This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json) Hash identifier: JZgumzyKkFOrppEuqY5Y3TFzAWVj+VFPPlJlo0cs6Zg= Subject key identifier: 69:39:35:13:54:51:1F:7E:EB:CB:32:50:6C:88:E8:46:92:FF:43:18 Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019B3D22C37BA3DE6A45458631FA019BF4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:00:46 +0000 Manifest this update: Sat 20 Dec 2025 19:00:46 +0000 Manifest next update: Sun 21 Dec 2025 19:00:46 +0000 Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=) 2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: htjsru8yV8D9j1mJ5jBwM+o/Vy5TZ6s62/VErgzihb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:c3:7b:a3:de:6a:45:45:86:31:fa:01:9b:f4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Dec 20 19:00:46 2025 GMT Not After : Dec 21 19:00:46 2025 GMT Subject: CN=6939351354511f7eebcb32506c88e84692ff4318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:14:88:2f:7d:df:c4:35:87:d2:a0:50:ce: 9f:a7:7c:6c:cf:5b:25:a7:28:7c:f2:9f:42:15:c2: ba:7d:8f:9c:28:26:41:60:0e:4d:7e:98:01:f6:9e: 8f:67:3a:3b:70:0a:5e:65:d6:a4:b6:67:50:86:bb: 80:3c:ef:15:73:d0:22:b2:d5:6f:f3:69:e3:56:b2: ff:92:d9:04:8e:22:47:8a:7b:6a:4c:e1:a0:f4:af: 2d:53:55:1c:2a:4b:38:b6:3e:a0:fe:6c:78:a9:ba: 9a:93:38:38:c5:2f:e8:b9:ed:7f:bb:2b:34:ba:85: 7b:c8:03:44:12:51:e4:cc:b6:c6:03:54:86:6f:88: 6d:f2:70:0e:fa:06:c3:66:87:76:4d:29:58:2e:77: d5:a6:0a:18:74:e4:30:66:9c:e4:f3:d1:92:82:6a: 17:69:da:b6:d6:95:0b:50:e6:02:ed:a8:f4:4d:a4: 0f:8d:43:58:3d:3e:95:62:76:dd:8b:85:7c:c1:89: 84:12:d7:78:54:36:85:57:9a:90:57:f0:a2:4e:07: a5:09:fa:0b:ac:4c:59:cf:0a:18:32:f0:69:bf:af: 75:f2:d5:10:33:97:d1:24:81:c6:67:d4:06:d9:1e: 04:3d:16:97:c3:80:a4:86:44:a7:e3:70:c2:0f:86: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:39:35:13:54:51:1F:7E:EB:CB:32:50:6C:88:E8:46:92:FF:43:18 X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3f:4b:97:a2:31:04:98:08:40:e7:6e:2e:34:12:58:13:27: 7a:4c:4d:86:d4:80:49:ca:4e:cc:33:4b:cf:37:c5:c7:0e:e8: d7:3a:d6:3c:c9:3c:66:2d:e9:2c:07:7d:8d:0f:46:53:00:5a: 83:96:92:43:56:0b:25:0c:5d:60:e2:9d:14:30:0d:59:e0:99: 23:ce:03:af:18:eb:3f:ca:5b:f2:e8:82:0e:91:f1:88:b9:22: 9e:40:17:60:e5:c8:82:a8:a0:f2:89:91:f7:13:90:f5:8c:78: 49:9c:89:00:6d:51:85:57:d1:5d:88:82:85:c2:1c:e0:e2:30: 8e:fe:db:fa:11:5d:4e:22:a2:1d:da:0d:0f:dd:ab:05:9b:b4: e1:48:a7:69:b0:a7:d8:af:81:a4:13:16:56:9c:9a:55:5f:71: 08:ab:78:29:1a:84:c2:48:4a:d7:8e:71:f6:cf:b8:1f:98:07: 2e:64:58:52:1e:77:83:85:49:e0:47:3f:72:46:35:c5:14:89: 70:47:08:18:e2:6e:9c:dd:81:11:f9:d9:83:06:02:2b:88:f0: ac:84:25:4c:1c:94:c5:33:2a:6e:f1:23:b0:b9:29:a1:4f:08: 15:86:ff:e6:7f:9a:1a:06:7e:d8:13:1f:de:9b:08:80:93:d7: 60:1c:cb:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IsN7o95qRUWGMfoBm/T2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjUxMjIwMTkwMDQ2WhcNMjUxMjIxMTkwMDQ2WjAzMTEwLwYDVQQD Eyg2OTM5MzUxMzU0NTExZjdlZWJjYjMyNTA2Yzg4ZTg0NjkyZmY0MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIUiC9938Q1h9KgUM6fp3xsz1sl pyh88p9CFcK6fY+cKCZBYA5NfpgB9p6PZzo7cApeZdaktmdQhruAPO8Vc9AistVv 82njVrL/ktkEjiJHintqTOGg9K8tU1UcKks4tj6g/mx4qbqakzg4xS/oue1/uys0 uoV7yANEElHkzLbGA1SGb4ht8nAO+gbDZod2TSlYLnfVpgoYdOQwZpzk89GSgmoX adq21pULUOYC7aj0TaQPjUNYPT6VYnbdi4V8wYmEEtd4VDaFV5qQV/CiTgelCfoL rExZzwoYMvBpv6918tUQM5fRJIHGZ9QG2R4EPRaXw4CkhkSn43DCD4Zz5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk5NRNUUR9+68syUGyI6EaS/0MYMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT9Ll6Ix BJgIQOduLjQSWBMnekxNhtSAScpOzDNLzzfFxw7o1zrWPMk8Zi3pLAd9jQ9GUwBa g5aSQ1YLJQxdYOKdFDANWeCZI84DrxjrP8pb8uiCDpHxiLkinkAXYOXIgqig8omR 9xOQ9Yx4SZyJAG1RhVfRXYiChcIc4OIwjv7b+hFdTiKiHdoND92rBZu04UinabCn 2K+BpBMWVpyaVV9xCKt4KRqEwkhK145x9s+4H5gHLmRYUh53g4VJ4Ec/ckY1xRSJ cEcIGOJunN2BEfnZgwYCK4jwrIQlTByUxTMqbvEjsLkpoU8IFYb/5n+aGgZ+2BMf 3psIgJPXYBzLbg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:13:19 2025 by rpki-client