This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft File: rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json) Hash identifier: 5LNU6Ot+/hDJWM8alsyLI5FH6VuRvsIYd5zed/yedYg= Subject key identifier: 84:96:5C:38:D4:B9:51:03:B1:7B:3E:63:5C:9C:A7:10:11:8D:4D:A5 Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 Certificate issuer: /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Certificate serial: 019B3D59809A57701D4B49CE5D69F9374F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft Manifest number: 1715 Signing time: Sat 20 Dec 2025 20:00:34 +0000 Manifest this update: Sat 20 Dec 2025 20:00:34 +0000 Manifest next update: Sun 21 Dec 2025 20:00:34 +0000 Files and hashes: 1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=) 2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: 6zmSEchOZnE73SY1q+w3zhnxuxlgmFy4FdQNI7Ld1D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:80:9a:57:70:1d:4b:49:ce:5d:69:f9:37:4f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318 Validity Not Before: Dec 20 20:00:34 2025 GMT Not After : Dec 21 20:00:34 2025 GMT Subject: CN=84965c38d4b95103b17b3e635c9ca710118d4da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:f9:a2:e5:f5:a7:52:21:0a:65:9d:71:77: d5:32:75:bf:33:4f:09:3b:c1:cf:08:b2:d8:d0:ec: 3e:58:ca:0c:b5:09:22:2d:c5:96:80:92:2d:62:95: 52:5e:b8:bc:d8:77:8d:93:a8:9a:c5:b0:53:c7:d5: 86:bf:c9:34:db:fa:32:54:07:aa:b2:88:72:91:35: 73:7c:59:d0:4e:09:02:26:bb:05:f9:b9:9b:c2:bd: c1:e0:70:67:fc:54:3d:54:1d:a1:b9:20:8a:2a:b4: 50:07:e3:eb:de:e3:c3:85:ed:9b:aa:06:84:98:10: 8d:c8:96:ab:17:f9:a7:8a:d3:73:bc:d6:9a:2b:a3: 25:4c:f9:34:09:d9:8f:5d:d6:ac:7f:04:86:10:b4: 51:1d:ef:ec:cf:ce:fa:ad:a4:4f:cc:82:f5:0f:15: 79:ea:89:25:21:ee:18:3d:6b:d7:f6:95:c9:41:70: 68:48:97:62:4d:26:60:4e:16:bb:9f:b5:eb:90:84: 71:53:f2:5c:f6:0c:47:3d:bb:f7:1b:8d:23:68:dc: 69:4a:44:8c:78:d8:34:95:6c:b2:3e:c2:de:62:76: 66:b9:32:db:6e:23:6b:2e:72:76:9e:5d:1f:37:31: 7e:14:85:f3:00:bf:4a:c0:8b:dd:d1:bb:84:9e:da: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:5C:38:D4:B9:51:03:B1:7B:3E:63:5C:9C:A7:10:11:8D:4D:A5 X509v3 Authority Key Identifier: keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b3:b2:01:13:4b:43:18:34:dd:16:2f:95:b6:7b:f0:8f:0e: 3c:15:e8:0a:7a:2a:1b:67:1d:db:ad:04:27:4c:ee:6d:98:89: 7b:61:35:13:a4:a4:14:6b:9a:ee:66:65:70:c5:d6:6e:0f:7b: 25:a9:8e:20:07:aa:37:76:fe:2b:a3:9a:c4:81:d4:d7:36:20: 55:cf:6f:19:b8:7c:9a:e2:8d:0b:83:d4:60:f8:cd:36:35:23: c6:b2:c6:93:5a:d9:f1:18:ff:0a:92:40:d6:9e:98:c9:6b:ba: 30:e1:a2:5a:c5:e5:f5:ff:18:96:fb:01:90:49:1e:1d:4b:5f: 19:2c:a2:f0:9c:61:1b:c4:4f:82:40:23:b8:10:58:ee:6a:cd: ef:53:ff:8c:f7:44:c5:9d:14:70:26:b1:14:53:ae:c7:61:d4: f2:36:ad:40:15:7b:c1:0e:6a:e4:63:23:3b:04:3c:a6:d0:03: 71:b6:0e:f1:5d:70:d8:f8:a3:f4:85:39:e2:c8:42:50:eb:9f: 79:00:50:c8:4d:e2:94:a9:80:fe:bf:da:bc:bd:e3:80:ec:3e: 59:2d:2f:2d:3e:e7:de:d4:3a:eb:17:7a:7f:93:34:30:8b:19: 8a:61:34:d8:cc:d5:12:d5:11:c9:95:54:f0:6c:87:8f:5b:5f: 78:8b:b2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYCaV3AdS0nOXWn5N08lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYzcwOWM3Y2QyNTQ0NWNiMTgzY2ZjZmViZDRiMmJmYzc4 NGMzMTgwHhcNMjUxMjIwMjAwMDM0WhcNMjUxMjIxMjAwMDM0WjAzMTEwLwYDVQQD Eyg4NDk2NWMzOGQ0Yjk1MTAzYjE3YjNlNjM1YzljYTcxMDExOGQ0ZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm35ouX1p1IhCmWdcXfVMnW/M08J O8HPCLLY0Ow+WMoMtQkiLcWWgJItYpVSXri82HeNk6iaxbBTx9WGv8k02/oyVAeq sohykTVzfFnQTgkCJrsF+bmbwr3B4HBn/FQ9VB2huSCKKrRQB+Pr3uPDhe2bqgaE mBCNyJarF/mnitNzvNaaK6MlTPk0CdmPXdasfwSGELRRHe/sz876raRPzIL1DxV5 6oklIe4YPWvX9pXJQXBoSJdiTSZgTha7n7XrkIRxU/Jc9gxHPbv3G40jaNxpSkSM eNg0lWyyPsLeYnZmuTLbbiNrLnJ2nl0fNzF+FIXzAL9KwIvd0buEnto7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISWXDjUuVEDsXs+Y1ycpxARjU2lMB8GA1UdIwQY MBaAFK7HCcfNJURcsYPPz+vUsr/HhMMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUt ZjdmYThlMmZmOTVmLzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUtZjdmYThlMmZmOTVm LzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLOyARNL Qxg03RYvlbZ78I8OPBXoCnoqG2cd260EJ0zubZiJe2E1E6SkFGua7mZlcMXWbg97 JamOIAeqN3b+K6OaxIHU1zYgVc9vGbh8muKNC4PUYPjNNjUjxrLGk1rZ8Rj/CpJA 1p6YyWu6MOGiWsXl9f8YlvsBkEkeHUtfGSyi8JxhG8RPgkAjuBBY7mrN71P/jPdE xZ0UcCaxFFOux2HU8jatQBV7wQ5q5GMjOwQ8ptADcbYO8V1w2Pij9IU54shCUOuf eQBQyE3ilKmA/r/avL3jgOw+WS0vLT7n3tQ66xd6f5M0MIsZimE02MzVEtURyZVU 8GyHj1tfeIuy0A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:56 2025 by rpki-client