This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json) Hash identifier: 8tB4mqWQxk64vW0rBDdP0mB/Tb7h5AEOq62q/cuQxxg= Subject key identifier: A2:EE:E4:A5:FE:8B:61:C8:7A:67:CE:BA:21:12:E9:12:D4:B6:4D:56 Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Certificate serial: 019B5073195CFDA909AC6313D81473C795A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft Manifest number: 1335 Signing time: Wed 24 Dec 2025 13:01:18 +0000 Manifest this update: Wed 24 Dec 2025 13:01:18 +0000 Manifest next update: Thu 25 Dec 2025 13:01:18 +0000 Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=) 2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: aHQQ7Lgeh7ILblH9nC1gpk04aMU+IHNowCUSMWVkgmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:19:5c:fd:a9:09:ac:63:13:d8:14:73:c7:95:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Validity Not Before: Dec 24 13:01:18 2025 GMT Not After : Dec 25 13:01:18 2025 GMT Subject: CN=a2eee4a5fe8b61c87a67ceba2112e912d4b64d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:8d:bd:0b:af:3d:84:4e:6f:ea:cf:84:60: e6:16:d8:d4:0d:02:ee:11:aa:f9:9f:54:20:86:a5: fd:b0:1c:ec:53:71:72:e6:ab:a1:75:1e:78:2a:e4: aa:c3:17:1e:55:4c:f3:89:70:11:01:b3:0a:f3:54: b6:20:81:53:5d:ec:7b:c1:3e:e9:44:1f:46:49:46: ba:30:95:8b:39:52:9e:9c:53:fa:c4:8b:94:d3:26: 8f:11:2c:f0:e0:b2:13:8c:5f:88:ac:4e:34:d1:e7: 4b:e5:e3:ef:36:08:83:12:ac:fc:2e:5d:48:5c:de: 93:b7:a2:22:70:c2:21:05:80:46:bf:ba:07:5f:35: 68:0d:41:2a:d5:09:57:d5:f5:9b:a0:d7:6b:7f:b9: c1:a3:a8:60:a9:cc:f3:08:c1:94:b3:e7:52:31:74: 9f:3f:bb:1a:60:63:bf:b7:93:09:ca:fa:7f:e4:20: 4f:7b:87:a2:e3:84:ee:a5:76:eb:c9:d8:b4:94:7c: 1b:a9:33:09:bb:9b:59:a7:5a:65:56:a2:9e:22:3b: 34:d5:52:b4:5a:e2:cf:2c:cd:3a:e1:08:76:6d:a3: c8:47:b8:6f:27:53:30:b9:7e:49:1d:4d:3a:8a:ad: f1:5d:e2:7e:0e:c5:66:2e:fc:29:5f:0e:6d:59:83: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:E4:A5:FE:8B:61:C8:7A:67:CE:BA:21:12:E9:12:D4:B6:4D:56 X509v3 Authority Key Identifier: keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c6:07:f5:94:d3:65:14:6e:fa:56:8c:cc:f5:c8:a0:75:72: 4e:2e:4c:c2:e6:c4:56:29:67:c4:fc:e8:50:0c:46:c7:79:1f: 0c:36:ef:79:95:13:59:b1:9a:8a:70:7c:7a:ce:72:81:bf:1d: 5a:a6:7d:4c:5a:8c:8b:27:cc:b7:38:3c:ae:5b:39:76:94:e3: 48:58:ae:7e:70:54:a3:c9:e1:c1:33:19:50:db:d8:36:ad:6a: 80:d1:9e:c2:e3:cd:92:ec:93:c8:ea:ec:f4:68:ea:e1:a6:88: cd:f8:ba:35:33:55:95:ce:47:cf:68:fa:92:b0:9a:d4:92:8e: 96:0e:6d:d1:8b:f3:e2:13:06:90:52:d4:13:f9:29:16:25:be: 3b:cb:70:3d:d0:22:f5:b3:54:22:c5:fe:78:dc:c2:ad:2e:c2: 70:6e:ee:ab:34:8d:87:b5:a2:92:48:84:fd:de:d3:fd:46:80: aa:b3:09:79:ee:97:37:b6:8e:f1:b2:38:0e:9d:cd:ff:25:03: 34:01:57:49:ca:46:40:2e:91:da:93:ef:a1:55:fa:43:7e:77: ac:b3:8b:8a:93:ad:ea:42:5f:5f:36:03:8b:0a:b9:e7:d9:f3: 6a:22:30:05:81:77:9f:87:0a:c5:fd:37:47:c1:e8:d8:0a:18: 71:9b:bc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcxlc/akJrGMT2BRzx5WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy ZTEyNjkwHhcNMjUxMjI0MTMwMTE4WhcNMjUxMjI1MTMwMTE4WjAzMTEwLwYDVQQD EyhhMmVlZTRhNWZlOGI2MWM4N2E2N2NlYmEyMTEyZTkxMmQ0YjY0ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA402NvQuvPYROb+rPhGDmFtjUDQLu Ear5n1QghqX9sBzsU3Fy5quhdR54KuSqwxceVUzziXARAbMK81S2IIFTXex7wT7p RB9GSUa6MJWLOVKenFP6xIuU0yaPESzw4LITjF+IrE400edL5ePvNgiDEqz8Ll1I XN6Tt6IicMIhBYBGv7oHXzVoDUEq1QlX1fWboNdrf7nBo6hgqczzCMGUs+dSMXSf P7saYGO/t5MJyvp/5CBPe4ei44TupXbrydi0lHwbqTMJu5tZp1plVqKeIjs01VK0 WuLPLM064Qh2baPIR7hvJ1MwuX5JHU06iq3xXeJ+DsVmLvwpXw5tWYNKkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLu5KX+i2HIemfOuiES6RLUtk1WMB8GA1UdIwQY MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt OGYxODFkM2EzZThmLzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzcYH9ZTT ZRRu+laMzPXIoHVyTi5MwubEVilnxPzoUAxGx3kfDDbveZUTWbGainB8es5ygb8d WqZ9TFqMiyfMtzg8rls5dpTjSFiufnBUo8nhwTMZUNvYNq1qgNGewuPNkuyTyOrs 9Gjq4aaIzfi6NTNVlc5Hz2j6krCa1JKOlg5t0Yvz4hMGkFLUE/kpFiW+O8twPdAi 9bNUIsX+eNzCrS7CcG7uqzSNh7WikkiE/d7T/UaAqrMJee6XN7aO8bI4Dp3N/yUD NAFXScpGQC6R2pPvoVX6Q353rLOLipOt6kJfXzYDiwq559nzaiIwBYF3n4cKxf03 R8Ho2AoYcZu8/w== -----END CERTIFICATE-----Generated at Wed Dec 24 15:41:41 2025 by rpki-client