This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json) Hash identifier: luadP2w5i+c6PipnjFICIsH8C+3YAAmCLedQVpyso0w= Subject key identifier: 23:E1:8D:CA:3A:34:9C:CF:10:3C:A7:19:22:56:6C:0F:61:F2:1A:7A Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Certificate serial: 019AF5AEFAC1DC5E035408FA96DD91F3ED2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft Manifest number: 17C7 Signing time: Sat 06 Dec 2025 22:01:16 +0000 Manifest this update: Sat 06 Dec 2025 22:01:16 +0000 Manifest next update: Sun 07 Dec 2025 22:01:16 +0000 Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=) 2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: CIgWuaZLKakkD2+9uxJfkpsxD2D825omG60KLjqlpqE=) 3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=) 4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:fa:c1:dc:5e:03:54:08:fa:96:dd:91:f3:ed:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2 Validity Not Before: Dec 6 22:01:16 2025 GMT Not After : Dec 7 22:01:16 2025 GMT Subject: CN=23e18dca3a349ccf103ca71922566c0f61f21a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:89:3b:3e:31:2b:54:57:8a:8b:c7:3a:cd: 6c:e6:be:78:d0:14:2a:35:b6:d2:aa:56:36:2d:da: 5f:df:1d:41:16:53:b4:df:1f:5a:bd:71:3c:c9:13: c9:76:1f:99:6d:b2:68:65:f8:8e:92:43:9f:c6:09: 57:9b:3b:69:86:93:3d:b9:c0:42:8a:3c:20:ee:e4: e4:80:18:13:e2:c0:4e:d0:cd:5f:07:8c:a2:c1:db: e3:73:5a:28:a0:1e:68:9f:25:08:2a:2d:4a:ae:c5: 7d:ee:27:ff:dd:d6:33:da:97:c0:e4:b5:8d:8b:f3: fa:b8:e1:7a:97:ac:7e:3e:95:d6:62:70:da:b5:fb: bc:5a:38:73:6b:90:c7:2b:b3:1d:d6:24:c5:38:06: 3c:25:31:f0:d4:74:9c:95:74:fc:56:6a:7d:0e:ec: 8c:c7:d0:e4:ce:9e:03:c5:f2:a0:db:7f:26:ed:1b: 54:63:42:5a:3a:d2:48:16:e2:49:f8:97:2f:1f:5a: d9:58:96:bf:4a:d1:b0:80:6f:fc:6a:15:16:b4:94: ce:21:4b:db:d9:70:f2:c9:ac:9e:79:ff:55:05:ed: f1:31:24:6e:57:06:b1:d6:a9:45:23:65:6b:63:7e: 9b:1e:47:63:c7:a6:84:09:3d:bf:5b:c9:80:6b:40: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:8D:CA:3A:34:9C:CF:10:3C:A7:19:22:56:6C:0F:61:F2:1A:7A X509v3 Authority Key Identifier: keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f6:a1:7e:89:4f:dd:ca:cc:8d:9c:e1:a9:d8:a9:fc:d6:cf: ca:cc:61:1f:0b:c0:04:49:42:f5:41:a3:71:a3:91:a0:32:95: a2:cb:56:23:87:a6:2b:3b:0e:94:5e:ef:39:e2:92:7a:cc:70: 52:df:40:2c:28:5a:6b:c7:14:c6:8e:ee:41:40:4c:9a:7e:5f: 7b:28:18:1f:9e:a3:44:3d:0d:62:94:21:62:a7:82:ba:18:4c: 3f:b5:6b:2e:a9:fb:98:fd:2e:73:b6:8e:8f:89:c4:75:b9:81: bf:ae:10:0d:b7:11:e9:c6:f0:c3:e6:ea:40:fb:89:40:a8:00: c4:c7:1d:3c:07:2a:5a:41:e4:dd:0a:ba:fb:b7:fd:1f:34:03: 4c:cf:ed:a5:04:e2:b2:59:b7:e1:3c:35:71:f1:9d:19:fb:aa: f8:8e:99:6a:94:bc:f8:9b:bc:d5:08:c6:ab:7f:15:9d:75:23: e3:3f:ce:24:69:a6:91:d4:93:86:62:fa:51:14:24:77:34:14: c5:6e:2e:36:0a:1f:43:1b:a2:6e:3a:0c:26:0a:3a:02:3d:66: 23:f6:f8:63:26:48:f5:73:c2:76:25:b7:b1:b2:71:57:67:62: 02:fe:c4:b3:07:1d:66:e8:45:55:bc:7d:d3:49:9b:32:c1:e4: 41:22:a0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvrB3F4DVAj6lt2R8+0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm OGVmZTIwHhcNMjUxMjA2MjIwMTE2WhcNMjUxMjA3MjIwMTE2WjAzMTEwLwYDVQQD EygyM2UxOGRjYTNhMzQ5Y2NmMTAzY2E3MTkyMjU2NmMwZjYxZjIxYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNyJOz4xK1RXiovHOs1s5r540BQq NbbSqlY2Ldpf3x1BFlO03x9avXE8yRPJdh+ZbbJoZfiOkkOfxglXmztphpM9ucBC ijwg7uTkgBgT4sBO0M1fB4yiwdvjc1oooB5onyUIKi1KrsV97if/3dYz2pfA5LWN i/P6uOF6l6x+PpXWYnDatfu8Wjhza5DHK7Md1iTFOAY8JTHw1HSclXT8Vmp9DuyM x9Dkzp4DxfKg238m7RtUY0JaOtJIFuJJ+JcvH1rZWJa/StGwgG/8ahUWtJTOIUvb 2XDyyayeef9VBe3xMSRuVwax1qlFI2VrY36bHkdjx6aECT2/W8mAa0Dp7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPhjco6NJzPEDynGSJWbA9h8hp6MB8GA1UdIwQY MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvahfolP 3crMjZzhqdip/NbPysxhHwvABElC9UGjcaORoDKVostWI4emKzsOlF7vOeKSesxw Ut9ALChaa8cUxo7uQUBMmn5feygYH56jRD0NYpQhYqeCuhhMP7VrLqn7mP0uc7aO j4nEdbmBv64QDbcR6cbww+bqQPuJQKgAxMcdPAcqWkHk3Qq6+7f9HzQDTM/tpQTi slm34Tw1cfGdGfuq+I6ZapS8+Ju81QjGq38VnXUj4z/OJGmmkdSThmL6URQkdzQU xW4uNgofQxuibjoMJgo6Aj1mI/b4YyZI9XPCdiW3sbJxV2diAv7EswcdZuhFVbx9 00mbMsHkQSKgEw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:31 2025 by rpki-client