This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json) Hash identifier: VkJbBrzE7rijNsgJNj7nbhC9JTE/GnI7DBPDck4MTNk= Subject key identifier: EA:1B:8A:C7:1C:5C:4A:7B:A0:AD:54:51:E4:4B:63:3B:5E:D7:49:D6 Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a Certificate serial: 019B3E6E07653A96AA1ED3007C4B8CA48039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:02:36 +0000 Manifest this update: Sun 21 Dec 2025 01:02:36 +0000 Manifest next update: Mon 22 Dec 2025 01:02:36 +0000 Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=) 2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=) 3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: E9ukvF0V6MpnwohgXYm9piNhjIJllCTgGsfJ6lrnM80=) 4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:07:65:3a:96:aa:1e:d3:00:7c:4b:8c:a4:80:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a Validity Not Before: Dec 21 01:02:36 2025 GMT Not After : Dec 22 01:02:36 2025 GMT Subject: CN=ea1b8ac71c5c4a7ba0ad5451e44b633b5ed749d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:95:b8:b0:32:c3:cd:4d:f8:d0:d2:94:ed: af:31:5d:a5:58:08:45:73:b9:82:8c:90:71:2d:67: 56:55:84:64:a0:fc:f1:83:63:fc:fe:c4:3f:fb:81: cb:dc:11:01:d1:bb:e2:02:8c:8e:c8:db:78:94:48: 59:39:a0:a4:61:db:64:f3:8a:cc:5a:b8:96:d0:3c: 3f:3a:b9:8b:f1:70:80:e7:5e:02:35:f8:53:53:86: 28:d7:b4:a8:17:f0:6a:07:c2:c6:7c:b6:d4:57:5b: 0e:94:11:aa:67:10:51:ae:39:bd:0a:9b:08:c1:49: 2c:e2:75:03:d6:52:e1:8e:47:33:b2:61:41:4a:d9: a3:b5:63:af:9d:2e:00:49:ba:d4:b7:55:47:2a:77: 4a:6a:f4:f1:56:d2:29:3e:a1:74:88:7f:a1:f3:3d: 21:58:55:09:7f:8c:43:3d:75:6e:fb:b5:bb:ea:54: 71:d9:b3:87:21:75:cd:b7:74:1c:28:38:09:72:27: 07:8f:7f:f9:11:ac:66:ea:82:27:fd:78:d5:e2:92: b4:59:1b:a3:05:1f:0a:1a:67:33:77:28:69:12:e7: c1:0d:9b:a7:57:1d:fa:6f:2a:4f:3f:e8:b9:fd:24: ba:a6:f8:1b:73:a5:3f:5b:c9:fb:d5:b0:c7:ab:37: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:8A:C7:1C:5C:4A:7B:A0:AD:54:51:E4:4B:63:3B:5E:D7:49:D6 X509v3 Authority Key Identifier: keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d6:61:ac:50:0a:9a:58:01:63:21:45:bd:81:aa:d3:99:bf: 08:e5:30:4e:bc:b9:bf:bc:07:af:b5:ea:a6:fe:e9:47:05:58: ed:94:6e:bc:91:e4:04:00:71:c2:c4:d4:fd:76:89:0e:cf:4a: bf:72:9b:9f:30:0a:ba:65:9e:f3:86:9c:95:d8:80:0e:29:84: a1:27:2d:4e:8f:35:8b:12:4a:ea:48:74:12:73:08:3a:65:5d: 60:c8:00:b8:0b:f9:f1:32:73:57:3c:0b:dd:89:05:0b:34:f6: d5:e1:59:2f:73:23:aa:e8:b2:ce:ce:ab:f6:55:2d:52:e6:c6: 22:af:34:57:e0:f3:43:e3:4b:41:67:50:ab:62:48:1b:5a:10: 83:c0:a5:f5:73:6d:bf:70:78:73:f5:e1:cf:6b:a7:c2:14:bb: d1:83:a4:69:88:67:b7:42:71:d1:5e:6b:e1:45:8b:61:8b:0a: ae:54:85:81:cf:1f:a2:be:aa:6e:1f:85:e7:ef:7c:ab:f1:82: cf:1a:77:94:7a:ad:df:7a:3a:a1:e0:84:39:c3:a2:b0:c7:9a: ce:4b:60:d6:78:f5:41:70:2e:86:61:39:1e:af:02:87:86:4b: c2:f1:f0:ba:7c:ae:82:6d:4a:8b:0c:dd:6b:72:14:46:f0:ed: 6c:cf:bb:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bgdlOpaqHtMAfEuMpIA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll Yzc1M2EwHhcNMjUxMjIxMDEwMjM2WhcNMjUxMjIyMDEwMjM2WjAzMTEwLwYDVQQD EyhlYTFiOGFjNzFjNWM0YTdiYTBhZDU0NTFlNDRiNjMzYjVlZDc0OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUuVuLAyw81N+NDSlO2vMV2lWAhF c7mCjJBxLWdWVYRkoPzxg2P8/sQ/+4HL3BEB0bviAoyOyNt4lEhZOaCkYdtk84rM WriW0Dw/OrmL8XCA514CNfhTU4Yo17SoF/BqB8LGfLbUV1sOlBGqZxBRrjm9CpsI wUks4nUD1lLhjkczsmFBStmjtWOvnS4ASbrUt1VHKndKavTxVtIpPqF0iH+h8z0h WFUJf4xDPXVu+7W76lRx2bOHIXXNt3QcKDgJcicHj3/5Eaxm6oIn/XjV4pK0WRuj BR8KGmczdyhpEufBDZunVx36bypPP+i5/SS6pvgbc6U/W8n71bDHqzfGcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOobisccXEp7oK1UUeRLYzte10nWMB8GA1UdIwQY MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt OWM1ZTFkZWIyYzMzLzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9ZhrFAK mlgBYyFFvYGq05m/COUwTry5v7wHr7Xqpv7pRwVY7ZRuvJHkBABxwsTU/XaJDs9K v3KbnzAKumWe84acldiADimEoSctTo81ixJK6kh0EnMIOmVdYMgAuAv58TJzVzwL 3YkFCzT21eFZL3Mjquiyzs6r9lUtUubGIq80V+DzQ+NLQWdQq2JIG1oQg8Cl9XNt v3B4c/Xhz2unwhS70YOkaYhnt0Jx0V5r4UWLYYsKrlSFgc8for6qbh+F5+98q/GC zxp3lHqt33o6oeCEOcOisMeazktg1nj1QXAuhmE5Hq8Ch4ZLwvHwunyugm1Kiwzd a3IURvDtbM+73g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:39:56 2025 by rpki-client