This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json) Hash identifier: 1KwNMjEHvuA0a5U5CJ+43cQW+n+WvLB+Y7wCSlxSuMg= Subject key identifier: 58:D8:83:98:6D:74:80:1E:33:FA:45:76:94:87:55:98:46:3A:A7:DE Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a Certificate serial: 019B4B15965A170DE53E013C5BA5585EB012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft Manifest number: 0E85 Signing time: Tue 23 Dec 2025 12:01:04 +0000 Manifest this update: Tue 23 Dec 2025 12:01:04 +0000 Manifest next update: Wed 24 Dec 2025 12:01:04 +0000 Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: jOYRX79gTIKA0ZlfDLl7aG8Bj8mloyCP3GyEJd3q09M=) 2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:96:5a:17:0d:e5:3e:01:3c:5b:a5:58:5e:b0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a Validity Not Before: Dec 23 12:01:04 2025 GMT Not After : Dec 24 12:01:04 2025 GMT Subject: CN=58d883986d74801e33fa457694875598463aa7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:c6:bd:27:cc:ca:ac:ab:49:46:9e:47:ba: 0f:02:1a:25:07:e5:26:82:3b:b5:7c:fc:b4:68:f6: e8:a1:ed:43:16:72:de:23:a5:60:63:e5:d4:da:9f: 8c:14:7d:bf:24:81:03:5b:ca:fd:47:ce:cd:36:d8: 48:84:4b:12:66:09:81:8a:d7:bd:53:f2:13:a0:7d: b2:b3:44:61:df:c0:c0:68:89:b0:c2:25:1c:c3:2a: ca:8c:eb:c0:8e:75:6e:63:cf:1c:7e:ca:d3:ac:36: 85:ed:19:f2:e6:28:0a:4c:94:9c:f6:83:7e:d9:34: bd:51:4c:16:1b:31:a3:74:5d:02:a6:1d:b7:b5:5b: 67:3d:71:36:26:aa:04:d3:62:08:64:b4:35:21:51: c9:6e:b0:46:00:fc:08:81:da:54:e4:ff:4e:fd:94: 67:5a:52:b8:e5:85:83:4f:4f:1e:4e:fe:4f:63:a7: c9:2d:77:05:35:c5:68:75:47:aa:bc:ab:1a:95:4f: b0:0a:5a:fc:74:da:c5:e9:6f:3f:a8:12:59:98:6d: f1:e1:2d:cc:9c:3e:a6:d6:0a:24:11:a8:4f:9c:5b: 43:97:60:47:0f:b6:b5:ec:cc:14:c5:b0:f7:c8:5d: c6:08:24:4f:da:4b:67:88:fc:a2:66:c2:f7:b9:32: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:83:98:6D:74:80:1E:33:FA:45:76:94:87:55:98:46:3A:A7:DE X509v3 Authority Key Identifier: keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cc:bf:38:f3:dc:e0:e1:e3:6c:a5:eb:3b:e6:be:90:3a:55: 1b:8c:ec:e0:2b:4b:ac:02:2a:22:13:16:cd:ee:7a:72:75:5e: fd:b2:33:f1:9d:52:06:5c:5b:8c:47:70:c6:33:59:3e:21:cc: ef:2e:a6:cb:8f:81:9f:83:57:91:26:ad:cf:aa:ff:48:27:11: 8d:a3:7b:34:5f:d1:31:8a:43:70:50:0a:96:cb:ff:57:c8:4f: fc:61:d3:53:a9:1b:35:96:c1:65:eb:3b:27:bd:05:36:17:18: 79:92:ad:dc:67:90:b5:51:06:d5:90:76:c7:83:a8:7d:62:3e: 5c:22:f9:b5:6a:f4:1d:c2:e0:9f:38:48:a9:d5:c3:d0:af:bc: 00:e9:2c:1c:b5:ca:c4:0c:f8:f0:a7:77:94:c7:e8:87:b5:cb: b9:72:4b:80:fa:95:d5:95:ec:2f:1e:d0:5d:21:30:0b:45:25: 52:fb:8b:a3:65:28:04:06:17:d7:9d:ba:e0:e1:6d:a9:2a:f1: 2f:1a:e2:2a:29:3a:97:b0:19:5a:31:da:32:0f:dd:41:43:f7: a6:02:45:e1:aa:70:69:bb:15:b9:e0:78:f2:82:4e:2b:a0:6e: 7f:3f:93:cb:ce:a9:9f:ea:09:50:90:87:a2:d2:cb:e2:5b:ea: d4:08:2b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFZZaFw3lPgE8W6VYXrASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGQxMGQxMDlkZDkxMjU1Yzg0ZGQ2MjMwNzY0MTAwMjM3 NGZjM2EwHhcNMjUxMjIzMTIwMTA0WhcNMjUxMjI0MTIwMTA0WjAzMTEwLwYDVQQD Eyg1OGQ4ODM5ODZkNzQ4MDFlMzNmYTQ1NzY5NDg3NTU5ODQ2M2FhN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5XGvSfMyqyrSUaeR7oPAholB+Um gju1fPy0aPbooe1DFnLeI6VgY+XU2p+MFH2/JIEDW8r9R87NNthIhEsSZgmBite9 U/IToH2ys0Rh38DAaImwwiUcwyrKjOvAjnVuY88cfsrTrDaF7Rny5igKTJSc9oN+ 2TS9UUwWGzGjdF0Cph23tVtnPXE2JqoE02IIZLQ1IVHJbrBGAPwIgdpU5P9O/ZRn WlK45YWDT08eTv5PY6fJLXcFNcVodUeqvKsalU+wClr8dNrF6W8/qBJZmG3x4S3M nD6m1gokEahPnFtDl2BHD7a17MwUxbD3yF3GCCRP2ktniPyiZsL3uTICswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjYg5htdIAeM/pFdpSHVZhGOqfeMB8GA1UdIwQY MBaAFCaNENEJ3ZElXITdYjB2QQAjdPw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQt OWVhMjg2YmQ1NWZiLzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQtOWVhMjg2YmQ1NWZi LzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMy/OPPc 4OHjbKXrO+a+kDpVG4zs4CtLrAIqIhMWze56cnVe/bIz8Z1SBlxbjEdwxjNZPiHM 7y6my4+Bn4NXkSatz6r/SCcRjaN7NF/RMYpDcFAKlsv/V8hP/GHTU6kbNZbBZes7 J70FNhcYeZKt3GeQtVEG1ZB2x4OofWI+XCL5tWr0HcLgnzhIqdXD0K+8AOksHLXK xAz48Kd3lMfoh7XLuXJLgPqV1ZXsLx7QXSEwC0UlUvuLo2UoBAYX15264OFtqSrx LxriKik6l7AZWjHaMg/dQUP3pgJF4apwabsVueB48oJOK6Bufz+Ty86pn+oJUJCH otLL4lvq1AgrMQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:36:05 2025 by rpki-client