This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json) Hash identifier: bzYEPYyFL/NQN2qKk6JF8GTvYRLc/652G0sUMDGvJZs= Subject key identifier: A9:E1:9C:9C:68:1A:5D:10:51:B8:D1:C2:9C:0C:EA:C4:D4:3B:97:83 Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26 Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126 Certificate serial: 019B405AAF2958451853F3F262D54C11F939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft Manifest number: 15A5 Signing time: Sun 21 Dec 2025 10:00:43 +0000 Manifest this update: Sun 21 Dec 2025 10:00:43 +0000 Manifest next update: Mon 22 Dec 2025 10:00:43 +0000 Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 1UtzXVyTlnf8TBR2P8ucdM5bUl8C8jG5F/cVPisu304=) 2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:af:29:58:45:18:53:f3:f2:62:d5:4c:11:f9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25fd5781576f3d4225af99453e93a92598527126 Validity Not Before: Dec 21 10:00:43 2025 GMT Not After : Dec 22 10:00:43 2025 GMT Subject: CN=a9e19c9c681a5d1051b8d1c29c0ceac4d43b9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:d9:18:7c:0a:20:9c:60:15:c9:18:63:8d: e6:52:20:9d:00:6f:7e:36:6e:d8:77:7c:cf:00:61: 22:1c:64:02:08:a4:08:28:58:8a:92:ee:0a:1c:d3: 0f:8a:6f:f8:22:e3:2e:b1:24:a5:ec:61:4f:f5:2a: 8b:a2:a0:15:76:a3:48:6e:77:fd:13:79:63:41:70: 66:c7:0a:a0:83:d3:a9:ae:cf:ff:d3:52:53:03:5d: 2a:34:49:bd:31:be:da:76:be:52:01:df:ea:1a:29: d5:9e:20:c7:e9:e6:0e:9f:f2:56:00:00:35:c4:c7: 3d:bf:d4:54:ad:9f:c1:59:c9:b0:f1:e6:44:e3:df: a6:b3:79:fc:b6:60:8d:67:c2:2e:e0:89:bb:5d:5a: 3e:78:71:5f:ab:e0:9b:cb:5b:19:b3:6c:5e:5f:a3: bc:18:66:77:e3:5e:5a:59:3b:f7:c5:4e:7d:6f:37: 52:56:1f:eb:a5:25:a4:68:b2:db:51:d2:e6:b7:35: e3:58:78:3f:bd:07:bf:30:fd:6b:36:77:77:1f:56: 99:fa:99:49:39:23:70:34:ef:71:28:ad:8e:87:a1: 23:98:48:7c:4b:a6:f6:a2:d7:35:9c:e2:99:5a:f3: b3:1d:c1:91:9a:d2:ed:23:62:07:e9:49:fb:df:ea: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:9C:9C:68:1A:5D:10:51:B8:D1:C2:9C:0C:EA:C4:D4:3B:97:83 X509v3 Authority Key Identifier: keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:99:80:71:18:41:95:d8:48:68:39:4d:4a:84:85:17:14:4b: e6:b4:ed:38:5f:d9:a7:ee:6e:1a:cc:2d:aa:7d:e9:d1:de:26: 1a:3d:82:39:6c:23:01:4f:17:f0:92:b4:48:29:71:42:29:78: 21:11:02:52:27:54:ea:3f:77:07:e4:89:63:54:5b:72:35:ac: 39:b0:93:94:11:5d:13:26:f7:19:80:6a:68:66:84:45:18:61: 5d:28:f8:78:cb:49:11:78:77:aa:58:57:ec:82:8a:96:c4:ad: c3:1e:00:dc:8c:ed:82:ca:7a:da:1f:a1:90:96:92:7b:6c:1e: da:ed:c6:84:6c:3a:f1:33:ee:e8:b5:f9:5c:ec:88:04:f7:6f: aa:99:fc:4c:04:b9:7f:a6:f5:d9:1a:44:f4:08:4c:07:ab:11: 06:2f:28:0d:23:06:4d:1c:e7:98:e5:39:ee:7d:d7:ad:4f:4b: c4:84:ae:9e:f0:b0:ae:05:79:0a:64:49:2e:d7:80:c0:d1:1f: 1d:a8:d7:66:0c:0c:23:e2:cc:f4:69:4e:59:89:32:c2:a1:15: 2f:ac:1a:60:80:67:3c:9c:ae:e7:f5:26:39:e6:96:21:76:86: c4:12:8e:67:57:cf:57:5b:bd:64:72:6f:32:bf:02:03:a5:43: dc:87:5e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWq8pWEUYU/PyYtVMEfk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1 MjcxMjYwHhcNMjUxMjIxMTAwMDQzWhcNMjUxMjIyMTAwMDQzWjAzMTEwLwYDVQQD EyhhOWUxOWM5YzY4MWE1ZDEwNTFiOGQxYzI5YzBjZWFjNGQ0M2I5NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDZGHwKIJxgFckYY43mUiCdAG9+ Nm7Yd3zPAGEiHGQCCKQIKFiKku4KHNMPim/4IuMusSSl7GFP9SqLoqAVdqNIbnf9 E3ljQXBmxwqgg9Oprs//01JTA10qNEm9Mb7adr5SAd/qGinVniDH6eYOn/JWAAA1 xMc9v9RUrZ/BWcmw8eZE49+ms3n8tmCNZ8Iu4Im7XVo+eHFfq+Cby1sZs2xeX6O8 GGZ3415aWTv3xU59bzdSVh/rpSWkaLLbUdLmtzXjWHg/vQe/MP1rNnd3H1aZ+plJ OSNwNO9xKK2Oh6EjmEh8S6b2otc1nOKZWvOzHcGRmtLtI2IH6Un73+qaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnhnJxoGl0QUbjRwpwM6sTUO5eDMB8GA1UdIwQY MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZmAcRhB ldhIaDlNSoSFFxRL5rTtOF/Zp+5uGswtqn3p0d4mGj2COWwjAU8X8JK0SClxQil4 IRECUidU6j93B+SJY1RbcjWsObCTlBFdEyb3GYBqaGaERRhhXSj4eMtJEXh3qlhX 7IKKlsStwx4A3Iztgsp62h+hkJaSe2we2u3GhGw68TPu6LX5XOyIBPdvqpn8TAS5 f6b12RpE9AhMB6sRBi8oDSMGTRznmOU57n3XrU9LxISunvCwrgV5CmRJLteAwNEf HajXZgwMI+LM9GlOWYkywqEVL6waYIBnPJyu5/UmOeaWIXaGxBKOZ1fPV1u9ZHJv Mr8CA6VD3Ideqw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:13 2025 by rpki-client