This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json) Hash identifier: mls7bgkHGdvLASDgCCun/it5fQBvse8I4e22kbmO0Yo= Subject key identifier: 27:D1:0A:C1:B4:7F:3D:F5:61:38:B4:CA:C8:38:2B:EE:35:E6:2A:69 Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf Certificate serial: 019B39EB1AEF2B7A1437C63D8E95F3005B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft Manifest number: 13AD Signing time: Sat 20 Dec 2025 04:01:07 +0000 Manifest this update: Sat 20 Dec 2025 04:01:07 +0000 Manifest next update: Sun 21 Dec 2025 04:01:07 +0000 Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=) 2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: o80JR8jovJMo1hD3Jxb1GXBsD/jqnKJVhmlwRceDq9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1a:ef:2b:7a:14:37:c6:3d:8e:95:f3:00:5b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf Validity Not Before: Dec 20 04:01:07 2025 GMT Not After : Dec 21 04:01:07 2025 GMT Subject: CN=27d10ac1b47f3df56138b4cac8382bee35e62a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:71:75:e4:a5:e1:c5:3d:01:ba:dc:bc:31: 8e:f0:24:bb:09:25:15:5d:2b:b0:64:8c:df:9a:7d: ba:cc:5a:2f:20:1c:ba:1c:d0:f7:d3:c1:cd:9e:cf: 4c:f8:a6:fc:61:67:68:ae:69:bb:38:16:e1:f2:2f: 25:25:e0:33:aa:e3:4f:32:a8:9a:f1:e4:b8:aa:cd: 5a:0d:00:9b:31:c6:6c:a1:02:ed:98:02:34:86:7f: 26:7d:51:01:73:97:a8:53:70:c6:1c:68:86:ab:f9: a3:f9:e8:54:7c:95:24:34:da:0c:e9:a9:d1:3d:57: 50:bb:63:91:6c:b6:2c:22:ae:72:58:c1:55:dd:99: 8c:c6:ae:cd:64:9f:9b:b3:24:ab:c9:6a:d8:03:fe: 2d:ec:05:0c:ec:f7:f7:7f:da:e1:52:df:cd:10:56: 59:11:39:d1:9c:12:36:b5:c9:67:e8:9c:ff:0d:ec: c9:e0:ef:84:32:ef:83:3e:8c:85:89:9f:c4:34:bf: 41:10:97:75:41:d8:da:5c:66:b3:9a:af:ed:62:71: 13:4a:a5:4f:c0:d2:3c:4e:c9:ca:c4:0b:6e:31:bd: 65:17:79:5c:1c:f2:a1:9f:86:a5:ea:4a:b3:0f:e9: 9e:50:87:73:50:08:ca:3a:be:96:52:ee:b3:2e:18: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:0A:C1:B4:7F:3D:F5:61:38:B4:CA:C8:38:2B:EE:35:E6:2A:69 X509v3 Authority Key Identifier: keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:eb:69:4b:8a:cb:1c:ac:29:d8:da:27:f7:25:76:f7:52:e6: 64:5e:90:9b:69:20:ba:9a:a6:cb:54:c4:53:f1:5b:18:9d:92: bf:7a:7d:8c:da:3d:65:07:a7:7c:d1:78:ce:f1:89:cf:a4:74: cf:ec:df:20:69:78:25:af:cd:b3:8a:9a:1c:35:af:1e:89:5c: 10:7d:c5:11:c8:49:13:10:e7:60:52:13:c7:9e:6f:1d:26:b1: 12:d8:96:da:6f:00:2d:44:85:bc:17:04:fb:df:e3:ae:62:0d: 8d:36:7f:af:49:03:2e:e6:bc:69:a0:a5:60:a2:81:0a:c1:87: 60:77:c9:e0:26:cb:8c:bb:8a:25:f1:87:a0:e1:e6:cd:f4:7d: c3:fc:e8:18:a3:6b:90:f1:4f:63:93:b0:f0:e0:a6:f2:01:11: 9d:37:62:d0:e3:76:ad:ca:61:86:b0:78:24:1a:f1:d8:85:c7: 9f:91:27:0d:09:52:1f:c6:f3:d8:ef:44:76:0a:a5:e3:53:81: ad:47:4e:47:30:6c:f6:f5:e2:76:41:83:95:25:f9:25:0c:af: 4a:e2:35:e6:b7:a0:6b:11:36:e1:f6:b6:3b:4a:0a:28:0a:e3: fc:13:7c:f0:2f:1e:cb:4b:bd:c0:32:38:f4:ca:51:77:25:94: 66:1f:86:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xrvK3oUN8Y9jpXzAFsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk NzBmY2YwHhcNMjUxMjIwMDQwMTA3WhcNMjUxMjIxMDQwMTA3WjAzMTEwLwYDVQQD EygyN2QxMGFjMWI0N2YzZGY1NjEzOGI0Y2FjODM4MmJlZTM1ZTYyYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfNxdeSl4cU9AbrcvDGO8CS7CSUV XSuwZIzfmn26zFovIBy6HND308HNns9M+Kb8YWdormm7OBbh8i8lJeAzquNPMqia 8eS4qs1aDQCbMcZsoQLtmAI0hn8mfVEBc5eoU3DGHGiGq/mj+ehUfJUkNNoM6anR PVdQu2ORbLYsIq5yWMFV3ZmMxq7NZJ+bsySryWrYA/4t7AUM7Pf3f9rhUt/NEFZZ ETnRnBI2tcln6Jz/DezJ4O+EMu+DPoyFiZ/ENL9BEJd1QdjaXGazmq/tYnETSqVP wNI8TsnKxAtuMb1lF3lcHPKhn4al6kqzD+meUIdzUAjKOr6WUu6zLhheXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfRCsG0fz31YTi0ysg4K+415ippMB8GA1UdIwQY MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It MGFlNjk2YmQzNjhhLzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+tpS4rL HKwp2Non9yV291LmZF6Qm2kgupqmy1TEU/FbGJ2Sv3p9jNo9ZQenfNF4zvGJz6R0 z+zfIGl4Ja/Ns4qaHDWvHolcEH3FEchJExDnYFITx55vHSaxEtiW2m8ALUSFvBcE +9/jrmINjTZ/r0kDLua8aaClYKKBCsGHYHfJ4CbLjLuKJfGHoOHmzfR9w/zoGKNr kPFPY5Ow8OCm8gERnTdi0ON2rcphhrB4JBrx2IXHn5EnDQlSH8bz2O9Edgql41OB rUdORzBs9vXidkGDlSX5JQyvSuI15regaxE24fa2O0oKKArj/BN88C8ey0u9wDI4 9MpRdyWUZh+GBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:41:45 2025 by rpki-client