This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json) Hash identifier: mzCqPWtcuBy68puEO7gTSB0KYUanUgQfsiWzTdYOYV4= Subject key identifier: 20:16:DA:D1:26:E1:35:01:B9:C4:67:82:83:AB:7E:7B:A2:6B:33:45 Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Certificate serial: 019B3D5A6D76DF848209AB9CEDC00E962065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft Manifest number: 02A8 Signing time: Sat 20 Dec 2025 20:01:34 +0000 Manifest this update: Sat 20 Dec 2025 20:01:34 +0000 Manifest next update: Sun 21 Dec 2025 20:01:34 +0000 Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=) 2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: DPrQEl/viXGyo9mkpsIbh5sGcuRK02dWSXxroJ/dssw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:6d:76:df:84:82:09:ab:9c:ed:c0:0e:96:20:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Validity Not Before: Dec 20 20:01:34 2025 GMT Not After : Dec 21 20:01:34 2025 GMT Subject: CN=2016dad126e13501b9c4678283ab7e7ba26b3345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:d2:bb:8b:2b:e6:1a:d0:ac:c5:9a:e4:50: c4:ac:f8:fd:a3:6b:55:c7:ae:9f:34:bf:3a:6d:4c: 96:d2:8f:93:72:f9:32:e4:2a:d8:2c:30:e0:79:04: c6:9e:76:86:14:ac:94:71:7c:bc:8b:85:e5:d2:4f: ee:04:bf:f1:a4:f1:0d:c8:eb:93:3f:e7:e6:77:ff: d3:70:5b:06:61:b5:0e:56:be:9e:9a:19:f6:bc:8e: 8a:a9:b3:0e:80:17:8d:f1:24:0d:50:0d:83:4c:c8: eb:db:9c:da:74:2e:e7:53:42:01:7e:e6:4f:49:67: 5a:bc:b3:2e:d6:33:63:12:23:36:3d:8e:67:59:83: 9f:85:ac:f1:de:49:fb:fc:e3:92:26:83:90:7a:b0: f3:2d:45:ec:26:ca:39:89:54:f5:0d:b7:ee:f9:fb: f0:5e:49:35:8b:ba:95:df:c7:ea:70:df:07:14:bd: b9:61:c2:e3:f0:e5:20:99:86:f0:e7:e0:2a:8b:e9: e6:df:d1:fb:84:aa:33:0a:62:a1:d0:37:24:ea:eb: 58:2a:01:88:a2:63:56:54:ac:d3:49:9d:8f:ad:2c: 8f:0a:19:97:b2:f7:7b:fc:dc:2c:68:89:88:64:a0: 85:b4:27:4f:eb:88:18:b1:a5:03:80:a8:ae:79:03: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:DA:D1:26:E1:35:01:B9:C4:67:82:83:AB:7E:7B:A2:6B:33:45 X509v3 Authority Key Identifier: keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:82:ca:27:0c:70:55:b5:4f:17:c5:8c:11:c6:3b:30:3a:22: 51:91:a1:a5:e2:e1:d8:6d:30:33:8f:b1:26:b5:64:c4:f6:9b: d3:5c:11:57:c5:34:77:e8:77:92:37:a6:34:26:a3:e7:2f:e2: 0c:2c:e7:d8:50:00:bb:6f:ab:36:8e:a7:61:42:4b:a2:2d:04: 8e:15:31:d5:86:3e:fa:d8:06:82:56:a2:91:c5:13:66:4b:12: ed:db:f3:35:c7:f4:c8:0c:26:a5:5b:45:04:c4:72:89:18:8d: 9d:dd:2e:51:94:bd:20:8c:11:55:cf:8b:df:f8:66:d7:06:ea: 02:6e:a8:ef:08:f9:e1:6b:50:b4:5e:05:fb:47:28:14:80:7f: d6:d4:8e:62:c9:04:91:03:30:5b:db:53:ad:e4:ee:4d:bc:53: 6b:ce:8f:47:b0:f5:eb:3d:b9:4a:21:08:1c:56:82:24:bb:fe: 8e:1b:2d:e1:5f:93:db:e0:e4:d7:fc:cb:af:60:e9:40:ac:86: 56:6e:ad:1e:f2:8e:4d:78:55:d5:c9:c3:09:c5:2a:54:44:9c: 76:e1:a7:a0:e1:b1:03:5f:31:ed:1a:57:63:4e:db:c9:b5:f8: fd:b3:7a:66:0d:e8:17:fc:9c:0c:1f:1e:e1:2f:2f:44:17:0c: 22:21:6f:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wm1234SCCauc7cAOliBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk YjU4OTgwHhcNMjUxMjIwMjAwMTM0WhcNMjUxMjIxMjAwMTM0WjAzMTEwLwYDVQQD EygyMDE2ZGFkMTI2ZTEzNTAxYjljNDY3ODI4M2FiN2U3YmEyNmIzMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TzSu4sr5hrQrMWa5FDErPj9o2tV x66fNL86bUyW0o+Tcvky5CrYLDDgeQTGnnaGFKyUcXy8i4Xl0k/uBL/xpPENyOuT P+fmd//TcFsGYbUOVr6emhn2vI6KqbMOgBeN8SQNUA2DTMjr25zadC7nU0IBfuZP SWdavLMu1jNjEiM2PY5nWYOfhazx3kn7/OOSJoOQerDzLUXsJso5iVT1Dbfu+fvw Xkk1i7qV38fqcN8HFL25YcLj8OUgmYbw5+Aqi+nm39H7hKozCmKh0Dck6utYKgGI omNWVKzTSZ2PrSyPChmXsvd7/NwsaImIZKCFtCdP64gYsaUDgKiueQMm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAW2tEm4TUBucRngoOrfnuiazNFMB8GA1UdIwQY MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt NWYzY2Y5ZjNiNjE5LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5 LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgILKJwxw VbVPF8WMEcY7MDoiUZGhpeLh2G0wM4+xJrVkxPab01wRV8U0d+h3kjemNCaj5y/i DCzn2FAAu2+rNo6nYUJLoi0EjhUx1YY++tgGglaikcUTZksS7dvzNcf0yAwmpVtF BMRyiRiNnd0uUZS9IIwRVc+L3/hm1wbqAm6o7wj54WtQtF4F+0coFIB/1tSOYskE kQMwW9tTreTuTbxTa86PR7D16z25SiEIHFaCJLv+jhst4V+T2+Dk1/zLr2DpQKyG Vm6tHvKOTXhV1cnDCcUqVEScduGnoOGxA18x7RpXY07bybX4/bN6Zg3oF/ycDB8e 4S8vRBcMIiFvng== -----END CERTIFICATE-----Generated at Sun Dec 21 01:09:41 2025 by rpki-client