This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json) Hash identifier: maMWkidh5Md+vLjWvLZa6GfgTjsNxTYh1Jo5doGexo0= Subject key identifier: B6:2F:24:71:9C:49:14:78:4B:BA:82:D1:DF:5B:3C:8F:14:AF:CE:28 Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019B5C08CCD955A93DCFF3FD818A15B3A243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 19:00:39 +0000 Manifest this update: Fri 26 Dec 2025 19:00:39 +0000 Manifest next update: Sat 27 Dec 2025 19:00:39 +0000 Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=) 2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: EWf2HZjwfSgSpFt8Ku5AJdjmyohO5V3lNIsuMEKNfl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:cc:d9:55:a9:3d:cf:f3:fd:81:8a:15:b3:a2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Dec 26 19:00:39 2025 GMT Not After : Dec 27 19:00:39 2025 GMT Subject: CN=b62f24719c4914784bba82d1df5b3c8f14afce28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:08:72:a8:fa:94:73:3c:1d:00:ed:c9:5c: 73:3a:b2:97:bd:c8:a3:ca:b0:42:e1:d5:1a:f8:79: 1e:0e:40:de:06:58:42:26:4b:21:6b:07:2a:80:d1: 7e:c0:05:c3:a5:5f:19:08:6d:d9:54:46:7c:01:c8: c2:d9:3a:96:a4:17:15:bc:de:d6:17:5a:73:8b:41: f6:55:73:f2:66:ca:71:75:46:bb:f7:f0:c6:a4:d7: ab:2c:bd:02:69:5d:04:2e:89:da:34:56:3b:3a:e3: 78:65:46:86:c3:06:4f:92:fd:46:92:20:64:94:ca: a9:93:c7:b7:bf:52:81:94:4d:d3:ee:69:63:f6:74: 3f:25:ce:7a:54:e3:66:98:b0:b7:3c:d2:1d:aa:5a: 37:b6:89:19:91:98:ab:90:46:05:c4:26:eb:f1:fb: 44:37:e9:49:e8:88:db:99:57:d7:aa:16:76:f8:99: 91:df:75:a2:b4:96:55:eb:19:b2:92:7c:9b:a1:c6: f6:b6:f9:ec:ef:ef:de:7d:4f:0a:7b:26:6c:fa:a2: 3e:91:71:d3:bd:fa:01:54:97:b0:70:8c:13:6e:c0: a4:4c:19:a0:5a:c5:c6:d1:49:59:53:5d:ab:67:69: 9c:ec:11:20:69:2b:ff:38:8f:81:d7:12:11:b4:2c: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:24:71:9C:49:14:78:4B:BA:82:D1:DF:5B:3C:8F:14:AF:CE:28 X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:83:ac:cb:a0:43:41:9f:11:18:40:a8:c3:a7:ef:11:32:f2: 60:c4:fd:be:26:7c:8f:ba:81:7d:ce:d6:51:5c:3c:d0:7e:32: ed:2f:53:74:52:b4:43:b8:c8:61:3e:67:f4:fc:9c:a5:2b:e5: 8d:27:14:9d:0c:58:67:e6:45:45:63:ca:38:a0:58:2f:50:7b: 58:ee:78:32:e9:74:d9:6a:d3:d6:44:0b:3a:e0:35:0c:98:3d: de:7a:e1:05:2a:e9:5d:06:1e:72:66:f3:b2:b2:af:dc:a3:25: 6d:07:ad:25:60:1f:75:91:bb:6d:d4:6f:02:50:5d:ad:8d:1e: 45:08:14:87:34:cb:db:dd:fe:95:e4:cd:77:a3:7b:2f:ac:5d: 89:47:8d:01:01:38:62:03:80:84:48:01:ae:6a:74:3a:31:56: d3:4b:8f:7f:f1:3c:e2:55:05:af:6e:4f:5c:a7:ce:58:dd:99: 61:f8:89:81:e7:54:86:aa:39:ed:99:3f:43:db:ee:d1:fb:b6: 1a:e1:e4:4f:8b:b5:9d:e8:de:06:4b:89:ed:ea:af:fa:a9:7d: d0:60:c0:4f:bb:ec:8f:61:68:b1:75:12:b0:b5:81:53:56:76: 24:bb:ae:95:ca:be:1b:84:5a:34:03:e1:d0:05:8f:b5:be:54: 69:d0:f8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCMzZVak9z/P9gYoVs6JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjUxMjI2MTkwMDM5WhcNMjUxMjI3MTkwMDM5WjAzMTEwLwYDVQQD EyhiNjJmMjQ3MTljNDkxNDc4NGJiYTgyZDFkZjViM2M4ZjE0YWZjZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQIcqj6lHM8HQDtyVxzOrKXvcij yrBC4dUa+HkeDkDeBlhCJkshawcqgNF+wAXDpV8ZCG3ZVEZ8AcjC2TqWpBcVvN7W F1pzi0H2VXPyZspxdUa79/DGpNerLL0CaV0ELonaNFY7OuN4ZUaGwwZPkv1GkiBk lMqpk8e3v1KBlE3T7mlj9nQ/Jc56VONmmLC3PNIdqlo3tokZkZirkEYFxCbr8ftE N+lJ6IjbmVfXqhZ2+JmR33WitJZV6xmyknybocb2tvns7+/efU8KeyZs+qI+kXHT vfoBVJewcIwTbsCkTBmgWsXG0UlZU12rZ2mc7BEgaSv/OI+B1xIRtCyk8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYvJHGcSRR4S7qC0d9bPI8Ur84oMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIOsy6BD QZ8RGECow6fvETLyYMT9viZ8j7qBfc7WUVw80H4y7S9TdFK0Q7jIYT5n9PycpSvl jScUnQxYZ+ZFRWPKOKBYL1B7WO54Mul02WrT1kQLOuA1DJg93nrhBSrpXQYecmbz srKv3KMlbQetJWAfdZG7bdRvAlBdrY0eRQgUhzTL293+leTNd6N7L6xdiUeNAQE4 YgOAhEgBrmp0OjFW00uPf/E84lUFr25PXKfOWN2ZYfiJgedUhqo57Zk/Q9vu0fu2 GuHkT4u1nejeBkuJ7eqv+ql90GDAT7vsj2FosXUSsLWBU1Z2JLuulcq+G4RaNAPh 0AWPtb5UadD4Sw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:13 2025 by rpki-client