This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json) Hash identifier: Kt+w3b8i8MAOccaOUCWzoDibKROKbIHl8nxuo4zk5Mo= Subject key identifier: 95:A1:3D:81:AF:4C:94:22:E8:0A:CF:0D:9E:53:BD:56:BA:59:B3:FA Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6 Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6 Certificate serial: 019B3B6B4194C475B4DF25DC948FD3BBC16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 11:00:43 +0000 Manifest this update: Sat 20 Dec 2025 11:00:43 +0000 Manifest next update: Sun 21 Dec 2025 11:00:43 +0000 Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: tyQSMBKQ73qYTkZuyMf3Ovl64AvEtVSCGKhaTBlgNtI=) 2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=) 3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:41:94:c4:75:b4:df:25:dc:94:8f:d3:bb:c1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6 Validity Not Before: Dec 20 11:00:43 2025 GMT Not After : Dec 21 11:00:43 2025 GMT Subject: CN=95a13d81af4c9422e80acf0d9e53bd56ba59b3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:94:c7:38:0e:3a:16:3f:1c:06:26:b1:79: 76:33:78:b2:2f:d4:01:93:ba:4c:a8:dd:ce:35:7f: 0e:ed:09:3f:66:77:49:61:09:df:cb:8a:04:4a:b1: 78:01:31:23:3b:36:b4:9f:93:63:1a:06:55:cf:b6: 25:a1:3f:b9:f9:b1:71:f9:e6:8b:2b:5d:4c:1c:6e: fe:de:d0:d9:1f:8e:cc:4d:3e:ed:5b:eb:11:b6:5e: 35:4e:d6:09:db:d0:ce:7b:7e:01:37:78:a3:52:d7: 44:8e:64:53:fc:80:0f:5e:96:00:f6:ba:e2:52:9f: 2c:86:9b:9e:b6:f3:9c:af:eb:7f:00:89:d2:69:ac: b4:3c:6b:e7:dc:48:bc:61:42:c9:32:21:75:43:42: 47:d6:e2:96:ca:1a:78:13:f5:2e:c7:b7:65:2a:52: e1:69:c6:07:50:a3:ef:26:e9:fd:c8:8d:64:99:39: 03:9f:c6:66:a8:f6:35:ac:d1:e6:9a:7a:0e:a4:0d: 4c:ee:c3:1e:47:b9:65:be:45:08:19:53:28:11:62: 16:7c:ce:5e:ec:d1:f6:21:c4:67:fa:c8:dc:77:38: eb:26:e9:4f:e2:03:86:6d:2e:3b:eb:96:93:ad:c5: bc:b1:eb:44:96:d4:f3:66:4b:4a:10:89:5d:fc:67: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A1:3D:81:AF:4C:94:22:E8:0A:CF:0D:9E:53:BD:56:BA:59:B3:FA X509v3 Authority Key Identifier: keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:01:59:25:9e:15:44:f6:03:0e:8a:e2:5e:b1:c6:11:aa: aa:fe:30:82:7e:e0:59:0d:30:71:ac:1e:47:d3:d7:73:cd:24: e9:84:ea:03:2e:cc:ab:62:86:71:b1:7f:bc:ee:e8:79:2f:b6: 97:2e:42:8c:2e:e7:00:3c:f4:51:d3:eb:f4:66:03:62:93:69: b0:c1:63:f9:06:0b:4d:d2:9e:c1:f7:28:56:e7:28:25:1b:bf: 45:3d:50:fa:d3:e1:68:20:6d:b1:c3:db:68:54:1e:30:89:57: b7:15:93:48:1a:d6:cd:c9:91:9b:2a:fb:dc:b6:a2:a7:34:38: d3:03:e1:63:16:dd:a2:14:81:88:f3:25:45:d2:86:a7:f3:bf: 1c:33:4c:9e:75:cb:97:5c:19:f2:e2:38:24:ac:b1:2a:ad:ae: ee:11:4a:75:8d:49:d8:88:5f:36:74:68:52:d8:d6:4a:15:ff: 0d:1a:ca:08:7d:fb:24:69:9a:08:85:f4:03:12:3f:22:d1:ea: e3:f6:b9:db:b5:f3:ec:51:93:28:33:7b:81:66:26:a9:53:35: 99:54:8c:24:60:68:a2:d5:5c:83:76:65:22:20:14:1b:62:73: a8:db:0a:7c:a5:05:74:80:c1:8c:d8:a7:76:91:43:bf:6b:09: be:c4:f4:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0GUxHW03yXclI/Tu8FrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj NDlhZTYwHhcNMjUxMjIwMTEwMDQzWhcNMjUxMjIxMTEwMDQzWjAzMTEwLwYDVQQD Eyg5NWExM2Q4MWFmNGM5NDIyZTgwYWNmMGQ5ZTUzYmQ1NmJhNTliM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA106UxzgOOhY/HAYmsXl2M3iyL9QB k7pMqN3ONX8O7Qk/ZndJYQnfy4oESrF4ATEjOza0n5NjGgZVz7YloT+5+bFx+eaL K11MHG7+3tDZH47MTT7tW+sRtl41TtYJ29DOe34BN3ijUtdEjmRT/IAPXpYA9rri Up8shpuetvOcr+t/AInSaay0PGvn3Ei8YULJMiF1Q0JH1uKWyhp4E/Uux7dlKlLh acYHUKPvJun9yI1kmTkDn8ZmqPY1rNHmmnoOpA1M7sMeR7llvkUIGVMoEWIWfM5e 7NH2IcRn+sjcdzjrJulP4gOGbS4765aTrcW8setEltTzZktKEIld/Gf4JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWhPYGvTJQi6ArPDZ5TvVa6WbP6MB8GA1UdIwQY MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2YBWSWe FUT2Aw6K4l6xxhGqqv4wgn7gWQ0wcaweR9PXc80k6YTqAy7Mq2KGcbF/vO7oeS+2 ly5CjC7nADz0UdPr9GYDYpNpsMFj+QYLTdKewfcoVucoJRu/RT1Q+tPhaCBtscPb aFQeMIlXtxWTSBrWzcmRmyr73LaipzQ40wPhYxbdohSBiPMlRdKGp/O/HDNMnnXL l1wZ8uI4JKyxKq2u7hFKdY1J2IhfNnRoUtjWShX/DRrKCH37JGmaCIX0AxI/ItHq 4/a527Xz7FGTKDN7gWYmqVM1mVSMJGBootVcg3ZlIiAUG2JzqNsKfKUFdIDBjNin dpFDv2sJvsT0Kw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:14 2025 by rpki-client