This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json) Hash identifier: Ap+UhfYw0ThEd/MbcuV1l96QMx+dghewNNfUk0JWFeE= Subject key identifier: 1F:DF:A5:6A:BD:EE:79:9C:30:E7:A2:94:9D:F4:B0:BE:B4:FE:34:6C Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Certificate serial: 019AEFE3DD002362B695B595F6F703A8F76B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 19:01:18 +0000 Manifest this update: Fri 05 Dec 2025 19:01:18 +0000 Manifest next update: Sat 06 Dec 2025 19:01:18 +0000 Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=) 2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=) 3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=) 4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: Dj2PjaWngCGHO/iZPLFc2x5W2xjbFoZPe/C0HCdwUfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:dd:00:23:62:b6:95:b5:95:f6:f7:03:a8:f7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Validity Not Before: Dec 5 19:01:18 2025 GMT Not After : Dec 6 19:01:18 2025 GMT Subject: CN=1fdfa56abdee799c30e7a2949df4b0beb4fe346c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:e5:4f:76:98:cb:43:24:28:43:72:1a:b3: 32:32:71:37:83:f7:1c:8a:c7:93:ae:31:61:30:0c: ce:85:0f:54:ea:46:41:75:ae:43:43:08:97:ea:4b: de:e8:ae:e1:94:58:90:36:f0:10:1c:16:8d:a2:a3: b6:59:24:98:db:d8:84:b6:2c:89:55:61:29:9b:43: c1:f0:fe:10:95:b4:8c:7a:6e:36:d0:41:d8:bb:6e: eb:29:e2:86:4a:79:a2:0d:1f:07:61:e4:d7:a9:87: 6a:7c:52:14:3b:dd:67:10:48:42:de:15:9a:4e:27: e8:69:f1:31:3f:62:7a:f1:72:9f:c4:b5:62:58:6e: 96:35:fe:ff:5f:ed:eb:a2:49:9c:62:ab:d9:63:a5: 20:eb:d0:93:ba:78:65:8c:c9:75:a7:65:3d:2d:78: 33:c1:97:f8:b5:e4:c1:69:ed:5d:71:1c:a3:28:e6: d6:3f:44:fb:2e:bc:79:2e:da:12:bf:ed:6b:83:05: c2:09:29:eb:fd:5f:9e:eb:40:25:94:3e:95:16:f5: 76:00:f0:80:62:af:cb:15:9f:87:2e:f5:59:3b:c8: eb:78:e1:ab:37:79:f0:74:25:d7:7d:78:bb:34:7d: 65:97:84:e2:c7:78:0d:ad:8c:26:63:ef:20:da:b3: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:A5:6A:BD:EE:79:9C:30:E7:A2:94:9D:F4:B0:BE:B4:FE:34:6C X509v3 Authority Key Identifier: keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3a:0b:ed:0f:13:91:4a:c0:27:2d:3c:73:39:9c:59:bc:5e: fa:42:3f:bd:0e:06:b1:93:ac:8e:4e:6c:78:95:fb:b9:92:5d: 29:7d:fb:93:bf:61:81:2e:20:ae:28:29:12:07:60:ab:08:39: 27:45:d5:67:4d:79:30:34:3a:f0:6f:1c:b0:52:93:34:19:cb: 37:a1:74:c0:28:ff:a8:09:55:a8:a8:68:35:9b:23:e9:00:56: 09:b4:24:ac:28:ab:ca:4d:4a:0b:02:b9:5d:9f:cb:0a:64:df: cb:8f:85:e5:35:66:f0:5b:7b:16:d2:94:86:39:d8:62:e8:60: 96:86:8a:bb:55:51:b5:94:9f:7d:a6:d1:25:3f:46:1f:d4:80: d9:eb:f6:bd:ad:1c:b1:38:f9:53:00:53:5c:d0:45:10:4f:c2: 24:1b:b0:73:1c:55:dd:79:a1:7d:5e:8b:11:ee:4f:10:9e:23: bd:c1:65:f0:ff:81:ff:e7:d1:c9:99:93:29:4a:0f:e0:ef:4a: b0:f3:f4:b3:7e:11:6a:99:c1:ad:1c:c5:9c:fc:13:ae:61:7d: 61:3d:fa:6e:ca:45:48:6e:59:51:47:65:22:24:db:de:0d:26: f1:07:f6:82:76:3e:4f:f2:9c:b4:48:4d:29:3a:d3:c8:20:7b: 4a:1c:4e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrv490AI2K2lbWV9vcDqPdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk OGE5ZjUwHhcNMjUxMjA1MTkwMTE4WhcNMjUxMjA2MTkwMTE4WjAzMTEwLwYDVQQD EygxZmRmYTU2YWJkZWU3OTljMzBlN2EyOTQ5ZGY0YjBiZWI0ZmUzNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFjlT3aYy0MkKENyGrMyMnE3g/cc iseTrjFhMAzOhQ9U6kZBda5DQwiX6kve6K7hlFiQNvAQHBaNoqO2WSSY29iEtiyJ VWEpm0PB8P4QlbSMem420EHYu27rKeKGSnmiDR8HYeTXqYdqfFIUO91nEEhC3hWa TifoafExP2J68XKfxLViWG6WNf7/X+3rokmcYqvZY6Ug69CTunhljMl1p2U9LXgz wZf4teTBae1dcRyjKObWP0T7Lrx5LtoSv+1rgwXCCSnr/V+e60AllD6VFvV2APCA Yq/LFZ+HLvVZO8jreOGrN3nwdCXXfXi7NH1ll4Tix3gNrYwmY+8g2rO3CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/fpWq97nmcMOeilJ30sL60/jRsMB8GA1UdIwQY MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoToL7Q8T kUrAJy08czmcWbxe+kI/vQ4GsZOsjk5seJX7uZJdKX37k79hgS4grigpEgdgqwg5 J0XVZ015MDQ68G8csFKTNBnLN6F0wCj/qAlVqKhoNZsj6QBWCbQkrCiryk1KCwK5 XZ/LCmTfy4+F5TVm8Ft7FtKUhjnYYuhgloaKu1VRtZSffabRJT9GH9SA2ev2va0c sTj5UwBTXNBFEE/CJBuwcxxV3XmhfV6LEe5PEJ4jvcFl8P+B/+fRyZmTKUoP4O9K sPP0s34RapnBrRzFnPwTrmF9YT36bspFSG5ZUUdlIiTb3g0m8Qf2gnY+T/KctEhN KTrTyCB7ShxOsg== -----END CERTIFICATE-----Generated at Fri Dec 5 23:05:04 2025 by rpki-client