This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json) Hash identifier: roBdzUpz/pk7zNc9ri1CXC410/C+0KWfLg1kcg9T77k= Subject key identifier: 5E:63:A9:D0:4C:C6:28:25:9D:0B:11:CC:CD:97:36:BB:22:52:CA:A9 Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019AF42DCC4A708B94099B4CD9D8D7E767E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft Manifest number: 0BDC Signing time: Sat 06 Dec 2025 15:00:33 +0000 Manifest this update: Sat 06 Dec 2025 15:00:33 +0000 Manifest next update: Sun 07 Dec 2025 15:00:33 +0000 Files and hashes: 1: ITb_XVl2tA11J6nAknkJ07xuM_A.roa (hash: Te0z4RiC3nV17xojwnpgYVjVq9us6VbZr6q0RMM9u2o=) 2: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: HHOUY3HmUlCzAWsPwYC7lMyfwvIiOd2eK4pOYxTmYIY=) 3: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=) 4: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (hash: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:cc:4a:70:8b:94:09:9b:4c:d9:d8:d7:e7:67:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Dec 6 15:00:33 2025 GMT Not After : Dec 7 15:00:33 2025 GMT Subject: CN=5e63a9d04cc628259d0b11cccd9736bb2252caa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:b1:40:21:86:c3:e7:8b:92:b0:71:dd:cb: fc:47:16:51:1c:41:70:a3:34:d3:f6:b9:43:ff:52: 13:8f:04:b1:aa:6f:9f:0a:99:7e:39:62:9d:c9:87: cb:2c:6b:cb:b7:ab:3d:5c:85:5a:e0:03:c3:4d:f3: c7:a6:d2:ad:ce:80:78:58:9b:81:fc:78:a9:ab:44: b9:45:47:0f:0a:5b:18:fa:8f:c2:bb:6f:8b:c8:17: 5f:89:c4:df:06:cc:59:0d:91:29:f7:84:c5:a4:ed: bc:0d:95:24:91:9b:5e:5c:02:3c:21:8d:2c:9b:0b: 65:44:ab:2e:6c:f6:57:e5:bb:84:aa:93:e0:d4:40: df:ef:07:2e:e9:2b:96:5c:87:19:e4:5a:09:08:0e: 3c:0b:f1:46:d4:1d:14:ef:88:01:36:3b:10:aa:38: ae:21:fd:ff:3f:b6:ea:b1:eb:1c:be:76:5d:d3:17: c9:00:57:44:ba:97:db:9e:08:73:54:8f:57:29:42: 39:7b:3a:c9:7f:b1:62:5d:cd:40:5a:bb:23:7d:08: 0e:89:d7:26:97:2a:85:22:21:22:80:69:1f:a3:8c: db:07:5e:d8:1d:50:ad:a6:35:4b:15:60:c3:d0:ff: 0b:55:9b:6b:da:1a:19:9b:c7:0c:3a:5f:d6:97:ec: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:A9:D0:4C:C6:28:25:9D:0B:11:CC:CD:97:36:BB:22:52:CA:A9 X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:28:59:5f:59:66:38:8a:d2:f9:ba:da:95:d0:e9:0d:3a: 66:9a:2b:b1:44:07:27:70:f3:02:92:c6:59:69:ad:55:d4:77: 60:66:e3:c5:03:96:1c:ee:6f:ea:7b:71:7a:82:e3:0e:bb:24: 9d:16:fe:b6:a6:a0:f5:d0:c9:71:40:12:68:1f:19:af:2d:35: 16:12:51:d8:01:8d:4a:ea:ea:e4:46:cc:4e:23:fd:30:28:cb: 54:70:31:0c:de:31:16:33:e2:c4:cd:b8:80:d3:b6:26:2f:08: d2:f9:3b:c7:bc:0a:97:08:ec:a7:91:11:c8:73:a8:0f:38:69: ee:8e:f2:42:1f:b8:b9:02:65:30:fc:7e:97:3d:1c:96:60:b5: 54:ca:5b:aa:ba:ef:ba:50:41:6a:18:99:63:4b:df:88:03:e3: b7:ba:5d:c7:16:a1:4d:a7:25:57:a2:fa:a2:e4:a0:77:49:f3: 09:43:02:c3:e1:3c:47:6b:52:10:f8:74:c1:f9:5f:7b:c5:b5: 56:bc:00:5f:3a:6f:0c:ee:56:30:b2:35:67:a8:84:65:35:51: 6b:8b:0f:5d:25:66:dc:d8:c2:21:54:8a:29:97:65:7d:4a:2e: 84:24:79:47:a2:9c:5c:fe:39:0e:a1:c7:d3:2d:b2:3f:9f:20: f6:15:00:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcxKcIuUCZtM2djX52fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjUxMjA2MTUwMDMzWhcNMjUxMjA3MTUwMDMzWjAzMTEwLwYDVQQD Eyg1ZTYzYTlkMDRjYzYyODI1OWQwYjExY2NjZDk3MzZiYjIyNTJjYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1GxQCGGw+eLkrBx3cv8RxZRHEFw ozTT9rlD/1ITjwSxqm+fCpl+OWKdyYfLLGvLt6s9XIVa4APDTfPHptKtzoB4WJuB /Hipq0S5RUcPClsY+o/Cu2+LyBdficTfBsxZDZEp94TFpO28DZUkkZteXAI8IY0s mwtlRKsubPZX5buEqpPg1EDf7wcu6SuWXIcZ5FoJCA48C/FG1B0U74gBNjsQqjiu If3/P7bqsescvnZd0xfJAFdEupfbnghzVI9XKUI5ezrJf7FiXc1AWrsjfQgOidcm lyqFIiEigGkfo4zbB17YHVCtpjVLFWDD0P8LVZtr2hoZm8cMOl/Wl+yZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5jqdBMxiglnQsRzM2XNrsiUsqpMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVokoWV9Z ZjiK0vm62pXQ6Q06ZporsUQHJ3DzApLGWWmtVdR3YGbjxQOWHO5v6ntxeoLjDrsk nRb+tqag9dDJcUASaB8Zry01FhJR2AGNSurq5EbMTiP9MCjLVHAxDN4xFjPixM24 gNO2Ji8I0vk7x7wKlwjsp5ERyHOoDzhp7o7yQh+4uQJlMPx+lz0clmC1VMpbqrrv ulBBahiZY0vfiAPjt7pdxxahTaclV6L6ouSgd0nzCUMCw+E8R2tSEPh0wflfe8W1 VrwAXzpvDO5WMLI1Z6iEZTVRa4sPXSVm3NjCIVSKKZdlfUouhCR5R6KcXP45DqHH 0y2yP58g9hUAiA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:13 2025 by rpki-client