This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json) Hash identifier: SVovsKGyyVCSbuXC8WpY5d01ca9ObhxTaDP8a8vhzPU= Subject key identifier: 24:CF:EA:C0:B4:73:CD:C3:91:E8:FA:BD:23:E5:CB:62:B4:4D:C9:09 Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Certificate serial: 019B4BF22FE431452E0BAE0406C542A420A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft Manifest number: 0A4C Signing time: Tue 23 Dec 2025 16:02:01 +0000 Manifest this update: Tue 23 Dec 2025 16:02:01 +0000 Manifest next update: Wed 24 Dec 2025 16:02:01 +0000 Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=) 2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: xZcvaBapU0oK8RMPpfgQDD7BHNlM/TRk0qEf4A3Vazw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:2f:e4:31:45:2e:0b:ae:04:06:c5:42:a4:20:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Validity Not Before: Dec 23 16:02:01 2025 GMT Not After : Dec 24 16:02:01 2025 GMT Subject: CN=24cfeac0b473cdc391e8fabd23e5cb62b44dc909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:5f:b4:bd:b0:0f:8c:3e:80:72:2d:a4:40: 35:d4:8d:64:b7:d1:13:24:68:d9:68:ec:17:c6:82: 68:65:df:a7:95:27:4b:9f:34:17:63:53:1f:50:af: fc:cf:b8:7a:c2:57:d9:c3:2c:97:56:fb:93:b8:a2: a3:f1:f8:85:f5:68:15:20:f0:fd:5a:83:08:b9:64: fe:4c:f0:94:fe:8f:9f:c5:2c:ed:9e:8c:b8:00:9f: 53:06:68:ed:d6:c2:65:10:18:fd:ae:c6:64:60:e2: 30:9f:f8:9b:98:c0:c8:e4:54:18:ac:46:61:a5:50: c6:ad:8f:33:db:e0:77:27:27:bb:5a:49:8d:5a:26: db:90:25:09:8d:03:d0:7e:a3:da:36:b0:b7:54:f0: b2:79:47:19:44:a2:25:47:71:98:80:8e:7b:a6:28: 85:d4:f4:38:a2:4b:a6:43:79:53:a1:7a:ea:80:bb: 18:d8:55:1b:9f:c1:88:d2:0b:52:42:85:12:c4:57: 64:d8:12:2f:fa:73:9f:d6:cd:3f:4d:12:f2:58:56: 25:22:60:49:41:96:e7:ec:f1:ae:c7:75:81:9f:be: a6:fb:f1:33:27:d7:20:a5:60:34:3c:14:99:4e:50: 31:ca:db:43:d6:55:e7:a3:c0:24:f0:b2:00:62:33: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:EA:C0:B4:73:CD:C3:91:E8:FA:BD:23:E5:CB:62:B4:4D:C9:09 X509v3 Authority Key Identifier: keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:78:7e:10:4f:12:4f:3f:f8:19:97:86:a4:0e:d1:4c:05:8c: cf:7e:0c:d0:ed:44:fa:67:d5:b0:68:7f:a6:c4:0c:8f:96:fe: 20:be:31:be:0b:5b:22:e4:de:50:8b:e4:d4:6a:b7:e5:bf:18: 2a:72:15:0c:09:f8:f1:47:2f:c3:81:58:68:09:2c:b0:14:bb: 61:f6:b1:62:60:cb:d4:a8:a1:1e:24:df:90:a8:f7:91:36:3f: 03:68:77:d0:f3:8c:0d:27:c4:40:82:03:a5:29:05:34:d0:fd: ad:4e:ec:d6:6a:63:8c:60:8b:b6:03:dc:2b:e4:94:c2:aa:4f: 39:e8:0d:6f:cd:65:0d:88:fa:bc:e8:97:35:ee:8b:7b:e8:07: 96:a4:82:0b:f8:fd:26:13:6c:7a:c1:a2:51:c2:48:12:68:de: 6c:72:fd:22:29:ad:15:87:1f:2b:ec:d2:ad:46:7f:16:e2:ef: bc:92:8e:b8:23:0e:d4:d2:cd:99:cc:b5:d1:3a:b7:04:70:45: 65:63:ce:d5:7e:dc:8c:1b:c7:d9:8a:7c:ae:1e:d4:b0:f4:dd: 6b:e5:1f:b0:38:69:7a:7a:90:b4:49:10:ed:c4:59:e8:62:04: ea:20:d2:5d:a1:9b:0a:db:3c:7c:00:b8:1f:ed:5b:b8:04:9f: 4c:41:2b:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8i/kMUUuC64EBsVCpCCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjQzYWJiN2M1NzFhYWE5Y2UyMjNjZjYxYzQ3ZTU0Zjll MWNhM2IwHhcNMjUxMjIzMTYwMjAxWhcNMjUxMjI0MTYwMjAxWjAzMTEwLwYDVQQD EygyNGNmZWFjMGI0NzNjZGMzOTFlOGZhYmQyM2U1Y2I2MmI0NGRjOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA645ftL2wD4w+gHItpEA11I1kt9ET JGjZaOwXxoJoZd+nlSdLnzQXY1MfUK/8z7h6wlfZwyyXVvuTuKKj8fiF9WgVIPD9 WoMIuWT+TPCU/o+fxSztnoy4AJ9TBmjt1sJlEBj9rsZkYOIwn/ibmMDI5FQYrEZh pVDGrY8z2+B3Jye7WkmNWibbkCUJjQPQfqPaNrC3VPCyeUcZRKIlR3GYgI57piiF 1PQ4okumQ3lToXrqgLsY2FUbn8GI0gtSQoUSxFdk2BIv+nOf1s0/TRLyWFYlImBJ QZbn7PGux3WBn76m+/EzJ9cgpWA0PBSZTlAxyttD1lXno8Ak8LIAYjN0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTP6sC0c83Dkej6vSPly2K0TckJMB8GA1UdIwQY MBaAFI0kOrt8VxqqnOIjz2HEflT54co7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3Nzgt MTUxODVmNGRkOTU1LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3NzgtMTUxODVmNGRkOTU1 LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinh+EE8S Tz/4GZeGpA7RTAWMz34M0O1E+mfVsGh/psQMj5b+IL4xvgtbIuTeUIvk1Gq35b8Y KnIVDAn48Ucvw4FYaAkssBS7YfaxYmDL1KihHiTfkKj3kTY/A2h30POMDSfEQIID pSkFNND9rU7s1mpjjGCLtgPcK+SUwqpPOegNb81lDYj6vOiXNe6Le+gHlqSCC/j9 JhNsesGiUcJIEmjebHL9IimtFYcfK+zSrUZ/FuLvvJKOuCMO1NLNmcy10Tq3BHBF ZWPO1X7cjBvH2Yp8rh7UsPTda+UfsDhpenqQtEkQ7cRZ6GIE6iDSXaGbCts8fAC4 H+1buASfTEErhg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:27 2025 by rpki-client