This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json) Hash identifier: 1+Yg4qZh9q8WNVHkGhvTV1c0rRmockL+PJm0d4bM0fI= Subject key identifier: 65:F8:0A:F0:CC:D9:A9:D8:7E:FD:88:23:CB:23:A6:42:14:67:8C:7F Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Certificate serial: 019B6768BF1772A2A2E81FA68F55E490E9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft Manifest number: E2 Signing time: Mon 29 Dec 2025 00:01:16 +0000 Manifest this update: Mon 29 Dec 2025 00:01:16 +0000 Manifest next update: Tue 30 Dec 2025 00:01:16 +0000 Files and hashes: 1: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: KjkGJc2+HS0XQE4u9d+e3Klu4wWSKKfVZmS8o52OtHE=) 2: z-MXjyMeqnX_NpzieD8tASjlAeQ.roa (hash: 1ZP6YNbM06t/s4yBjd4f2/fgSt5y8HV5ipSLGrndupQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:bf:17:72:a2:a2:e8:1f:a6:8f:55:e4:90:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Validity Not Before: Dec 29 00:01:16 2025 GMT Not After : Dec 30 00:01:16 2025 GMT Subject: CN=65f80af0ccd9a9d87efd8823cb23a64214678c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:e4:3c:88:0b:a0:68:ab:93:50:05:55:2c: eb:19:78:0a:60:21:21:18:6e:8e:23:1f:21:40:4d: 5f:d4:c1:a0:31:01:44:de:57:e0:1a:76:94:50:fd: da:dc:98:d1:4f:5a:7c:31:b0:27:fe:bc:be:d6:5e: d8:90:e4:7c:94:b3:6a:9b:e6:37:aa:03:b0:b3:41: 62:f9:73:68:d1:40:e4:ca:ed:ae:97:83:d8:38:5d: 69:8b:68:14:4c:28:f9:ef:ec:9c:c4:f4:7a:cb:96: 92:03:53:61:e7:e4:61:76:42:de:97:cf:dd:53:d8: e8:64:1a:63:c1:02:76:25:f7:31:a4:e7:da:88:bb: 93:5f:dd:58:2b:c4:de:56:26:d2:26:ca:9c:f3:5a: 86:34:4f:f6:d4:d5:3a:9d:53:11:ae:14:43:95:26: b6:a8:f1:9b:0a:48:aa:6a:7c:15:92:99:f3:91:da: 11:ea:88:35:fa:11:11:90:6a:b3:d9:4e:56:30:0c: bb:9e:5e:e5:1b:61:40:bf:37:4f:0e:4f:55:02:8b: 15:23:1c:07:a9:72:fc:a1:d0:cf:81:ab:cf:73:d7: e3:2f:d1:3c:76:6e:5a:ed:d3:cc:c8:2b:00:78:0d: 0d:d7:13:c2:d4:0c:c3:dc:62:39:5a:31:a5:e3:f3: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:0A:F0:CC:D9:A9:D8:7E:FD:88:23:CB:23:A6:42:14:67:8C:7F X509v3 Authority Key Identifier: keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4c:48:03:75:11:ad:2b:40:67:70:49:0b:44:28:90:7d:13: 81:9d:bb:e6:06:7b:22:d3:5e:50:9c:c8:04:22:4c:2e:7c:bc: b5:14:52:76:f3:bb:bf:93:b8:c2:ef:f9:cc:b2:7a:91:8d:bc: e6:f0:c3:96:71:bf:73:07:48:27:24:10:c3:f8:c6:4e:35:c8: 72:ce:f4:1e:e1:37:5c:da:e8:ba:85:94:1b:5f:9d:4a:c6:c3: 8e:63:5c:77:19:d1:d7:9f:85:04:f2:8e:89:3f:99:25:75:7a: 70:8a:9e:7a:1c:7a:95:e7:2f:49:75:79:21:81:53:68:9e:20: 8e:1d:ae:ce:b7:73:69:0a:56:5c:74:79:6e:c9:25:5c:27:99: 73:c7:fa:e0:73:7f:49:9e:81:49:66:dc:c6:20:a0:6c:03:41: c1:3a:44:1a:8b:94:8c:1f:2c:b7:42:f1:a5:bd:79:cb:6f:25: 55:08:d1:b5:77:a2:29:8a:02:2d:ae:e2:1a:43:0c:cb:45:52: e6:d7:92:0a:78:7d:68:8c:de:56:13:da:dd:db:b1:4a:23:9e: f2:f3:38:ec:65:99:05:b1:c4:c3:02:48:52:2b:3d:e5:09:bb: 40:55:92:c3:d8:8b:95:01:83:32:c5:2b:48:54:cb:11:4f:b1: 97:94:46:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaL8XcqKi6B+mj1XkkOnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi ZmRkNGQwHhcNMjUxMjI5MDAwMTE2WhcNMjUxMjMwMDAwMTE2WjAzMTEwLwYDVQQD Eyg2NWY4MGFmMGNjZDlhOWQ4N2VmZDg4MjNjYjIzYTY0MjE0Njc4YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWLkPIgLoGirk1AFVSzrGXgKYCEh GG6OIx8hQE1f1MGgMQFE3lfgGnaUUP3a3JjRT1p8MbAn/ry+1l7YkOR8lLNqm+Y3 qgOws0Fi+XNo0UDkyu2ul4PYOF1pi2gUTCj57+ycxPR6y5aSA1Nh5+RhdkLel8/d U9joZBpjwQJ2JfcxpOfaiLuTX91YK8TeVibSJsqc81qGNE/21NU6nVMRrhRDlSa2 qPGbCkiqanwVkpnzkdoR6og1+hERkGqz2U5WMAy7nl7lG2FAvzdPDk9VAosVIxwH qXL8odDPgavPc9fjL9E8dm5a7dPMyCsAeA0N1xPC1AzD3GI5WjGl4/P0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX4CvDM2anYfv2II8sjpkIUZ4x/MB8GA1UdIwQY MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt ZjMwMjhhZWE5OTc3LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3 LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUxIA3UR rStAZ3BJC0QokH0TgZ275gZ7ItNeUJzIBCJMLny8tRRSdvO7v5O4wu/5zLJ6kY28 5vDDlnG/cwdIJyQQw/jGTjXIcs70HuE3XNrouoWUG1+dSsbDjmNcdxnR15+FBPKO iT+ZJXV6cIqeehx6lecvSXV5IYFTaJ4gjh2uzrdzaQpWXHR5bsklXCeZc8f64HN/ SZ6BSWbcxiCgbANBwTpEGouUjB8st0Lxpb15y28lVQjRtXeiKYoCLa7iGkMMy0VS 5teSCnh9aIzeVhPa3duxSiOe8vM47GWZBbHEwwJIUis95Qm7QFWSw9iLlQGDMsUr SFTLEU+xl5RGig== -----END CERTIFICATE-----Generated at Mon Dec 29 05:04:22 2025 by rpki-client