This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json) Hash identifier: eS/unrq52tykMnh2D9/cdd4FM/J97TuYeNOYGvXcXiE= Subject key identifier: 39:23:C6:2C:6C:39:14:92:C2:F6:34:6D:0F:4F:F7:9F:7E:BA:9C:27 Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Certificate serial: 019B0F6E4EE772B5CE077EFA97E0E9F71DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft Manifest number: 1744 Signing time: Thu 11 Dec 2025 22:00:45 +0000 Manifest this update: Thu 11 Dec 2025 22:00:45 +0000 Manifest next update: Fri 12 Dec 2025 22:00:45 +0000 Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=) 2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: aGOR3cNZhA1ZcHIVBlBNtpJzr2DPAqhas37a5pLslD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:4e:e7:72:b5:ce:07:7e:fa:97:e0:e9:f7:1d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169 Validity Not Before: Dec 11 22:00:45 2025 GMT Not After : Dec 12 22:00:45 2025 GMT Subject: CN=3923c62c6c391492c2f6346d0f4ff79f7eba9c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:b0:4c:0c:35:aa:ff:e9:f6:96:4f:e0:a0: 6a:a5:47:6f:fb:7d:f5:dd:de:2c:bd:10:d4:bf:61: 20:61:dd:1c:ca:6e:37:38:36:c4:3d:d0:f6:fc:3a: 1f:c3:95:96:1c:a2:cc:4a:6f:56:e9:d9:a5:f0:f8: b9:90:a6:bf:ab:22:04:70:e7:e0:80:9d:06:f6:7c: 16:95:e6:a2:12:3f:12:a5:32:58:e2:52:58:04:9b: db:9e:c9:fa:76:2d:84:43:37:41:f7:26:cb:ce:7b: 4c:42:57:6a:14:82:75:6c:42:39:17:65:8c:ca:91: 0e:1f:43:95:c7:6e:74:d8:27:60:5b:a6:7e:e0:75: 92:27:c7:b6:d0:65:5a:9b:13:41:2d:50:8b:d7:ba: f9:98:0c:cb:fd:43:58:ba:4f:f6:5e:e3:12:97:76: 0b:05:61:be:d4:17:ed:57:3b:8a:48:fe:bf:68:67: f8:87:db:43:e2:2a:f1:60:ff:5f:eb:34:74:b7:d8: 57:d2:87:84:b6:e3:26:74:90:ba:75:a6:1c:0f:02: b2:3c:45:4c:77:16:38:f2:48:54:f4:94:51:b3:b5: 9a:aa:a0:c4:a4:96:a1:b4:34:68:39:97:79:a4:97: 5b:00:af:fa:83:25:84:d7:4a:77:7a:31:93:63:e5: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:C6:2C:6C:39:14:92:C2:F6:34:6D:0F:4F:F7:9F:7E:BA:9C:27 X509v3 Authority Key Identifier: keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3e:a7:f9:02:28:b6:db:e0:e4:d3:16:9b:05:70:7d:60:b3: ea:53:d1:7f:43:ab:6c:1b:31:79:74:85:f0:d5:d6:a7:ca:85: e1:0d:a9:f6:35:53:09:8a:8f:2b:25:ba:cc:b4:c5:5e:bb:70: af:3a:c2:b3:f4:24:ef:2e:2e:1b:16:05:2a:00:de:92:1d:10: c2:3e:ea:ab:c9:4c:91:d0:17:af:e0:ce:63:b9:2b:34:8d:ac: 80:78:4e:f0:ec:e6:95:2a:4c:63:f1:d0:93:a8:82:0b:a4:bc: eb:62:e7:17:ae:86:5f:0f:a4:24:b5:df:83:85:f5:e5:cc:bb: 73:49:fc:9d:e4:6b:f6:ca:df:35:65:43:92:00:e1:0c:77:33: 2b:de:98:be:54:75:25:63:bf:78:aa:40:1b:7d:da:48:d7:c7: 70:6d:cc:bf:da:85:36:a3:30:45:ca:fd:7f:eb:0e:1b:54:f7: 10:50:c0:ec:e8:e5:9f:a7:77:4d:b4:0d:14:7b:17:46:a8:00: 18:27:d5:26:bd:f6:73:36:3c:5a:e4:15:8e:9a:8a:27:7b:78: 40:ce:8c:b2:62:45:ad:b8:36:4a:47:6f:81:7f:a7:91:3d:ea: 0c:a2:bc:e6:1c:a6:a8:ee:bc:5f:2c:07:1f:ec:23:f2:9e:76: e9:a6:93:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbk7ncrXOB376l+Dp9x3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk ODYxNjkwHhcNMjUxMjExMjIwMDQ1WhcNMjUxMjEyMjIwMDQ1WjAzMTEwLwYDVQQD EygzOTIzYzYyYzZjMzkxNDkyYzJmNjM0NmQwZjRmZjc5ZjdlYmE5YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHqwTAw1qv/p9pZP4KBqpUdv+331 3d4svRDUv2EgYd0cym43ODbEPdD2/Dofw5WWHKLMSm9W6dml8Pi5kKa/qyIEcOfg gJ0G9nwWleaiEj8SpTJY4lJYBJvbnsn6di2EQzdB9ybLzntMQldqFIJ1bEI5F2WM ypEOH0OVx2502CdgW6Z+4HWSJ8e20GVamxNBLVCL17r5mAzL/UNYuk/2XuMSl3YL BWG+1BftVzuKSP6/aGf4h9tD4irxYP9f6zR0t9hX0oeEtuMmdJC6daYcDwKyPEVM dxY48khU9JRRs7WaqqDEpJahtDRoOZd5pJdbAK/6gyWE10p3ejGTY+XB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkjxixsORSSwvY0bQ9P959+upwnMB8GA1UdIwQY MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT6n+QIo ttvg5NMWmwVwfWCz6lPRf0OrbBsxeXSF8NXWp8qF4Q2p9jVTCYqPKyW6zLTFXrtw rzrCs/Qk7y4uGxYFKgDekh0Qwj7qq8lMkdAXr+DOY7krNI2sgHhO8OzmlSpMY/HQ k6iCC6S862LnF66GXw+kJLXfg4X15cy7c0n8neRr9srfNWVDkgDhDHczK96YvlR1 JWO/eKpAG33aSNfHcG3Mv9qFNqMwRcr9f+sOG1T3EFDA7Ojln6d3TbQNFHsXRqgA GCfVJr32czY8WuQVjpqKJ3t4QM6MsmJFrbg2SkdvgX+nkT3qDKK85hymqO68XywH H+wj8p526aaTjg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:25:29 2025 by rpki-client