This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json) Hash identifier: g19HDsjBG6DxN5umJ/tnKptOku+Bf7mfP7A9aovgl80= Subject key identifier: 1B:41:B7:68:4A:37:E7:6D:3D:0B:7A:9B:68:A2:4C:02:01:1B:72:25 Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c Certificate serial: 019B0F372B461ABAD35D6E2E929DC90992A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 21:00:32 +0000 Manifest this update: Thu 11 Dec 2025 21:00:32 +0000 Manifest next update: Fri 12 Dec 2025 21:00:32 +0000 Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=) 2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=) 3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: lm4wkXjXLvnbtouGeHWcY4c+4psbKwVOm9lMAtBWVm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:2b:46:1a:ba:d3:5d:6e:2e:92:9d:c9:09:92:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c Validity Not Before: Dec 11 21:00:32 2025 GMT Not After : Dec 12 21:00:32 2025 GMT Subject: CN=1b41b7684a37e76d3d0b7a9b68a24c02011b7225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:7a:90:ed:0f:a8:7a:4b:e7:ec:a2:e7:22: 5c:b8:8a:20:ca:95:08:e0:19:da:d0:e6:5e:71:34: 21:8c:4a:b7:83:e8:40:49:e6:c9:73:51:26:89:74: 10:bc:07:f4:9d:0b:55:26:e7:80:ec:d2:ff:f0:b3: 03:fe:df:ad:3b:ab:05:86:31:5c:5a:28:6a:97:a9: 8d:66:58:42:f5:12:e0:c8:8c:17:91:05:10:cd:77: e1:06:29:45:3a:8b:d2:a4:fb:57:3d:4e:a0:cc:4c: e3:2b:06:8d:13:39:1e:0d:51:62:90:71:dc:1c:d8: e4:8e:7b:91:df:2b:89:aa:f3:5c:e9:82:f0:0a:19: 4e:47:82:22:e1:f9:d8:f2:c4:a2:28:14:32:97:0a: 43:dd:82:c8:cf:f7:f5:ce:96:97:c1:62:f0:e3:03: 6b:49:c9:9f:46:79:07:9e:9d:10:b0:e3:7d:13:c8: e3:32:46:f4:9c:44:8d:19:5d:ff:b3:b7:74:b3:42: 55:3a:7c:a8:01:aa:77:68:4e:63:aa:ab:5a:b4:df: c2:44:c4:ad:d6:b7:ba:a8:50:c3:07:57:f6:60:97: 66:c8:8f:e4:de:7c:70:4c:74:c9:65:0e:05:df:b8: 82:6a:22:3b:9a:71:b9:d1:3b:95:10:fc:3f:a9:8a: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:41:B7:68:4A:37:E7:6D:3D:0B:7A:9B:68:A2:4C:02:01:1B:72:25 X509v3 Authority Key Identifier: keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ee:70:37:bf:e7:6f:cd:6c:e8:8e:03:57:3b:01:ca:d8:44: 8a:0a:bd:cd:c4:a1:6c:0e:52:a1:18:e9:5a:dd:c8:05:64:15: 67:90:ca:0d:da:f2:0d:03:e7:30:74:e7:dd:a3:43:e2:43:04: 61:c3:53:74:dd:22:24:1e:b2:40:95:a4:ce:0f:4f:c1:67:ef: 44:fd:b5:13:f9:85:80:cb:2d:12:cb:91:fa:47:79:36:0b:88: 32:1d:46:9b:26:f1:b7:57:32:7c:e5:8d:6d:88:3c:1a:98:46: 93:4b:0e:56:fc:38:70:24:69:5c:50:37:12:fb:38:72:e3:cc: f8:bc:21:31:27:70:c9:9d:15:14:4c:f3:6f:c1:72:b7:68:c7: a3:27:69:cf:30:b3:c0:53:b6:54:7a:79:6d:45:04:14:36:e7: 43:76:48:45:36:79:24:f8:7c:3f:65:76:a2:a9:27:9c:37:b6: 9f:7e:cc:59:92:ac:5c:79:60:7b:17:7d:4f:0d:05:58:1a:76: 8c:ee:b5:d4:b4:c0:1f:3a:a4:b0:67:1c:47:e9:88:c5:fd:1d: bc:e3:89:a4:e9:d6:89:43:87:2e:16:91:00:86:10:5b:1b:9d: 94:f5:b8:9e:32:60:ad:eb:c1:e9:79:f2:4c:a6:01:e0:17:58: ad:4c:e9:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNytGGrrTXW4ukp3JCZKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOTBiZDI4NzAwNTBjODQ0NzdhMTYxZWIwOTBmMDVlYjk2 MjAxNmMwHhcNMjUxMjExMjEwMDMyWhcNMjUxMjEyMjEwMDMyWjAzMTEwLwYDVQQD EygxYjQxYjc2ODRhMzdlNzZkM2QwYjdhOWI2OGEyNGMwMjAxMWI3MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHt6kO0PqHpL5+yi5yJcuIogypUI 4Bna0OZecTQhjEq3g+hASebJc1EmiXQQvAf0nQtVJueA7NL/8LMD/t+tO6sFhjFc Wihql6mNZlhC9RLgyIwXkQUQzXfhBilFOovSpPtXPU6gzEzjKwaNEzkeDVFikHHc HNjkjnuR3yuJqvNc6YLwChlOR4Ii4fnY8sSiKBQylwpD3YLIz/f1zpaXwWLw4wNr ScmfRnkHnp0QsON9E8jjMkb0nESNGV3/s7d0s0JVOnyoAap3aE5jqqtatN/CRMSt 1re6qFDDB1f2YJdmyI/k3nxwTHTJZQ4F37iCaiI7mnG50TuVEPw/qYqhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtBt2hKN+dtPQt6m2iiTAIBG3IlMB8GA1UdIwQY MBaAFI6QvShwBQyER3oWHrCQ8F65YgFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMt ZWNiODA3MDJhMTE3LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMtZWNiODA3MDJhMTE3 LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+5wN7/n b81s6I4DVzsBythEigq9zcShbA5SoRjpWt3IBWQVZ5DKDdryDQPnMHTn3aND4kME YcNTdN0iJB6yQJWkzg9PwWfvRP21E/mFgMstEsuR+kd5NguIMh1Gmybxt1cyfOWN bYg8GphGk0sOVvw4cCRpXFA3Evs4cuPM+LwhMSdwyZ0VFEzzb8Fyt2jHoydpzzCz wFO2VHp5bUUEFDbnQ3ZIRTZ5JPh8P2V2oqknnDe2n37MWZKsXHlgexd9Tw0FWBp2 jO611LTAHzqksGccR+mIxf0dvOOJpOnWiUOHLhaRAIYQWxudlPW4njJgrevB6Xny TKYB4BdYrUzpxQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:49 2025 by rpki-client