This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft File: jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json) Hash identifier: n1Ikh7I+MRDu4I3sP70n2bGn/ThFfMuyPmJc+ttjvcM= Subject key identifier: 29:2E:CF:3D:D0:50:FD:BB:EA:D1:E2:73:87:2D:E1:7B:FA:71:10:4F Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019AF8AF666742F2330ECA81DE6E1BCA5E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft Manifest number: 32 Signing time: Sun 07 Dec 2025 12:00:35 +0000 Manifest this update: Sun 07 Dec 2025 12:00:35 +0000 Manifest next update: Mon 08 Dec 2025 12:00:35 +0000 Files and hashes: 1: FJssQUG-5WpajvHpyzR6SI1qsiY.roa (hash: 8p9Ojnq2EsfJr6DYc4W+gY6tO6sh3FzfrhiKvLdrJvw=) 2: hChaNSU7h8cdh-e93nEgJaejH8c.roa (hash: Gudwjiq/t5T7NuD7RxID02xwuiRTjEdOLzGaGDACPKc=) 3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: F8CmSoqpWOYLVmUSlneddO5LtmHOHnRbBhe/k4j8aLs=) 4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:af:66:67:42:f2:33:0e:ca:81:de:6e:1b:ca:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Dec 7 12:00:35 2025 GMT Not After : Dec 8 12:00:35 2025 GMT Subject: CN=292ecf3dd050fdbbead1e273872de17bfa71104f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:4c:69:d8:8a:9b:65:f1:e5:19:7f:12:e6: d1:e7:25:b9:a7:14:44:2b:cc:26:c6:4b:50:62:16: 3b:6d:9f:eb:ff:bd:cb:11:a9:52:69:d9:70:60:a5: bc:b3:f4:3c:ce:65:1d:e2:a9:88:1a:6e:0e:99:f4: 49:2b:f6:1d:80:16:2d:04:fb:fa:7c:8b:eb:16:2a: 2b:b5:e5:c7:e1:8b:a1:bd:49:b0:bf:8f:5d:85:ce: a6:a2:3b:69:4c:03:47:e4:5b:58:b4:95:9c:20:6f: 73:30:e1:75:2b:eb:e8:d1:a5:58:51:8e:23:49:a2: a2:d2:e2:66:89:ae:c5:ba:96:75:4d:b4:60:44:96: 4d:1f:96:a4:e0:22:cd:2b:c1:3e:90:40:bb:3a:22: fd:1a:99:38:ef:a6:1f:c6:a9:84:d7:6e:b7:b0:9b: 21:33:40:68:2d:53:9f:b0:07:2f:97:af:1a:a5:b6: 44:5f:39:d0:ac:ef:b1:dc:aa:87:53:cc:3d:cd:47: bd:43:35:be:52:b1:ee:6c:cc:5f:d0:13:98:1c:a1: 14:ce:a1:04:5d:e2:9b:fd:dd:b5:76:79:26:ce:33: c1:17:1a:be:1c:04:16:70:ee:6f:24:93:a2:81:b2: ee:27:09:ad:ab:02:a9:98:98:ee:c5:09:18:72:cf: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2E:CF:3D:D0:50:FD:BB:EA:D1:E2:73:87:2D:E1:7B:FA:71:10:4F X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5d:be:33:ed:98:00:93:13:a6:5b:ca:4b:a5:f8:02:be:f6: 65:e2:4d:c6:84:62:53:b2:4c:6c:8d:a2:f0:8b:72:19:fe:ca: 1f:8f:5e:b8:f8:79:13:8a:ff:48:b9:b6:82:07:92:13:40:0a: 1b:20:cb:24:8d:3e:0a:e8:51:5f:cc:ae:76:45:59:50:3e:4f: e3:60:a9:9d:ff:88:22:a5:03:d2:c9:83:a9:65:58:3a:53:e3: 79:03:f9:a6:4c:79:fb:bc:30:a9:14:7a:af:c8:04:98:29:ba: ae:60:4e:49:dc:de:b6:91:8b:8a:82:51:41:df:a5:92:96:20: eb:88:51:f5:d9:0a:9a:de:29:d4:0c:7d:fe:de:ee:62:0d:40: 7c:42:f3:9d:f5:92:d2:9c:98:62:67:34:0c:ad:cd:9a:b8:0d: cb:4b:1b:f8:82:f5:0d:1b:ed:80:c0:6b:3f:a5:24:99:17:8b: 55:b2:f1:4d:aa:0f:5e:45:44:14:8f:4b:30:4b:43:35:0b:c4: 28:6f:f3:d6:61:23:ce:cb:38:ea:a6:56:25:3a:03:db:ce:e2: 53:c3:28:38:45:cb:0a:9e:7f:28:e8:b7:64:4c:2f:72:33:c2: f1:48:ee:e7:9b:8a:c8:02:79:28:8e:5d:16:84:a6:a8:52:39: 6a:67:cd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4r2ZnQvIzDsqB3m4byl6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjUxMjA3MTIwMDM1WhcNMjUxMjA4MTIwMDM1WjAzMTEwLwYDVQQD EygyOTJlY2YzZGQwNTBmZGJiZWFkMWUyNzM4NzJkZTE3YmZhNzExMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnVMadiKm2Xx5Rl/EubR5yW5pxRE K8wmxktQYhY7bZ/r/73LEalSadlwYKW8s/Q8zmUd4qmIGm4OmfRJK/YdgBYtBPv6 fIvrFiorteXH4YuhvUmwv49dhc6mojtpTANH5FtYtJWcIG9zMOF1K+vo0aVYUY4j SaKi0uJmia7FupZ1TbRgRJZNH5ak4CLNK8E+kEC7OiL9Gpk476YfxqmE1263sJsh M0BoLVOfsAcvl68apbZEXznQrO+x3KqHU8w9zUe9QzW+UrHubMxf0BOYHKEUzqEE XeKb/d21dnkmzjPBFxq+HAQWcO5vJJOigbLuJwmtqwKpmJjuxQkYcs+tiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkuzz3QUP276tHic4ct4Xv6cRBPMB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil2+M+2Y AJMTplvKS6X4Ar72ZeJNxoRiU7JMbI2i8ItyGf7KH49euPh5E4r/SLm2ggeSE0AK GyDLJI0+CuhRX8yudkVZUD5P42Cpnf+IIqUD0smDqWVYOlPjeQP5pkx5+7wwqRR6 r8gEmCm6rmBOSdzetpGLioJRQd+lkpYg64hR9dkKmt4p1Ax9/t7uYg1AfELznfWS 0pyYYmc0DK3NmrgNy0sb+IL1DRvtgMBrP6UkmReLVbLxTaoPXkVEFI9LMEtDNQvE KG/z1mEjzss46qZWJToD287iU8MoOEXLCp5/KOi3ZEwvcjPC8Uju55uKyAJ5KI5d FoSmqFI5amfNdw== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:45 2025 by rpki-client