This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json) Hash identifier: U8E64hl9PBEKdTJ1EMvkW4Q8NBPeMGgiR8myHhuVN38= Subject key identifier: 8C:33:82:C2:3F:A6:BF:3A:AD:92:2A:02:AD:C6:5A:5E:05:73:61:93 Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Certificate serial: 019B2C9D42BF60867EA8FCC7F33CDD2B08B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft Manifest number: 1662 Signing time: Wed 17 Dec 2025 14:01:02 +0000 Manifest this update: Wed 17 Dec 2025 14:01:02 +0000 Manifest next update: Thu 18 Dec 2025 14:01:02 +0000 Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=) 2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: zJ5XOSnH4/9zHruGQUXHrql8F2+DM+n+KuZ8S1ee5S8=) 3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:42:bf:60:86:7e:a8:fc:c7:f3:3c:dd:2b:08:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Validity Not Before: Dec 17 14:01:02 2025 GMT Not After : Dec 18 14:01:02 2025 GMT Subject: CN=8c3382c23fa6bf3aad922a02adc65a5e05736193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:4a:64:bf:cd:c5:70:af:30:db:ac:72:21: 10:fd:78:d6:34:38:e2:5d:d9:05:b4:78:a4:2a:f5: b6:80:af:6a:d5:d5:ca:c9:9c:56:40:14:65:b5:64: 4e:83:7d:91:f8:05:f3:c1:4d:17:7a:e5:57:92:ca: df:c8:7f:d8:39:13:89:45:e3:ae:a6:40:f8:e8:48: b6:71:48:df:ed:0a:e9:14:98:40:c0:15:68:9e:4f: 37:13:c2:0a:fb:b9:c8:41:f5:54:8a:30:17:e4:42: 0a:89:5a:82:77:0c:82:66:d0:64:31:88:08:51:38: 88:ba:ad:53:9b:a4:8e:15:de:48:37:f9:0d:1f:e2: 2e:c5:61:b6:87:34:a4:fc:ba:40:49:3e:59:ab:df: 07:33:07:2b:80:73:31:bb:98:2d:04:10:19:79:b9: 14:17:63:c2:6e:9b:82:a4:c9:73:1b:ee:da:aa:01: b9:b8:2f:ac:d4:be:16:eb:de:ff:6e:6e:98:e0:45: 8f:e8:a3:da:db:16:a0:8a:0b:62:d8:75:1e:1d:c8: b2:cb:65:17:75:48:c1:78:ce:fb:0a:39:f4:a1:e7: f4:b2:0f:45:5d:73:55:bc:d9:a4:04:7f:47:a9:b9: 40:a2:f2:3b:ff:61:3e:fe:50:fc:36:ab:27:11:35: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:82:C2:3F:A6:BF:3A:AD:92:2A:02:AD:C6:5A:5E:05:73:61:93 X509v3 Authority Key Identifier: keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0e:69:4b:9e:7e:77:85:c1:78:e0:0d:3a:47:ee:83:65:85: 5a:bb:59:56:42:c8:49:b1:ae:0b:8e:48:1c:4f:d4:f0:b9:b4: a2:4e:6b:f7:8e:cc:22:30:b1:93:a4:93:f7:a2:32:67:cf:b0: 7b:c4:ba:eb:d7:92:b3:0e:4b:54:b5:e7:f7:3a:77:ce:c7:d7: 97:74:06:41:bf:b7:d4:1b:85:f7:23:a4:87:9d:dc:9d:4d:9c: 93:04:ab:ee:6a:5b:de:af:a7:69:c3:2a:91:c8:42:e0:d3:b0: 33:ae:45:a0:bd:4f:95:70:b0:8f:e9:af:72:56:e2:0d:49:94: 5a:61:bc:49:1d:72:fe:87:95:6a:80:a9:99:d3:e9:43:37:5c: 14:7c:b3:c8:b6:1e:26:8c:d6:31:87:f0:8d:72:15:ce:eb:98: dd:80:9d:96:3f:c7:f2:8f:cb:c9:7a:4e:cf:fb:33:5b:84:24: 03:44:b3:8b:f9:98:c1:0b:78:62:c1:c4:d4:13:e2:65:8b:91: 2e:35:18:0a:20:84:50:3d:c8:09:81:56:71:50:c1:c3:e5:76: cd:42:4c:fe:ca:ef:34:72:10:2a:08:1f:c9:e0:66:ca:28:15: 95:62:62:7d:c0:97:18:44:e3:cc:05:99:d6:5b:b0:93:99:8f: b5:3b:6a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnUK/YIZ+qPzH8zzdKwiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0 ODU3YzYwHhcNMjUxMjE3MTQwMTAyWhcNMjUxMjE4MTQwMTAyWjAzMTEwLwYDVQQD Eyg4YzMzODJjMjNmYTZiZjNhYWQ5MjJhMDJhZGM2NWE1ZTA1NzM2MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwBKZL/NxXCvMNusciEQ/XjWNDji XdkFtHikKvW2gK9q1dXKyZxWQBRltWROg32R+AXzwU0XeuVXksrfyH/YOROJReOu pkD46Ei2cUjf7QrpFJhAwBVonk83E8IK+7nIQfVUijAX5EIKiVqCdwyCZtBkMYgI UTiIuq1Tm6SOFd5IN/kNH+IuxWG2hzSk/LpAST5Zq98HMwcrgHMxu5gtBBAZebkU F2PCbpuCpMlzG+7aqgG5uC+s1L4W697/bm6Y4EWP6KPa2xagigti2HUeHciyy2UX dUjBeM77Cjn0oef0sg9FXXNVvNmkBH9HqblAovI7/2E+/lD8NqsnETXNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwzgsI/pr86rZIqAq3GWl4Fc2GTMB8GA1UdIwQY MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0 LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA5pS55+ d4XBeOANOkfug2WFWrtZVkLISbGuC45IHE/U8Lm0ok5r947MIjCxk6ST96IyZ8+w e8S669eSsw5LVLXn9zp3zsfXl3QGQb+31BuF9yOkh53cnU2ckwSr7mpb3q+nacMq kchC4NOwM65FoL1PlXCwj+mvclbiDUmUWmG8SR1y/oeVaoCpmdPpQzdcFHyzyLYe JozWMYfwjXIVzuuY3YCdlj/H8o/LyXpOz/szW4QkA0Szi/mYwQt4YsHE1BPiZYuR LjUYCiCEUD3ICYFWcVDBw+V2zUJM/srvNHIQKggfyeBmyigVlWJifcCXGETjzAWZ 1luwk5mPtTtqVA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:27 2025 by rpki-client