This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json) Hash identifier: ImRlEl189zKeYAQvZMGizpvPdWv0bXe5K0q6aEEQuRY= Subject key identifier: 6F:8B:D1:4A:AF:81:1C:04:75:25:20:31:B1:F4:42:AD:98:69:3D:7B Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b Certificate serial: 019B066B66B3A0D3FDE7D1AF1325F4E6BBDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 04:01:00 +0000 Manifest this update: Wed 10 Dec 2025 04:01:00 +0000 Manifest next update: Thu 11 Dec 2025 04:01:00 +0000 Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=) 2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=) 3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=) 4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: cZEf3X90OKkMcUXsELUVN6A9gZ3g6OkOi7+lXvXH0MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:66:b3:a0:d3:fd:e7:d1:af:13:25:f4:e6:bb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b Validity Not Before: Dec 10 04:01:00 2025 GMT Not After : Dec 11 04:01:00 2025 GMT Subject: CN=6f8bd14aaf811c0475252031b1f442ad98693d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:9f:73:c3:94:67:4b:72:39:1f:fd:79:58: ce:b2:e3:31:77:34:07:2a:f4:1c:fb:ce:e7:91:39: 18:09:a3:6b:50:eb:55:61:f5:50:f8:aa:d2:c6:eb: 4a:5d:d9:e1:be:46:73:fe:6d:a0:da:01:4d:ed:ec: 7a:61:9d:44:45:20:11:62:82:db:1b:d2:24:1d:4d: c7:12:a7:17:72:f4:2a:31:ee:55:20:e1:d4:37:01: f9:aa:f2:e3:4e:d4:f9:e5:ca:a3:53:ff:f4:0a:42: 4d:f5:93:e8:47:78:1b:89:f3:72:dc:75:3d:64:d1: 37:ea:c2:84:7c:2a:e1:f7:76:b6:7b:fb:76:f1:3f: c3:39:aa:69:28:24:c3:9e:84:85:89:85:b5:d4:c6: 9c:0c:22:d4:69:bc:58:3d:45:f8:3e:7e:d0:2f:c1: b6:56:28:86:fe:fa:08:51:31:e1:02:5f:db:b3:07: 22:a5:01:97:b6:f4:ff:3b:06:b7:8d:85:cc:59:bd: c4:15:de:49:7f:a0:22:96:ab:99:2d:9c:13:2f:ce: 99:1b:c3:9b:ec:67:3d:ff:95:a8:8b:1d:ed:fb:29: 74:37:bb:6d:03:78:cf:ef:84:69:79:63:83:16:40: a9:5c:fe:88:b8:33:41:cf:2e:a1:1f:7a:51:3c:41: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8B:D1:4A:AF:81:1C:04:75:25:20:31:B1:F4:42:AD:98:69:3D:7B X509v3 Authority Key Identifier: keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:bd:95:54:f0:f1:f9:2b:52:59:cd:41:6e:17:bd:1c:1c: 61:c4:ec:ae:42:d6:16:40:34:92:d0:23:e8:99:16:63:58:ab: 09:b3:88:16:e6:3e:dd:70:a3:88:2f:79:a6:a7:a9:ae:c1:4b: e8:04:5e:d8:d8:bb:32:34:c0:47:90:61:71:80:f7:02:d7:67: b5:21:30:cc:38:72:cf:d3:64:35:7e:89:1b:63:4c:42:72:7a: 7d:7f:f2:8f:42:ff:52:26:73:69:50:01:42:36:ca:15:5c:90: 35:a3:b2:4d:50:e7:b7:04:de:80:58:c7:58:41:f7:4e:47:6f: 35:58:e9:80:fe:e1:db:8e:86:72:3a:31:7c:7d:dd:4c:2c:e3: df:2a:98:05:00:28:83:47:94:82:b8:90:fd:6b:81:d2:7c:63: 5b:ad:6c:f8:6f:32:76:eb:fc:b2:4b:1e:2c:6e:b7:ae:b9:2f: 11:f3:4c:70:e6:b9:72:90:9a:d2:79:2f:56:0a:91:6a:cb:95: 7e:e1:67:ba:97:c4:bc:fa:77:99:8d:2b:8f:fd:1d:ed:09:18: 8a:e0:ed:61:f5:90:d1:be:9b:13:b6:07:cf:aa:02:4c:bc:be: 57:ef:41:70:e9:0e:86:b6:dc:c1:aa:d6:a0:a4:c9:63:b4:c2: 9e:9a:bf:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa2azoNP959GvEyX05rvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl Zjc1NWIwHhcNMjUxMjEwMDQwMTAwWhcNMjUxMjExMDQwMTAwWjAzMTEwLwYDVQQD Eyg2ZjhiZDE0YWFmODExYzA0NzUyNTIwMzFiMWY0NDJhZDk4NjkzZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTafc8OUZ0tyOR/9eVjOsuMxdzQH KvQc+87nkTkYCaNrUOtVYfVQ+KrSxutKXdnhvkZz/m2g2gFN7ex6YZ1ERSARYoLb G9IkHU3HEqcXcvQqMe5VIOHUNwH5qvLjTtT55cqjU//0CkJN9ZPoR3gbifNy3HU9 ZNE36sKEfCrh93a2e/t28T/DOappKCTDnoSFiYW11MacDCLUabxYPUX4Pn7QL8G2 ViiG/voIUTHhAl/bswcipQGXtvT/Owa3jYXMWb3EFd5Jf6AilquZLZwTL86ZG8Ob 7Gc9/5Woix3t+yl0N7ttA3jP74RpeWODFkCpXP6IuDNBzy6hH3pRPEE4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+L0UqvgRwEdSUgMbH0Qq2YaT17MB8GA1UdIwQY MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofy9lVTw 8fkrUlnNQW4XvRwcYcTsrkLWFkA0ktAj6JkWY1irCbOIFuY+3XCjiC95pqeprsFL 6ARe2Ni7MjTAR5BhcYD3AtdntSEwzDhyz9NkNX6JG2NMQnJ6fX/yj0L/UiZzaVAB QjbKFVyQNaOyTVDntwTegFjHWEH3TkdvNVjpgP7h246GcjoxfH3dTCzj3yqYBQAo g0eUgriQ/WuB0nxjW61s+G8yduv8skseLG63rrkvEfNMcOa5cpCa0nkvVgqRasuV fuFnupfEvPp3mY0rj/0d7QkYiuDtYfWQ0b6bE7YHz6oCTLy+V+9BcOkOhrbcwarW oKTJY7TCnpq/uA== -----END CERTIFICATE-----Generated at Wed Dec 10 13:24:10 2025 by rpki-client