This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft File: Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json) Hash identifier: ehDvyrImmQ+RUJO6ed495cbdUqZfj9GG1218qCFEWgs= Subject key identifier: 85:59:7E:AA:EE:09:41:E9:EE:27:F2:7D:77:D2:E8:63:53:78:CF:82 Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5 Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5 Certificate serial: 019B53AAD1CE5A9A419A1D04D0086AED4441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 04:01:02 +0000 Manifest this update: Thu 25 Dec 2025 04:01:02 +0000 Manifest next update: Fri 26 Dec 2025 04:01:02 +0000 Files and hashes: 1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=) 2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: smVXZA7BmkkznVD0wWwPFxAhuETtAOxumDgqJQlU5wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:d1:ce:5a:9a:41:9a:1d:04:d0:08:6a:ed:44:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5 Validity Not Before: Dec 25 04:01:02 2025 GMT Not After : Dec 26 04:01:02 2025 GMT Subject: CN=85597eaaee0941e9ee27f27d77d2e8635378cf82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:f8:3d:15:b7:f5:9b:ae:ae:d1:87:7e:53: f6:de:bc:14:de:63:f7:7d:71:ef:5a:40:27:a1:7d: 32:66:b4:b2:54:53:82:1c:26:55:38:aa:f8:86:06: 19:7b:9d:f6:f4:0e:92:4c:94:ba:a4:5d:7f:df:59: 30:76:fb:cd:52:c3:0a:00:db:ee:68:b4:f6:f4:8e: 6d:9d:de:c8:3b:da:0d:49:ed:86:ac:ad:be:6a:a4: ac:d5:7e:34:de:0b:21:bd:d7:a3:de:ff:8b:0f:33: 66:bc:4b:9b:74:a3:04:55:7a:b7:87:d8:3a:dd:a4: 96:57:60:a0:ff:73:a4:a3:72:9b:90:28:0e:ce:6d: c7:b4:60:0b:7c:eb:ad:17:e8:6e:70:dd:a3:94:9e: 97:42:94:ce:52:8d:a0:a0:18:02:6e:a1:4a:5f:0a: c4:bd:c0:f9:d6:06:e8:84:c7:a6:55:79:8a:fe:6c: 16:73:49:0d:42:77:50:bf:87:4d:3c:8f:6f:9b:5c: b6:2e:3b:e9:04:b0:8c:70:64:42:16:f1:0d:54:e7: e6:04:74:7e:12:c3:02:5c:b4:9f:94:cb:94:59:a3: ce:08:e5:83:67:0a:37:b4:e3:a7:59:f2:02:c6:7c: 25:62:78:12:0b:d2:81:eb:4b:87:1d:13:d0:65:a5: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:7E:AA:EE:09:41:E9:EE:27:F2:7D:77:D2:E8:63:53:78:CF:82 X509v3 Authority Key Identifier: keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c7:e9:90:66:bb:7c:5b:79:fc:ef:34:c9:f2:0d:83:32:a4: 3b:06:6a:06:e1:4b:b2:18:e8:19:98:6a:7e:70:43:67:6f:a2: 54:ad:fe:8d:9e:b5:a9:3d:55:7f:99:12:ab:a0:4d:8d:74:bb: 9b:ab:d9:13:89:7e:f2:6a:b5:0e:fa:d2:f6:67:56:7c:c8:b6: 21:a9:a8:6b:ff:61:34:f8:47:d8:50:fe:4d:35:01:12:ac:15: 0f:1a:4b:d4:a7:2c:71:f5:dd:c9:9b:59:fa:4d:bb:33:3c:7e: b3:bb:97:f0:5c:03:6a:66:c4:31:65:af:96:90:2f:6e:66:5e: 1c:28:2c:e1:ef:14:75:db:5b:d5:16:b5:52:75:1c:d3:26:e0: 49:6d:3f:a1:45:67:eb:b7:d7:91:1e:58:8f:13:2d:e3:44:59: 6f:de:d5:6d:2b:d8:fe:dd:1d:2d:0f:80:b2:fe:b9:de:30:31: bc:54:47:21:75:ee:54:7a:e0:a2:46:05:89:6d:47:12:cc:3b: 56:67:05:4a:0a:db:53:72:85:f2:35:54:ab:4e:43:15:fa:b3: 34:21:43:47:81:fd:79:6b:35:99:0c:b7:e5:b6:74:de:be:4f: c4:eb:1c:49:10:81:1f:76:1d:e2:e8:30:a7:38:a2:ee:1e:54: 79:1a:70:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqtHOWppBmh0E0Ahq7URBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OWY0ZjcxNDNiNDA2NzgwNWNiYTlhNDBmNjM5NzMyZWU3 ZDQyZTUwHhcNMjUxMjI1MDQwMTAyWhcNMjUxMjI2MDQwMTAyWjAzMTEwLwYDVQQD Eyg4NTU5N2VhYWVlMDk0MWU5ZWUyN2YyN2Q3N2QyZTg2MzUzNzhjZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/j4PRW39ZuurtGHflP23rwU3mP3 fXHvWkAnoX0yZrSyVFOCHCZVOKr4hgYZe5329A6STJS6pF1/31kwdvvNUsMKANvu aLT29I5tnd7IO9oNSe2GrK2+aqSs1X403gshvdej3v+LDzNmvEubdKMEVXq3h9g6 3aSWV2Cg/3Oko3KbkCgOzm3HtGALfOutF+hucN2jlJ6XQpTOUo2goBgCbqFKXwrE vcD51gbohMemVXmK/mwWc0kNQndQv4dNPI9vm1y2LjvpBLCMcGRCFvENVOfmBHR+ EsMCXLSflMuUWaPOCOWDZwo3tOOnWfICxnwlYngSC9KB60uHHRPQZaUQVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVZfqruCUHp7ifyfXfS6GNTeM+CMB8GA1UdIwQY MBaAFCafT3FDtAZ4BcuppA9jlzLufULlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYt OTJjNzgwY2EzMjYwLzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jOTA4NjAtODEzOC00MzNjLWIyNGYtOTJjNzgwY2EzMjYw LzEvSnA5UGNVTzBCbmdGeTZta0QyT1hNdTU5UXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMfpkGa7 fFt5/O80yfINgzKkOwZqBuFLshjoGZhqfnBDZ2+iVK3+jZ61qT1Vf5kSq6BNjXS7 m6vZE4l+8mq1DvrS9mdWfMi2Iamoa/9hNPhH2FD+TTUBEqwVDxpL1KcscfXdyZtZ +k27Mzx+s7uX8FwDambEMWWvlpAvbmZeHCgs4e8Uddtb1Ra1UnUc0ybgSW0/oUVn 67fXkR5YjxMt40RZb97VbSvY/t0dLQ+Asv653jAxvFRHIXXuVHrgokYFiW1HEsw7 VmcFSgrbU3KF8jVUq05DFfqzNCFDR4H9eWs1mQy35bZ03r5PxOscSRCBH3Yd4ugw pzii7h5UeRpwUw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:59 2025 by rpki-client