDv+Nl5b BVRWCxlsXRG+dA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:06 2025 by rpki-client