This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json) Hash identifier: FXZTu/0zRIlrPvKzbfaps6OY2w2t2T0+2hsz5fsDWsI= Subject key identifier: FA:8C:B5:65:63:9A:98:87:0B:21:67:3E:CF:6C:B5:3B:F7:EF:AF:2F Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689 Certificate serial: 019B4DE005FA8EC5B4285B520C75AF4BFBD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft Manifest number: 1013 Signing time: Wed 24 Dec 2025 01:01:25 +0000 Manifest this update: Wed 24 Dec 2025 01:01:25 +0000 Manifest next update: Thu 25 Dec 2025 01:01:25 +0000 Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=) 2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: q9yIjQInR1RlojbWBz5Qb1QPR9aMVu3naEPe7bhYLH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:05:fa:8e:c5:b4:28:5b:52:0c:75:af:4b:fb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689 Validity Not Before: Dec 24 01:01:25 2025 GMT Not After : Dec 25 01:01:25 2025 GMT Subject: CN=fa8cb565639a98870b21673ecf6cb53bf7efaf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:0e:10:34:a9:49:b2:1e:74:59:39:82:db: 0e:d6:46:5e:ea:45:f4:35:72:56:38:f8:1b:cc:2e: 4d:e5:5e:f5:36:0b:7d:8b:cf:62:3f:5b:a2:56:b0: 1c:d0:55:97:66:7d:3b:14:7a:26:46:42:ab:90:9b: e7:31:d7:9c:32:90:a8:97:d8:0d:f1:51:b6:be:6c: 01:1c:e3:0e:e6:23:f8:1d:63:85:ee:4f:f0:cc:c0: 80:90:f7:05:3b:3a:d2:36:3c:e0:8b:82:99:12:e3: de:1d:85:37:88:00:ee:81:ba:66:ac:bd:ee:29:30: 6a:41:50:90:16:7f:c2:b2:a4:45:08:06:02:90:5a: 74:12:80:34:f4:8c:71:e9:4d:b6:bc:db:04:5c:85: c1:b7:22:4f:f3:65:00:81:84:cd:0f:ac:70:0f:47: d2:95:72:c7:af:5c:8a:e9:a1:0b:3b:fc:20:83:09: d6:28:47:2c:a9:0d:f0:38:ef:11:33:00:d2:11:cf: ce:5b:28:ad:89:26:4c:6b:1f:84:9d:96:2d:d2:52: 73:08:13:de:94:2d:b8:00:4d:f1:31:38:78:eb:9b: c6:a7:f2:f1:69:53:00:61:ae:30:f4:76:9b:ea:22: d8:be:7f:e9:f1:0e:d1:83:95:26:71:50:7e:f7:46: 50:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:B5:65:63:9A:98:87:0B:21:67:3E:CF:6C:B5:3B:F7:EF:AF:2F X509v3 Authority Key Identifier: keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:4e:cf:e2:e7:bd:c6:b3:73:57:1a:2b:ce:89:c8:0c:7a: 43:62:0d:98:e6:e8:8c:92:9f:fd:78:ca:62:32:31:6a:8c:94: c3:22:ef:da:16:7f:94:54:ae:d3:e9:18:10:ef:e8:a1:32:d6: 17:60:57:00:32:cd:64:21:33:f1:99:d9:85:27:7b:f5:27:12: d5:b5:4f:b3:cf:5a:e6:92:6e:45:52:4e:01:d6:d8:cd:a2:97: a6:e4:5f:80:41:25:01:86:0e:be:55:6c:06:36:1f:2a:56:b9: 45:45:b4:3d:8c:4d:03:b0:a7:66:29:a4:1c:c8:7a:c9:f9:84: 9d:e8:4b:b8:b0:34:28:8c:fb:b3:8d:65:cc:74:1f:4e:ea:a4: db:8d:65:2c:3c:4d:50:81:e7:d7:29:e2:08:11:c3:cd:75:db: f8:8d:83:42:cd:99:dd:d7:da:b4:bf:4e:81:03:ec:0c:e5:8b: da:91:11:fe:ed:c7:d7:8e:21:8f:6d:f4:88:a1:bd:ce:a1:ae: 71:83:8e:83:8e:c5:86:2e:83:72:cb:19:19:48:cf:c5:12:a6: b4:49:b4:39:9f:4f:70:80:ee:ef:6a:00:50:19:4a:55:93:a5: 39:ae:e2:ec:25:39:12:af:41:2c:50:b7:ae:b7:95:85:c9:9a: 02:06:9c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4AX6jsW0KFtSDHWvS/vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw NDQ2ODkwHhcNMjUxMjI0MDEwMTI1WhcNMjUxMjI1MDEwMTI1WjAzMTEwLwYDVQQD EyhmYThjYjU2NTYzOWE5ODg3MGIyMTY3M2VjZjZjYjUzYmY3ZWZhZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtMOEDSpSbIedFk5gtsO1kZe6kX0 NXJWOPgbzC5N5V71Ngt9i89iP1uiVrAc0FWXZn07FHomRkKrkJvnMdecMpCol9gN 8VG2vmwBHOMO5iP4HWOF7k/wzMCAkPcFOzrSNjzgi4KZEuPeHYU3iADugbpmrL3u KTBqQVCQFn/CsqRFCAYCkFp0EoA09Ixx6U22vNsEXIXBtyJP82UAgYTND6xwD0fS lXLHr1yK6aELO/wggwnWKEcsqQ3wOO8RMwDSEc/OWyitiSZMax+EnZYt0lJzCBPe lC24AE3xMTh465vGp/LxaVMAYa4w9Hab6iLYvn/p8Q7Rg5UmcVB+90ZQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqMtWVjmpiHCyFnPs9stTv3768vMB8GA1UdIwQY MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBhOz+Ln vcazc1caK86JyAx6Q2INmObojJKf/XjKYjIxaoyUwyLv2hZ/lFSu0+kYEO/ooTLW F2BXADLNZCEz8ZnZhSd79ScS1bVPs89a5pJuRVJOAdbYzaKXpuRfgEElAYYOvlVs BjYfKla5RUW0PYxNA7CnZimkHMh6yfmEnehLuLA0KIz7s41lzHQfTuqk241lLDxN UIHn1yniCBHDzXXb+I2DQs2Z3dfatL9OgQPsDOWL2pER/u3H144hj230iKG9zqGu cYOOg47Fhi6DcssZGUjPxRKmtEm0OZ9PcIDu72oAUBlKVZOlOa7i7CU5Eq9BLFC3 rreVhcmaAgaceA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:12:29 2025 by rpki-client