This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json) Hash identifier: CFgQB1pbZWZjd23ziXScWXsUByNG7NHOpD4NhlcDGhU= Subject key identifier: C9:15:EC:44:F1:10:26:ED:92:E3:8C:6C:B6:4B:1D:F8:B4:9A:67:27 Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Certificate serial: 019B0DB7517B10E98A3E68E5D698FD2476B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft Manifest number: 05A5 Signing time: Thu 11 Dec 2025 14:01:16 +0000 Manifest this update: Thu 11 Dec 2025 14:01:16 +0000 Manifest next update: Fri 12 Dec 2025 14:01:16 +0000 Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: CLEEirfyXGk7BjqBWL5iI/afpfV7fF63+bkqyDpZcqg=) 2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=) 3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:51:7b:10:e9:8a:3e:68:e5:d6:98:fd:24:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7 Validity Not Before: Dec 11 14:01:16 2025 GMT Not After : Dec 12 14:01:16 2025 GMT Subject: CN=c915ec44f11026ed92e38c6cb64b1df8b49a6727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:aa:b4:66:99:de:da:9f:d2:b9:79:d5:50: 7d:1b:e0:29:42:00:95:93:07:bf:98:f5:31:1c:c6: 8d:db:24:93:47:6f:e0:37:db:3f:1e:d7:7f:7e:44: 9f:4b:67:10:ad:b6:e7:93:78:63:05:a3:f1:73:9b: 93:35:d0:0f:2f:b5:6f:d2:53:8f:5d:db:66:9b:69: a8:f6:c9:25:96:fb:62:a4:a5:d3:4c:3c:6d:a6:e4: a7:e1:b1:e3:50:f6:09:d2:bb:41:a1:3d:57:3f:a2: ab:87:fe:0e:c7:11:e8:10:3e:e9:78:81:94:33:ac: aa:b5:65:02:de:77:fc:6d:be:9a:e1:57:ed:df:f4: 1c:c4:55:95:83:d8:49:6b:bf:ab:5e:d6:36:68:0a: 9a:00:ae:98:2a:97:0a:eb:68:ad:b9:d3:09:2e:70: 42:c6:85:78:e0:ef:4a:d0:1a:0b:26:e2:ee:5e:ca: 84:7e:5d:0d:4f:14:cb:8e:af:88:20:39:85:99:2d: 92:14:55:77:c1:94:fd:e3:35:cb:83:11:4f:88:5d: 6f:82:11:0e:d4:b0:c5:b4:71:f8:55:2a:bc:4e:a7: 69:df:07:1b:92:26:51:c0:2a:94:a3:88:c6:7b:e6: 99:7f:8c:be:34:bb:1e:f0:9e:80:c0:6f:c2:fd:aa: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:EC:44:F1:10:26:ED:92:E3:8C:6C:B6:4B:1D:F8:B4:9A:67:27 X509v3 Authority Key Identifier: keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d0:fc:d7:c9:c0:eb:a2:45:3b:61:77:fa:ac:c6:da:b5:f9: 66:55:9a:ce:be:cb:06:d7:0e:4b:d2:ec:90:38:8d:ce:0d:10: 60:26:d3:52:b0:8d:7e:f5:a7:af:a3:d5:03:ec:0e:8c:b2:4d: 34:71:86:7e:23:2b:04:15:d5:15:98:35:0c:e0:8e:f2:6f:5e: 7f:6b:d4:34:25:00:8d:19:d9:83:58:ec:bb:8b:61:4b:7c:59: 4e:44:92:ed:ef:da:29:34:2c:40:30:24:fd:5b:d8:8a:6b:1e: b1:23:48:84:58:55:3c:a8:ad:0b:7d:c8:d5:ea:7b:68:59:a7: 39:1f:a8:85:49:03:f6:3b:e5:e8:b5:01:3a:13:1c:92:49:58: 30:1e:c3:9c:03:6f:4c:f1:47:ff:9d:10:58:d8:d1:c9:52:b9: a4:a3:61:dd:bc:63:98:9e:33:b5:31:5b:4a:50:d1:52:36:35: 0b:c3:22:7c:9c:71:78:58:7b:a8:4f:d6:c8:fa:f3:1b:4c:c6: 31:3e:f2:ad:a4:c1:52:ea:6f:86:a4:08:d4:81:35:d2:80:1c: 97:13:fd:32:0a:84:f4:52:8b:90:55:88:71:f3:a4:1e:30:4a: 94:7b:1f:b1:15:05:d8:5a:11:c7:91:ff:c7:bd:e9:14:1c:31: 8a:7f:ac:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1F7EOmKPmjl1pj9JHa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3 ZjFhYTcwHhcNMjUxMjExMTQwMTE2WhcNMjUxMjEyMTQwMTE2WjAzMTEwLwYDVQQD EyhjOTE1ZWM0NGYxMTAyNmVkOTJlMzhjNmNiNjRiMWRmOGI0OWE2NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEmqtGaZ3tqf0rl51VB9G+ApQgCV kwe/mPUxHMaN2ySTR2/gN9s/Htd/fkSfS2cQrbbnk3hjBaPxc5uTNdAPL7Vv0lOP Xdtmm2mo9skllvtipKXTTDxtpuSn4bHjUPYJ0rtBoT1XP6Krh/4OxxHoED7peIGU M6yqtWUC3nf8bb6a4Vft3/QcxFWVg9hJa7+rXtY2aAqaAK6YKpcK62itudMJLnBC xoV44O9K0BoLJuLuXsqEfl0NTxTLjq+IIDmFmS2SFFV3wZT94zXLgxFPiF1vghEO 1LDFtHH4VSq8Tqdp3wcbkiZRwCqUo4jGe+aZf4y+NLse8J6AwG/C/aokPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkV7ETxECbtkuOMbLZLHfi0mmcnMB8GA1UdIwQY MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3 LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEND818nA 66JFO2F3+qzG2rX5ZlWazr7LBtcOS9LskDiNzg0QYCbTUrCNfvWnr6PVA+wOjLJN NHGGfiMrBBXVFZg1DOCO8m9ef2vUNCUAjRnZg1jsu4thS3xZTkSS7e/aKTQsQDAk /VvYimsesSNIhFhVPKitC33I1ep7aFmnOR+ohUkD9jvl6LUBOhMckklYMB7DnANv TPFH/50QWNjRyVK5pKNh3bxjmJ4ztTFbSlDRUjY1C8MifJxxeFh7qE/WyPrzG0zG MT7yraTBUupvhqQI1IE10oAclxP9MgqE9FKLkFWIcfOkHjBKlHsfsRUF2FoRx5H/ x73pFBwxin+srQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:04 2025 by rpki-client