This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json) Hash identifier: 7dGySTXSXE2P7+GFH4oF2af057vZRS05iT22SyDoBOQ= Subject key identifier: 1B:F1:08:02:08:D4:2B:3F:F1:F3:23:38:2F:82:4C:AB:A4:6B:FB:F2 Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66 Certificate serial: 019B446EA000EAB81D4A55F752320B6AF0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft Manifest number: 0C89 Signing time: Mon 22 Dec 2025 05:00:59 +0000 Manifest this update: Mon 22 Dec 2025 05:00:59 +0000 Manifest next update: Tue 23 Dec 2025 05:00:59 +0000 Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=) 2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: cXe/2oFOSLUQTYGrI4Izog7Y9nm/+51TsA2IB5X02iw=) 3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:a0:00:ea:b8:1d:4a:55:f7:52:32:0b:6a:f0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66 Validity Not Before: Dec 22 05:00:59 2025 GMT Not After : Dec 23 05:00:59 2025 GMT Subject: CN=1bf1080208d42b3ff1f323382f824caba46bfbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:dd:06:91:68:fc:10:e4:16:06:fe:ca:e6: 82:2e:39:3c:59:fa:6b:ce:85:51:99:6a:ee:3f:d3: cb:79:35:50:78:9d:d4:95:28:a0:cc:73:bf:d5:7d: 6b:c3:a3:74:25:97:f5:72:44:21:46:70:aa:e7:0b: 46:ce:5c:4d:8b:f7:56:9b:95:dd:6c:62:42:e6:b8: 56:e7:35:9c:4f:f0:96:e5:e9:91:79:7b:55:23:fb: d4:0e:1e:12:53:3a:0f:32:ab:c1:b0:96:16:26:5f: a1:58:6d:f2:78:a1:05:fb:1a:bc:f3:bd:0f:12:99: af:90:8b:0f:11:8d:76:bc:ee:dd:0d:9b:ff:6a:af: f6:0d:e8:66:e4:eb:a8:65:88:60:e6:30:7f:fb:79: 84:2c:d4:9a:0a:f5:4a:db:85:f3:c1:b8:05:7f:f5: 60:1c:37:f1:45:ce:c3:86:06:df:e5:ec:f3:c8:f7: 42:b2:aa:aa:26:92:25:8b:ad:ea:0d:51:ec:f9:cb: ee:70:f8:12:29:2c:33:9b:c6:c4:1c:1b:73:73:6a: a7:6c:a1:9e:82:a4:2c:56:8d:12:49:b4:b5:1a:7e: 69:57:5a:bc:97:49:2f:29:62:e3:91:18:e3:2b:0f: 34:11:d3:c1:6a:d5:e6:22:1f:59:02:85:c1:e9:c9: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:08:02:08:D4:2B:3F:F1:F3:23:38:2F:82:4C:AB:A4:6B:FB:F2 X509v3 Authority Key Identifier: keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:58:6e:c9:5c:81:3e:12:bc:6c:b1:c0:82:40:37:d0:d2:df: 93:4f:f1:20:af:da:25:d6:16:53:55:09:28:b2:8a:54:b6:7d: 92:15:b1:7f:ad:40:d8:db:22:aa:67:07:d2:a5:d0:40:ef:7c: dc:d7:bd:7f:9c:6c:23:61:ee:8c:68:4d:8f:6e:b7:c7:42:9c: cb:20:c8:26:6d:cf:3b:e1:69:dd:4b:cb:da:11:38:c6:8d:3a: ea:ff:a7:94:e9:42:32:51:a3:bd:66:7d:64:1f:29:f6:63:3b: a5:f5:af:b5:04:2d:a9:ea:cf:0a:6f:5c:9d:a6:44:f5:af:46: f3:5d:17:2c:3e:27:b1:db:63:02:20:0c:a9:c1:0b:bd:ec:3d: a1:0c:ec:06:24:46:d0:17:1e:ef:5e:d1:89:97:bc:79:32:b3: 13:c4:6f:98:3b:6b:ff:36:d5:46:35:9d:64:37:d3:65:b7:0e: 49:65:89:a6:4f:34:0e:09:ed:0b:6c:dc:db:ff:16:eb:f9:a2: 3c:dd:52:11:5f:76:52:62:a7:11:83:b8:d2:2b:fc:e8:56:e5: a3:3f:62:0d:f4:b9:a8:8e:58:13:b6:f3:e4:97:18:a3:87:e8: 6f:0b:f9:c9:05:31:1e:61:32:f1:a0:4a:33:42:a9:6b:f4:09: 34:56:99:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbqAA6rgdSlX3UjILavCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5 NjdjNjYwHhcNMjUxMjIyMDUwMDU5WhcNMjUxMjIzMDUwMDU5WjAzMTEwLwYDVQQD EygxYmYxMDgwMjA4ZDQyYjNmZjFmMzIzMzgyZjgyNGNhYmE0NmJmYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArifdBpFo/BDkFgb+yuaCLjk8Wfpr zoVRmWruP9PLeTVQeJ3UlSigzHO/1X1rw6N0JZf1ckQhRnCq5wtGzlxNi/dWm5Xd bGJC5rhW5zWcT/CW5emReXtVI/vUDh4SUzoPMqvBsJYWJl+hWG3yeKEF+xq8870P EpmvkIsPEY12vO7dDZv/aq/2Dehm5OuoZYhg5jB/+3mELNSaCvVK24XzwbgFf/Vg HDfxRc7Dhgbf5ezzyPdCsqqqJpIli63qDVHs+cvucPgSKSwzm8bEHBtzc2qnbKGe gqQsVo0SSbS1Gn5pV1q8l0kvKWLjkRjjKw80EdPBatXmIh9ZAoXB6cnHnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvxCAII1Cs/8fMjOC+CTKuka/vyMB8GA1UdIwQY MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlhuyVyB PhK8bLHAgkA30NLfk0/xIK/aJdYWU1UJKLKKVLZ9khWxf61A2NsiqmcH0qXQQO98 3Ne9f5xsI2HujGhNj263x0KcyyDIJm3PO+Fp3UvL2hE4xo066v+nlOlCMlGjvWZ9 ZB8p9mM7pfWvtQQtqerPCm9cnaZE9a9G810XLD4nsdtjAiAMqcELvew9oQzsBiRG 0Bce717RiZe8eTKzE8RvmDtr/zbVRjWdZDfTZbcOSWWJpk80DgntC2zc2/8W6/mi PN1SEV92UmKnEYO40iv86Fbloz9iDfS5qI5YE7bz5JcYo4fobwv5yQUxHmEy8aBK M0Kpa/QJNFaZ9g== -----END CERTIFICATE-----Generated at Mon Dec 22 13:32:30 2025 by rpki-client