This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json) Hash identifier: gcM7v73b3zQvknOWVZdy9USbuxfFbpT/MxTn9QyHK4g= Subject key identifier: AD:39:A1:24:55:FD:E5:EE:C2:64:6E:0C:2E:37:B4:43:78:A6:2F:BB Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78 Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578 Certificate serial: 019B3C1084D01C415ED1AB2F689F52E3044F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft Manifest number: 08F4 Signing time: Sat 20 Dec 2025 14:01:14 +0000 Manifest this update: Sat 20 Dec 2025 14:01:14 +0000 Manifest next update: Sun 21 Dec 2025 14:01:14 +0000 Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=) 2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: nVkJBQn8nhESw4+dJd5nnlqhgQFL/xpvhq9CDak4dlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:84:d0:1c:41:5e:d1:ab:2f:68:9f:52:e3:04:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578 Validity Not Before: Dec 20 14:01:14 2025 GMT Not After : Dec 21 14:01:14 2025 GMT Subject: CN=ad39a12455fde5eec2646e0c2e37b44378a62fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:ef:c4:bf:d4:f4:fe:e3:0d:72:28:da:2f: 35:b5:ee:da:08:17:83:0b:03:95:0a:d0:00:57:03: 7e:f4:a8:b8:b5:19:b5:5e:ed:85:d5:52:18:4c:ea: bd:8a:cb:48:c9:df:15:50:2b:2b:02:cc:21:05:b4: 99:44:0a:e6:5b:d9:b8:d8:de:5a:dd:0c:31:63:65: 86:8e:96:86:f7:d5:87:ae:57:51:d5:05:35:68:b0: a2:8b:3c:13:7a:d1:66:61:f6:32:d1:09:2a:c0:5a: 5e:f1:85:df:22:a6:c5:d7:c8:34:e5:7e:48:e5:03: 0a:67:81:89:2e:6a:3f:0c:5a:ff:f9:44:b1:ef:b7: d5:b7:16:17:71:33:c2:7f:82:6f:18:82:58:44:f7: ff:05:89:bd:c0:65:97:15:a0:6e:78:d0:a7:b3:01: c6:30:8e:76:62:77:bc:3b:18:ca:36:cb:6e:ba:3f: bd:1a:56:a0:e5:69:b4:3c:04:21:6b:fc:0c:1a:25: 20:cb:10:3f:07:16:2b:86:c9:b0:6c:ac:0a:72:37: ae:dc:04:c7:cd:7b:a5:60:22:07:1f:95:52:c6:67: 22:ab:ec:27:c1:4b:bf:32:cd:2c:c8:8f:72:e5:41: ae:c1:29:75:1d:93:fc:58:4b:f7:f3:86:3b:d4:a2: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:A1:24:55:FD:E5:EE:C2:64:6E:0C:2E:37:B4:43:78:A6:2F:BB X509v3 Authority Key Identifier: keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:80:a2:12:85:59:58:f4:50:23:87:a4:c2:d4:23:a2:66: 14:d8:c1:9b:5d:a2:fc:d1:28:72:86:97:91:33:46:f5:db:b7: 5f:84:b9:5a:31:f7:54:6f:04:b2:01:9e:a4:86:a5:10:00:57: 37:61:b9:9e:b5:26:c6:fd:6e:d8:09:01:83:42:39:84:f6:38: fc:ed:d6:ce:88:36:05:bd:42:2f:f6:18:99:aa:7e:80:fa:b6: b4:70:bb:b1:a1:7d:16:30:63:a9:fe:0e:9c:62:b9:e4:06:c2: ba:fc:8f:7b:6d:57:d1:c7:e1:c6:5e:66:8c:20:6d:a8:ea:d0: eb:7f:1b:ec:f4:bd:7f:ed:88:5c:5e:25:f5:3a:a8:bd:d1:8d: 9e:6a:d9:eb:58:7d:91:21:81:f7:b0:51:f7:b1:ab:9a:86:be: 55:63:06:d4:56:46:0c:d0:0b:1c:de:2e:05:9d:48:f2:27:ca: 4e:5e:7b:a2:e7:e1:78:53:39:18:79:9e:07:78:e2:a5:76:96: 09:1b:9e:13:53:0f:08:bf:7d:d8:43:ed:9c:31:92:3c:90:7b: 5b:99:0d:45:a3:60:53:d7:32:2a:87:91:35:0d:ab:3f:a3:cf: 47:4b:b6:a9:2b:35:56:47:93:87:b9:06:0b:55:83:f4:62:38: da:4e:d5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EITQHEFe0asvaJ9S4wRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTUwMjM5N2RkNjQzOWMwNjhiZDA1M2YyODE4N2RkNzc1 NzQ1NzgwHhcNMjUxMjIwMTQwMTE0WhcNMjUxMjIxMTQwMTE0WjAzMTEwLwYDVQQD EyhhZDM5YTEyNDU1ZmRlNWVlYzI2NDZlMGMyZTM3YjQ0Mzc4YTYyZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7bvxL/U9P7jDXIo2i81te7aCBeD CwOVCtAAVwN+9Ki4tRm1Xu2F1VIYTOq9istIyd8VUCsrAswhBbSZRArmW9m42N5a 3QwxY2WGjpaG99WHrldR1QU1aLCiizwTetFmYfYy0QkqwFpe8YXfIqbF18g05X5I 5QMKZ4GJLmo/DFr/+USx77fVtxYXcTPCf4JvGIJYRPf/BYm9wGWXFaBueNCnswHG MI52Yne8OxjKNstuuj+9Glag5Wm0PAQha/wMGiUgyxA/BxYrhsmwbKwKcjeu3ATH zXulYCIHH5VSxmciq+wnwUu/Ms0syI9y5UGuwSl1HZP8WEv384Y71KJwKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK05oSRV/eXuwmRuDC43tEN4pi+7MB8GA1UdIwQY MBaAFI/lAjl91kOcBovQU/KBh913V0V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUt YmQ4MDQ3NTc2MmQ1LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUtYmQ4MDQ3NTc2MmQ1 LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheeAohKF WVj0UCOHpMLUI6JmFNjBm12i/NEocoaXkTNG9du3X4S5WjH3VG8EsgGepIalEABX N2G5nrUmxv1u2AkBg0I5hPY4/O3Wzog2Bb1CL/YYmap+gPq2tHC7saF9FjBjqf4O nGK55AbCuvyPe21X0cfhxl5mjCBtqOrQ638b7PS9f+2IXF4l9TqovdGNnmrZ61h9 kSGB97BR97Grmoa+VWMG1FZGDNALHN4uBZ1I8ifKTl57oufheFM5GHmeB3jipXaW CRueE1MPCL992EPtnDGSPJB7W5kNRaNgU9cyKoeRNQ2rP6PPR0u2qSs1VkeTh7kG C1WD9GI42k7Vog== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:30 2025 by rpki-client