This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json) Hash identifier: 3smUCM7YDLapyMWAyOX1CozPVhTVu7ATvWx6PQNHkow= Subject key identifier: D6:98:AC:C6:C4:36:3E:67:0F:0B:A9:53:09:D5:6E:0E:5A:24:13:F9 Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Certificate serial: 019B3CEC9A2403AF4F4EA4A1B3F052EA2C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft Manifest number: 0D5D Signing time: Sat 20 Dec 2025 18:01:37 +0000 Manifest this update: Sat 20 Dec 2025 18:01:37 +0000 Manifest next update: Sun 21 Dec 2025 18:01:37 +0000 Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=) 2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: adrGONgMhnwoRPq27QSrzyex6n+02+WhCSRJFL8fZJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9a:24:03:af:4f:4e:a4:a1:b3:f0:52:ea:2c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Validity Not Before: Dec 20 18:01:37 2025 GMT Not After : Dec 21 18:01:37 2025 GMT Subject: CN=d698acc6c4363e670f0ba95309d56e0e5a2413f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:7a:9b:e4:47:5e:19:b4:71:8e:06:98:c6: 35:3c:10:d9:57:07:08:81:fd:c8:de:74:06:e5:b0: a6:83:f8:ea:46:68:50:d5:45:10:17:52:ca:bc:90: 48:f5:69:41:67:fa:62:3e:94:ae:46:9d:f5:c0:57: eb:6b:48:78:5e:b3:10:4f:5e:8e:c3:b0:17:13:c3: a8:5f:c9:b3:fa:49:32:11:7e:46:c0:50:ff:d7:f4: 21:07:5b:af:99:ed:97:88:c7:23:80:ad:32:f7:13: 64:27:6e:1f:3a:fb:66:06:0c:ea:ba:0e:06:d8:0f: 3c:c5:fe:30:fb:d1:70:a6:a1:f6:e7:0a:d8:a5:cb: d3:2a:36:6a:30:63:f8:f6:21:f3:28:11:04:91:6d: 65:ef:3b:13:00:9e:91:ff:dc:7d:8c:10:45:1a:c7: 20:1c:56:91:12:cb:85:d3:93:ea:26:b5:f3:55:85: 4a:53:59:d0:05:f1:8a:32:41:44:44:be:e8:bb:36: 46:57:0d:e7:6c:74:17:41:6d:e6:0c:a6:26:41:28: 8b:54:a0:a8:3e:a5:63:14:b0:ee:50:9f:a2:4e:27: 64:2c:bd:b8:a0:88:0b:16:ef:4e:e3:63:6e:6f:f8: 55:26:ee:7e:1b:1f:3a:99:98:3b:08:37:30:e9:06: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:98:AC:C6:C4:36:3E:67:0F:0B:A9:53:09:D5:6E:0E:5A:24:13:F9 X509v3 Authority Key Identifier: keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:0a:52:8b:53:67:e8:54:00:a7:f4:46:bc:3a:4d:23:d4: 33:0f:5d:06:65:be:3f:25:55:e1:a2:4c:5f:1a:06:75:b1:16: ae:b7:62:93:35:c1:d4:54:d8:57:a5:2c:3d:f0:ed:fc:5b:9c: 5d:d0:b7:c2:4c:3a:e3:4d:83:4a:c4:0f:cc:41:8a:35:4c:63: 03:52:1a:30:5e:ab:d0:41:9c:c1:9b:d5:61:31:37:b0:c1:56: ef:8b:fd:87:90:0b:c8:bd:eb:33:1c:ad:d3:46:30:04:d0:eb: c6:f7:08:50:f8:37:e0:d1:5e:32:a0:05:21:d6:c1:5c:c4:78: 80:d3:76:5f:ef:db:f4:2b:3d:45:b9:af:cc:cb:ac:34:c5:96: 77:81:94:32:4b:ef:1c:60:1c:27:35:93:cd:03:03:da:17:de: 15:06:63:d3:e9:3e:7f:ef:ef:dd:a6:dd:e8:14:5f:61:0c:7c: 39:50:cf:06:26:df:19:47:f2:8b:66:0c:09:a9:85:df:24:b7: aa:7d:dd:c7:72:ef:f8:c6:f4:dd:9d:5a:71:67:69:5d:cd:93: 65:02:16:10:4d:ba:54:08:6b:5c:a1:bf:56:96:ea:c5:75:6a: cb:6b:37:7b:4c:92:b6:3b:8d:bc:3b:da:8b:41:8b:fe:e3:e0: 1b:14:0c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JokA69PTqShs/BS6ixzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl YzU4NjkwHhcNMjUxMjIwMTgwMTM3WhcNMjUxMjIxMTgwMTM3WjAzMTEwLwYDVQQD EyhkNjk4YWNjNmM0MzYzZTY3MGYwYmE5NTMwOWQ1NmUwZTVhMjQxM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCN6m+RHXhm0cY4GmMY1PBDZVwcI gf3I3nQG5bCmg/jqRmhQ1UUQF1LKvJBI9WlBZ/piPpSuRp31wFfra0h4XrMQT16O w7AXE8OoX8mz+kkyEX5GwFD/1/QhB1uvme2XiMcjgK0y9xNkJ24fOvtmBgzqug4G 2A88xf4w+9FwpqH25wrYpcvTKjZqMGP49iHzKBEEkW1l7zsTAJ6R/9x9jBBFGscg HFaREsuF05PqJrXzVYVKU1nQBfGKMkFERL7ouzZGVw3nbHQXQW3mDKYmQSiLVKCo PqVjFLDuUJ+iTidkLL24oIgLFu9O42Nub/hVJu5+Gx86mZg7CDcw6QZwAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaYrMbENj5nDwupUwnVbg5aJBP5MB8GA1UdIwQY MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt NjM3Y2ZkNzJiYWYwLzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqwKUotT Z+hUAKf0Rrw6TSPUMw9dBmW+PyVV4aJMXxoGdbEWrrdikzXB1FTYV6UsPfDt/Fuc XdC3wkw6402DSsQPzEGKNUxjA1IaMF6r0EGcwZvVYTE3sMFW74v9h5ALyL3rMxyt 00YwBNDrxvcIUPg34NFeMqAFIdbBXMR4gNN2X+/b9Cs9RbmvzMusNMWWd4GUMkvv HGAcJzWTzQMD2hfeFQZj0+k+f+/v3abd6BRfYQx8OVDPBibfGUfyi2YMCamF3yS3 qn3dx3Lv+Mb03Z1acWdpXc2TZQIWEE26VAhrXKG/VpbqxXVqy2s3e0yStjuNvDva i0GL/uPgGxQMxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:27:03 2025 by rpki-client