This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json) Hash identifier: qIaWoNi44nWzeQqjdQyMvThPWHz9mNNTlkbK6WAH8G8= Subject key identifier: 73:91:82:B0:5D:76:E4:9C:E6:BB:02:71:43:1B:12:7A:EC:E3:D4:FF Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144 Certificate serial: 019B47025ADD270901317EA16F7BE52FC4CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 17:01:35 +0000 Manifest this update: Mon 22 Dec 2025 17:01:35 +0000 Manifest next update: Tue 23 Dec 2025 17:01:35 +0000 Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=) 2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=) 3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: PxRC8qDYr61g6DasN5Ji8NIUx0naa9EFMB24AO84B7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:5a:dd:27:09:01:31:7e:a1:6f:7b:e5:2f:c4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144 Validity Not Before: Dec 22 17:01:35 2025 GMT Not After : Dec 23 17:01:35 2025 GMT Subject: CN=739182b05d76e49ce6bb0271431b127aece3d4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:8e:bf:bb:40:fe:80:8b:16:a3:23:42:27: f8:4e:7a:37:98:66:04:df:43:26:93:1f:72:6b:43: 7c:1e:a2:b5:db:ff:7c:e0:36:cd:4e:cf:ff:97:13: 3e:c5:30:80:5d:6f:f9:ef:7c:38:6f:04:23:04:cf: 4c:40:2b:dc:c1:2d:9b:1b:02:cc:98:35:b4:cc:bb: 18:eb:c9:31:ae:5c:cf:04:c5:70:a4:a8:be:b2:ad: 34:35:89:72:4f:aa:cb:ad:fd:01:aa:88:0b:5a:4c: 5f:bc:42:d8:a0:4e:77:ea:85:d9:08:3c:56:9d:80: b4:e4:b8:d2:d2:ac:2d:32:09:6b:73:11:e6:65:ff: c1:50:86:a7:f4:6f:1c:c2:90:31:9a:51:72:30:12: d8:b3:9e:c0:51:4a:e7:13:87:b6:82:c8:e0:69:5f: 59:e0:cf:d5:33:9b:ef:9b:85:8d:e7:ba:eb:14:13: 11:8f:21:52:b4:4d:e9:5b:8a:5b:57:0a:8f:b9:fa: ea:7f:91:ed:b7:bd:d5:61:b7:ea:4e:95:81:07:db: f3:8b:eb:a2:6b:55:55:03:71:dc:7d:84:e8:03:5e: ab:86:ca:57:dc:6f:cc:bc:15:a2:64:48:58:63:02: 35:53:74:30:9e:dd:76:d5:ff:f5:c0:31:36:6f:a6: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:82:B0:5D:76:E4:9C:E6:BB:02:71:43:1B:12:7A:EC:E3:D4:FF X509v3 Authority Key Identifier: keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ca:10:c6:81:09:f5:cd:7e:78:8c:c4:da:54:3b:c6:b4:3f: ad:ce:ee:34:bf:07:c5:06:50:90:46:47:a7:25:fe:0b:ef:17: 17:64:82:0a:83:ba:8b:dd:fc:52:b1:31:c7:11:8b:80:5b:c5: 84:ea:fd:c7:c3:3b:f1:be:18:b9:eb:59:1a:90:eb:90:07:a2: cd:1a:35:7c:f8:bd:8a:fa:ef:b0:e0:27:03:ea:98:2c:7a:19: cf:25:7d:85:bf:5b:13:2f:1b:9b:ed:8d:77:54:3e:34:7f:d3: c4:3a:ce:45:fb:cc:72:08:fb:85:fe:13:e0:1c:03:98:af:58: 94:e6:1f:52:c5:98:e4:3d:ae:1d:78:ef:32:e3:53:d8:0d:97: c0:3d:a7:1b:7c:15:83:95:ca:71:02:06:62:41:70:22:b5:cc: 7c:41:1d:8f:24:ba:b6:dc:93:23:27:f5:79:1f:e0:c7:03:7f: 77:a3:d6:6d:d1:0b:d3:4d:14:97:90:26:64:ee:4c:7b:86:6a: 57:22:95:6f:27:ef:67:0c:3a:a5:f2:ba:cf:df:71:e2:98:24: c4:b2:3c:bd:4d:97:bb:34:50:57:f1:62:c9:1f:c8:30:19:da: 56:ae:10:cf:0b:4d:60:fd:59:e5:ef:49:97:04:b6:9f:6f:74: 9d:33:ed:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAlrdJwkBMX6hb3vlL8TKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjRlNDNjNzViZGM1MTFkNTI0ZjBjODVkMDA5Y2JhNzY5 NTYxNDQwHhcNMjUxMjIyMTcwMTM1WhcNMjUxMjIzMTcwMTM1WjAzMTEwLwYDVQQD Eyg3MzkxODJiMDVkNzZlNDljZTZiYjAyNzE0MzFiMTI3YWVjZTNkNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAuOv7tA/oCLFqMjQif4Tno3mGYE 30Mmkx9ya0N8HqK12/984DbNTs//lxM+xTCAXW/573w4bwQjBM9MQCvcwS2bGwLM mDW0zLsY68kxrlzPBMVwpKi+sq00NYlyT6rLrf0BqogLWkxfvELYoE536oXZCDxW nYC05LjS0qwtMglrcxHmZf/BUIan9G8cwpAxmlFyMBLYs57AUUrnE4e2gsjgaV9Z 4M/VM5vvm4WN57rrFBMRjyFStE3pW4pbVwqPufrqf5Htt73VYbfqTpWBB9vzi+ui a1VVA3HcfYToA16rhspX3G/MvBWiZEhYYwI1U3Qwnt121f/1wDE2b6b4IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHORgrBdduSc5rsCcUMbEnrs49T/MB8GA1UdIwQY MBaAFI1k5Dx1vcUR1STwyF0AnLp2lWFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3Yzct NzI0NDgzNTJiODA3LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZjliMDktYTU5ZS00ZjkwLTg3YzctNzI0NDgzNTJiODA3 LzEvaldUa1BIVzl4UkhWSlBESVhRQ2N1bmFWWVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcoQxoEJ 9c1+eIzE2lQ7xrQ/rc7uNL8HxQZQkEZHpyX+C+8XF2SCCoO6i938UrExxxGLgFvF hOr9x8M78b4YuetZGpDrkAeizRo1fPi9ivrvsOAnA+qYLHoZzyV9hb9bEy8bm+2N d1Q+NH/TxDrORfvMcgj7hf4T4BwDmK9YlOYfUsWY5D2uHXjvMuNT2A2XwD2nG3wV g5XKcQIGYkFwIrXMfEEdjyS6ttyTIyf1eR/gxwN/d6PWbdEL000Ul5AmZO5Me4Zq VyKVbyfvZww6pfK6z99x4pgkxLI8vU2XuzRQV/FiyR/IMBnaVq4QzwtNYP1Z5e9J lwS2n290nTPtuA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:23 2025 by rpki-client