This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json) Hash identifier: UmWICLM1l+hQRUrWS//cOLajIMeKy+vrjc8mcQwIAGg= Subject key identifier: 47:6D:40:9B:E6:FA:DD:E4:F1:D0:80:7E:35:BE:DF:D6:14:23:33:FA Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Certificate serial: 019B2F66F2C0C51BE76C7104574BFBD0AF10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft Manifest number: 0A42 Signing time: Thu 18 Dec 2025 03:00:34 +0000 Manifest this update: Thu 18 Dec 2025 03:00:34 +0000 Manifest next update: Fri 19 Dec 2025 03:00:34 +0000 Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=) 2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: JVONiJ/AtPEKGnxOnhCqi3CqXPn1znMolnjXZo3TMdc=) 3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:f2:c0:c5:1b:e7:6c:71:04:57:4b:fb:d0:af:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Validity Not Before: Dec 18 03:00:34 2025 GMT Not After : Dec 19 03:00:34 2025 GMT Subject: CN=476d409be6fadde4f1d0807e35bedfd6142333fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c9:68:7e:12:a5:5b:42:5d:cf:e9:dd:fc:18: 3a:37:e1:36:91:5b:c2:5d:ca:47:f1:93:a7:ee:53: aa:32:20:7d:d2:ca:be:10:8d:90:53:36:56:86:4b: d8:09:ed:d3:52:50:20:b6:6f:68:94:34:db:8b:86: 5c:7a:da:83:37:5e:2f:bc:33:35:0e:2e:93:63:e9: 0a:d7:68:e3:ab:6c:12:c7:3f:8a:90:33:dc:dc:b4: 75:07:e3:fe:bd:1a:a8:0d:b2:1c:0d:42:03:b3:1c: d9:d3:e8:97:55:e1:47:fb:7b:d2:c3:6a:06:00:0e: 98:86:34:fd:a4:b3:ff:e1:b4:09:92:6f:df:e3:de: 0a:a7:f6:86:e9:b1:6a:55:d2:1c:42:ee:a9:32:4e: 81:8a:d7:5c:03:91:78:73:28:ea:5c:65:8b:6f:8a: 66:bf:8a:a5:b0:e2:bc:f0:27:58:c6:f6:6b:a2:91: b0:a4:47:e1:5c:9d:82:c9:ae:12:bf:e9:1e:33:ee: 65:17:cf:e8:3d:ef:d2:5d:da:4c:c7:e9:ec:62:6c: 74:02:5f:8e:cc:b0:48:e8:3b:38:49:0c:cb:ad:55: b6:64:05:3f:f9:38:64:c5:69:52:44:24:29:d0:77: 29:69:8d:4a:22:18:99:57:f6:b5:e3:02:45:ba:0f: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6D:40:9B:E6:FA:DD:E4:F1:D0:80:7E:35:BE:DF:D6:14:23:33:FA X509v3 Authority Key Identifier: keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fc:1e:f5:1e:1a:8a:f7:97:f9:56:a2:79:f4:98:3e:f1:9f: 5d:fd:8d:4f:72:1f:9a:82:9d:09:69:d1:c4:fb:ed:6b:59:01: 29:94:e2:70:8a:9e:f0:1b:28:1e:7e:76:32:35:b9:7b:c9:29: 68:90:45:5e:d3:15:6c:d3:ab:2e:88:d9:c8:50:c1:90:67:55: 0b:27:e7:10:28:3f:c2:a2:96:e7:ba:15:7a:5b:eb:ce:f0:52: 76:0d:38:b1:f1:b1:8c:44:7e:29:f9:37:37:3d:da:6c:95:57: f5:e8:cf:dc:27:24:25:04:12:38:23:86:60:67:38:ae:d5:92: 1e:2f:76:c3:f6:62:29:d3:b2:f4:86:13:87:fc:66:52:67:38: 8c:a3:87:a4:c1:ea:91:90:a1:58:67:94:6c:19:36:74:29:0e: 10:e2:8b:eb:7f:6b:5b:bb:bf:7d:b3:31:28:69:a2:27:03:0f: f9:ff:1c:74:60:8c:3b:67:7d:61:c3:11:f2:fb:a4:92:57:7c: 06:4d:24:9f:77:62:39:76:db:ec:ae:6e:ed:2b:39:55:dd:0e: 5f:c6:af:5c:91:9a:bc:81:fd:d0:a4:57:42:8a:82:5f:d4:43: 7b:02:e0:d6:9e:31:74:06:b7:45:3b:5d:dd:59:81:ba:45:32: 6b:1c:4d:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvLAxRvnbHEEV0v70K8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2 NzQ5NDQwHhcNMjUxMjE4MDMwMDM0WhcNMjUxMjE5MDMwMDM0WjAzMTEwLwYDVQQD Eyg0NzZkNDA5YmU2ZmFkZGU0ZjFkMDgwN2UzNWJlZGZkNjE0MjMzM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5slofhKlW0Jdz+nd/Bg6N+E2kVvC XcpH8ZOn7lOqMiB90sq+EI2QUzZWhkvYCe3TUlAgtm9olDTbi4ZcetqDN14vvDM1 Di6TY+kK12jjq2wSxz+KkDPc3LR1B+P+vRqoDbIcDUIDsxzZ0+iXVeFH+3vSw2oG AA6YhjT9pLP/4bQJkm/f494Kp/aG6bFqVdIcQu6pMk6BitdcA5F4cyjqXGWLb4pm v4qlsOK88CdYxvZropGwpEfhXJ2Cya4Sv+keM+5lF8/oPe/SXdpMx+nsYmx0Al+O zLBI6Ds4SQzLrVW2ZAU/+ThkxWlSRCQp0HcpaY1KIhiZV/a14wJFug9bJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdtQJvm+t3k8dCAfjW+39YUIzP6MB8GA1UdIwQY MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvwe9R4a iveX+VaiefSYPvGfXf2NT3IfmoKdCWnRxPvta1kBKZTicIqe8BsoHn52MjW5e8kp aJBFXtMVbNOrLojZyFDBkGdVCyfnECg/wqKW57oVelvrzvBSdg04sfGxjER+Kfk3 Nz3abJVX9ejP3CckJQQSOCOGYGc4rtWSHi92w/ZiKdOy9IYTh/xmUmc4jKOHpMHq kZChWGeUbBk2dCkOEOKL639rW7u/fbMxKGmiJwMP+f8cdGCMO2d9YcMR8vukkld8 Bk0kn3diOXbb7K5u7Ss5Vd0OX8avXJGavIH90KRXQoqCX9RDewLg1p4xdAa3RTtd 3VmBukUyaxxNkQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:34 2025 by rpki-client