This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json) Hash identifier: ozu2f7T6DOsD/q5XR3DJGSMqATgzK0FItrB6IkC2UjA= Subject key identifier: 9E:A1:A4:81:7E:CE:1C:46:A8:AD:52:76:8F:61:F2:41:DC:86:04:4F Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Certificate serial: 019B3DC7F6FA58E8D6842788FEBC3875F376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft Manifest number: 0C31 Signing time: Sat 20 Dec 2025 22:01:13 +0000 Manifest this update: Sat 20 Dec 2025 22:01:13 +0000 Manifest next update: Sun 21 Dec 2025 22:01:13 +0000 Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=) 2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: qyMaBTF14NWNhLCoL+7HLjhP+nW214aLUmAhu5Sxyzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f6:fa:58:e8:d6:84:27:88:fe:bc:38:75:f3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Validity Not Before: Dec 20 22:01:13 2025 GMT Not After : Dec 21 22:01:13 2025 GMT Subject: CN=9ea1a4817ece1c46a8ad52768f61f241dc86044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:19:c7:87:5d:08:78:c0:ce:78:90:f4:e3: 10:d2:2c:c0:d2:a5:3d:2d:2e:3f:9e:80:ca:26:9c: 71:d7:63:12:ee:53:29:79:ea:04:14:45:0f:cc:ef: 5a:45:71:8f:f9:1c:3e:2b:aa:60:9e:c4:00:36:d0: 16:ee:7e:22:82:2f:28:b5:39:d5:ff:6b:1a:b2:2b: 20:90:bd:dc:e5:d4:26:fc:da:af:80:66:6a:07:a9: 69:c7:8f:60:43:1a:2c:0b:89:23:3f:c3:26:40:20: a8:8b:e2:14:7b:57:73:d6:87:b3:3a:bb:62:4f:e9: 9a:4a:1a:2e:80:5d:81:13:c2:9c:bf:82:ba:84:ac: 55:e2:bc:e1:59:30:92:b3:be:cf:37:11:10:30:60: 0e:7f:f3:e2:35:78:e9:d0:a8:55:d9:c6:57:f0:4e: 07:a8:95:af:af:31:c5:ab:93:d5:20:fa:d5:1c:33: 58:a8:e1:94:37:69:ce:56:c0:9b:43:e8:23:32:8e: de:f4:8a:7f:14:e7:59:70:b3:14:cd:50:b0:7d:5d: 5f:40:c5:41:82:56:41:08:4e:f2:c6:a8:90:9c:16: ac:79:7a:ca:11:82:d8:35:d0:f8:57:43:0b:6b:d5: 70:87:0e:fa:c3:9c:ee:f1:41:c6:ba:82:f3:bd:d5: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:A4:81:7E:CE:1C:46:A8:AD:52:76:8F:61:F2:41:DC:86:04:4F X509v3 Authority Key Identifier: keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ee:8b:e1:81:96:af:d7:9b:bd:bb:c4:07:07:6f:ab:90:20: e3:5a:b6:8f:fa:a7:60:b0:13:a3:ab:78:25:fc:73:fc:f1:bb: 50:9c:ec:66:ae:83:db:a9:03:37:af:62:2e:82:44:ee:0f:e8: 8a:bd:6a:d4:d2:0c:d2:9b:b1:21:98:c4:b6:8f:c6:99:64:f7: 32:85:53:3b:3e:d9:c9:34:b3:fb:75:14:35:e5:f3:e8:51:5e: 3e:03:10:1a:b4:d9:50:6b:2f:09:4c:bb:59:67:d9:01:eb:ac: 7d:fc:c0:2d:d3:d7:a1:99:6f:2f:ef:8e:14:ea:33:90:66:e7: a9:e7:ac:b7:0a:79:06:b8:be:b4:2f:3b:72:67:58:09:b5:67: 01:ce:f4:4f:41:5f:26:5e:50:a4:ce:5c:8b:be:b9:44:5b:fc: 99:65:6a:b8:89:58:b0:54:4e:e4:09:25:09:33:a5:5f:d7:69: 33:49:5a:d6:89:88:bb:1b:5f:fb:e0:89:30:de:3f:66:fe:04: 26:c0:57:c7:ab:e3:3d:47:b9:97:ef:dd:2a:41:9b:97:56:53: c8:4f:9e:eb:5d:19:d6:ea:33:2a:dd:52:83:bb:d5:13:ca:38: 82:a7:32:9f:37:d8:55:52:ea:c8:16:dd:e3:15:91:23:3c:0e: 35:ca:a1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/b6WOjWhCeI/rw4dfN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4 NzZjZDMwHhcNMjUxMjIwMjIwMTEzWhcNMjUxMjIxMjIwMTEzWjAzMTEwLwYDVQQD Eyg5ZWExYTQ4MTdlY2UxYzQ2YThhZDUyNzY4ZjYxZjI0MWRjODYwNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfoZx4ddCHjAzniQ9OMQ0izA0qU9 LS4/noDKJpxx12MS7lMpeeoEFEUPzO9aRXGP+Rw+K6pgnsQANtAW7n4igi8otTnV /2sasisgkL3c5dQm/NqvgGZqB6lpx49gQxosC4kjP8MmQCCoi+IUe1dz1oezOrti T+maShougF2BE8Kcv4K6hKxV4rzhWTCSs77PNxEQMGAOf/PiNXjp0KhV2cZX8E4H qJWvrzHFq5PVIPrVHDNYqOGUN2nOVsCbQ+gjMo7e9Ip/FOdZcLMUzVCwfV1fQMVB glZBCE7yxqiQnBaseXrKEYLYNdD4V0MLa9Vwhw76w5zu8UHGuoLzvdUt2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6hpIF+zhxGqK1Sdo9h8kHchgRPMB8GA1UdIwQY MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0 LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie6L4YGW r9ebvbvEBwdvq5Ag41q2j/qnYLATo6t4Jfxz/PG7UJzsZq6D26kDN69iLoJE7g/o ir1q1NIM0puxIZjEto/GmWT3MoVTOz7ZyTSz+3UUNeXz6FFePgMQGrTZUGsvCUy7 WWfZAeusffzALdPXoZlvL++OFOozkGbnqeestwp5Bri+tC87cmdYCbVnAc70T0Ff Jl5QpM5ci765RFv8mWVquIlYsFRO5AklCTOlX9dpM0la1omIuxtf++CJMN4/Zv4E JsBXx6vjPUe5l+/dKkGbl1ZTyE+e610Z1uozKt1Sg7vVE8o4gqcynzfYVVLqyBbd 4xWRIzwONcqhEA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:48 2025 by rpki-client