This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft File: jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json) Hash identifier: qB3a6ajfZ+PXl2QZG/MfbrB5E26WZJJlJxPmlvXhIAk= Subject key identifier: A8:B2:80:86:BD:5C:9B:B0:A8:D6:E6:53:52:D6:2F:19:15:F8:2A:54 Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 Certificate issuer: /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Certificate serial: 019B3C0FDAB1B4050B1CC477E4FCA19F965E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft Manifest number: 07AA Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: WOkyiKZXyZb_JE15v4JPZZ7_uas.roa (hash: uCxh+/x66loEAoXJHeu6h1m3ZKFFNdiPZwnHjwWElmQ=) 2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: y1fx1GcgNBBWpFYNa3/sVDZ3BeELX/tm9BI1o2qAPkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:da:b1:b4:05:0b:1c:c4:77:e4:fc:a1:9f:96:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797 Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=a8b28086bd5c9bb0a8d6e65352d62f1915f82a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:72:cf:dc:33:c8:bc:09:47:d1:70:42:51: a1:95:51:5b:d3:21:5f:4d:c8:8c:d5:1c:60:9a:54: 24:ab:7d:13:93:05:f6:8a:65:b5:f8:90:aa:7d:87: 30:e7:c7:27:7b:04:ac:09:e4:50:bf:9f:6b:f9:af: 44:1c:41:ee:f0:3a:59:2f:d6:3d:cd:d0:6e:c0:bc: b8:27:c4:a3:f8:2b:fd:35:35:94:5e:e8:e4:ea:0a: 2d:fb:4e:68:e4:fc:de:22:f5:73:b6:73:80:ce:ea: 70:79:a2:21:ba:2d:5f:e1:d5:04:b0:90:8e:e2:ec: 17:5d:cb:12:9b:5a:b8:5d:a6:19:fc:fd:4e:c3:aa: 6e:82:90:7c:c3:95:04:e3:c8:ea:69:b8:22:60:b5: ef:8b:bf:94:e1:5f:37:0e:e3:dc:1a:69:ed:31:2a: 60:6a:19:70:2d:20:33:24:ca:36:be:b8:ec:e7:e1: 3f:4b:cd:ab:26:e1:32:28:cd:90:1b:14:3a:24:d6: ae:e5:08:f5:11:67:7a:95:f8:82:71:ae:36:ef:75: 46:bb:53:df:57:13:6a:7b:ad:e9:7b:73:72:83:00: 8c:68:09:bc:89:2f:4d:b6:b2:ab:a7:f7:4e:15:3f: 99:87:03:78:14:9a:17:5d:4c:ce:1e:2b:2f:00:dc: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:80:86:BD:5C:9B:B0:A8:D6:E6:53:52:D6:2F:19:15:F8:2A:54 X509v3 Authority Key Identifier: keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d7:ad:6e:75:1a:49:a7:5f:9e:c1:02:25:77:0a:54:2e:c8: 6e:23:3f:48:fc:ee:42:6e:40:ab:67:c8:0b:1a:3f:40:f5:75: 2e:94:74:31:b1:28:da:0c:17:9b:8b:8b:47:c6:9b:de:a3:26: 0e:43:62:9a:99:14:95:20:7a:84:35:e2:a5:34:8d:66:7a:b5: 96:81:27:c6:84:39:45:dc:8a:a0:2b:cb:0d:e6:b6:ef:a5:3f: 7e:9b:a8:be:8a:98:b6:96:bf:11:ba:b9:51:80:cc:83:73:b4: bc:68:6e:d0:cc:0c:57:3f:22:a0:01:49:a1:59:59:5c:34:13: 8c:a6:d9:66:2f:85:d9:37:0c:99:0c:33:a0:94:e9:f1:57:8d: 3a:f4:30:4d:2a:da:d5:70:8d:97:aa:6e:69:36:48:d2:62:2b: 09:46:00:1e:df:26:4e:1a:0d:c0:c2:17:4f:89:7d:f4:69:40: 94:ad:01:9f:5c:77:82:c9:bf:98:02:a7:7f:8c:39:bf:e4:33: c0:10:bd:d1:6d:a6:c6:9b:d5:e2:e2:38:af:4a:4d:88:9b:63: 75:e0:ae:5a:fb:7c:2e:06:7f:f7:ae:4a:c1:a1:0f:8e:d8:5d: fe:94:3e:9f:de:87:e7:a7:ed:95:6d:41:07:89:3b:3c:a1:40: a3:f9:f3:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9qxtAULHMR35Pyhn5ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl ZWQ3OTcwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD EyhhOGIyODA4NmJkNWM5YmIwYThkNmU2NTM1MmQ2MmYxOTE1ZjgyYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEhyz9wzyLwJR9FwQlGhlVFb0yFf TciM1RxgmlQkq30TkwX2imW1+JCqfYcw58cnewSsCeRQv59r+a9EHEHu8DpZL9Y9 zdBuwLy4J8Sj+Cv9NTWUXujk6got+05o5PzeIvVztnOAzupweaIhui1f4dUEsJCO 4uwXXcsSm1q4XaYZ/P1Ow6pugpB8w5UE48jqabgiYLXvi7+U4V83DuPcGmntMSpg ahlwLSAzJMo2vrjs5+E/S82rJuEyKM2QGxQ6JNau5Qj1EWd6lfiCca4273VGu1Pf VxNqe63pe3NygwCMaAm8iS9NtrKrp/dOFT+ZhwN4FJoXXUzOHisvANwHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiygIa9XJuwqNbmU1LWLxkV+CpUMB8GA1UdIwQY MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt NGFhYjJkNjhmYTVhLzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANetbnUa SadfnsECJXcKVC7IbiM/SPzuQm5Aq2fICxo/QPV1LpR0MbEo2gwXm4uLR8ab3qMm DkNimpkUlSB6hDXipTSNZnq1loEnxoQ5RdyKoCvLDea276U/fpuovoqYtpa/Ebq5 UYDMg3O0vGhu0MwMVz8ioAFJoVlZXDQTjKbZZi+F2TcMmQwzoJTp8VeNOvQwTSra 1XCNl6puaTZI0mIrCUYAHt8mThoNwMIXT4l99GlAlK0Bn1x3gsm/mAKnf4w5v+Qz wBC90W2mxpvV4uI4r0pNiJtjdeCuWvt8LgZ/965KwaEPjthd/pQ+n96H56ftlW1B B4k7PKFAo/nzqA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:06:19 2025 by rpki-client