This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json) Hash identifier: YSy1CdfzEDGjNzXXONpKol3819J8VkOPwhPVu/743Rs= Subject key identifier: 66:D1:5E:D4:8C:CB:E2:A3:9F:8C:31:60:AE:8F:BB:86:06:70:E1:C8 Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e Certificate serial: 019B5117E2851402819384D94F4E01565ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft Manifest number: 043E Signing time: Wed 24 Dec 2025 16:01:18 +0000 Manifest this update: Wed 24 Dec 2025 16:01:18 +0000 Manifest next update: Thu 25 Dec 2025 16:01:18 +0000 Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=) 2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=) 3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: 1AZwV1sKiVWLOt9wNKMhzvoGkbK8U6eGBK93Zxvp+Cs=) 4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:e2:85:14:02:81:93:84:d9:4f:4e:01:56:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e Validity Not Before: Dec 24 16:01:18 2025 GMT Not After : Dec 25 16:01:18 2025 GMT Subject: CN=66d15ed48ccbe2a39f8c3160ae8fbb860670e1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:89:b1:1b:e5:70:4e:39:ab:7e:e1:a6:57: 6d:92:54:1b:01:26:7f:aa:cd:b4:9a:6c:b4:fc:6c: e9:d2:4d:ab:b4:21:19:54:38:9e:f8:97:65:e0:32: 3e:1e:8c:9e:1f:c3:4c:c2:ba:0e:60:f2:7f:71:8a: 4f:30:c0:6b:82:17:83:88:3a:ba:16:26:31:37:67: 2a:26:81:f0:36:95:a8:33:12:5d:55:ea:9a:c8:d5: 51:c0:95:f4:01:0d:1b:e2:4c:98:01:74:d9:51:79: 4a:fe:6d:5c:d5:6e:f7:00:e5:0c:49:2c:ac:2b:d0: f0:88:b0:21:dc:57:b9:cb:da:36:ce:40:0e:99:db: 10:9c:3d:4c:c4:9c:d1:41:9c:0c:ab:61:01:14:ca: d2:15:93:4c:8c:6f:b4:23:3c:fd:1a:9c:3c:c2:1f: 67:06:cd:37:30:2e:ca:c5:d7:a6:a3:c8:39:2b:1a: 8d:bf:36:3d:41:e2:14:6b:d6:56:2e:c3:22:96:56: a9:9a:18:44:48:fe:a4:07:fd:99:67:ac:be:10:1d: 7b:4d:a2:07:ed:bd:b9:8c:c3:f3:10:82:13:c8:f5: c7:39:89:f9:d3:df:c3:bc:10:89:82:bf:e2:52:25: d3:bd:29:12:2f:16:cf:04:ab:50:bb:53:de:a6:0f: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:5E:D4:8C:CB:E2:A3:9F:8C:31:60:AE:8F:BB:86:06:70:E1:C8 X509v3 Authority Key Identifier: keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:94:3c:38:c8:86:49:ee:cb:a9:26:36:20:e6:05:95:cd:69: eb:c6:5d:8e:af:5f:80:2d:b0:ea:de:8e:fb:8a:59:27:e7:95: 4e:41:c7:4f:f3:09:2b:4c:2b:19:b4:e1:e7:5c:6e:ac:e0:36: fe:07:78:d7:99:78:f2:1f:95:c3:9f:7f:13:e1:79:b5:7b:14: c2:1b:d4:e4:ba:13:2d:fb:10:e8:f7:7d:3c:3a:ca:2f:ac:90: a2:80:63:cb:22:00:ec:3f:f6:b4:36:ea:3f:77:fe:24:96:a2: 08:22:e2:e7:cd:1f:01:d5:24:b4:14:c7:a7:a2:cd:ce:23:92: f3:7c:bb:16:aa:83:78:76:b5:cd:65:0b:70:d3:bf:f3:1a:90: 90:6d:14:fc:db:28:eb:bb:31:1e:fb:a3:98:60:97:5c:6f:42: 56:16:ce:50:0a:3e:dd:87:d2:2e:a6:7f:64:cf:b2:0d:b0:15: d8:34:0f:3f:1c:60:be:2c:f6:c6:5b:5c:aa:16:aa:47:1f:de: e6:43:cb:dd:39:89:08:f6:75:da:04:22:4b:29:84:f6:b0:5d: 22:96:30:43:14:50:ef:a2:18:39:f5:36:dd:73:f6:14:0c:a1: 19:dd:2b:12:3c:79:b3:4a:a1:e3:51:1b:e4:a3:6b:d6:9f:f6: 73:32:33:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF+KFFAKBk4TZT04BVlrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm MTZjMmUwHhcNMjUxMjI0MTYwMTE4WhcNMjUxMjI1MTYwMTE4WjAzMTEwLwYDVQQD Eyg2NmQxNWVkNDhjY2JlMmEzOWY4YzMxNjBhZThmYmI4NjA2NzBlMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lmJsRvlcE45q37hpldtklQbASZ/ qs20mmy0/Gzp0k2rtCEZVDie+Jdl4DI+HoyeH8NMwroOYPJ/cYpPMMBrgheDiDq6 FiYxN2cqJoHwNpWoMxJdVeqayNVRwJX0AQ0b4kyYAXTZUXlK/m1c1W73AOUMSSys K9DwiLAh3Fe5y9o2zkAOmdsQnD1MxJzRQZwMq2EBFMrSFZNMjG+0Izz9Gpw8wh9n Bs03MC7Kxdemo8g5KxqNvzY9QeIUa9ZWLsMillapmhhESP6kB/2ZZ6y+EB17TaIH 7b25jMPzEIITyPXHOYn509/DvBCJgr/iUiXTvSkSLxbPBKtQu1Pepg/EnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbRXtSMy+Kjn4wxYK6Pu4YGcOHIMB8GA1UdIwQY MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt ZjgzOTQ2YzJjODJlLzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJQ8OMiG Se7LqSY2IOYFlc1p68Zdjq9fgC2w6t6O+4pZJ+eVTkHHT/MJK0wrGbTh51xurOA2 /gd415l48h+Vw59/E+F5tXsUwhvU5LoTLfsQ6Pd9PDrKL6yQooBjyyIA7D/2tDbq P3f+JJaiCCLi580fAdUktBTHp6LNziOS83y7FqqDeHa1zWULcNO/8xqQkG0U/Nso 67sxHvujmGCXXG9CVhbOUAo+3YfSLqZ/ZM+yDbAV2DQPPxxgviz2xltcqhaqRx/e 5kPL3TmJCPZ12gQiSymE9rBdIpYwQxRQ76IYOfU23XP2FAyhGd0rEjx5s0qh41Eb 5KNr1p/2czIzqw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:22 2025 by rpki-client