This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json) Hash identifier: Nz7aMJ0SgK1RnseKXDQcQaM8CDvP/hGTOWYNr+mZXEM= Subject key identifier: 3E:52:B5:65:BD:F8:87:FF:A3:B9:C1:CF:66:F0:66:31:55:88:D9:8C Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66 Certificate serial: 019B1BE088560AF72D2890B66FA5EC287CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft Manifest number: 0C74 Signing time: Sun 14 Dec 2025 08:00:58 +0000 Manifest this update: Sun 14 Dec 2025 08:00:58 +0000 Manifest next update: Mon 15 Dec 2025 08:00:58 +0000 Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=) 2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 6YZseHKUNM8FoY5jOloOQdV6azzC/Bw7TLyx+207khs=) 3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:88:56:0a:f7:2d:28:90:b6:6f:a5:ec:28:7c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66 Validity Not Before: Dec 14 08:00:58 2025 GMT Not After : Dec 15 08:00:58 2025 GMT Subject: CN=3e52b565bdf887ffa3b9c1cf66f066315588d98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ae:db:0f:44:a0:73:c6:e6:24:7a:ad:28:ef: ec:08:ba:ac:06:b1:56:3f:ea:05:26:f7:6b:40:c0: 5e:4d:5b:66:b7:20:d0:bf:da:1a:73:10:93:f0:49: 5a:99:97:b6:c1:16:19:9f:c4:94:43:24:82:88:7b: 39:cb:2f:6b:b4:9a:10:d3:c3:ea:e3:5a:ab:73:fb: de:3e:a8:3b:fd:e8:aa:a5:00:8b:7a:3b:c6:a1:55: bd:80:56:ae:98:8f:1b:94:8f:11:8e:4f:a4:70:f2: 00:a6:f5:61:c7:ef:ad:01:63:02:21:a5:b6:6e:5f: c3:63:51:61:38:83:b7:9a:3c:7e:44:7c:94:df:de: 98:95:da:e3:b1:8d:2c:76:52:27:36:3c:63:ba:15: 01:d0:65:17:7c:c8:a3:1b:3c:c6:8c:e1:e2:cf:f5: 2c:6d:fe:47:de:d0:4c:d3:fe:66:e0:02:61:1d:9f: be:17:15:73:e8:18:bf:27:08:ea:91:ac:d0:b9:65: be:7b:0c:e2:e7:6d:b6:c6:f5:2c:73:79:c1:ab:16: 36:3a:e0:5a:6b:1d:5f:1c:74:c9:19:06:6c:bc:b2: 28:76:9e:cf:a3:9c:f6:15:66:9f:7b:f9:e0:07:ed: 57:f3:53:21:73:d7:4b:9f:ef:3a:41:b3:59:9b:4f: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:B5:65:BD:F8:87:FF:A3:B9:C1:CF:66:F0:66:31:55:88:D9:8C X509v3 Authority Key Identifier: keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4b:89:05:30:55:76:2a:ae:bf:1c:73:8f:49:dc:0f:ac:c4: 6b:10:5f:8f:2f:0f:ed:d0:7b:c2:7b:fc:5d:fe:d5:bc:bf:90: 0c:5f:11:51:7b:54:2d:33:7c:8c:bb:d9:ec:fb:f4:d4:fd:77: 80:5f:d5:47:de:aa:eb:13:3f:43:c6:c7:ed:00:1b:60:a9:6c: 20:a9:88:fd:c7:06:28:4e:1d:b6:af:e8:f7:a4:90:31:18:0b: 39:08:e8:35:ab:5e:9e:88:17:93:f0:a7:35:f8:52:dc:b8:ec: f7:ff:4d:5b:d2:f5:a1:0f:9d:8a:57:d3:04:31:f3:51:df:af: 22:cd:5f:d7:21:21:8b:82:c6:92:60:98:89:5f:72:0e:c6:60: 65:ce:35:a4:8f:f2:eb:26:7f:5b:cc:96:c0:34:8b:63:68:d7: 9a:96:26:d6:0e:f6:53:7c:ae:03:37:d2:80:56:3d:0d:b8:40: 58:83:89:57:d4:7e:45:fe:62:20:da:ff:b4:d8:fe:7d:c1:c4: a3:35:90:3f:f1:ae:ea:55:97:96:ad:a1:b1:8b:66:84:53:16: d0:9e:2e:41:36:9a:c3:cc:86:3f:3a:5c:12:9b:dd:f5:dc:2d: d4:d6:42:fd:1e:32:bb:1e:fe:71:e4:d6:84:34:db:2a:b7:de: 0c:be:67:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4IhWCvctKJC2b6XsKHzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5 NjdjNjYwHhcNMjUxMjE0MDgwMDU4WhcNMjUxMjE1MDgwMDU4WjAzMTEwLwYDVQQD EygzZTUyYjU2NWJkZjg4N2ZmYTNiOWMxY2Y2NmYwNjYzMTU1ODhkOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA767bD0Sgc8bmJHqtKO/sCLqsBrFW P+oFJvdrQMBeTVtmtyDQv9oacxCT8ElamZe2wRYZn8SUQySCiHs5yy9rtJoQ08Pq 41qrc/vePqg7/eiqpQCLejvGoVW9gFaumI8blI8Rjk+kcPIApvVhx++tAWMCIaW2 bl/DY1FhOIO3mjx+RHyU396YldrjsY0sdlInNjxjuhUB0GUXfMijGzzGjOHiz/Us bf5H3tBM0/5m4AJhHZ++FxVz6Bi/JwjqkazQuWW+ewzi5222xvUsc3nBqxY2OuBa ax1fHHTJGQZsvLIodp7Po5z2FWafe/ngB+1X81Mhc9dLn+86QbNZm0/9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5StWW9+If/o7nBz2bwZjFViNmMMB8GA1UdIwQY MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEuJBTBV diquvxxzj0ncD6zEaxBfjy8P7dB7wnv8Xf7VvL+QDF8RUXtULTN8jLvZ7Pv01P13 gF/VR96q6xM/Q8bH7QAbYKlsIKmI/ccGKE4dtq/o96SQMRgLOQjoNatenogXk/Cn NfhS3Ljs9/9NW9L1oQ+dilfTBDHzUd+vIs1f1yEhi4LGkmCYiV9yDsZgZc41pI/y 6yZ/W8yWwDSLY2jXmpYm1g72U3yuAzfSgFY9DbhAWIOJV9R+Rf5iINr/tNj+fcHE ozWQP/Gu6lWXlq2hsYtmhFMW0J4uQTaaw8yGPzpcEpvd9dwt1NZC/R4yux7+ceTW hDTbKrfeDL5ndg== -----END CERTIFICATE-----Generated at Sun Dec 14 11:41:40 2025 by rpki-client