This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft File: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json) Hash identifier: 7o9J/54elV3qWcuHhpHOPL3+rbd0qNnauRtOUOg0+Us= Subject key identifier: 2B:7D:29:CE:0B:F4:E0:94:69:4D:55:68:18:ED:B7:41:29:06:1D:4D Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019AF80AA1C0E7E68E2009702F46ACD0E9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft Manifest number: 1770 Signing time: Sun 07 Dec 2025 09:00:37 +0000 Manifest this update: Sun 07 Dec 2025 09:00:37 +0000 Manifest next update: Mon 08 Dec 2025 09:00:37 +0000 Files and hashes: 1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=) 2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=) 3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=) 4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=) 5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=) 6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: ggKfX214tssB5d74s/d/7wmem6Qjk1t6j5tJM1yb7cI=) 7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=) 8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=) 9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=) 10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:a1:c0:e7:e6:8e:20:09:70:2f:46:ac:d0:e9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Dec 7 09:00:37 2025 GMT Not After : Dec 8 09:00:37 2025 GMT Subject: CN=2b7d29ce0bf4e094694d556818edb74129061d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:8a:82:19:20:71:19:70:0d:14:61:7f:80: 2f:70:23:a3:2b:e8:95:ae:9d:11:66:e4:0d:02:ad: 01:42:bf:3c:5d:a3:49:f6:9c:64:91:64:65:05:32: 13:d0:33:53:a5:f4:6d:dd:36:48:f1:3e:99:66:37: ba:db:d1:94:b2:66:e7:08:9b:7c:19:cd:a7:b5:4f: 3d:52:6e:80:0c:f5:84:23:a5:d1:7d:eb:a7:0d:ad: b5:d6:f7:53:5a:2a:6a:75:23:d2:10:23:f8:d4:a0: b7:5f:07:2a:80:db:e4:c3:06:c8:a9:b4:36:4a:eb: 2f:8b:1a:c5:13:40:9b:bf:08:6e:b8:1e:77:5e:d4: bb:b5:23:f5:8f:8f:39:8c:ac:c3:53:a7:5e:09:7f: 94:7a:6d:7b:7a:b1:25:79:42:bb:3b:a7:fa:02:86: b0:d5:2c:08:70:cf:97:9a:a6:ff:f5:48:d0:83:23: 52:34:d9:6a:68:85:5b:c8:b4:b3:51:9a:b8:9d:ed: 0a:46:00:7e:5c:9c:60:26:12:8f:ed:0d:5e:68:41: 9e:79:3a:2b:0b:07:8d:df:74:63:3e:55:12:de:5f: 6a:c5:de:1c:03:3c:86:cb:db:8c:f7:ef:dc:2b:b9: e7:e0:6a:2b:ae:71:0f:ad:a5:23:c1:39:6c:d4:2a: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:29:CE:0B:F4:E0:94:69:4D:55:68:18:ED:B7:41:29:06:1D:4D X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ca:b1:b8:5d:bd:52:97:f6:b2:fe:34:d4:2d:06:69:70:47: 28:05:0b:d6:eb:36:a9:4d:5e:64:81:ed:ae:6d:20:cf:2d:20: 88:cc:e4:e9:a1:41:03:c4:86:53:39:68:de:5b:3e:61:35:26: e6:88:c9:11:88:5b:ce:1f:95:8e:4b:e4:8c:c8:33:19:9a:83: 51:d3:94:45:7a:46:49:35:cc:e4:b9:a5:23:df:39:5d:79:a0: ae:04:17:a3:18:26:e2:cf:d6:e2:4e:74:d4:46:eb:6d:43:7c: f2:88:d6:b4:49:7a:e1:7e:ff:89:ac:4d:e0:d4:22:82:03:4c: c8:3f:da:81:ec:4c:15:53:e8:6e:63:60:fe:f9:50:89:36:67: 08:15:e5:68:84:17:af:2c:8f:17:a0:bf:2b:38:75:dc:ec:38: 2f:c3:a9:58:c7:d8:17:df:97:7e:ed:f0:20:5d:e7:c3:ba:43: eb:b9:13:a0:61:f1:07:b3:2e:20:e5:20:f3:2c:63:00:b2:d9: 17:9c:0d:12:be:28:24:11:dc:14:10:86:21:18:d8:2a:06:be: 12:bb:25:1e:73:58:92:55:66:66:6d:c6:52:fc:40:72:9e:51: 7a:fd:0e:40:c4:3e:1c:61:d8:85:21:01:23:26:10:e3:b9:33: 90:e7:01:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CqHA5+aOIAlwL0as0OnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjUxMjA3MDkwMDM3WhcNMjUxMjA4MDkwMDM3WjAzMTEwLwYDVQQD EygyYjdkMjljZTBiZjRlMDk0Njk0ZDU1NjgxOGVkYjc0MTI5MDYxZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb6KghkgcRlwDRRhf4AvcCOjK+iV rp0RZuQNAq0BQr88XaNJ9pxkkWRlBTIT0DNTpfRt3TZI8T6ZZje629GUsmbnCJt8 Gc2ntU89Um6ADPWEI6XRfeunDa211vdTWipqdSPSECP41KC3XwcqgNvkwwbIqbQ2 SusvixrFE0CbvwhuuB53XtS7tSP1j485jKzDU6deCX+Uem17erEleUK7O6f6Aoaw 1SwIcM+Xmqb/9UjQgyNSNNlqaIVbyLSzUZq4ne0KRgB+XJxgJhKP7Q1eaEGeeTor CweN33RjPlUS3l9qxd4cAzyGy9uM9+/cK7nn4GorrnEPraUjwTls1CoeSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt9Kc4L9OCUaU1VaBjtt0EpBh1NMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcqxuF29 Upf2sv401C0GaXBHKAUL1us2qU1eZIHtrm0gzy0giMzk6aFBA8SGUzlo3ls+YTUm 5ojJEYhbzh+VjkvkjMgzGZqDUdOURXpGSTXM5LmlI985XXmgrgQXoxgm4s/W4k50 1EbrbUN88ojWtEl64X7/iaxN4NQiggNMyD/agexMFVPobmNg/vlQiTZnCBXlaIQX ryyPF6C/Kzh13Ow4L8OpWMfYF9+Xfu3wIF3nw7pD67kToGHxB7MuIOUg8yxjALLZ F5wNEr4oJBHcFBCGIRjYKga+ErslHnNYklVmZm3GUvxAcp5Rev0OQMQ+HGHYhSEB IyYQ47kzkOcBmw== -----END CERTIFICATE-----Generated at Sun Dec 7 11:14:17 2025 by rpki-client