This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json) Hash identifier: 7pqPPjTkd6vSB82lHQGyK8eKkIHjliz44sx2Xckk+h8= Subject key identifier: 40:F6:3E:BC:0E:89:60:48:85:9F:96:75:5D:7B:84:77:6E:D1:C3:60 Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019B3D231350AC25D2257593976E47D82100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft Manifest number: 6A Signing time: Sat 20 Dec 2025 19:01:07 +0000 Manifest this update: Sat 20 Dec 2025 19:01:07 +0000 Manifest next update: Sun 21 Dec 2025 19:01:07 +0000 Files and hashes: 1: IuFMGMo0qQPNaw_HwikeG1qpC1g.roa (hash: pfIr6AYyv+yYDp1crXdTbGLCvoMDiRQhQRhnL5paHiM=) 2: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: lnYDEuF5Qi6h0Y1Ej1rWWFzimTZz65LQGobOjo8BaQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:13:50:ac:25:d2:25:75:93:97:6e:47:d8:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Dec 20 19:01:07 2025 GMT Not After : Dec 21 19:01:07 2025 GMT Subject: CN=40f63ebc0e896048859f96755d7b84776ed1c360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d7:5a:e7:a3:30:b0:33:14:33:a6:ab:4f:bf: 25:16:e1:1a:4f:a3:a2:01:40:38:b0:e9:81:ff:5e: b9:cf:4c:18:83:ea:9c:30:70:c5:55:19:dc:2e:0a: 03:9b:a0:c1:f9:c2:df:69:52:b9:af:38:b1:d7:88: d4:c4:6f:7d:68:9d:95:3b:b9:87:b3:a8:c2:da:98: 8e:35:ac:8a:27:ae:c3:69:d1:65:83:7b:9d:da:b6: 38:4f:dd:b2:00:59:b2:94:c3:12:36:79:47:b8:d1: eb:4a:9c:4e:97:a6:58:03:3b:e3:f8:8a:c3:07:72: e5:4b:11:5c:09:9f:6e:b2:e6:74:71:a7:34:e3:55: e9:8c:a0:32:59:12:1a:02:bb:89:c8:7d:c7:2d:0b: 7a:2e:da:40:27:2c:ad:22:7a:9e:14:de:8c:0c:04: 18:50:53:43:33:9b:89:5b:7d:a1:e3:92:37:1f:57: 46:13:09:df:c7:28:7f:6b:6c:7b:ea:45:d6:e6:ff: b6:b9:d2:16:fb:af:c3:f4:5a:a0:db:39:b7:cc:92: e9:f9:1d:3a:06:f1:72:86:cf:d9:17:47:0c:0d:36: d3:81:7b:c2:32:b3:d2:c4:2a:67:66:dc:3b:e5:b8: 74:9b:cf:6d:4b:45:3a:36:8d:c3:46:5e:a1:05:51: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:3E:BC:0E:89:60:48:85:9F:96:75:5D:7B:84:77:6E:D1:C3:60 X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:23:80:55:cc:0a:d2:82:50:9f:5e:42:d4:04:25:89:71: 1b:ea:05:62:7f:88:30:98:e2:5c:75:d0:4a:56:0f:9c:5c:74: ff:ec:4a:8d:76:c3:36:17:7a:66:ea:9b:9d:9b:fc:45:7f:c3: 14:44:7f:64:96:ac:93:13:ac:cc:04:98:c9:56:76:e6:94:d2: 2f:dc:74:95:5c:3d:85:c8:60:69:6a:b5:73:89:0d:ce:e0:1d: bd:98:63:95:65:68:b3:49:bc:35:98:64:5b:44:dd:c8:2c:a4: 1b:df:a3:f1:a1:8c:55:77:97:1d:28:ec:f9:e8:ea:bd:1a:68: b3:2f:14:6a:b3:dd:3d:98:5d:2c:61:fa:ab:62:54:e9:b1:73: 65:6b:5c:00:4d:91:e7:0d:79:b2:70:f3:2a:cf:3a:e8:6b:97: 70:a0:61:12:2a:87:27:dd:21:82:99:39:6e:07:82:d7:2d:78: e5:32:d4:04:ff:f3:8b:04:68:52:70:1d:fa:dd:b2:cc:b3:00: 02:cf:ef:7f:52:7f:67:92:d3:41:f7:28:75:1d:aa:75:48:0e: 27:b0:c0:b6:6a:d3:8e:fc:b7:0d:45:c6:58:19:d3:0c:c7:4b: d0:a3:1d:d7:f5:bf:32:96:13:1c:7b:53:61:f2:22:81:dc:bc: 1c:a2:ff:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxNQrCXSJXWTl25H2CEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjUxMjIwMTkwMTA3WhcNMjUxMjIxMTkwMTA3WjAzMTEwLwYDVQQD Eyg0MGY2M2ViYzBlODk2MDQ4ODU5Zjk2NzU1ZDdiODQ3NzZlZDFjMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dda56MwsDMUM6arT78lFuEaT6Oi AUA4sOmB/165z0wYg+qcMHDFVRncLgoDm6DB+cLfaVK5rzix14jUxG99aJ2VO7mH s6jC2piONayKJ67DadFlg3ud2rY4T92yAFmylMMSNnlHuNHrSpxOl6ZYAzvj+IrD B3LlSxFcCZ9usuZ0cac041XpjKAyWRIaAruJyH3HLQt6LtpAJyytInqeFN6MDAQY UFNDM5uJW32h45I3H1dGEwnfxyh/a2x76kXW5v+2udIW+6/D9Fqg2zm3zJLp+R06 BvFyhs/ZF0cMDTbTgXvCMrPSxCpnZtw75bh0m89tS0U6No3DRl6hBVFGgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED2PrwOiWBIhZ+WdV17hHdu0cNgMB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuYjgFXM CtKCUJ9eQtQEJYlxG+oFYn+IMJjiXHXQSlYPnFx0/+xKjXbDNhd6ZuqbnZv8RX/D FER/ZJaskxOszASYyVZ25pTSL9x0lVw9hchgaWq1c4kNzuAdvZhjlWVos0m8NZhk W0TdyCykG9+j8aGMVXeXHSjs+ejqvRposy8UarPdPZhdLGH6q2JU6bFzZWtcAE2R 5w15snDzKs866GuXcKBhEiqHJ90hgpk5bgeC1y145TLUBP/ziwRoUnAd+t2yzLMA As/vf1J/Z5LTQfcodR2qdUgOJ7DAtmrTjvy3DUXGWBnTDMdL0KMd1/W/MpYTHHtT YfIigdy8HKL/bg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:49:52 2025 by rpki-client