This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json) Hash identifier: mFi31IKKav6MiXcowaieHoJJklpzsNgG/Pnq2oB4UkY= Subject key identifier: B0:01:6F:D7:E6:FA:B4:7B:49:3D:70:A6:ED:3C:0E:B2:4F:53:35:28 Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Certificate serial: 019B0C36F3EC82C74606C8458BAAF1D784C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft Manifest number: 1263 Signing time: Thu 11 Dec 2025 07:01:26 +0000 Manifest this update: Thu 11 Dec 2025 07:01:26 +0000 Manifest next update: Fri 12 Dec 2025 07:01:26 +0000 Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=) 2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: 0DG6OABtB0U/Ye9DZptD23iMo4waFZtfrexOWWmWXAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:36:f3:ec:82:c7:46:06:c8:45:8b:aa:f1:d7:84:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548 Validity Not Before: Dec 11 07:01:26 2025 GMT Not After : Dec 12 07:01:26 2025 GMT Subject: CN=b0016fd7e6fab47b493d70a6ed3c0eb24f533528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:f2:b8:65:03:80:64:6b:66:8f:6b:ab:1f: 78:f3:8e:21:c9:c0:1f:e7:f2:3a:af:b6:ac:b0:a8: 5b:d2:37:96:38:a2:03:8d:3c:eb:f9:b9:d0:7a:95: 8b:37:e2:25:a2:f3:2d:de:7e:55:ad:0b:de:de:63: 5a:eb:94:f0:1e:e8:c5:67:80:b9:9b:0e:04:aa:b3: 8c:ae:19:bc:dc:40:c3:c0:07:5b:af:b4:38:5e:79: e4:90:7e:5d:7e:87:35:ce:d5:2c:61:fb:a0:09:73: 94:27:54:f6:1a:ca:3a:fa:94:c6:74:a3:67:7b:f8: 57:cb:a8:b5:83:0d:1e:44:8e:cf:a5:2b:5c:e7:0a: d7:80:08:b7:56:4e:96:05:11:97:25:39:86:38:ef: 01:b0:48:23:39:66:b9:9a:b1:42:aa:29:f3:f4:82: 87:54:59:5f:bc:9a:04:7a:06:b2:6b:6d:6a:2e:3a: c5:4e:58:34:1d:32:ae:bf:57:29:3a:ce:39:fc:8b: 3e:51:ce:31:0c:fb:03:4e:12:2e:cb:5a:19:5f:85: 4c:f9:57:51:dc:96:5b:7e:69:3c:16:97:72:63:5b: b5:fb:f1:c0:f3:a5:ff:d3:9a:74:3f:6d:f7:c9:0a: c8:82:57:f6:d1:58:ef:9e:5d:10:2a:eb:34:25:ae: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:6F:D7:E6:FA:B4:7B:49:3D:70:A6:ED:3C:0E:B2:4F:53:35:28 X509v3 Authority Key Identifier: keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:34:9f:cd:a4:84:cd:3b:ca:2f:37:da:5e:93:b8:e2:a7:06: 1c:2d:fd:6c:64:57:4e:a6:d7:cb:d2:0b:2f:74:bd:1b:1f:ae: 50:54:d5:a1:64:61:ca:f0:cc:98:07:ae:f1:c7:7a:0f:76:5f: e9:76:8e:ac:31:09:34:5c:0d:27:bd:66:3b:37:42:83:70:63: 14:bc:c4:e9:60:06:5d:7b:12:f1:d7:a9:61:84:49:27:c4:87: 08:0a:91:3c:55:11:f6:c0:d7:df:1c:a8:f2:b0:ae:10:c4:55: a4:40:e6:25:5f:26:70:fc:8c:26:75:11:ef:6c:7b:c6:56:d8: 49:45:dd:bf:41:0f:37:cd:87:67:4a:7e:df:c0:2a:8d:2e:21: c6:60:7c:26:53:67:4f:a2:3b:4e:15:fc:3d:83:3a:fc:30:d1: dc:92:f9:df:90:73:7b:07:d3:b3:6a:33:c3:ce:5a:d0:0b:d9: 0d:e4:fe:cb:aa:89:1c:a9:85:a4:3e:06:16:3b:0a:87:0a:85: e1:33:48:68:83:52:ae:80:31:ef:0f:e7:46:91:15:be:6f:6f: c4:67:aa:59:98:0f:b9:ff:c4:39:0c:65:1f:78:81:78:fe:0d: 77:41:f0:be:16:83:a8:2c:72:98:64:4a:7d:e8:7b:d9:77:f0: dd:df:f0:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNvPsgsdGBshFi6rx14TFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh OGY1NDgwHhcNMjUxMjExMDcwMTI2WhcNMjUxMjEyMDcwMTI2WjAzMTEwLwYDVQQD EyhiMDAxNmZkN2U2ZmFiNDdiNDkzZDcwYTZlZDNjMGViMjRmNTMzNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnLyuGUDgGRrZo9rqx94844hycAf 5/I6r7assKhb0jeWOKIDjTzr+bnQepWLN+IlovMt3n5VrQve3mNa65TwHujFZ4C5 mw4EqrOMrhm83EDDwAdbr7Q4XnnkkH5dfoc1ztUsYfugCXOUJ1T2Gso6+pTGdKNn e/hXy6i1gw0eRI7PpStc5wrXgAi3Vk6WBRGXJTmGOO8BsEgjOWa5mrFCqinz9IKH VFlfvJoEegaya21qLjrFTlg0HTKuv1cpOs45/Is+Uc4xDPsDThIuy1oZX4VM+VdR 3JZbfmk8FpdyY1u1+/HA86X/05p0P233yQrIglf20Vjvnl0QKus0Ja6VpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLABb9fm+rR7ST1wpu08DrJPUzUoMB8GA1UdIwQY MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejSfzaSE zTvKLzfaXpO44qcGHC39bGRXTqbXy9ILL3S9Gx+uUFTVoWRhyvDMmAeu8cd6D3Zf 6XaOrDEJNFwNJ71mOzdCg3BjFLzE6WAGXXsS8depYYRJJ8SHCAqRPFUR9sDX3xyo 8rCuEMRVpEDmJV8mcPyMJnUR72x7xlbYSUXdv0EPN82HZ0p+38AqjS4hxmB8JlNn T6I7ThX8PYM6/DDR3JL535BzewfTs2ozw85a0AvZDeT+y6qJHKmFpD4GFjsKhwqF 4TNIaINSroAx7w/nRpEVvm9vxGeqWZgPuf/EOQxlH3iBeP4Nd0HwvhaDqCxymGRK feh72Xfw3d/wSw== -----END CERTIFICATE-----Generated at Thu Dec 11 15:08:37 2025 by rpki-client