This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json) Hash identifier: w+nn5D+4LxwFMYDueWvv6HfwdegYdwSKZK/VjG9M4CI= Subject key identifier: EC:94:60:86:42:D6:38:3E:F5:04:7A:CB:8A:F2:62:F7:33:48:9D:27 Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Certificate serial: 019B75FFF5178B47647AD773741C36352F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft Manifest number: 1353 Signing time: Wed 31 Dec 2025 20:01:07 +0000 Manifest this update: Wed 31 Dec 2025 20:01:07 +0000 Manifest next update: Thu 01 Jan 2026 20:01:07 +0000 Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=) 2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=) 3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: opj9IqV0nOw7EGSORaRkHXnq83fugasAINaEzTx3Drc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:f5:17:8b:47:64:7a:d7:73:74:1c:36:35:2f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Validity Not Before: Dec 31 20:01:07 2025 GMT Not After : Jan 1 20:01:07 2026 GMT Subject: CN=ec94608642d6383ef5047acb8af262f733489d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:90:79:e4:97:2d:8f:ec:36:0f:01:df:6c: 08:bf:bd:5d:66:c0:36:93:c9:43:22:89:89:59:f2: b3:b2:ab:d8:ca:e6:96:41:11:5d:53:5c:5e:e5:d3: 82:5f:fb:c8:80:3d:20:76:8a:09:7a:87:82:9e:a7: 60:21:4a:f8:1e:18:ec:dd:02:bb:2d:a4:42:0b:6d: 71:12:46:52:99:a1:e1:26:a1:95:0f:23:20:fb:f2: 64:80:cc:e8:2a:e1:d6:67:bc:62:d7:cf:7c:cc:dc: 4c:ee:fa:6b:8d:f1:8f:f2:60:06:00:55:ab:5c:8a: 23:ab:14:bc:27:f2:87:f4:b3:40:d0:6c:08:c6:c1: f7:4d:41:cf:d0:dd:bd:66:ff:d2:bf:58:bc:2d:61: ee:8d:f7:fe:17:11:d1:e1:b2:49:64:f0:fe:e3:36: 23:7e:3f:2c:95:1d:4e:a4:3d:22:99:ed:0a:0c:97: 98:33:f5:8e:2d:c3:6d:ed:22:48:2e:f1:f1:3b:d7: d7:a8:56:5c:47:52:80:15:85:cd:c1:da:3b:ca:3e: 7b:6f:9d:e6:24:80:1f:df:43:17:dd:64:29:60:42: 3e:aa:ce:ff:f9:49:32:4a:12:ae:73:3d:54:7c:8e: 04:15:91:87:6f:12:c3:0d:86:5a:96:10:38:a3:53: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:60:86:42:D6:38:3E:F5:04:7A:CB:8A:F2:62:F7:33:48:9D:27 X509v3 Authority Key Identifier: keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:85:1f:71:a7:45:06:ff:e5:0d:4d:e8:7e:e1:f9:e4:ec: 20:cd:15:f8:f0:7b:f8:5d:96:7a:35:11:9c:a9:30:05:f2:d0: 99:74:a9:89:7f:1c:f7:f7:46:75:10:f9:79:20:72:02:f6:0e: 0c:74:59:eb:cc:59:bb:a0:2d:e0:82:92:36:dc:b7:42:86:04: b7:6e:b6:6e:13:31:91:7e:dc:53:4d:3b:62:8b:cc:ea:75:5c: 3e:14:65:0f:e7:b8:72:2b:09:88:9c:c2:2a:62:a3:4e:c6:5e: cd:18:de:21:6f:32:4c:ac:28:22:b0:8d:e2:da:62:a2:76:62: 23:1f:68:fe:a5:58:bc:cf:bd:a6:c0:04:9f:17:8a:45:c5:3a: 8d:7f:f4:67:e0:81:1f:95:36:3a:02:18:46:e5:34:ba:37:9e: d7:b5:03:05:05:4c:23:ac:79:c6:2a:7c:1d:cc:ce:24:e2:2e: f4:c6:c4:3a:78:54:8e:08:48:7f:88:4a:40:dd:f7:f9:1b:1d: f4:cf:2f:7e:03:56:3e:b3:c4:64:6e:5e:86:5b:d4:6f:37:ca: 3d:e9:24:5b:5e:f2:ea:32:54:13:ce:d0:7d:b6:9e:2d:6b:40: 6c:32:3b:cb:70:17:7a:9a:f2:e9:7c:8e:79:1e:08:a5:8e:0f: b5:9b:21:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1//UXi0dketdzdBw2NS+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz NTMwZmUwHhcNMjUxMjMxMjAwMTA3WhcNMjYwMTAxMjAwMTA3WjAzMTEwLwYDVQQD EyhlYzk0NjA4NjQyZDYzODNlZjUwNDdhY2I4YWYyNjJmNzMzNDg5ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOmQeeSXLY/sNg8B32wIv71dZsA2 k8lDIomJWfKzsqvYyuaWQRFdU1xe5dOCX/vIgD0gdooJeoeCnqdgIUr4Hhjs3QK7 LaRCC21xEkZSmaHhJqGVDyMg+/JkgMzoKuHWZ7xi1898zNxM7vprjfGP8mAGAFWr XIojqxS8J/KH9LNA0GwIxsH3TUHP0N29Zv/Sv1i8LWHujff+FxHR4bJJZPD+4zYj fj8slR1OpD0ime0KDJeYM/WOLcNt7SJILvHxO9fXqFZcR1KAFYXNwdo7yj57b53m JIAf30MX3WQpYEI+qs7/+UkyShKucz1UfI4EFZGHbxLDDYZalhA4o1MGNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyUYIZC1jg+9QR6y4ryYvczSJ0nMB8GA1UdIwQY MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2 LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemWFH3Gn RQb/5Q1N6H7h+eTsIM0V+PB7+F2WejURnKkwBfLQmXSpiX8c9/dGdRD5eSByAvYO DHRZ68xZu6At4IKSNty3QoYEt262bhMxkX7cU007YovM6nVcPhRlD+e4cisJiJzC KmKjTsZezRjeIW8yTKwoIrCN4tpionZiIx9o/qVYvM+9psAEnxeKRcU6jX/0Z+CB H5U2OgIYRuU0ujee17UDBQVMI6x5xip8HczOJOIu9MbEOnhUjghIf4hKQN33+Rsd 9M8vfgNWPrPEZG5ehlvUbzfKPekkW17y6jJUE87QfbaeLWtAbDI7y3AXepry6XyO eR4IpY4PtZshYQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:59 2025 by rpki-client