This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json) Hash identifier: PReLZA/ijw68GQvkn/mt/IcNy/QMt+Tt/mdwRv/49Y8= Subject key identifier: 90:3E:1C:43:89:F3:7C:BD:FC:0F:4E:AB:4E:32:E5:98:88:2F:8F:54 Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Certificate serial: 019B6D69F42BC7747229A380DA4E70D7E072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft Manifest number: 0B93 Signing time: Tue 30 Dec 2025 04:00:18 +0000 Manifest this update: Tue 30 Dec 2025 04:00:18 +0000 Manifest next update: Wed 31 Dec 2025 04:00:18 +0000 Files and hashes: 1: HVewmeGdvGR_CktJLKO96_JTgVg.asa (hash: /lL1ZClWKYay5ehRMI+LCbGIg6653LdB1CDjXUY9AA8=) 2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: 3/rJNGZ+HWRN0/+tJ3eWvzeB8TNDL0SqdtTvImc6wu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:69:f4:2b:c7:74:72:29:a3:80:da:4e:70:d7:e0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Validity Not Before: Dec 30 04:00:18 2025 GMT Not After : Dec 31 04:00:18 2025 GMT Subject: CN=903e1c4389f37cbdfc0f4eab4e32e598882f8f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:3e:f4:d9:dc:8b:9e:4d:0c:de:d5:48:95: df:1f:ae:03:68:68:c7:a9:0c:63:51:51:0c:7f:95: 19:00:50:15:1b:63:18:cf:09:98:13:cd:85:28:88: 53:bd:81:94:35:70:f6:62:1b:f1:2b:e7:ed:df:46: 03:ee:41:19:6a:ed:47:c0:c4:43:f1:16:32:f5:db: 9c:2a:a5:01:16:c6:e1:bc:88:b4:aa:93:47:6c:aa: e3:bb:47:bd:ba:40:68:7d:5d:dc:56:cb:fd:7c:a0: 9d:f1:e9:fd:62:cc:c5:07:30:56:d5:73:6b:10:81: c3:e9:c5:f9:6e:3e:fc:e3:8c:ed:71:5a:2c:04:b0: e8:22:ab:30:cd:68:b2:15:54:c1:ca:f0:9a:5e:9b: ba:51:03:77:d2:2b:c8:19:de:12:db:ab:26:3c:b3: 87:83:8d:f4:eb:92:f7:f0:8e:7e:54:ae:f7:5a:0e: 8f:2b:63:bb:40:cb:de:3f:e7:ec:5b:63:cc:88:05: e9:79:3c:f4:77:62:81:8d:2a:a3:91:3b:87:7f:77: a8:7f:f9:99:f3:f8:cb:12:c7:60:3a:a2:25:8c:36: 60:01:43:20:0c:02:67:7e:1c:51:53:31:c6:18:12: 31:34:7f:ee:0e:80:c3:14:5e:c1:9a:6d:71:fe:87: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:1C:43:89:F3:7C:BD:FC:0F:4E:AB:4E:32:E5:98:88:2F:8F:54 X509v3 Authority Key Identifier: keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:71:28:17:a2:31:a3:bf:c5:d0:61:a5:83:8e:14:de:ed:a9: 9f:a0:cb:e8:3e:96:23:e6:78:1c:b7:90:61:fa:1c:1e:e4:93: 72:4b:d9:9a:f3:65:b7:06:cb:62:85:90:72:de:a5:28:b6:7c: 20:29:b9:33:b9:7e:b8:bd:61:c9:6a:53:50:bc:b7:01:e8:c2: a8:aa:3e:af:96:0a:b8:2a:50:a8:f0:6e:83:71:76:7c:ef:69: 42:a9:81:e2:27:c3:19:09:55:29:f0:b8:5c:1e:9b:8a:20:a5: 6c:e0:9d:ab:33:56:2e:dc:d4:54:35:81:64:17:30:98:be:c3: 15:97:fa:79:0c:81:bd:84:9a:3e:5e:c7:cc:df:36:9e:f9:5d: 6a:39:62:93:29:fe:4b:de:d8:5d:44:f7:93:f9:31:5e:a2:5b: 10:4a:c3:52:ac:6c:43:77:7f:f9:b6:54:f7:5a:05:ac:00:72: d3:5d:88:77:b2:69:71:d3:c7:2f:ff:cf:88:b4:7d:0c:e5:4c: 96:9b:25:31:9f:95:d3:da:5a:41:39:1a:a9:24:ab:82:1c:83: c9:3b:ab:5c:aa:53:5f:96:69:77:48:0f:0d:5c:66:6a:af:5c: 14:96:8d:f1:90:2c:cb:c7:21:e1:e5:82:42:2b:36:34:cd:92: 5e:fb:a8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttafQrx3RyKaOA2k5w1+ByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0 NmQ0N2YwHhcNMjUxMjMwMDQwMDE4WhcNMjUxMjMxMDQwMDE4WjAzMTEwLwYDVQQD Eyg5MDNlMWM0Mzg5ZjM3Y2JkZmMwZjRlYWI0ZTMyZTU5ODg4MmY4ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXs+9Nnci55NDN7VSJXfH64DaGjH qQxjUVEMf5UZAFAVG2MYzwmYE82FKIhTvYGUNXD2YhvxK+ft30YD7kEZau1HwMRD 8RYy9ducKqUBFsbhvIi0qpNHbKrju0e9ukBofV3cVsv9fKCd8en9YszFBzBW1XNr EIHD6cX5bj7844ztcVosBLDoIqswzWiyFVTByvCaXpu6UQN30ivIGd4S26smPLOH g43065L38I5+VK73Wg6PK2O7QMveP+fsW2PMiAXpeTz0d2KBjSqjkTuHf3eof/mZ 8/jLEsdgOqIljDZgAUMgDAJnfhxRUzHGGBIxNH/uDoDDFF7Bmm1x/oeW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA+HEOJ83y9/A9Oq04y5ZiIL49UMB8GA1UdIwQY MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5 LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXEoF6Ix o7/F0GGlg44U3u2pn6DL6D6WI+Z4HLeQYfocHuSTckvZmvNltwbLYoWQct6lKLZ8 ICm5M7l+uL1hyWpTULy3AejCqKo+r5YKuCpQqPBug3F2fO9pQqmB4ifDGQlVKfC4 XB6biiClbOCdqzNWLtzUVDWBZBcwmL7DFZf6eQyBvYSaPl7HzN82nvldajlikyn+ S97YXUT3k/kxXqJbEErDUqxsQ3d/+bZU91oFrABy012Id7JpcdPHL//PiLR9DOVM lpslMZ+V09paQTkaqSSrghyDyTurXKpTX5Zpd0gPDVxmaq9cFJaN8ZAsy8ch4eWC Qis2NM2SXvuo3w== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:28 2025 by rpki-client