This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json) Hash identifier: z/ZXIqaG6VpFB7HgTF8bqnvINf/9vwu6yQ9zr3Hwe2g= Subject key identifier: FA:5F:23:DC:B4:24:7B:79:2A:E0:0F:68:92:8C:19:4C:65:78:B8:A6 Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f Certificate serial: 019B4DDF735C75FF7BF7F15B0988FC22318B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 01:00:48 +0000 Manifest this update: Wed 24 Dec 2025 01:00:48 +0000 Manifest next update: Thu 25 Dec 2025 01:00:48 +0000 Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: Ekjoq7WFwh0lxBNK5/xirRDe+uASwG6384R453J+eoU=) 2: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=) 3: ux92dho2cYr-1uH_cggrGiXNZ3c.roa (hash: gSDKdScN6Ai8I+kzsJX0oBNCs37fov6KbILBlfyfoo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:73:5c:75:ff:7b:f7:f1:5b:09:88:fc:22:31:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f Validity Not Before: Dec 24 01:00:48 2025 GMT Not After : Dec 25 01:00:48 2025 GMT Subject: CN=fa5f23dcb4247b792ae00f68928c194c6578b8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:32:79:e1:40:c4:87:fe:ba:84:65:a8:4c: 2f:f3:0b:2b:4a:17:92:09:32:76:20:4e:a5:23:41: cb:10:b6:81:fc:25:3b:0e:3c:07:88:3d:1a:e3:9b: e8:49:fb:bd:71:ee:47:e9:e8:b1:6f:79:90:da:fd: df:fe:57:bf:36:55:77:0e:89:06:f0:db:89:e8:04: a3:5f:6a:9c:dc:8e:7e:4a:f5:8c:5d:89:ba:0f:43: de:b6:3c:77:a3:3f:86:7c:0f:26:bd:d9:ff:48:1f: 09:88:b8:9e:be:1d:81:ae:2b:64:b9:b1:53:5d:88: 45:2c:00:d8:06:d3:4b:32:9f:5b:be:9a:11:5d:bd: 31:52:fb:56:c3:45:9e:0d:d0:3b:d2:ca:53:81:74: 9b:c9:5b:13:ab:1c:f0:2d:0e:d2:41:e5:76:79:6b: a2:7f:70:11:df:56:a3:0b:03:c0:79:2a:ee:56:e7: 6d:b1:c2:84:b5:f4:15:8f:1c:12:e9:83:6d:08:3a: 19:30:84:c5:70:b8:d6:9f:79:fe:0e:48:42:d9:d4: 68:c7:0a:1f:77:26:49:63:5b:2f:d1:c8:1a:01:91: 58:1d:e8:8e:53:c5:eb:b9:bb:59:8f:ec:0e:23:cc: c0:39:b6:0d:72:3a:9f:a8:7d:4e:59:65:90:bd:a5: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5F:23:DC:B4:24:7B:79:2A:E0:0F:68:92:8C:19:4C:65:78:B8:A6 X509v3 Authority Key Identifier: keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:4f:43:f5:59:99:c1:2f:0a:cf:f3:6d:9a:97:23:fe:44:cd: 46:5f:82:6e:e8:74:75:03:9c:06:f7:8d:8b:1b:d1:04:74:5d: 50:93:cd:44:db:12:47:ac:89:59:50:e3:18:d5:20:63:da:98: 27:59:f9:68:e4:8f:9c:92:11:d9:17:f0:c8:d8:52:89:e4:15: b4:58:63:43:a8:1e:2d:6a:d3:0f:06:1a:fc:0a:21:b8:99:76: 5e:e8:2b:6e:47:fa:f1:eb:74:d2:54:e8:b8:39:f6:e3:f8:eb: 2d:91:f1:fe:bf:35:15:4d:60:2b:4d:37:00:8a:8d:88:83:b0: 52:6a:10:5f:ef:fe:b6:18:ff:f2:b4:8d:be:ae:f2:03:18:23: 7b:b7:ba:ac:13:31:a1:bb:27:e6:06:3f:9c:90:48:2e:a6:7e: f0:39:81:4b:81:ae:da:15:fd:54:b4:23:de:c1:4a:80:94:6c: 24:0c:4f:03:49:41:be:f8:3a:68:91:49:77:eb:f1:86:ec:4f: bb:98:a7:1b:21:a3:81:53:06:9c:7e:9b:ab:20:b9:a4:b0:5a: 71:1e:ec:72:5d:c2:11:29:ba:01:da:2b:14:b9:7a:a6:6d:b8: 62:51:b3:af:1a:79:6a:1d:4d:b5:87:4a:0a:e6:97:17:cb:5e: e5:54:71:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN33Ncdf979/FbCYj8IjGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw ZDU0NGYwHhcNMjUxMjI0MDEwMDQ4WhcNMjUxMjI1MDEwMDQ4WjAzMTEwLwYDVQQD EyhmYTVmMjNkY2I0MjQ3Yjc5MmFlMDBmNjg5MjhjMTk0YzY1NzhiOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/IyeeFAxIf+uoRlqEwv8wsrSheS CTJ2IE6lI0HLELaB/CU7DjwHiD0a45voSfu9ce5H6eixb3mQ2v3f/le/NlV3DokG 8NuJ6ASjX2qc3I5+SvWMXYm6D0Petjx3oz+GfA8mvdn/SB8JiLievh2BritkubFT XYhFLADYBtNLMp9bvpoRXb0xUvtWw0WeDdA70spTgXSbyVsTqxzwLQ7SQeV2eWui f3AR31ajCwPAeSruVudtscKEtfQVjxwS6YNtCDoZMITFcLjWn3n+DkhC2dRoxwof dyZJY1sv0cgaAZFYHeiOU8XrubtZj+wOI8zAObYNcjqfqH1OWWWQvaX0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpfI9y0JHt5KuAPaJKMGUxleLimMB8GA1UdIwQY MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0 LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxU9D9VmZ wS8Kz/Ntmpcj/kTNRl+Cbuh0dQOcBveNixvRBHRdUJPNRNsSR6yJWVDjGNUgY9qY J1n5aOSPnJIR2RfwyNhSieQVtFhjQ6geLWrTDwYa/AohuJl2Xugrbkf68et00lTo uDn24/jrLZHx/r81FU1gK003AIqNiIOwUmoQX+/+thj/8rSNvq7yAxgje7e6rBMx obsn5gY/nJBILqZ+8DmBS4Gu2hX9VLQj3sFKgJRsJAxPA0lBvvg6aJFJd+vxhuxP u5inGyGjgVMGnH6bqyC5pLBacR7scl3CESm6AdorFLl6pm24YlGzrxp5ah1NtYdK CuaXF8te5VRxaA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:02 2025 by rpki-client