This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json) Hash identifier: mJOvKT5ULRfhmbS0FScIwulLkGT8p7u15AqXMJ65YLI= Subject key identifier: ED:4A:1C:3B:44:25:2F:6F:22:F1:8B:BA:03:B7:4C:44:03:B4:2F:8E Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Certificate serial: 019AF27672C49EE4A5F7F6990BE5485CE14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=) 2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: v3CtP5l26TbYABsdztST4TcyuDhgdqbFvHfulkPP0No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:72:c4:9e:e4:a5:f7:f6:99:0b:e5:48:5c:e1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=ed4a1c3b44252f6f22f18bba03b74c4403b42f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2d:5b:77:22:97:7b:46:22:71:b8:e4:4c:ca: 6e:20:d0:37:b4:1d:a1:b5:83:80:eb:ee:2f:84:ea: be:67:87:77:30:e5:be:01:8a:b4:46:5b:0c:83:a6: 80:13:e5:8f:3a:8a:19:bf:3e:50:ec:b2:39:a0:61: 17:39:e5:55:b4:69:93:ed:14:22:60:37:21:ef:d2: 86:40:70:60:8f:49:a7:ad:f8:ed:49:cd:0a:98:51: ec:23:4f:fc:11:88:fc:dc:76:f1:1e:51:4a:b9:2b: 71:29:d5:8e:54:48:85:41:17:11:1f:2f:ed:d8:09: 1e:4a:84:ef:a4:4e:3a:0e:72:e6:49:f5:90:b0:ba: 92:cd:83:55:f6:d6:cf:dc:b1:7e:e2:a6:bd:f0:b5: 32:33:6d:9f:18:f9:a2:de:0c:84:9f:91:42:fc:c8: 12:5c:2d:e7:79:56:df:c8:75:f0:52:39:26:74:e0: 76:d2:9e:f1:ca:15:00:e0:db:4b:ed:62:37:90:ec: 0a:0e:2c:c0:0b:26:f6:9a:b5:e7:8a:75:8c:73:a1: d9:2c:da:62:3c:63:46:df:d5:bc:a5:e2:73:a3:77: aa:8b:23:86:89:84:a1:3f:d1:48:91:ab:be:f0:bc: 74:1c:62:4d:52:dd:f4:34:5f:73:8b:e6:81:d6:f6: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:1C:3B:44:25:2F:6F:22:F1:8B:BA:03:B7:4C:44:03:B4:2F:8E X509v3 Authority Key Identifier: keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c7:09:3e:c2:b1:39:b6:9f:ae:c1:2b:c1:00:81:b2:ae:76: 1f:47:7f:e6:04:70:89:8b:b5:6e:c9:69:31:dd:bf:8a:ca:e8: 14:dc:95:76:e7:70:bc:10:f4:2f:2f:da:81:d9:a6:bd:0a:64: 1c:c9:6e:c1:46:f5:3f:7c:f4:81:05:43:10:0c:4a:e1:ff:59: c9:bc:ba:8f:dd:fd:06:43:00:74:1d:bd:7c:3a:d5:8a:ee:34: ec:d8:1f:fb:21:0f:bb:73:b0:ff:f1:c0:80:89:2c:8c:45:3e: 2e:a5:e3:68:5e:e8:8e:98:22:30:2d:6d:ea:0d:66:f9:c5:4d: 3d:19:7b:30:f7:f5:fd:fe:fe:08:fe:9b:ee:69:a1:df:da:b3: 0d:2b:c5:01:51:93:78:18:a1:14:f5:62:7b:77:63:c5:ae:d1: 04:5a:fb:63:0f:de:ff:14:d2:29:f4:81:9e:2f:1c:7b:50:e4: 20:e2:77:1b:e2:dd:18:a7:72:03:4c:a2:74:f8:16:5f:14:12: 77:20:be:9f:a8:35:6e:3b:19:43:1a:1e:50:f4:11:ca:7d:33: e7:63:f3:74:12:9a:e0:83:8c:b4:0e:f6:4e:7e:64:13:96:b7: 10:fb:13:a5:7e:b4:a7:f8:5b:4a:61:5d:cf:83:7d:70:77:f4: 11:0b:5f:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnLEnuSl9/aZC+VIXOFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNmQ3NWI0ZTQ5ODZmYWNjYjYxNGIzMzRlNDVkNWUwMzkz NTJhOWMwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EyhlZDRhMWMzYjQ0MjUyZjZmMjJmMThiYmEwM2I3NGM0NDAzYjQyZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C1bdyKXe0YicbjkTMpuINA3tB2h tYOA6+4vhOq+Z4d3MOW+AYq0RlsMg6aAE+WPOooZvz5Q7LI5oGEXOeVVtGmT7RQi YDch79KGQHBgj0mnrfjtSc0KmFHsI0/8EYj83HbxHlFKuStxKdWOVEiFQRcRHy/t 2AkeSoTvpE46DnLmSfWQsLqSzYNV9tbP3LF+4qa98LUyM22fGPmi3gyEn5FC/MgS XC3neVbfyHXwUjkmdOB20p7xyhUA4NtL7WI3kOwKDizACyb2mrXninWMc6HZLNpi PGNG39W8peJzo3eqiyOGiYShP9FIkau+8Lx0HGJNUt30NF9zi+aB1vaUpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1KHDtEJS9vIvGLugO3TEQDtC+OMB8GA1UdIwQY MBaAFI5tdbTkmG+sy2FLM05F1eA5NSqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDIt NmQ3NjAyZDI0YzgzLzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDItNmQ3NjAyZDI0Yzgz LzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWccJPsKx ObafrsErwQCBsq52H0d/5gRwiYu1bslpMd2/isroFNyVdudwvBD0Ly/agdmmvQpk HMluwUb1P3z0gQVDEAxK4f9Zyby6j939BkMAdB29fDrViu407Ngf+yEPu3Ow//HA gIksjEU+LqXjaF7ojpgiMC1t6g1m+cVNPRl7MPf1/f7+CP6b7mmh39qzDSvFAVGT eBihFPVie3djxa7RBFr7Yw/e/xTSKfSBni8ce1DkIOJ3G+LdGKdyA0yidPgWXxQS dyC+n6g1bjsZQxoeUPQRyn0z52PzdBKa4IOMtA72Tn5kE5a3EPsTpX60p/hbSmFd z4N9cHf0EQtfjg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:26 2025 by rpki-client