This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json) Hash identifier: RRCBrN6RxcJSVh6JCJeSDI1uuiozfbiWsOmcrtkE9Gg= Subject key identifier: BC:6D:96:D2:7E:1D:4E:D9:83:C5:55:56:74:90:9C:84:94:25:DF:78 Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb Certificate serial: 019B101317DEB4A3CEC167886321C9CC5EA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft Manifest number: 05B3 Signing time: Fri 12 Dec 2025 01:00:45 +0000 Manifest this update: Fri 12 Dec 2025 01:00:45 +0000 Manifest next update: Sat 13 Dec 2025 01:00:45 +0000 Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=) 2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: 2+vl/HapZ3oYNZGnPY9tDDMe5q+waIi5/lQhOEjwmP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:17:de:b4:a3:ce:c1:67:88:63:21:c9:cc:5e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb Validity Not Before: Dec 12 01:00:45 2025 GMT Not After : Dec 13 01:00:45 2025 GMT Subject: CN=bc6d96d27e1d4ed983c5555674909c849425df78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:ae:c8:0b:4e:50:8b:b3:49:2d:a6:a4:71: 70:54:97:47:ce:89:0d:1b:0c:c3:d7:41:52:73:dc: 68:6f:fd:89:57:5b:ae:d8:3f:44:5f:19:34:7f:9b: 39:8e:a6:0f:98:e6:e2:8d:0a:0e:1b:1f:02:6b:57: be:0a:6d:51:ab:82:a0:a0:e9:87:fb:b5:17:d2:7e: d3:af:4f:e6:58:8f:a0:d2:64:11:75:d2:c1:a9:96: bc:cf:f3:d9:f1:1d:d0:67:fe:ea:af:82:ca:a3:14: a8:7d:14:98:99:3e:74:9b:60:40:d6:04:70:66:c2: aa:62:de:67:e2:7f:96:36:e4:d5:8b:d8:2b:d4:49: ec:3e:40:4f:3c:17:3a:a3:b2:02:29:fc:f7:b4:8d: 4c:91:3e:98:d9:b9:80:4b:fa:ab:02:e7:f6:73:24: ec:1a:11:7c:96:2e:4a:c9:1d:4d:d2:d4:cb:d4:e9: f4:65:b5:a9:f4:5b:d8:b8:ac:67:dd:97:25:d6:f6: 77:b8:0c:b7:2e:35:b7:29:03:5a:ac:85:6c:3e:5d: b2:f7:ee:2a:d2:dd:6f:77:a6:4d:97:02:b4:cd:62: 55:07:14:59:02:31:74:58:05:65:b9:c9:9b:65:2b: fb:b2:bd:9a:48:83:ce:13:49:ab:d0:a5:fa:ae:7b: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:96:D2:7E:1D:4E:D9:83:C5:55:56:74:90:9C:84:94:25:DF:78 X509v3 Authority Key Identifier: keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:78:27:44:62:bd:40:be:9b:83:9b:5b:ee:7e:cf:71:0c: 99:40:4d:64:16:20:c3:c2:cc:c9:5d:26:f3:27:d4:b0:aa:a0: 37:09:49:10:75:87:3e:a4:7c:db:9b:3e:62:3e:9f:1a:fb:28: 44:81:ec:7b:da:dc:53:24:42:81:0c:53:a8:1a:12:a7:cf:52: 58:5b:b5:72:fc:90:74:21:05:58:0f:3f:7e:7d:8b:cb:62:fa: 1e:48:76:bc:ae:1d:15:1a:a9:be:80:84:99:b4:84:48:ca:29: dc:fc:7d:0d:fd:85:4f:d6:8a:35:5b:fb:91:87:9e:d6:00:51: fb:58:c5:c2:55:bb:0b:2b:7e:2a:81:86:5b:f3:86:8e:bb:08: d6:f2:ae:09:6a:7b:31:aa:97:18:c9:6d:3d:7c:38:d7:4f:71: f7:eb:b8:fe:a0:d4:a2:4e:13:c3:4a:b7:40:b7:0c:26:c8:a7: c0:98:81:75:37:18:8c:c8:0c:16:35:b8:6e:0d:35:63:67:89: 7f:7b:43:2d:9b:3a:62:02:15:42:e1:47:66:b1:4a:74:52:a6: 08:cc:b6:4f:1d:75:c4:9e:c2:11:2b:ac:d9:fc:d0:54:61:b5: bc:c4:e3:ee:72:08:c5:2f:53:88:2b:54:45:c4:22:40:4c:9f: 18:ec:14:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQExfetKPOwWeIYyHJzF6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3 Y2M5YmIwHhcNMjUxMjEyMDEwMDQ1WhcNMjUxMjEzMDEwMDQ1WjAzMTEwLwYDVQQD EyhiYzZkOTZkMjdlMWQ0ZWQ5ODNjNTU1NTY3NDkwOWM4NDk0MjVkZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0uuyAtOUIuzSS2mpHFwVJdHzokN GwzD10FSc9xob/2JV1uu2D9EXxk0f5s5jqYPmObijQoOGx8Ca1e+Cm1Rq4KgoOmH +7UX0n7Tr0/mWI+g0mQRddLBqZa8z/PZ8R3QZ/7qr4LKoxSofRSYmT50m2BA1gRw ZsKqYt5n4n+WNuTVi9gr1EnsPkBPPBc6o7ICKfz3tI1MkT6Y2bmAS/qrAuf2cyTs GhF8li5KyR1N0tTL1On0ZbWp9FvYuKxn3Zcl1vZ3uAy3LjW3KQNarIVsPl2y9+4q 0t1vd6ZNlwK0zWJVBxRZAjF0WAVlucmbZSv7sr2aSIPOE0mr0KX6rnt86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxtltJ+HU7Zg8VVVnSQnISUJd94MB8GA1UdIwQY MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj14J0Ri vUC+m4ObW+5+z3EMmUBNZBYgw8LMyV0m8yfUsKqgNwlJEHWHPqR825s+Yj6fGvso RIHse9rcUyRCgQxTqBoSp89SWFu1cvyQdCEFWA8/fn2Ly2L6Hkh2vK4dFRqpvoCE mbSESMop3Px9Df2FT9aKNVv7kYee1gBR+1jFwlW7Cyt+KoGGW/OGjrsI1vKuCWp7 MaqXGMltPXw4109x9+u4/qDUok4Tw0q3QLcMJsinwJiBdTcYjMgMFjW4bg01Y2eJ f3tDLZs6YgIVQuFHZrFKdFKmCMy2Tx11xJ7CESus2fzQVGG1vMTj7nIIxS9TiCtU RcQiQEyfGOwUQA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:24:17 2025 by rpki-client