This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json) Hash identifier: vSKT6nnXV4kJuYO9P9M4hl9/Qql66EHkJDVrWJJNntA= Subject key identifier: 34:FF:2E:3A:C7:A4:EB:CF:2E:AD:75:37:6E:B7:FB:06:BE:3D:14:01 Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Certificate serial: 019B18A85CA7BC77D6D1FDA6F79AAB470859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft Manifest number: 0C67 Signing time: Sat 13 Dec 2025 17:00:45 +0000 Manifest this update: Sat 13 Dec 2025 17:00:45 +0000 Manifest next update: Sun 14 Dec 2025 17:00:45 +0000 Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=) 2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: GL4Ia28E6LTdOeVMpp5U+w3RlptQHgOBEJBJeqROdBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:5c:a7:bc:77:d6:d1:fd:a6:f7:9a:ab:47:08:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Validity Not Before: Dec 13 17:00:45 2025 GMT Not After : Dec 14 17:00:45 2025 GMT Subject: CN=34ff2e3ac7a4ebcf2ead75376eb7fb06be3d1401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:06:de:41:0f:5e:61:86:ed:9a:15:c7:ea: 1a:cb:1b:3b:e9:45:33:6a:4c:55:9c:d5:e2:99:03: 92:97:50:57:a7:3a:3c:5f:38:49:44:da:b7:c1:69: a9:9c:1d:70:35:b1:77:60:bb:62:f8:b8:0b:d1:4d: 65:b9:63:e2:c5:10:76:c0:74:a4:16:de:67:8e:c8: f9:31:7a:85:39:4b:3e:c2:70:7a:61:41:40:30:aa: a8:5c:4a:09:25:21:32:c3:34:32:8c:86:2e:9e:ad: 67:03:8a:fd:2b:c1:cd:0e:76:9c:49:ce:5f:f2:c6: 0f:8d:f0:50:b6:0a:c7:09:17:ce:dd:22:ac:08:09: ae:22:b4:f0:27:75:94:63:a0:84:78:b0:03:f7:16: bc:28:e2:c9:78:9b:58:f1:ec:ab:09:85:b1:cd:3a: 22:a7:3b:a9:64:14:b8:56:20:ad:e9:da:d2:62:33: 9e:ef:68:95:e0:8a:1b:8d:d1:b3:76:54:5a:65:8c: 91:e8:70:01:1b:78:8f:08:3b:17:20:33:14:94:0b: bf:55:77:42:98:56:da:0b:eb:6c:fe:f9:f4:16:47: 4e:69:45:19:9f:4e:fb:bd:83:cb:09:89:a6:ca:49: 38:5f:5f:6e:aa:28:6c:cb:4e:7c:88:02:13:97:a8: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FF:2E:3A:C7:A4:EB:CF:2E:AD:75:37:6E:B7:FB:06:BE:3D:14:01 X509v3 Authority Key Identifier: keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:59:29:e3:cd:1a:be:ba:28:07:c9:ad:c9:12:df:87:71:c4: fa:a3:ba:8c:bb:b2:02:c0:ad:ee:3d:c6:5f:3b:9f:ca:16:4e: 3f:04:df:ff:29:a9:4c:06:9b:ac:b5:ae:f8:ed:62:e5:82:d8: e5:58:4b:ed:31:68:46:72:ed:b3:53:8a:6b:09:af:c3:b4:62: 39:11:8e:61:32:c6:af:09:4e:1c:1b:be:28:8e:07:7d:8b:7b: 91:0a:e7:2b:99:3e:0a:c5:49:1d:39:2d:4d:ea:1e:76:97:dc: 1b:d6:10:f8:53:2d:50:50:4d:5d:c9:9d:ad:fb:c3:09:6f:af: 6a:53:d3:b9:ad:b9:0a:2b:c5:dc:c3:10:2a:f5:c3:7d:6b:96: f5:dd:29:04:48:c3:97:e3:b0:d7:f9:91:79:2e:85:1a:23:23: 0c:ab:c7:90:79:f4:9f:aa:5a:f3:7b:30:ae:cd:78:21:f0:f2: f6:d7:0a:b3:4d:6c:61:ce:c7:5b:ac:6b:d7:d5:a9:7c:18:f5: de:74:36:3e:e4:3a:0e:7f:46:56:55:0c:50:6e:7d:08:96:71: 7b:a9:d7:d0:ce:4a:4e:38:c2:eb:13:05:02:7b:a8:71:8a:33: 0b:3e:3a:13:25:08:e2:38:cc:0f:d9:46:56:9b:ce:fd:ab:fc: ea:02:47:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqFynvHfW0f2m95qrRwhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlM2FkYjU4YzEwOGI4YmIxM2U0M2MxNWVlYTNjNzg5OWI2 NGEzYWEwHhcNMjUxMjEzMTcwMDQ1WhcNMjUxMjE0MTcwMDQ1WjAzMTEwLwYDVQQD EygzNGZmMmUzYWM3YTRlYmNmMmVhZDc1Mzc2ZWI3ZmIwNmJlM2QxNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuugG3kEPXmGG7ZoVx+oayxs76UUz akxVnNXimQOSl1BXpzo8XzhJRNq3wWmpnB1wNbF3YLti+LgL0U1luWPixRB2wHSk Ft5njsj5MXqFOUs+wnB6YUFAMKqoXEoJJSEywzQyjIYunq1nA4r9K8HNDnacSc5f 8sYPjfBQtgrHCRfO3SKsCAmuIrTwJ3WUY6CEeLAD9xa8KOLJeJtY8eyrCYWxzToi pzupZBS4ViCt6drSYjOe72iV4IobjdGzdlRaZYyR6HABG3iPCDsXIDMUlAu/VXdC mFbaC+ts/vn0FkdOaUUZn077vYPLCYmmykk4X19uqihsy058iAITl6hOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT/LjrHpOvPLq11N263+wa+PRQBMB8GA1UdIwQY MBaAFK4621jBCLi7E+Q8Fe6jx4mbZKOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMt OGZiYjUxMjhhMmM5LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMtOGZiYjUxMjhhMmM5 LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVkp480a vrooB8mtyRLfh3HE+qO6jLuyAsCt7j3GXzufyhZOPwTf/ympTAabrLWu+O1i5YLY 5VhL7TFoRnLts1OKawmvw7RiORGOYTLGrwlOHBu+KI4HfYt7kQrnK5k+CsVJHTkt TeoedpfcG9YQ+FMtUFBNXcmdrfvDCW+valPTua25CivF3MMQKvXDfWuW9d0pBEjD l+Ow1/mReS6FGiMjDKvHkHn0n6pa83swrs14IfDy9tcKs01sYc7HW6xr19WpfBj1 3nQ2PuQ6Dn9GVlUMUG59CJZxe6nX0M5KTjjC6xMFAnuocYozCz46EyUI4jjMD9lG VpvO/av86gJHtw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:06 2025 by rpki-client