This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json) Hash identifier: TYqQQhessqMXMHC3fHeEiSHhzq2QvNoom2Evn3ikbdM= Subject key identifier: 79:CF:B5:5B:36:EF:6F:BD:AA:F4:0D:FA:2E:32:39:3D:E6:89:41:62 Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Certificate serial: 019AF1D1A780AE2C8F529D3DAD59B6A14BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=) 2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: bP9QjfWY22eYp24rOxJBPOXySL/Tvy6VQ+Wc00aQtlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a7:80:ae:2c:8f:52:9d:3d:ad:59:b6:a1:4b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=79cfb55b36ef6fbdaaf40dfa2e32393de6894162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:55:15:f6:ac:0a:4d:83:68:91:71:68:2a: 77:a2:06:9e:fc:49:7c:48:f0:84:05:74:8c:14:ef: 9c:ea:1e:b6:2b:5f:44:3c:47:de:d1:1d:d9:51:63: 97:c7:b5:42:c7:de:60:dc:cc:8d:6c:79:5d:a2:57: bd:d4:dc:f4:ed:32:dd:17:0e:25:82:56:86:c3:f5: 52:28:f2:ef:be:d6:79:59:04:9c:76:ed:96:b2:25: e1:4d:7b:75:42:1e:96:7f:bb:f3:74:63:f8:00:02: e7:00:c6:1d:12:42:ba:e2:f8:70:bf:f3:8e:da:2b: 3c:ec:ff:83:19:97:b6:94:4c:7a:d0:df:8f:7f:29: c2:97:b5:f2:e2:7d:e3:e4:3b:6e:43:e3:47:4d:70: 04:56:e9:3a:34:8d:aa:0d:60:69:4f:14:ed:fd:23: 0d:5c:30:a9:5b:de:01:c7:ad:2b:69:55:ea:22:0a: 8d:52:26:e2:e2:83:c1:9a:20:10:b5:b4:1f:7b:eb: f5:8f:58:56:60:c9:e8:9c:14:4f:65:ba:a6:2b:38: 71:9c:02:93:b9:fd:94:27:ef:a5:46:87:73:a3:2c: 7d:0b:04:4a:36:9d:cd:bc:92:46:fc:d5:54:4c:d1: 34:22:15:f2:6a:68:c7:3e:14:26:9d:8a:96:4c:33: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CF:B5:5B:36:EF:6F:BD:AA:F4:0D:FA:2E:32:39:3D:E6:89:41:62 X509v3 Authority Key Identifier: keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ef:b8:e1:83:3a:1c:e7:8c:10:6e:4d:1e:c6:09:a6:ea:a3: 47:ea:7d:87:2a:56:65:a2:ef:2d:68:77:6b:2a:3c:12:ff:e2: 77:20:05:2f:e2:62:e1:b1:38:a6:81:cc:5a:6a:f5:6c:dc:99: 02:95:f4:80:7f:13:fa:ab:36:41:63:76:86:6a:2c:af:4d:4d: 74:80:44:2b:e9:a8:77:28:9f:ef:aa:65:b7:32:c2:7e:3b:12: 7b:dd:f5:ec:9a:3a:1e:39:e2:41:24:ca:8d:a1:98:10:08:4a: 1e:16:76:cb:07:fc:76:c2:20:87:b5:89:70:4d:4e:26:2f:73: 9c:ab:c1:85:c5:63:2a:c8:a1:40:e0:52:a8:ed:1a:48:37:26: a9:ba:79:0f:7c:bc:b5:f6:23:d8:c8:35:1a:f6:ff:ce:d8:9b: eb:43:d7:bd:8f:b9:50:89:e1:7f:af:3e:b0:08:ef:a4:19:b0: 76:e7:15:ae:a6:8e:ad:2f:87:32:fa:01:aa:28:0e:a6:20:ba: d2:fe:c2:ba:51:92:43:be:9a:a1:72:0f:3c:8f:32:20:8e:f4: 08:b2:f9:fa:d0:39:4a:d8:15:1b:ad:d7:c7:9e:02:6d:4f:3e: b6:94:31:9d:3b:e9:1d:ec:97:03:31:5b:53:6f:cd:bd:a1:92: fd:2b:3f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aeAriyPUp09rVm2oUvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi ODlkNWYwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg3OWNmYjU1YjM2ZWY2ZmJkYWFmNDBkZmEyZTMyMzkzZGU2ODk0MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxxVFfasCk2DaJFxaCp3ogae/El8 SPCEBXSMFO+c6h62K19EPEfe0R3ZUWOXx7VCx95g3MyNbHldole91Nz07TLdFw4l glaGw/VSKPLvvtZ5WQScdu2WsiXhTXt1Qh6Wf7vzdGP4AALnAMYdEkK64vhwv/OO 2is87P+DGZe2lEx60N+PfynCl7Xy4n3j5DtuQ+NHTXAEVuk6NI2qDWBpTxTt/SMN XDCpW94Bx60raVXqIgqNUibi4oPBmiAQtbQfe+v1j1hWYMnonBRPZbqmKzhxnAKT uf2UJ++lRodzoyx9CwRKNp3NvJJG/NVUTNE0IhXyamjHPhQmnYqWTDPdKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnPtVs272+9qvQN+i4yOT3miUFiMB8GA1UdIwQY MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1 LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu+44YM6 HOeMEG5NHsYJpuqjR+p9hypWZaLvLWh3ayo8Ev/idyAFL+Ji4bE4poHMWmr1bNyZ ApX0gH8T+qs2QWN2hmosr01NdIBEK+modyif76pltzLCfjsSe9317Jo6HjniQSTK jaGYEAhKHhZ2ywf8dsIgh7WJcE1OJi9znKvBhcVjKsihQOBSqO0aSDcmqbp5D3y8 tfYj2Mg1Gvb/ztib60PXvY+5UInhf68+sAjvpBmwducVrqaOrS+HMvoBqigOpiC6 0v7CulGSQ76aoXIPPI8yII70CLL5+tA5StgVG63Xx54CbU8+tpQxnTvpHeyXAzFb U2/NvaGS/Ss/cg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:21 2025 by rpki-client