This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json) Hash identifier: yB+O6iNM/hrVLmDrpJuJMixcuroPoLos6298WZlaKkM= Subject key identifier: C0:65:B4:9E:69:83:6B:29:CA:EF:15:FC:9E:02:83:AE:17:56:AD:DB Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c Certificate serial: 019B590814AA1857A7FB5B810EC7F48C98C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft Manifest number: 10A6 Signing time: Fri 26 Dec 2025 05:01:00 +0000 Manifest this update: Fri 26 Dec 2025 05:01:00 +0000 Manifest next update: Sat 27 Dec 2025 05:01:00 +0000 Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=) 2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: lBZJCQyaM6Tq6zuKl718remzz4mQI3vKrctU0VNrlFw=) 3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:14:aa:18:57:a7:fb:5b:81:0e:c7:f4:8c:98:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c Validity Not Before: Dec 26 05:01:00 2025 GMT Not After : Dec 27 05:01:00 2025 GMT Subject: CN=c065b49e69836b29caef15fc9e0283ae1756addb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:ae:53:a0:34:78:bf:da:f2:65:74:ff:de: 37:1d:d6:5a:06:7e:33:9a:cf:46:da:8b:ca:82:04: 87:db:89:de:7d:f1:82:47:b2:c7:7f:70:71:99:ad: 89:57:2e:fa:58:77:bc:4e:4a:4e:01:18:6b:35:ee: 41:3f:78:51:c3:6d:94:16:77:2d:18:60:54:70:2b: 39:71:5e:03:cf:c3:75:50:e0:0e:6a:41:6a:55:74: f6:fe:ac:c3:ca:ef:49:e7:30:15:d3:1b:a9:f9:7d: 4a:7d:ef:64:b0:7e:ee:90:5f:00:1b:f2:00:48:f3: d3:c1:5b:88:ff:2a:6c:86:4b:2c:aa:5c:a2:20:30: 38:93:61:3d:5d:7c:1e:5b:9c:60:1d:6d:d0:6d:38: c2:33:5c:53:31:f7:35:55:58:40:81:c2:d6:c7:77: c7:a3:e9:29:c6:50:23:2d:f7:b9:c8:42:f3:3d:c4: 21:84:2d:c8:77:6e:51:16:0e:04:ff:25:44:95:cc: ba:96:51:6c:35:dd:d8:36:2b:14:e2:ea:02:d7:b3: dd:dd:14:fb:e8:71:16:dd:f9:4b:50:51:2e:94:a4: 98:83:97:b2:9a:7d:94:9b:78:00:ea:68:56:c9:3d: 5c:5a:10:9a:93:e3:a1:ec:0f:9d:5e:2f:b3:cd:e2: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:B4:9E:69:83:6B:29:CA:EF:15:FC:9E:02:83:AE:17:56:AD:DB X509v3 Authority Key Identifier: keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:b1:32:c2:33:91:90:5e:bc:f8:f9:d6:70:d0:3d:aa:cc:42: a4:a1:f9:63:e8:66:bd:bc:f9:74:4b:64:75:4a:e2:24:ee:94: 10:e4:4f:23:64:da:c7:7b:4b:a3:eb:9f:44:d0:dd:f6:af:6f: b3:b1:a5:ec:97:aa:53:24:2f:53:3a:b2:0e:82:b9:c0:7d:85: 30:34:e7:4b:a8:85:c2:fc:47:47:cf:c1:f0:12:07:b7:e1:5d: a3:5c:71:44:f3:80:08:34:09:8d:67:a9:30:36:a2:40:1f:d6: 8c:02:a9:de:21:9e:76:41:df:f1:3e:82:d5:46:35:2f:0c:92: f0:a6:e8:2b:56:0b:91:d3:61:ac:40:f3:c6:3d:7c:36:e9:be: b5:31:9a:07:58:68:6a:cd:9d:07:84:d0:ee:dc:fd:29:3e:7b: 63:77:f6:0b:50:ab:9f:fe:ac:28:56:b2:d9:e1:35:16:0d:44: 5c:43:4f:0f:dc:c5:f1:12:76:b7:38:a5:6d:08:54:89:53:1e: 23:f2:58:e7:17:51:ca:09:37:86:50:55:84:17:4a:37:53:bf: b2:5d:51:60:b4:6e:6e:c6:9e:ea:50:7d:a2:5d:85:84:7d:8d: 5d:6a:b8:28:d8:94:51:a0:c9:d2:62:81:36:96:68:7f:2b:25: 71:eb:fd:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCBSqGFen+1uBDsf0jJjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1 MjU3OWMwHhcNMjUxMjI2MDUwMTAwWhcNMjUxMjI3MDUwMTAwWjAzMTEwLwYDVQQD EyhjMDY1YjQ5ZTY5ODM2YjI5Y2FlZjE1ZmM5ZTAyODNhZTE3NTZhZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFCuU6A0eL/a8mV0/943HdZaBn4z ms9G2ovKggSH24neffGCR7LHf3Bxma2JVy76WHe8TkpOARhrNe5BP3hRw22UFnct GGBUcCs5cV4Dz8N1UOAOakFqVXT2/qzDyu9J5zAV0xup+X1Kfe9ksH7ukF8AG/IA SPPTwVuI/ypshkssqlyiIDA4k2E9XXweW5xgHW3QbTjCM1xTMfc1VVhAgcLWx3fH o+kpxlAjLfe5yELzPcQhhC3Id25RFg4E/yVElcy6llFsNd3YNisU4uoC17Pd3RT7 6HEW3flLUFEulKSYg5eymn2Um3gA6mhWyT1cWhCak+Oh7A+dXi+zzeLAFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBltJ5pg2spyu8V/J4Cg64XVq3bMB8GA1UdIwQY MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt MzJmZjMxY2VlYzhiLzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4rEywjOR kF68+PnWcNA9qsxCpKH5Y+hmvbz5dEtkdUriJO6UEORPI2Tax3tLo+ufRNDd9q9v s7Gl7JeqUyQvUzqyDoK5wH2FMDTnS6iFwvxHR8/B8BIHt+Fdo1xxRPOACDQJjWep MDaiQB/WjAKp3iGedkHf8T6C1UY1LwyS8KboK1YLkdNhrEDzxj18Num+tTGaB1ho as2dB4TQ7tz9KT57Y3f2C1Crn/6sKFay2eE1Fg1EXENPD9zF8RJ2tzilbQhUiVMe I/JY5xdRygk3hlBVhBdKN1O/sl1RYLRubsae6lB9ol2FhH2NXWq4KNiUUaDJ0mKB NpZofyslcev9nw== -----END CERTIFICATE-----Generated at Fri Dec 26 12:51:39 2025 by rpki-client