This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json) Hash identifier: gVSf3rOToy5RgK/dz8SkXC8pbHf3M6azVtXB4oSTR9k= Subject key identifier: 0A:65:DF:2E:9D:1E:86:FF:A2:84:56:75:3B:CF:CA:90:63:F2:DE:12 Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08 Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08 Certificate serial: 019AF540852EFED10B306CEEEBD9FDB8CC13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft Manifest number: 11F2 Signing time: Sat 06 Dec 2025 20:00:37 +0000 Manifest this update: Sat 06 Dec 2025 20:00:37 +0000 Manifest next update: Sun 07 Dec 2025 20:00:37 +0000 Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: 39kt3quY+TILk6lFpuS1CAPhhk8hUlWb47gnXZeffw4=) 2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:85:2e:fe:d1:0b:30:6c:ee:eb:d9:fd:b8:cc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08 Validity Not Before: Dec 6 20:00:37 2025 GMT Not After : Dec 7 20:00:37 2025 GMT Subject: CN=0a65df2e9d1e86ffa28456753bcfca9063f2de12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:9b:9f:c3:8f:dc:08:07:20:06:5b:2e:eb: ae:1e:2b:88:ab:d7:5c:3d:7d:85:ad:a1:de:3a:9c: 99:a0:c7:88:a2:30:f9:67:ba:7f:c2:cd:e4:6d:86: 27:82:6f:66:83:e7:73:f1:b7:01:bb:d4:96:62:bf: 76:f4:80:cf:66:e1:4d:5e:fc:01:e3:1a:7f:0b:ed: 11:44:3a:bd:b6:26:98:d4:54:cd:d3:6f:b7:3d:73: f0:c4:61:96:f3:98:4e:13:7e:64:1f:3e:4e:fe:f2: 03:5a:87:bd:56:b1:18:73:3f:ad:cd:7e:c8:3f:1d: 0d:82:98:71:a3:a8:db:d9:ca:f6:5b:3a:85:63:ab: 3a:4e:dd:7d:18:06:52:fd:f5:21:57:de:01:4b:26: ba:dc:5e:31:49:ad:4c:af:7f:b7:db:8b:30:68:9c: 0b:d1:da:bf:a8:9b:08:24:9c:d3:f9:ad:6e:b0:9a: 60:0f:1c:6c:a7:28:35:ef:fc:99:37:06:88:6e:e3: 4c:e5:02:c7:3c:5c:7f:2e:2d:d1:5d:0b:fd:f7:dd: 36:41:b0:ef:55:d2:8b:2e:37:14:d0:0d:a6:e0:95: 30:c9:2b:37:37:8d:ff:5e:b0:46:ac:23:e4:62:42: 2b:3d:d1:94:56:16:57:8e:95:76:1a:53:28:43:67: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:65:DF:2E:9D:1E:86:FF:A2:84:56:75:3B:CF:CA:90:63:F2:DE:12 X509v3 Authority Key Identifier: keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:db:12:13:e0:09:c3:00:52:fc:50:e2:86:df:81:96:b4:df: 13:97:9d:12:68:55:6e:cb:69:56:03:3c:ca:85:5f:34:b7:a3: 01:0b:7c:79:0d:8d:f5:88:ae:fc:ae:a9:16:b9:8e:fa:e7:28: f7:4c:12:d8:b7:ef:ae:b4:1d:5c:8d:f3:24:39:c0:b9:96:8e: 27:3f:64:64:f7:86:b7:60:a3:3b:5b:12:fb:8f:fb:15:91:52: 98:3b:b9:14:55:3c:c8:c3:24:75:67:c2:c6:eb:6a:05:30:53: 04:cb:51:01:58:5b:45:bb:cd:89:0f:b9:dd:a1:ba:48:c8:56: 7d:6d:7a:df:fa:25:99:2d:d8:47:97:72:74:9e:be:c3:60:95: f3:e7:09:30:b4:3b:c9:fe:37:d3:75:bd:bd:5f:c5:21:6d:ba: b8:f8:23:df:92:41:92:d6:77:84:61:07:54:10:76:c1:64:ee: 7a:ee:d7:c3:02:8f:66:a7:93:44:74:54:d4:56:2b:5e:b0:62: 40:dc:5a:fe:23:c0:b7:77:43:f1:6b:70:77:12:35:86:5c:ff: 53:39:b1:89:d4:28:73:aa:d0:8f:8e:d6:be:c3:75:fa:47:5f: 08:2c:da:1f:fd:55:ad:a4:1a:98:05:35:14:58:22:ed:b6:85: 1e:ec:39:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIUu/tELMGzu69n9uMwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTlhZWI0MjZjMjhhMzQ4MDg3NzZmOTU2ODkzNWQzYjll YzllMDgwHhcNMjUxMjA2MjAwMDM3WhcNMjUxMjA3MjAwMDM3WjAzMTEwLwYDVQQD EygwYTY1ZGYyZTlkMWU4NmZmYTI4NDU2NzUzYmNmY2E5MDYzZjJkZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRibn8OP3AgHIAZbLuuuHiuIq9dc PX2FraHeOpyZoMeIojD5Z7p/ws3kbYYngm9mg+dz8bcBu9SWYr929IDPZuFNXvwB 4xp/C+0RRDq9tiaY1FTN02+3PXPwxGGW85hOE35kHz5O/vIDWoe9VrEYcz+tzX7I Px0Ngphxo6jb2cr2WzqFY6s6Tt19GAZS/fUhV94BSya63F4xSa1Mr3+324swaJwL 0dq/qJsIJJzT+a1usJpgDxxspyg17/yZNwaIbuNM5QLHPFx/Li3RXQv99902QbDv VdKLLjcU0A2m4JUwySs3N43/XrBGrCPkYkIrPdGUVhZXjpV2GlMoQ2d5dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApl3y6dHob/ooRWdTvPypBj8t4SMB8GA1UdIwQY MBaAFI+prrQmwoo0gId2+VaJNdO57J4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYt MzU5Zjc5MzYxZTk5LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYtMzU5Zjc5MzYxZTk5 LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNsSE+AJ wwBS/FDiht+BlrTfE5edEmhVbstpVgM8yoVfNLejAQt8eQ2N9Yiu/K6pFrmO+uco 90wS2LfvrrQdXI3zJDnAuZaOJz9kZPeGt2CjO1sS+4/7FZFSmDu5FFU8yMMkdWfC xutqBTBTBMtRAVhbRbvNiQ+53aG6SMhWfW163/olmS3YR5dydJ6+w2CV8+cJMLQ7 yf4303W9vV/FIW26uPgj35JBktZ3hGEHVBB2wWTueu7XwwKPZqeTRHRU1FYrXrBi QNxa/iPAt3dD8WtwdxI1hlz/UzmxidQoc6rQj47WvsN1+kdfCCzaH/1VraQamAU1 FFgi7baFHuw5GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:50 2025 by rpki-client