This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json) Hash identifier: +5zxUb1IR2ZPMAud8hVsQXZ/yYSpbNEfjUB6h2w5UI0= Subject key identifier: 39:A1:BB:CD:AB:F8:B8:22:44:DB:ED:81:5F:7D:56:2B:8D:25:DA:95 Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Certificate serial: 019B06D93C9A5270207354FC32C4EC01303E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft Manifest number: 147B Signing time: Wed 10 Dec 2025 06:00:58 +0000 Manifest this update: Wed 10 Dec 2025 06:00:58 +0000 Manifest next update: Thu 11 Dec 2025 06:00:58 +0000 Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=) 2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=) 3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 5Yvr3CRIAF3uazWwnsijDz++9MrtnRC5/RbLr4y+FCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:3c:9a:52:70:20:73:54:fc:32:c4:ec:01:30:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Validity Not Before: Dec 10 06:00:58 2025 GMT Not After : Dec 11 06:00:58 2025 GMT Subject: CN=39a1bbcdabf8b82244dbed815f7d562b8d25da95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:71:20:7f:35:51:d4:c3:af:27:8a:61:4b: 33:f7:39:5d:3d:c0:80:e8:bd:9c:75:a1:78:09:94: 8b:88:86:8f:92:7e:c5:94:45:4f:aa:a0:e3:10:8a: 48:e8:1b:36:6d:f3:99:1e:15:75:76:a3:8a:71:8a: ce:0b:c0:c1:a6:2e:8a:83:3e:a2:11:c9:7d:8c:a1: 37:36:9c:42:83:75:55:27:70:8e:0b:a6:83:08:3e: ef:c2:97:0e:c8:1a:29:71:c2:50:cb:47:d9:e2:3e: d6:8b:7f:62:e0:19:0c:90:07:b5:93:26:b7:b1:67: d6:71:2d:79:54:48:3d:da:ea:af:4e:ee:9f:f4:bd: 29:a2:91:a1:d8:d7:c1:ae:74:31:0d:82:9a:2a:01: d9:63:be:e0:4f:20:be:00:c2:79:83:5c:14:5b:fe: 0c:d6:34:bc:71:26:1b:e5:01:89:54:92:28:d3:cd: 6d:32:ad:79:f2:b1:5f:d3:8a:f5:b5:c0:f8:e1:1d: ba:dc:87:a4:5c:1a:f6:92:70:76:1f:b5:ae:4b:d2: 3e:82:80:f7:96:98:87:aa:81:8b:13:a0:78:54:fa: 27:16:8a:15:22:96:8d:0c:2c:2f:3a:0b:b1:5e:57: 4c:f0:48:9d:ff:c5:e6:ac:fb:61:34:b0:bf:27:3c: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A1:BB:CD:AB:F8:B8:22:44:DB:ED:81:5F:7D:56:2B:8D:25:DA:95 X509v3 Authority Key Identifier: keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8c:cd:8a:26:2f:3b:2b:97:00:df:f8:02:7a:7e:3b:ed:33: 31:b6:b9:a9:fd:8b:08:c7:3d:37:0a:a9:84:53:a7:00:28:db: 64:79:63:87:17:6b:8c:6c:09:3f:aa:9b:79:94:7d:db:c4:be: 9d:e3:0f:51:11:63:08:7f:77:d7:0f:2d:04:90:fd:9e:46:c6: 6d:e2:27:a5:62:1b:75:26:da:a2:bc:4e:1d:dd:8f:8a:9a:70: 5b:24:12:20:f9:8e:6a:26:90:0e:7c:9a:78:d6:37:70:73:09: 87:3d:0c:7b:97:3e:67:b2:df:b2:b6:b8:0f:4b:88:6d:46:fd: 68:12:82:39:eb:39:7c:48:3b:18:9d:bf:05:7b:1b:2b:28:7c: 2e:58:97:26:1d:df:fd:ce:07:a5:8b:aa:4b:71:99:20:8d:c9: 6e:0e:14:ca:33:ac:8b:d1:7e:b4:e4:17:36:c8:84:5a:67:24: 52:90:3e:80:d2:0a:e3:29:35:70:57:88:5a:c4:5f:a8:f3:b5: 90:2d:14:3a:92:86:f0:1b:3a:4d:65:5f:d9:71:3f:ca:1e:ad: 7a:74:51:d0:c1:ff:0a:08:0f:19:58:a4:ad:f0:99:71:21:85: 36:1a:df:ec:c9:68:eb:e9:4f:de:a7:ff:75:fd:fc:29:63:7e: b1:ec:cb:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2TyaUnAgc1T8MsTsATA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3 MDBjN2MwHhcNMjUxMjEwMDYwMDU4WhcNMjUxMjExMDYwMDU4WjAzMTEwLwYDVQQD EygzOWExYmJjZGFiZjhiODIyNDRkYmVkODE1ZjdkNTYyYjhkMjVkYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydxIH81UdTDryeKYUsz9zldPcCA 6L2cdaF4CZSLiIaPkn7FlEVPqqDjEIpI6Bs2bfOZHhV1dqOKcYrOC8DBpi6Kgz6i Ecl9jKE3NpxCg3VVJ3COC6aDCD7vwpcOyBopccJQy0fZ4j7Wi39i4BkMkAe1kya3 sWfWcS15VEg92uqvTu6f9L0popGh2NfBrnQxDYKaKgHZY77gTyC+AMJ5g1wUW/4M 1jS8cSYb5QGJVJIo081tMq158rFf04r1tcD44R263IekXBr2knB2H7WuS9I+goD3 lpiHqoGLE6B4VPonFooVIpaNDCwvOguxXldM8Eid/8XmrPthNLC/JzzerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmhu82r+LgiRNvtgV99ViuNJdqVMB8GA1UdIwQY MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4zNiiYv OyuXAN/4Anp+O+0zMba5qf2LCMc9NwqphFOnACjbZHljhxdrjGwJP6qbeZR928S+ neMPURFjCH931w8tBJD9nkbGbeInpWIbdSbaorxOHd2PippwWyQSIPmOaiaQDnya eNY3cHMJhz0Me5c+Z7Lfsra4D0uIbUb9aBKCOes5fEg7GJ2/BXsbKyh8LliXJh3f /c4HpYuqS3GZII3Jbg4UyjOsi9F+tOQXNsiEWmckUpA+gNIK4yk1cFeIWsRfqPO1 kC0UOpKG8Bs6TWVf2XE/yh6tenRR0MH/CggPGVikrfCZcSGFNhrf7Mlo6+lP3qf/ df38KWN+sezLLQ== -----END CERTIFICATE-----Generated at Wed Dec 10 13:32:35 2025 by rpki-client