This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json) Hash identifier: +l7z6Wno79Vh0N5V9X7GcYuSvXULNMP0byztceu8OZE= Subject key identifier: D9:EE:D4:D0:9F:B0:08:24:4D:D2:68:FD:58:91:9C:DD:DA:87:4A:04 Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Certificate serial: 019B3B6B76650202036FAC5F1B019BA384A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft Manifest number: 0A51 Signing time: Sat 20 Dec 2025 11:00:56 +0000 Manifest this update: Sat 20 Dec 2025 11:00:56 +0000 Manifest next update: Sun 21 Dec 2025 11:00:56 +0000 Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=) 2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: 6vA4fVUs25NbEMavbDmNcdgv1zSzUWkUN8sbRB4Jt1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:76:65:02:02:03:6f:ac:5f:1b:01:9b:a3:84:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Validity Not Before: Dec 20 11:00:56 2025 GMT Not After : Dec 21 11:00:56 2025 GMT Subject: CN=d9eed4d09fb008244dd268fd58919cddda874a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:20:b5:1f:47:a1:20:57:2b:95:00:c4:a1: 49:4c:77:53:60:d8:c2:eb:e7:89:5e:ed:73:a7:05: 7a:5b:d4:7a:78:72:53:68:81:1d:9c:4f:ec:3b:dd: 33:af:7f:48:cf:f5:9c:5d:dd:cb:0e:dd:8b:53:89: 75:c5:e5:f9:b7:fe:d0:f7:7b:84:46:d1:24:7a:ed: 84:05:aa:26:af:12:63:85:53:c3:a4:a4:f6:71:22: 83:56:1d:43:f4:f5:86:df:7b:78:0d:92:ca:bc:58: 9d:ce:39:43:53:3d:54:d8:29:47:f5:62:dc:9b:74: 4d:f4:5d:bd:2c:9e:45:3e:c0:ff:0f:5f:ba:45:d4: 7c:ce:6d:9e:65:60:3b:36:0a:08:2c:63:d4:75:f0: 50:88:1c:e5:62:40:58:7d:22:e7:a3:b7:0a:64:7f: be:40:a5:d3:36:5a:e7:49:4b:f3:66:2c:4b:fc:b7: 5d:e7:d6:9d:6c:bc:94:03:e5:03:f4:d4:ab:c1:df: 6e:9c:70:ae:a3:2c:8b:ba:2b:35:a0:48:ee:af:68: 09:76:25:bc:f6:04:2f:0a:64:82:35:0f:86:ba:2e: 29:a3:64:f1:de:43:f4:66:97:fc:0b:51:c4:1d:68: 6d:74:10:44:b0:dc:34:54:16:cc:5e:2e:87:7d:b4: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:D4:D0:9F:B0:08:24:4D:D2:68:FD:58:91:9C:DD:DA:87:4A:04 X509v3 Authority Key Identifier: keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2d:16:29:7a:06:0f:fe:bc:fe:4a:a5:97:5e:de:47:5f:fc: 89:ab:6b:cb:0a:a2:6d:4d:69:ed:78:e8:83:4a:c1:c1:15:75: 0f:c9:df:61:a5:6d:82:d5:23:7d:62:36:c7:b7:bf:65:80:eb: a0:e1:44:27:b8:86:6a:b2:50:c1:a2:d0:2e:67:da:32:c0:8b: aa:73:1e:69:79:cd:28:95:29:5f:a4:2a:9b:8a:b2:f1:8c:1c: d2:63:43:0d:6b:5d:b1:cf:63:2d:4a:3b:0b:93:be:3d:63:47: c3:97:e4:69:f0:c0:cf:99:57:de:53:cb:72:22:1c:1f:3a:89: 81:37:69:1b:73:2e:18:52:b6:e7:4f:7c:da:9f:7d:c7:3e:72: f4:4d:b8:3d:4c:92:55:bf:d7:10:47:e3:e4:ca:85:cd:b0:34: 6d:89:fe:90:71:a7:cd:89:c9:68:4a:e2:e0:f7:7a:fb:1d:48: 59:64:ef:99:47:01:8f:a6:ea:b7:60:82:b3:f8:bd:75:0f:fb: be:33:6f:1e:dd:91:92:97:ec:d1:97:6e:e9:f7:5c:32:d1:f9: 50:b1:a9:c1:9c:0e:42:9b:33:e0:48:46:e0:3b:ab:ae:0a:2f: a3:b9:25:4a:72:47:42:f5:80:f9:67:2b:2c:36:31:34:b7:7f: 35:55:7d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3ZlAgIDb6xfGwGbo4SpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh ZTRkMWEwHhcNMjUxMjIwMTEwMDU2WhcNMjUxMjIxMTEwMDU2WjAzMTEwLwYDVQQD EyhkOWVlZDRkMDlmYjAwODI0NGRkMjY4ZmQ1ODkxOWNkZGRhODc0YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU0gtR9HoSBXK5UAxKFJTHdTYNjC 6+eJXu1zpwV6W9R6eHJTaIEdnE/sO90zr39Iz/WcXd3LDt2LU4l1xeX5t/7Q93uE RtEkeu2EBaomrxJjhVPDpKT2cSKDVh1D9PWG33t4DZLKvFidzjlDUz1U2ClH9WLc m3RN9F29LJ5FPsD/D1+6RdR8zm2eZWA7NgoILGPUdfBQiBzlYkBYfSLno7cKZH++ QKXTNlrnSUvzZixL/Ldd59adbLyUA+UD9NSrwd9unHCuoyyLuis1oEjur2gJdiW8 9gQvCmSCNQ+Gui4po2Tx3kP0Zpf8C1HEHWhtdBBEsNw0VBbMXi6HfbSFuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnu1NCfsAgkTdJo/ViRnN3ah0oEMB8GA1UdIwQY MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUi0WKXoG D/68/kqll17eR1/8iatrywqibU1p7Xjog0rBwRV1D8nfYaVtgtUjfWI2x7e/ZYDr oOFEJ7iGarJQwaLQLmfaMsCLqnMeaXnNKJUpX6Qqm4qy8Ywc0mNDDWtdsc9jLUo7 C5O+PWNHw5fkafDAz5lX3lPLciIcHzqJgTdpG3MuGFK250982p99xz5y9E24PUyS Vb/XEEfj5MqFzbA0bYn+kHGnzYnJaEri4Pd6+x1IWWTvmUcBj6bqt2CCs/i9dQ/7 vjNvHt2Rkpfs0Zdu6fdcMtH5ULGpwZwOQpsz4EhG4Durrgovo7klSnJHQvWA+Wcr LDYxNLd/NVV9pw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:24 2025 by rpki-client