This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json) Hash identifier: PY5ThlpklnFF0zKSrDy99MgSGO4he3zP6QaDkKHf03I= Subject key identifier: 8D:AA:03:53:9C:7C:04:67:CB:A7:45:80:B4:78:36:64:BB:E3:89:73 Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e Certificate serial: 019B5606AAA3C7DCCC8A8C0F5B0C98825694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 15:00:35 +0000 Manifest this update: Thu 25 Dec 2025 15:00:35 +0000 Manifest next update: Fri 26 Dec 2025 15:00:35 +0000 Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=) 2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=) 3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: SCX4zZnAUomQ7R6wzls8s9x5eWBdALswSLw5SuJCbas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:aa:a3:c7:dc:cc:8a:8c:0f:5b:0c:98:82:56:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e Validity Not Before: Dec 25 15:00:35 2025 GMT Not After : Dec 26 15:00:35 2025 GMT Subject: CN=8daa03539c7c0467cba74580b4783664bbe38973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:65:76:ce:88:20:d9:f3:a8:85:58:eb:3a: 3c:df:ee:1d:00:ab:c7:6b:b4:6a:9d:e4:df:ff:d5: be:fe:88:cd:89:57:c7:eb:62:5e:81:39:a7:f6:45: c1:bd:02:63:34:b1:a4:a9:7e:ff:c0:04:34:96:5a: a7:7c:4c:64:a8:af:a5:8e:05:36:77:6b:4d:50:03: b4:a5:89:0c:19:ff:b3:8d:ba:52:96:1b:51:08:2f: e8:69:ad:5a:6a:99:00:df:2d:9d:8a:89:4d:83:17: 47:c7:09:5a:a8:e7:e4:73:c3:84:b0:fe:79:bb:3c: 3d:0d:d2:14:36:80:1e:08:de:4f:cc:e2:ab:ab:72: 40:3c:89:d9:f1:69:85:fb:0d:7c:73:8e:6b:fa:02: 33:97:3c:6c:f6:f7:9f:19:aa:81:78:c3:bd:1c:92: ec:cf:7f:93:1a:b3:f7:a1:4c:87:27:d8:a6:de:aa: b8:ee:3b:1f:19:ed:08:ce:dc:5e:bb:89:f7:d3:3d: ab:dd:84:2f:fb:8a:f5:d0:c4:93:3e:e1:fe:64:84: 3e:88:ab:20:9c:6e:2d:71:c6:8d:db:e0:88:16:c6: 93:7b:3c:5b:f7:82:3e:9c:99:4a:e0:f2:77:61:af: a8:ba:c6:7a:55:dd:77:71:33:f0:67:9d:93:ce:53: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AA:03:53:9C:7C:04:67:CB:A7:45:80:B4:78:36:64:BB:E3:89:73 X509v3 Authority Key Identifier: keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:23:21:ee:ad:67:16:01:64:da:6c:cf:32:39:3a:bc:39: 26:6a:dc:cd:1c:32:e4:73:17:f2:be:2b:4c:01:21:d0:36:49: 2b:18:5b:11:fe:59:e1:2f:39:de:77:47:e4:c4:a9:c8:25:b9: 6f:08:8d:3b:25:4d:07:6e:3d:b7:00:f1:2a:a9:0d:b1:ba:14: 66:f1:82:6f:4b:34:e6:ab:42:21:ba:19:1f:71:de:07:3e:2d: c6:51:77:77:1a:f4:c1:29:32:36:6e:2e:85:59:df:cd:f1:77: cf:6b:ed:09:5d:2a:5d:88:a0:a5:8c:8e:68:4f:43:9c:63:34: 72:c5:5a:cb:49:2f:60:7b:76:ab:c8:3e:dd:47:04:e4:fa:c3: 36:4e:5d:95:14:e8:8a:90:39:ff:01:cf:2b:03:5e:c2:df:12: 6b:68:ed:bf:20:b3:3b:0b:ca:36:f4:93:f5:ac:fe:56:f9:1f: 2d:3d:b3:57:da:d0:48:66:8e:a6:29:4e:8b:de:3a:04:61:35: cf:71:bb:49:e8:35:06:91:e3:58:6b:24:d1:d0:5b:11:3a:dc: a6:15:d6:2e:b1:14:d5:3b:76:53:c8:c6:bf:b8:24:eb:7b:84: 7c:42:3a:dd:58:07:30:0f:42:5b:ff:2a:40:ab:fc:93:c2:5d: bd:12:65:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBqqjx9zMiowPWwyYglaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1 Nzk2MGUwHhcNMjUxMjI1MTUwMDM1WhcNMjUxMjI2MTUwMDM1WjAzMTEwLwYDVQQD Eyg4ZGFhMDM1MzljN2MwNDY3Y2JhNzQ1ODBiNDc4MzY2NGJiZTM4OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGVlds6IINnzqIVY6zo83+4dAKvH a7RqneTf/9W+/ojNiVfH62JegTmn9kXBvQJjNLGkqX7/wAQ0llqnfExkqK+ljgU2 d2tNUAO0pYkMGf+zjbpSlhtRCC/oaa1aapkA3y2diolNgxdHxwlaqOfkc8OEsP55 uzw9DdIUNoAeCN5PzOKrq3JAPInZ8WmF+w18c45r+gIzlzxs9vefGaqBeMO9HJLs z3+TGrP3oUyHJ9im3qq47jsfGe0Iztxeu4n30z2r3YQv+4r10MSTPuH+ZIQ+iKsg nG4tccaN2+CIFsaTezxb94I+nJlK4PJ3Ya+ousZ6Vd13cTPwZ52TzlNEfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2qA1OcfARny6dFgLR4NmS744lzMB8GA1UdIwQY MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVgjIe6t ZxYBZNpszzI5Orw5JmrczRwy5HMX8r4rTAEh0DZJKxhbEf5Z4S853ndH5MSpyCW5 bwiNOyVNB249twDxKqkNsboUZvGCb0s05qtCIboZH3HeBz4txlF3dxr0wSkyNm4u hVnfzfF3z2vtCV0qXYigpYyOaE9DnGM0csVay0kvYHt2q8g+3UcE5PrDNk5dlRTo ipA5/wHPKwNewt8Sa2jtvyCzOwvKNvST9az+VvkfLT2zV9rQSGaOpilOi946BGE1 z3G7Seg1BpHjWGsk0dBbETrcphXWLrEU1Tt2U8jGv7gk63uEfEI63VgHMA9CW/8q QKv8k8JdvRJl3A== -----END CERTIFICATE-----Generated at Thu Dec 25 17:28:07 2025 by rpki-client