This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft File: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json) Hash identifier: j8WPCoZ16ViGE+kJNoojiacud7oZtwCpYgAhc4utdYA= Subject key identifier: 26:98:FF:9D:00:A6:BC:09:D6:5F:3C:91:C8:54:42:A3:99:B9:C0:B1 Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Certificate serial: 019B3E6CBCB1C56C85C097FAA64DF1B9335E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft Manifest number: 14A7 Signing time: Sun 21 Dec 2025 01:01:12 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Mon 22 Dec 2025 01:01:12 +0000 Files and hashes: 1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: vAHeu3gPxu//xKnXhCZnyXH2fKFpW7Ja8bxY/nwy6ao=) 2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=) 3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=) 4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=) 5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=) 6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=) 7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=) 8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=) 9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:bc:b1:c5:6c:85:c0:97:fa:a6:4d:f1:b9:33:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 22 01:01:12 2025 GMT Subject: CN=2698ff9d00a6bc09d65f3c91c85442a399b9c0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:65:95:fe:05:25:5a:a3:3b:b3:1d:59:26: fe:47:31:dc:a1:94:a5:0f:75:2a:97:03:3e:5e:da: c3:6f:55:ab:7a:2b:25:36:47:bb:a8:b0:c6:f0:94: f1:f4:cf:c4:e7:9b:e4:95:e5:fc:7c:7b:d8:05:8e: ae:16:a7:4e:17:b9:94:b6:d7:77:54:3d:f0:78:c7: d2:bc:ba:30:09:86:11:6b:16:d5:02:16:67:2d:9a: 99:a5:19:25:3b:1c:87:03:a0:d9:4e:c1:51:6d:bb: 1e:84:b1:e5:b3:96:a0:36:c7:bc:13:2a:27:8e:8e: a3:fa:be:9b:d0:b7:d3:17:80:fa:6f:42:0f:91:3f: c1:50:3b:0c:0f:0d:dd:19:36:50:81:c9:df:91:0a: 78:0d:5a:a0:12:22:95:9b:fa:54:1f:3c:08:1a:15: 22:ed:51:00:c7:ed:38:aa:dd:f4:57:6b:c2:dd:c3: 82:c9:32:0e:e3:5f:73:35:82:7c:fe:e2:b2:ca:a3: f3:d5:f3:3a:45:40:cc:eb:40:7c:08:51:17:00:15: 01:70:60:74:fa:7d:78:ab:02:fb:8b:bf:c4:1f:c2: 98:a1:73:81:d5:a5:07:76:d4:c9:38:00:20:c7:04: 0a:bb:86:c6:02:e1:55:58:ab:fe:24:86:c6:d4:ec: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:FF:9D:00:A6:BC:09:D6:5F:3C:91:C8:54:42:A3:99:B9:C0:B1 X509v3 Authority Key Identifier: keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b7:25:04:71:6a:72:04:ca:d3:c1:c2:f0:02:54:ae:af:f4: be:20:7c:d0:d1:64:33:8a:09:b6:d0:ed:82:83:89:17:50:ae: 79:cc:af:e3:ba:e0:54:69:c3:7a:98:b1:87:a4:5a:89:6a:5a: 1e:f1:e6:ef:db:c8:47:6e:f2:36:d0:9c:71:1e:54:af:3c:d1: b1:54:cf:00:c9:2c:46:03:04:ce:ab:b0:38:c9:87:80:bc:2f: d2:93:2d:1e:1f:50:c4:2b:6e:dc:e1:1e:f1:20:d7:1e:fe:03: 4e:6b:76:1a:ef:a0:08:63:45:98:7f:2b:90:73:4d:1a:02:a7: 69:c9:02:4a:15:b7:f4:98:2b:26:e5:ae:b3:33:f4:89:d2:fa: 58:8e:75:27:81:96:3c:ae:2e:d3:25:dd:16:23:df:04:b2:8c: 89:8c:20:7c:d9:49:24:cf:54:f4:fc:56:59:68:e9:92:55:5a: bd:54:c9:e3:61:82:8a:03:51:e0:22:a6:fa:16:53:89:eb:cd: 83:d8:4f:10:13:c5:c5:03:97:bc:5b:8a:40:49:77:31:1d:21: 94:b6:0b:c9:66:ab:e4:48:b2:10:d5:d6:2a:41:0a:9f:a9:b4: f1:b3:52:b4:40:b0:84:47:19:a0:9e:2f:82:62:89:6a:14:91: fc:5d:db:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLyxxWyFwJf6pk3xuTNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm ZWI5ZWMwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD EygyNjk4ZmY5ZDAwYTZiYzA5ZDY1ZjNjOTFjODU0NDJhMzk5YjljMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GRllf4FJVqjO7MdWSb+RzHcoZSl D3UqlwM+XtrDb1WreislNke7qLDG8JTx9M/E55vkleX8fHvYBY6uFqdOF7mUttd3 VD3weMfSvLowCYYRaxbVAhZnLZqZpRklOxyHA6DZTsFRbbsehLHls5agNse8Eyon jo6j+r6b0LfTF4D6b0IPkT/BUDsMDw3dGTZQgcnfkQp4DVqgEiKVm/pUHzwIGhUi 7VEAx+04qt30V2vC3cOCyTIO419zNYJ8/uKyyqPz1fM6RUDM60B8CFEXABUBcGB0 +n14qwL7i7/EH8KYoXOB1aUHdtTJOAAgxwQKu4bGAuFVWKv+JIbG1OyMBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaY/50AprwJ1l88kchUQqOZucCxMB8GA1UdIwQY MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt ZThiNjBhMmRkNmI0LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0 LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrclBHFq cgTK08HC8AJUrq/0viB80NFkM4oJttDtgoOJF1Cuecyv47rgVGnDepixh6RaiWpa HvHm79vIR27yNtCccR5UrzzRsVTPAMksRgMEzquwOMmHgLwv0pMtHh9QxCtu3OEe 8SDXHv4DTmt2Gu+gCGNFmH8rkHNNGgKnackCShW39JgrJuWuszP0idL6WI51J4GW PK4u0yXdFiPfBLKMiYwgfNlJJM9U9PxWWWjpklVavVTJ42GCigNR4CKm+hZTievN g9hPEBPFxQOXvFuKQEl3MR0hlLYLyWar5EiyENXWKkEKn6m08bNStECwhEcZoJ4v gmKJahSR/F3bzw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:27:02 2025 by rpki-client