This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json) Hash identifier: /C39VZFZSEvKym38dqUG1bqcnbTh13QZfdmDOWSCJ4g= Subject key identifier: 8A:62:B6:A6:0A:6F:54:61:6A:66:CB:5C:AB:F0:43:1B:76:35:30:12 Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Certificate serial: 019B43257F71A69441AF1240F504AB33A473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft Manifest number: 02AB Signing time: Sun 21 Dec 2025 23:01:29 +0000 Manifest this update: Sun 21 Dec 2025 23:01:29 +0000 Manifest next update: Mon 22 Dec 2025 23:01:29 +0000 Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=) 2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: 3yOxf2nIM6pnvjovqZBAPRU5yA34rfPPiNx87AXVCVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:7f:71:a6:94:41:af:12:40:f5:04:ab:33:a4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Validity Not Before: Dec 21 23:01:29 2025 GMT Not After : Dec 22 23:01:29 2025 GMT Subject: CN=8a62b6a60a6f54616a66cb5cabf0431b76353012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:c5:87:ad:0f:68:d0:d5:67:c4:de:8c:84: 00:d8:44:be:fc:58:7b:c4:65:a3:c4:a4:db:0e:e8: 17:2b:c7:ea:a3:1c:29:ff:bc:e2:eb:00:0e:d0:28: e0:1b:33:a3:9f:3d:8c:4c:9c:05:dd:e0:05:b3:39: 99:66:03:a5:cd:98:d8:fb:87:9f:68:4a:74:70:d0: 6c:fb:a6:b1:f4:f7:9b:c6:15:7a:59:00:d5:c7:88: f0:fe:43:04:18:0e:36:10:37:50:60:0b:cf:e4:03: 19:e9:df:1d:b7:1c:9f:ef:9b:4e:5b:b4:09:a4:50: 50:ee:bd:b5:e8:cd:3b:eb:17:2a:cd:89:7a:1c:50: 15:fa:28:37:7b:b2:ce:ed:d6:9e:76:77:ef:95:f1: 5e:a6:66:7c:c1:20:f2:46:19:e1:d1:13:67:11:71: be:3f:95:32:94:ed:fb:a6:1b:9e:60:f0:15:7d:02: a9:d3:aa:9c:4d:b2:2e:9d:71:b1:b1:88:be:08:ee: f2:2a:b4:59:8f:e9:85:fe:70:e6:b2:50:f7:81:44: ff:5a:35:43:df:93:0c:3d:fd:5f:d7:f4:5d:74:d5: 24:43:7a:dc:d7:6a:ea:9a:b1:f5:ec:a0:2b:3e:d9: 9b:28:e0:d6:62:90:94:61:e8:29:8e:f6:52:4a:e3: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:B6:A6:0A:6F:54:61:6A:66:CB:5C:AB:F0:43:1B:76:35:30:12 X509v3 Authority Key Identifier: keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e2:fb:b4:00:07:de:2f:58:92:4a:6d:74:27:32:87:4b:f1: 6e:01:97:9d:3b:75:61:68:74:f1:1a:bc:a8:c4:97:64:0f:5c: fb:58:65:fd:d3:4f:80:70:26:8f:d6:01:d7:de:7f:46:50:1b: 62:70:9e:d3:db:68:a8:72:0a:0a:a9:e8:a4:49:67:72:a1:8b: 48:22:60:0f:42:93:68:0c:b7:2a:b9:33:1d:83:32:ce:18:d0: ef:7a:81:76:0a:7d:7d:d8:95:6c:01:00:24:a6:f0:03:9c:82: ee:13:2e:5e:c8:d2:9e:4b:61:65:aa:e6:70:26:2a:9f:38:95: e9:22:ff:32:d1:1b:73:63:ad:8b:6c:62:3b:64:5b:9b:5c:9d: 27:fd:30:4e:50:21:30:fc:45:04:f2:1c:ef:29:0f:cb:6a:5b: 50:00:45:4a:18:61:80:9c:ec:55:03:32:81:49:20:6d:56:78: 2b:51:f9:e3:30:68:ec:e9:e7:a1:8a:89:d1:0a:c5:8b:38:b2: d8:27:0c:77:11:b4:c0:62:f5:fa:1a:b7:5e:3f:a4:dc:43:cf: a8:13:81:4a:3a:83:a9:72:fe:6c:67:05:09:90:f1:d3:20:40: 1a:2f:39:0d:51:a3:a1:1f:6d:25:53:36:61:7c:4e:41:82:ff: d8:e5:3e:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJX9xppRBrxJA9QSrM6RzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk YjU4OTgwHhcNMjUxMjIxMjMwMTI5WhcNMjUxMjIyMjMwMTI5WjAzMTEwLwYDVQQD Eyg4YTYyYjZhNjBhNmY1NDYxNmE2NmNiNWNhYmYwNDMxYjc2MzUzMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K3Fh60PaNDVZ8TejIQA2ES+/Fh7 xGWjxKTbDugXK8fqoxwp/7zi6wAO0CjgGzOjnz2MTJwF3eAFszmZZgOlzZjY+4ef aEp0cNBs+6ax9PebxhV6WQDVx4jw/kMEGA42EDdQYAvP5AMZ6d8dtxyf75tOW7QJ pFBQ7r216M076xcqzYl6HFAV+ig3e7LO7daednfvlfFepmZ8wSDyRhnh0RNnEXG+ P5UylO37phueYPAVfQKp06qcTbIunXGxsYi+CO7yKrRZj+mF/nDmslD3gUT/WjVD 35MMPf1f1/RddNUkQ3rc12rqmrH17KArPtmbKODWYpCUYegpjvZSSuPKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpitqYKb1RhambLXKvwQxt2NTASMB8GA1UdIwQY MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt NWYzY2Y5ZjNiNjE5LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5 LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOL7tAAH 3i9YkkptdCcyh0vxbgGXnTt1YWh08Rq8qMSXZA9c+1hl/dNPgHAmj9YB195/RlAb YnCe09toqHIKCqnopElncqGLSCJgD0KTaAy3KrkzHYMyzhjQ73qBdgp9fdiVbAEA JKbwA5yC7hMuXsjSnkthZarmcCYqnziV6SL/MtEbc2Oti2xiO2Rbm1ydJ/0wTlAh MPxFBPIc7ykPy2pbUABFShhhgJzsVQMygUkgbVZ4K1H54zBo7OnnoYqJ0QrFiziy 2CcMdxG0wGL1+hq3Xj+k3EPPqBOBSjqDqXL+bGcFCZDx0yBAGi85DVGjoR9tJVM2 YXxOQYL/2OU+oQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:31 2025 by rpki-client