This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json) Hash identifier: DgtGMxd2Med0AIvt06mI2rSIUZSQ4yG8m0B4XWnHxZo= Subject key identifier: 63:B5:21:34:93:E2:D8:86:4D:B0:BA:29:63:FF:B3:92:78:AE:BF:91 Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d Certificate serial: 019B2B8A6FB4370FE76AA875E1FED313ED9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft Manifest number: 0AC3 Signing time: Wed 17 Dec 2025 09:00:51 +0000 Manifest this update: Wed 17 Dec 2025 09:00:51 +0000 Manifest next update: Thu 18 Dec 2025 09:00:51 +0000 Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: fL/bqmc8mqwrfEyrjxmILVQHVxfdItes/jI6UBgdM4Q=) 2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:6f:b4:37:0f:e7:6a:a8:75:e1:fe:d3:13:ed:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d Validity Not Before: Dec 17 09:00:51 2025 GMT Not After : Dec 18 09:00:51 2025 GMT Subject: CN=63b5213493e2d8864db0ba2963ffb39278aebf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:78:70:65:ee:01:82:ff:7b:ce:94:6b:78:2a: 90:b4:ef:fb:35:b4:35:52:13:e5:df:47:91:cf:e8: 6c:bc:87:36:08:37:9f:54:a2:45:f2:23:01:80:4d: 9b:49:be:d6:36:a9:6c:ed:7e:12:fd:a6:42:0c:0e: db:eb:5b:7f:06:1f:51:d6:d8:f3:aa:e6:73:3f:2d: d5:0b:97:40:a5:42:e2:7f:c6:69:57:04:37:5c:15: b5:7a:73:16:7c:46:bc:4f:f5:1b:93:ee:d0:67:39: 12:c3:cd:eb:fe:1b:97:e3:75:25:f5:c4:cc:33:ea: 91:86:21:e6:3e:6d:18:73:e2:88:c3:1f:f1:97:d8: fb:23:22:c5:b1:42:3f:a8:1a:f4:c8:ed:17:a6:b6: 78:37:af:c1:f9:ae:0f:df:71:b8:b4:27:da:b6:85: d5:58:8b:4c:ed:0c:a4:37:7c:f4:64:51:f8:2d:87: 0c:b2:08:68:19:cc:23:05:55:74:df:7c:66:be:6b: 33:82:82:e3:b0:20:14:fe:84:33:8f:12:a4:51:5c: 36:2b:5b:38:a5:ec:eb:6c:0c:23:ef:79:31:64:cf: 13:21:79:e6:f9:b5:f5:39:6c:5b:5c:55:27:41:de: cf:41:00:52:96:77:b6:23:12:4c:bb:86:0b:1d:e9: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:21:34:93:E2:D8:86:4D:B0:BA:29:63:FF:B3:92:78:AE:BF:91 X509v3 Authority Key Identifier: keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b1:bd:d2:bf:ab:c8:39:a5:99:b0:d2:24:99:ec:7e:d3:37: ff:2d:b7:3d:1a:ba:3c:a0:db:0e:07:38:4e:96:00:60:30:7b: d4:da:d5:48:0b:61:33:b6:2c:30:0e:25:2a:48:ec:95:8c:ad: eb:c2:a5:f4:45:ea:e8:56:35:e8:ea:5d:28:f8:11:79:54:45: 37:13:9b:2f:67:ce:cf:3d:51:99:a6:92:00:bd:ec:52:15:fd: cd:7d:e9:3d:01:50:b7:0b:52:d9:a1:c5:ca:21:4d:8c:84:da: 66:ce:24:81:e7:a9:41:55:e5:48:31:d2:35:a7:8f:2b:20:b3: 90:47:75:aa:c1:f5:75:ed:83:9e:fb:92:be:0c:c7:d9:d8:62: 88:06:57:5c:9b:13:80:c7:d8:6f:1a:9f:7a:f5:89:4f:c0:e9: 04:7e:23:6f:f5:41:0b:2a:9f:1d:80:ec:95:dd:68:06:82:7c: e6:f4:0c:8f:93:b0:f7:b5:56:13:64:27:79:b9:a9:ec:36:af: 8c:00:de:30:4c:68:8a:46:7f:be:70:10:70:01:dc:ef:bb:c5: 13:61:83:36:8d:07:04:7a:f2:5c:14:81:6d:1b:ca:f5:e6:e2: 52:6e:59:5c:45:0b:e6:ee:dd:97:d1:e2:cb:82:ca:fd:b2:95: f4:ea:60:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrim+0Nw/naqh14f7TE+2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTNkYTUwZTg3OWJiYTdkN2NmZjRmMDdkMmNhYTVlOWMw MTA4N2QwHhcNMjUxMjE3MDkwMDUxWhcNMjUxMjE4MDkwMDUxWjAzMTEwLwYDVQQD Eyg2M2I1MjEzNDkzZTJkODg2NGRiMGJhMjk2M2ZmYjM5Mjc4YWViZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nhwZe4Bgv97zpRreCqQtO/7NbQ1 UhPl30eRz+hsvIc2CDefVKJF8iMBgE2bSb7WNqls7X4S/aZCDA7b61t/Bh9R1tjz quZzPy3VC5dApULif8ZpVwQ3XBW1enMWfEa8T/Ubk+7QZzkSw83r/huX43Ul9cTM M+qRhiHmPm0Yc+KIwx/xl9j7IyLFsUI/qBr0yO0XprZ4N6/B+a4P33G4tCfatoXV WItM7QykN3z0ZFH4LYcMsghoGcwjBVV033xmvmszgoLjsCAU/oQzjxKkUVw2K1s4 pezrbAwj73kxZM8TIXnm+bX1OWxbXFUnQd7PQQBSlne2IxJMu4YLHem7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO1ITST4tiGTbC6KWP/s5J4rr+RMB8GA1UdIwQY MBaAFCRT2lDoebun18/08H0sql6cAQh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZQYVVPaDV1NmZYel9Ud2ZTeXFYcHdCQ0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZjc4Y2YtMzI2MC00MzNiLTllOTEt ZTQzYTUyYjYwNGNhLzEvSkZQYVVPaDV1NmZYel9Ud2ZTeXFYcHdCQ0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZjc4Y2YtMzI2MC00MzNiLTllOTEtZTQzYTUyYjYwNGNh LzEvSkZQYVVPaDV1NmZYel9Ud2ZTeXFYcHdCQ0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLG90r+r yDmlmbDSJJnsftM3/y23PRq6PKDbDgc4TpYAYDB71NrVSAthM7YsMA4lKkjslYyt 68Kl9EXq6FY16OpdKPgReVRFNxObL2fOzz1RmaaSAL3sUhX9zX3pPQFQtwtS2aHF yiFNjITaZs4kgeepQVXlSDHSNaePKyCzkEd1qsH1de2DnvuSvgzH2dhiiAZXXJsT gMfYbxqfevWJT8DpBH4jb/VBCyqfHYDsld1oBoJ85vQMj5Ow97VWE2Qnebmp7Dav jADeMExoikZ/vnAQcAHc77vFE2GDNo0HBHryXBSBbRvK9ebiUm5ZXEUL5u7dl9Hi y4LK/bKV9OpgEA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:17:00 2025 by rpki-client