This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json) Hash identifier: N+/w8QKGpXKIwH1LMP+c/twK4uxQRU2ZL/3XU4WkGmw= Subject key identifier: 1E:D1:64:CA:1F:D0:4C:92:08:9F:97:67:CD:87:78:7B:F4:14:62:73 Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c Certificate serial: 019B33E883B4606843E538A1A7A3C0242A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft Manifest number: 1416 Signing time: Fri 19 Dec 2025 00:00:34 +0000 Manifest this update: Fri 19 Dec 2025 00:00:34 +0000 Manifest next update: Sat 20 Dec 2025 00:00:34 +0000 Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=) 2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: Z6qGrgFGaW0OJK43mDTK2nKHlSxfcqYX5+stgDTzQN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:83:b4:60:68:43:e5:38:a1:a7:a3:c0:24:2a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c Validity Not Before: Dec 19 00:00:34 2025 GMT Not After : Dec 20 00:00:34 2025 GMT Subject: CN=1ed164ca1fd04c92089f9767cd87787bf4146273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:21:4f:10:e8:a7:a3:cb:eb:bd:40:76:45: 9e:86:b0:e7:24:20:77:3c:ea:9c:60:2c:31:79:df: f5:b9:bf:3c:e6:ff:b9:91:2d:e4:9e:0a:31:34:d3: b7:2e:f0:dd:aa:39:44:7f:93:91:fc:93:bf:53:92: 21:25:f5:be:f8:4e:f1:54:b4:d3:c6:21:64:87:11: f7:b7:a9:ee:68:fa:4b:be:a8:a9:02:70:ac:a3:ea: a4:50:bf:f3:02:98:91:cb:42:37:3a:86:92:6e:82: a3:f9:d9:ea:c8:fc:73:fc:bc:98:2b:79:a3:e2:6a: 1b:5e:89:a7:91:13:dc:95:26:72:05:c6:7b:f2:db: 98:51:d5:03:f1:9e:7e:02:4b:a1:e0:88:5a:a1:72: e2:f4:6a:1a:0b:04:a6:94:e2:84:35:03:9c:21:10: 5d:4b:ee:be:25:fa:95:32:96:cf:1d:cc:43:6b:5a: c4:67:24:13:36:a2:ee:29:4a:3a:cc:63:d7:32:7b: af:08:eb:bb:0e:72:da:7b:5d:80:40:8c:a8:a8:98: 55:45:77:3a:f4:8b:64:28:f7:44:73:85:dc:ec:e1: dd:62:d1:1e:4b:75:90:04:00:ba:69:a0:90:b2:82: 0f:5e:67:a6:4b:33:41:f6:90:da:5c:ac:54:86:1e: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D1:64:CA:1F:D0:4C:92:08:9F:97:67:CD:87:78:7B:F4:14:62:73 X509v3 Authority Key Identifier: keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:16:07:46:ef:e5:0a:de:4f:e1:eb:b3:ae:00:9c:2d:ff:16: a4:c8:09:27:84:56:69:3c:a2:a4:4e:0b:5e:36:e2:67:82:1b: 0c:33:04:ce:d8:8a:d4:d9:30:e1:e8:ac:71:d4:0b:66:9c:96: 74:43:c3:00:58:27:1e:1c:2c:6d:63:92:ad:c5:c9:5e:2c:80: 8f:7e:70:80:0a:f6:3e:ed:8a:4e:58:a9:13:09:e4:9b:a3:6a: 52:44:a5:c8:45:98:68:d4:0e:10:80:53:f1:6e:53:d1:2e:ec: f8:c5:78:c7:8f:20:cd:e4:4f:45:99:c4:4a:af:71:d2:91:4d: 9e:b4:20:d8:60:cb:5e:25:bc:20:18:f5:06:e9:30:00:36:87: ff:56:67:8b:43:7d:6b:c5:58:2f:f6:fb:90:78:ee:cd:29:f0: f7:8a:73:9f:40:9a:bd:b0:36:fb:f3:32:fd:97:5a:13:f7:a2: 08:74:87:da:da:6c:d6:9b:8b:5a:80:c5:64:39:e1:eb:ad:ea: 7d:4e:00:b9:ac:dd:34:db:3a:18:13:12:6e:2b:82:f7:93:f9: 7f:58:6b:65:c8:ea:eb:d9:a4:41:5a:cd:27:d7:6e:14:5d:13: 17:85:44:d1:ae:d8:eb:cb:f7:0d:23:4a:8d:9c:6e:72:92:14: 54:12:40:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6IO0YGhD5Tihp6PAJCp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzNkZGNlYWIxNTRiZGY2M2U3ODlmNDQ0MzQ4NGFkNTU0 ODY2NGMwHhcNMjUxMjE5MDAwMDM0WhcNMjUxMjIwMDAwMDM0WjAzMTEwLwYDVQQD EygxZWQxNjRjYTFmZDA0YzkyMDg5Zjk3NjdjZDg3Nzg3YmY0MTQ2MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIshTxDop6PL671AdkWehrDnJCB3 POqcYCwxed/1ub885v+5kS3kngoxNNO3LvDdqjlEf5OR/JO/U5IhJfW++E7xVLTT xiFkhxH3t6nuaPpLvqipAnCso+qkUL/zApiRy0I3OoaSboKj+dnqyPxz/LyYK3mj 4mobXomnkRPclSZyBcZ78tuYUdUD8Z5+Akuh4IhaoXLi9GoaCwSmlOKENQOcIRBd S+6+JfqVMpbPHcxDa1rEZyQTNqLuKUo6zGPXMnuvCOu7DnLae12AQIyoqJhVRXc6 9ItkKPdEc4Xc7OHdYtEeS3WQBAC6aaCQsoIPXmemSzNB9pDaXKxUhh5azQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7RZMof0EySCJ+XZ82HeHv0FGJzMB8GA1UdIwQY MBaAFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEt ZjJiMGZkM2MzMTM3LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEtZjJiMGZkM2MzMTM3 LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBYHRu/l Ct5P4euzrgCcLf8WpMgJJ4RWaTyipE4LXjbiZ4IbDDMEztiK1Nkw4eiscdQLZpyW dEPDAFgnHhwsbWOSrcXJXiyAj35wgAr2Pu2KTlipEwnkm6NqUkSlyEWYaNQOEIBT 8W5T0S7s+MV4x48gzeRPRZnESq9x0pFNnrQg2GDLXiW8IBj1BukwADaH/1Zni0N9 a8VYL/b7kHjuzSnw94pzn0CavbA2+/My/ZdaE/eiCHSH2tps1puLWoDFZDnh663q fU4AuazdNNs6GBMSbiuC95P5f1hrZcjq69mkQVrNJ9duFF0TF4VE0a7Y68v3DSNK jZxucpIUVBJAfQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:10:44 2025 by rpki-client