This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json) Hash identifier: /cbz22/kvcdnehZF27PWyQYyBlEdjteVe6nDbOo1/g4= Subject key identifier: AE:94:FF:10:1E:E8:57:08:11:E4:6C:38:AD:EC:5C:BC:21:F9:1F:60 Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Certificate serial: 019AF12CBC717529949FA603EC20465B05F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: JW/ChOA8TeJ6/OmAHIHTeO8hyO0qTb56Sb9pMWnpp8A=) 2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bc:71:75:29:94:9f:a6:03:ec:20:46:5b:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=ae94ff101ee8570811e46c38adec5cbc21f91f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:4f:aa:50:99:24:9d:d8:c0:34:fd:85:80: b9:02:02:01:f0:78:02:13:3a:4e:51:35:33:49:ba: b7:86:ac:37:dc:cc:61:bb:6c:de:8a:a4:e2:1c:e9: 08:53:ae:00:30:1e:11:19:33:7f:c5:13:8c:d7:11: b1:bf:c5:1f:74:28:79:7a:a1:a5:4a:2e:cf:4b:f1: 25:21:59:37:59:79:a9:d1:49:e2:ca:d3:69:fa:ad: 5d:0d:0b:bc:97:92:7e:69:ad:e4:44:c3:ff:07:23: aa:7a:a6:2e:2b:9f:6a:35:71:25:ec:f8:30:c9:ff: 5e:e9:71:b9:59:13:c4:d4:5c:67:ce:3e:86:93:22: b0:3b:eb:ec:4a:d2:aa:22:d8:c1:bb:d6:0b:ea:16: 0a:9a:db:06:09:be:2d:bd:b0:59:43:e4:92:73:b1: 20:73:2c:e5:ff:6b:11:b5:27:47:10:df:ae:c5:89: de:66:e2:95:39:20:41:51:f5:0a:be:b1:36:78:b1: 52:a0:c5:c4:61:72:3f:14:07:ab:81:d6:fc:17:99: 4e:50:42:c9:d5:0b:1a:dd:ae:05:0d:b4:9a:a7:8f: e4:46:cf:e3:48:f4:5f:80:4d:10:c2:f6:09:5f:14: 08:54:d1:24:e8:ff:54:e7:9b:00:08:4e:03:ac:f2: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:FF:10:1E:E8:57:08:11:E4:6C:38:AD:EC:5C:BC:21:F9:1F:60 X509v3 Authority Key Identifier: keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6d:1d:0a:21:11:ae:01:9d:55:00:04:db:bd:4b:d8:3b:3a: 49:07:c3:36:bf:d9:39:06:7c:ba:42:31:88:af:a4:c8:54:2b: e3:3d:08:b2:1e:cb:0b:11:e5:ea:ff:cf:67:ef:5f:55:18:11: 3b:a1:7b:93:22:2e:0d:f7:e3:a2:8f:25:fd:01:c6:d1:3b:b1: 2c:e0:3e:59:de:33:e8:45:1d:4c:78:88:1b:bb:84:33:3f:36: 51:0b:89:01:ba:42:0c:c2:d9:73:8e:b8:87:6e:ac:10:c1:ad: 2d:c1:a0:82:45:e9:a4:a1:86:e2:02:0e:4e:d0:f2:23:21:f3: 91:20:57:41:e5:2a:c0:58:aa:79:bf:50:e9:46:e8:97:24:c8: 06:d6:ec:9a:87:03:a4:8c:3a:64:8f:36:e3:2e:90:49:d0:73: 3e:47:1c:4a:26:75:5d:08:33:15:21:e3:df:a1:c1:50:1d:6a: b6:23:0f:a8:27:6f:68:f6:90:90:40:77:06:ab:57:f8:43:d1: 77:37:91:2d:48:99:dd:bd:79:9f:fc:b3:ca:77:67:72:3b:84: b0:c8:eb:83:d2:20:85:b3:6d:e7:86:fd:40:a5:c3:47:6e:be: f6:b7:af:30:83:3c:2d:f7:fb:96:4e:49:7f:86:8d:b1:15:ea: d1:ea:8e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLxxdSmUn6YD7CBGWwX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmNiMzVjM2Y1NmIyNzk4ZmY2MWJkNGQ5YTVjZWQwZWUw MzlmYjAwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD EyhhZTk0ZmYxMDFlZTg1NzA4MTFlNDZjMzhhZGVjNWNiYzIxZjkxZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36BPqlCZJJ3YwDT9hYC5AgIB8HgC EzpOUTUzSbq3hqw33Mxhu2zeiqTiHOkIU64AMB4RGTN/xROM1xGxv8UfdCh5eqGl Si7PS/ElIVk3WXmp0UniytNp+q1dDQu8l5J+aa3kRMP/ByOqeqYuK59qNXEl7Pgw yf9e6XG5WRPE1Fxnzj6GkyKwO+vsStKqItjBu9YL6hYKmtsGCb4tvbBZQ+SSc7Eg cyzl/2sRtSdHEN+uxYneZuKVOSBBUfUKvrE2eLFSoMXEYXI/FAergdb8F5lOUELJ 1Qsa3a4FDbSap4/kRs/jSPRfgE0QwvYJXxQIVNEk6P9U55sACE4DrPLKlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6U/xAe6FcIEeRsOK3sXLwh+R9gMB8GA1UdIwQY MBaAFCUss1w/VrJ5j/Yb1NmlztDuA5+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMt NTZjNmExMDMxZGJiLzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMtNTZjNmExMDMxZGJi LzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG0dCiER rgGdVQAE271L2Ds6SQfDNr/ZOQZ8ukIxiK+kyFQr4z0Ish7LCxHl6v/PZ+9fVRgR O6F7kyIuDffjoo8l/QHG0TuxLOA+Wd4z6EUdTHiIG7uEMz82UQuJAbpCDMLZc464 h26sEMGtLcGggkXppKGG4gIOTtDyIyHzkSBXQeUqwFiqeb9Q6UbolyTIBtbsmocD pIw6ZI824y6QSdBzPkccSiZ1XQgzFSHj36HBUB1qtiMPqCdvaPaQkEB3BqtX+EPR dzeRLUiZ3b15n/yzyndncjuEsMjrg9IghbNt54b9QKXDR26+9revMIM8Lff7lk5J f4aNsRXq0eqOrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:51 2025 by rpki-client