This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json) Hash identifier: HuFi5/XqbmbMuQhz0bmPMxPudYaGqyZbvy3n1Na70qQ= Subject key identifier: 30:8E:5E:AD:18:FD:10:1B:49:53:10:86:D3:6E:CD:22:7B:46:20:BF Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Certificate serial: 019AF0BF31ADA02F87F302EF399ECBADCEF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft Manifest number: 1643 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=) 2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: V50WNVkqqAy3zOMHETfUkHKH9C1LmXkaWv5Gqitj91c=) 3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:31:ad:a0:2f:87:f3:02:ef:39:9e:cb:ad:ce:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=308e5ead18fd101b49531086d36ecd227b4620bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:20:45:d6:40:f0:36:2e:5b:8e:e4:58:9b: bf:09:b3:04:4a:0a:45:16:6d:1d:d6:32:6c:3e:92: da:ed:e1:fb:07:42:cf:9b:ef:20:d6:d9:60:ec:63: e9:dd:c1:bf:49:72:aa:cc:6e:9e:59:5c:29:13:09: 36:50:a3:27:82:67:5b:02:b2:ed:7c:d9:ab:59:ab: 2d:d4:d4:00:36:4d:f6:84:90:90:61:c1:04:10:e2: 54:a8:79:c4:9f:58:0d:8c:13:22:14:1f:a3:78:5b: 8e:b0:3c:b5:54:8d:c8:4c:ab:f9:84:24:9c:a9:d5: d4:b0:5c:7a:76:33:a7:48:e9:9d:68:1e:f5:68:c0: 1a:63:a0:6a:f5:6a:e3:6b:fa:20:fb:c7:c6:9c:99: e1:b6:2b:ef:d0:85:5d:7e:17:48:58:9f:cb:0c:f2: 9c:a9:67:ec:c9:01:8b:36:aa:6c:e2:29:8b:6e:2c: 4c:ff:40:ce:36:7c:fe:2f:33:0f:bd:b0:23:a2:b9: d6:b6:3e:77:59:76:49:1a:99:c4:68:f6:08:9a:92: da:c8:b4:d8:fa:20:bd:fa:9a:99:27:54:6e:85:ce: e6:1f:0e:32:f6:ad:08:1f:af:d2:9c:02:d8:b4:f7: 2c:b0:f7:39:bd:b3:47:db:9a:72:6f:62:af:b1:93: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:5E:AD:18:FD:10:1B:49:53:10:86:D3:6E:CD:22:7B:46:20:BF X509v3 Authority Key Identifier: keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b6:7e:20:57:eb:6a:d4:73:d7:a5:f7:75:66:97:d6:6d:d9: d4:ab:f1:77:64:5a:54:31:a8:64:31:f9:51:1f:ed:8a:5b:75: 2f:88:b8:65:9f:a2:18:fc:5f:1f:9f:22:00:3b:15:c0:8c:bb: 08:1f:ac:a0:ce:18:be:eb:0f:75:83:5a:d6:99:8e:70:68:27: 2b:d1:48:85:8b:f5:9f:68:35:8a:f2:9f:2b:9d:84:b0:85:a4: ef:93:6f:ae:b6:57:9f:07:ad:3e:a3:63:13:19:0a:d7:b1:24: a9:b6:0e:21:4a:09:9f:a3:62:b3:d0:c4:37:19:40:13:fd:31: 0e:ba:f8:8d:7a:51:88:7a:d0:e2:53:ac:89:6b:a9:c4:7b:ed: 7a:23:ac:1a:73:bd:3d:d0:d5:15:e5:1c:2f:1c:9a:18:1d:67: 2f:c2:bf:d0:d4:d8:a2:69:c0:64:bf:48:8e:b9:1d:de:45:2e: 95:ab:c8:d3:77:3b:fc:ed:0d:e8:92:32:0b:06:fd:af:dc:4e: 0d:7d:d7:7b:35:ac:1e:05:a3:49:48:a5:66:f0:3c:6e:d7:2a: 5c:f1:6c:b7:f4:0e:89:bb:fb:43:65:c7:8c:4c:08:de:10:4a: e2:02:3b:a1:a0:c6:05:d3:6c:67:80:2d:7c:dc:eb:5c:a2:32: 67:a1:20:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzGtoC+H8wLvOZ7Lrc75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0 ODU3YzYwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygzMDhlNWVhZDE4ZmQxMDFiNDk1MzEwODZkMzZlY2QyMjdiNDYyMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVsgRdZA8DYuW47kWJu/CbMESgpF Fm0d1jJsPpLa7eH7B0LPm+8g1tlg7GPp3cG/SXKqzG6eWVwpEwk2UKMngmdbArLt fNmrWast1NQANk32hJCQYcEEEOJUqHnEn1gNjBMiFB+jeFuOsDy1VI3ITKv5hCSc qdXUsFx6djOnSOmdaB71aMAaY6Bq9Wrja/og+8fGnJnhtivv0IVdfhdIWJ/LDPKc qWfsyQGLNqps4imLbixM/0DONnz+LzMPvbAjornWtj53WXZJGpnEaPYImpLayLTY +iC9+pqZJ1Ruhc7mHw4y9q0IH6/SnALYtPcssPc5vbNH25pyb2KvsZPf7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCOXq0Y/RAbSVMQhtNuzSJ7RiC/MB8GA1UdIwQY MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0 LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLZ+IFfr atRz16X3dWaX1m3Z1Kvxd2RaVDGoZDH5UR/tilt1L4i4ZZ+iGPxfH58iADsVwIy7 CB+soM4YvusPdYNa1pmOcGgnK9FIhYv1n2g1ivKfK52EsIWk75NvrrZXnwetPqNj ExkK17EkqbYOIUoJn6Nis9DENxlAE/0xDrr4jXpRiHrQ4lOsiWupxHvteiOsGnO9 PdDVFeUcLxyaGB1nL8K/0NTYomnAZL9Ijrkd3kUulavI03c7/O0N6JIyCwb9r9xO DX3XezWsHgWjSUilZvA8btcqXPFst/QOibv7Q2XHjEwI3hBK4gI7oaDGBdNsZ4At fNzrXKIyZ6EgWA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:49 2025 by rpki-client