This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json) Hash identifier: k6Qxh4CAX++qqraLkofEyxPY+rvhPgfRnIjV7etF40U= Subject key identifier: 62:D3:1B:DE:73:35:10:DF:A5:39:C1:A8:39:2B:9B:91:F2:50:DA:11 Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Certificate serial: 019B0E5B7BBD35CDB43E2EBAA02A5F019B02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft Manifest number: 0AF3 Signing time: Thu 11 Dec 2025 17:00:35 +0000 Manifest this update: Thu 11 Dec 2025 17:00:35 +0000 Manifest next update: Fri 12 Dec 2025 17:00:35 +0000 Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=) 2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: IuoZ1uW5e5VtTshhRZPpCAjcRfmhdkCgOyCULy+y0PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:7b:bd:35:cd:b4:3e:2e:ba:a0:2a:5f:01:9b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Validity Not Before: Dec 11 17:00:35 2025 GMT Not After : Dec 12 17:00:35 2025 GMT Subject: CN=62d31bde733510dfa539c1a8392b9b91f250da11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:48:69:21:42:97:31:67:7b:e4:2f:43:a2: a1:ee:99:27:ef:a9:bd:da:de:2d:92:d7:3c:24:c1: 21:ec:a4:34:1d:26:27:49:13:c9:da:fd:e0:91:6c: e9:7e:0b:f3:c9:4e:ef:5f:a5:c7:b3:41:82:bb:bf: 97:aa:53:7d:fd:05:9b:56:0a:5b:da:69:32:d7:a0: fa:38:20:bf:80:05:58:26:e0:5f:3e:06:d8:7c:d2: da:0f:d3:3c:ba:98:76:cd:6d:d2:c8:80:74:c9:09: 2b:27:a0:41:73:0e:47:84:96:59:a5:45:dd:95:b9: d9:ac:47:45:34:e5:b8:e0:b9:54:5d:c3:b6:10:f7: 70:a6:79:6b:21:b9:56:dc:76:1f:92:4b:6e:c6:01: d4:db:d1:7d:58:40:65:47:c3:be:34:47:75:0b:b7: 37:0b:d1:03:d5:b8:61:c8:ec:ac:80:6b:f7:11:b7: dc:59:ee:b6:ae:e0:1d:cc:a7:6b:5b:46:9b:19:f6: 13:d8:4e:71:8c:68:ac:88:08:61:66:b2:14:95:5c: 69:f7:0c:6a:a7:45:39:6a:9c:31:e9:98:d2:29:4c: 66:06:30:7a:ce:1e:c3:be:fc:42:c9:09:76:da:a2: 4b:e1:b0:9f:7d:16:71:de:5e:f7:ba:45:2e:b9:c4: dd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D3:1B:DE:73:35:10:DF:A5:39:C1:A8:39:2B:9B:91:F2:50:DA:11 X509v3 Authority Key Identifier: keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7b:52:8c:63:04:dd:65:fa:7d:4a:a4:06:6e:99:ca:8a:af: 54:ae:33:27:9d:f0:11:f0:2c:f0:e2:a0:80:ad:6d:a4:13:2f: f6:3c:62:03:89:20:64:57:05:17:f5:0e:d6:42:2f:0e:4d:c2: 8f:08:bc:83:a7:31:69:64:45:aa:c4:f6:d4:00:ff:5c:dc:95: e0:c1:2e:15:32:30:8d:b3:2b:6f:55:24:3e:96:de:a1:bd:9b: 2d:3c:c0:3f:74:a6:2c:8a:54:e8:ea:d7:25:85:64:40:0c:1a: 74:64:b0:91:db:67:1e:89:ac:9c:14:e7:37:19:50:59:51:f6: f0:c7:c7:96:5f:58:25:41:62:57:25:88:02:60:ad:65:d9:98: ed:6e:aa:43:5b:57:f7:b3:06:46:dd:f1:42:15:0c:e9:16:a0: 16:af:99:86:5b:87:55:17:62:cb:62:de:81:b0:b0:a6:67:01: c2:1b:62:3d:4c:58:4a:ea:3a:a5:dd:eb:bd:db:9e:25:21:f1: ed:1d:47:5b:08:54:2d:f1:81:0f:d4:af:a6:11:7b:c5:ca:1b: e8:08:a6:62:67:07:32:b3:d4:46:0c:ea:9d:33:f2:d4:1e:86: 9f:5a:b8:93:71:29:65:01:b0:c0:4b:7c:ec:92:d9:e5:dd:32: 0c:a1:93:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW3u9Nc20Pi66oCpfAZsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy YWIwYWIwHhcNMjUxMjExMTcwMDM1WhcNMjUxMjEyMTcwMDM1WjAzMTEwLwYDVQQD Eyg2MmQzMWJkZTczMzUxMGRmYTUzOWMxYTgzOTJiOWI5MWYyNTBkYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl1IaSFClzFne+QvQ6Kh7pkn76m9 2t4tktc8JMEh7KQ0HSYnSRPJ2v3gkWzpfgvzyU7vX6XHs0GCu7+XqlN9/QWbVgpb 2mky16D6OCC/gAVYJuBfPgbYfNLaD9M8uph2zW3SyIB0yQkrJ6BBcw5HhJZZpUXd lbnZrEdFNOW44LlUXcO2EPdwpnlrIblW3HYfkktuxgHU29F9WEBlR8O+NEd1C7c3 C9ED1bhhyOysgGv3EbfcWe62ruAdzKdrW0abGfYT2E5xjGisiAhhZrIUlVxp9wxq p0U5apwx6ZjSKUxmBjB6zh7DvvxCyQl22qJL4bCffRZx3l73ukUuucTdFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLTG95zNRDfpTnBqDkrm5HyUNoRMB8GA1UdIwQY MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3tSjGME 3WX6fUqkBm6ZyoqvVK4zJ53wEfAs8OKggK1tpBMv9jxiA4kgZFcFF/UO1kIvDk3C jwi8g6cxaWRFqsT21AD/XNyV4MEuFTIwjbMrb1UkPpbeob2bLTzAP3SmLIpU6OrX JYVkQAwadGSwkdtnHomsnBTnNxlQWVH28MfHll9YJUFiVyWIAmCtZdmY7W6qQ1tX 97MGRt3xQhUM6RagFq+ZhluHVRdiy2LegbCwpmcBwhtiPUxYSuo6pd3rvdueJSHx 7R1HWwhULfGBD9SvphF7xcob6AimYmcHMrPURgzqnTPy1B6Gn1q4k3EpZQGwwEt8 7JLZ5d0yDKGTLA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:59:14 2025 by rpki-client