This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json) Hash identifier: 6iv5X7VqAymbWUpvqYvJ+Wkj+YueZ2+BwKVkUXjCrd8= Subject key identifier: 01:29:91:26:02:52:2D:DD:D2:10:66:7A:16:85:E6:DB:A4:2A:A1:79 Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Certificate serial: 019B3E6C483033F0771C383C99469B59E87E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 01:00:42 +0000 Manifest this update: Sun 21 Dec 2025 01:00:42 +0000 Manifest next update: Mon 22 Dec 2025 01:00:42 +0000 Files and hashes: 1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=) 2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=) 3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: zXmuXNlGhAUdJLKn1ejkNidxhfHDRgF0bqg7TYXFhpw=) 4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=) 5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=) 6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:48:30:33:f0:77:1c:38:3c:99:46:9b:59:e8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Validity Not Before: Dec 21 01:00:42 2025 GMT Not After : Dec 22 01:00:42 2025 GMT Subject: CN=0129912602522dddd210667a1685e6dba42aa179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:15:9c:11:cf:6a:06:4e:51:b7:f2:51:9d: db:4b:8b:19:0b:38:e3:89:4b:4a:52:d8:d0:b3:da: 84:07:67:0f:b6:b7:18:ab:b8:6f:08:f1:a4:e5:d2: 66:93:75:7f:8c:15:ba:0d:c3:5e:d0:8b:cd:cf:02: 65:7a:68:26:31:74:83:79:10:e0:e1:63:23:56:27: a8:63:41:04:80:d2:79:97:47:27:ff:7b:1e:ea:c6: 59:4d:00:fe:49:8c:5f:bb:b2:fb:b3:fe:23:20:1c: 2c:14:35:27:79:57:ad:54:b5:a9:d0:c8:99:d5:00: 1b:30:8f:a9:06:3e:4f:a5:08:39:ef:26:75:7b:7c: c4:4a:f8:f1:88:c1:62:40:9a:1b:79:b8:07:8e:94: 42:6a:1d:04:91:f8:83:dc:44:18:e3:50:5d:2c:7d: c2:d9:0d:31:cf:a9:ec:73:61:8c:2f:49:c9:e4:6f: e1:d5:0d:71:88:ec:fc:49:85:4b:a2:db:a2:77:4c: 31:2e:30:59:11:76:34:e8:e5:9c:b8:2a:37:36:83: 44:61:02:3d:1a:42:4c:01:93:43:f0:ae:bc:96:53: f8:7f:a0:34:55:4e:5e:7e:7c:f2:88:15:a5:61:3e: 95:21:53:b5:1c:d8:62:0f:0a:68:81:5d:08:54:02: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:91:26:02:52:2D:DD:D2:10:66:7A:16:85:E6:DB:A4:2A:A1:79 X509v3 Authority Key Identifier: keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:a5:70:aa:32:df:0f:98:e1:15:91:f3:d3:79:3f:f8:fc: 20:77:d5:40:2b:3c:af:36:8b:cf:ba:59:2c:b8:8c:84:13:3c: 89:d4:66:04:f3:be:25:9a:a3:56:96:d5:eb:b9:6f:7b:8e:22: 49:70:6c:e8:92:12:5b:07:59:b5:f8:82:b4:59:e4:12:a7:18: 22:cb:f1:48:a8:e1:5f:1f:b0:5e:07:dc:e3:ea:26:ab:c8:8a: 4c:cd:6f:e8:42:5f:21:4f:9b:30:6f:ce:d3:04:a6:cc:8a:cb: 36:b0:22:d3:1d:23:da:f5:db:bb:4e:33:6d:39:96:67:7b:28: ad:54:48:8f:90:94:79:88:ab:60:74:d2:7c:11:04:11:82:b3: 84:d9:e2:f5:8e:ed:88:4b:b6:2c:85:eb:68:c7:2c:ba:7b:5e: 1f:91:c3:68:98:1d:00:40:ed:30:8b:fa:9c:0e:79:7c:0e:21: a3:65:2a:27:c4:cf:f9:50:86:02:05:03:1f:08:3d:5e:ca:57: ac:20:18:7b:fb:02:a7:89:68:a6:6e:51:fa:72:79:48:f2:70: 6d:df:54:55:a9:ce:77:4e:79:90:42:78:60:24:0d:98:3f:77: 8c:dc:55:b7:7c:40:a8:e9:3b:6a:39:3d:66:7f:05:d6:ac:78: 81:68:03:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEgwM/B3HDg8mUabWeh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2 Y2I3NGQwHhcNMjUxMjIxMDEwMDQyWhcNMjUxMjIyMDEwMDQyWjAzMTEwLwYDVQQD EygwMTI5OTEyNjAyNTIyZGRkZDIxMDY2N2ExNjg1ZTZkYmE0MmFhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppEVnBHPagZOUbfyUZ3bS4sZCzjj iUtKUtjQs9qEB2cPtrcYq7hvCPGk5dJmk3V/jBW6DcNe0IvNzwJlemgmMXSDeRDg 4WMjVieoY0EEgNJ5l0cn/3se6sZZTQD+SYxfu7L7s/4jIBwsFDUneVetVLWp0MiZ 1QAbMI+pBj5PpQg57yZ1e3zESvjxiMFiQJobebgHjpRCah0EkfiD3EQY41BdLH3C 2Q0xz6nsc2GML0nJ5G/h1Q1xiOz8SYVLotuid0wxLjBZEXY06OWcuCo3NoNEYQI9 GkJMAZND8K68llP4f6A0VU5efnzyiBWlYT6VIVO1HNhiDwpogV0IVAIFUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEpkSYCUi3d0hBmehaF5tukKqF5MB8GA1UdIwQY MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt MDEzN2IxZjc1ZDAyLzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddmlcKoy 3w+Y4RWR89N5P/j8IHfVQCs8rzaLz7pZLLiMhBM8idRmBPO+JZqjVpbV67lve44i SXBs6JISWwdZtfiCtFnkEqcYIsvxSKjhXx+wXgfc4+omq8iKTM1v6EJfIU+bMG/O 0wSmzIrLNrAi0x0j2vXbu04zbTmWZ3sorVRIj5CUeYirYHTSfBEEEYKzhNni9Y7t iEu2LIXraMcsunteH5HDaJgdAEDtMIv6nA55fA4ho2UqJ8TP+VCGAgUDHwg9XspX rCAYe/sCp4lopm5R+nJ5SPJwbd9UVanOd055kEJ4YCQNmD93jNxVt3xAqOk7ajk9 Zn8F1qx4gWgDgg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:44 2025 by rpki-client