This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json) Hash identifier: V/fcfHq/+VEp0hY4HoZpvCjdPvoS2HckWikPyFuemUQ= Subject key identifier: 06:C2:1A:79:07:C6:E0:85:AB:E4:52:8C:7D:B9:4B:4B:00:55:B7:D3 Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Certificate serial: 019B2D41929461D6138DF5822FEAD1E666A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft Manifest number: 04CE Signing time: Wed 17 Dec 2025 17:00:30 +0000 Manifest this update: Wed 17 Dec 2025 17:00:30 +0000 Manifest next update: Thu 18 Dec 2025 17:00:30 +0000 Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=) 2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: YsjkFU8xPlztNcanhSoKqdrfQc+i/uu/IKvVUpRztPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:92:94:61:d6:13:8d:f5:82:2f:ea:d1:e6:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Validity Not Before: Dec 17 17:00:30 2025 GMT Not After : Dec 18 17:00:30 2025 GMT Subject: CN=06c21a7907c6e085abe4528c7db94b4b0055b7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:e6:a2:43:b8:22:58:1d:ce:1f:57:8e:86: 35:b1:6e:6d:85:4d:d0:28:88:4f:e5:f9:f4:2a:d4: c4:27:dc:51:cf:75:88:8c:70:ae:b9:50:74:7c:ad: 52:d4:b4:64:6c:19:02:e9:47:fc:79:29:4d:c6:2c: 6a:00:2b:80:da:22:44:bf:24:c7:d7:87:04:6b:39: b5:df:1b:ac:2a:14:06:d5:05:a7:78:4c:e6:ce:78: 72:52:32:ee:73:1a:9e:86:08:70:0b:04:24:2a:e3: 6d:38:5c:d6:a6:96:a5:5d:55:26:6b:6b:d6:46:3f: c7:62:57:4e:f4:15:c8:30:c0:1b:2e:c3:5c:70:3c: ce:fc:a9:64:cb:65:b1:91:81:f6:31:ec:81:4d:86: 16:bb:49:ca:02:4b:03:7d:73:98:4f:96:26:0f:e0: 86:17:f5:28:9f:13:db:7b:40:5d:aa:4d:f5:db:da: 4b:39:ab:0d:a1:ee:da:e3:35:8a:5f:b4:ff:77:92: 63:47:26:2f:e4:86:42:13:44:91:80:72:91:b2:91: 72:9f:e4:52:62:1a:92:00:fc:16:5b:67:ce:5e:d6: 8a:bc:ff:64:8f:a8:63:e2:6f:45:bb:02:f3:70:cd: 57:ea:72:7a:87:c1:35:10:95:f9:a0:73:a2:0e:ee: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:1A:79:07:C6:E0:85:AB:E4:52:8C:7D:B9:4B:4B:00:55:B7:D3 X509v3 Authority Key Identifier: keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c1:35:db:02:46:7a:21:18:05:3e:f2:60:58:8d:33:bd:cd: 30:3f:19:43:17:5d:54:27:0b:1c:e7:4a:4a:ed:5e:f0:05:d0: 4d:f6:7b:00:43:ab:24:9d:61:ed:3c:38:46:8e:52:cb:8c:33: 96:4c:94:ed:2e:07:b3:12:0c:84:05:76:d1:dd:c1:3d:12:7c: 3e:fb:60:ea:07:fe:72:1c:e4:94:c0:5e:0b:66:7d:f8:2b:d8: 27:8d:f3:d2:2f:d3:0b:93:4f:cb:85:55:d1:b9:12:58:3e:2f: bc:4b:de:e8:7b:e7:cf:36:1c:8c:30:06:3a:5b:3d:c6:a4:75: 4b:e4:d9:f5:ba:ca:6c:24:3b:6b:b8:dd:c5:b8:bc:bf:e6:fe: 3d:20:f0:01:21:0c:e4:cc:e2:64:2a:85:c2:9b:88:6a:a1:1e: 31:d7:b6:f1:17:0a:7d:1d:c8:23:38:80:51:d3:bb:21:be:95: 3a:ae:00:02:33:49:b4:ad:2d:3a:94:e0:a5:0e:0c:70:aa:17: 31:c4:14:89:9a:a2:17:32:9a:da:65:3a:c0:62:27:be:e9:6f: 68:73:ec:54:36:4f:e3:e5:6d:34:35:66:66:dc:90:0a:13:a3: 01:a0:73:05:f4:1c:fb:44:71:28:20:06:5f:37:19:94:9e:cc: 7d:f5:78:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQZKUYdYTjfWCL+rR5maiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzUyNmJiMzFiOWUzMGM0OTA0NWY0MzY4YzYwMmVlOThi ZWMwMWEwHhcNMjUxMjE3MTcwMDMwWhcNMjUxMjE4MTcwMDMwWjAzMTEwLwYDVQQD EygwNmMyMWE3OTA3YzZlMDg1YWJlNDUyOGM3ZGI5NGI0YjAwNTViN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/mokO4Ilgdzh9XjoY1sW5thU3Q KIhP5fn0KtTEJ9xRz3WIjHCuuVB0fK1S1LRkbBkC6Uf8eSlNxixqACuA2iJEvyTH 14cEazm13xusKhQG1QWneEzmznhyUjLucxqehghwCwQkKuNtOFzWppalXVUma2vW Rj/HYldO9BXIMMAbLsNccDzO/Klky2WxkYH2MeyBTYYWu0nKAksDfXOYT5YmD+CG F/UonxPbe0Bdqk3129pLOasNoe7a4zWKX7T/d5JjRyYv5IZCE0SRgHKRspFyn+RS YhqSAPwWW2fOXtaKvP9kj6hj4m9FuwLzcM1X6nJ6h8E1EJX5oHOiDu7fswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbCGnkHxuCFq+RSjH25S0sAVbfTMB8GA1UdIwQY MBaAFI01JrsxueMMSQRfQ2jGAu6YvsAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAt NzI1M2RhMzUxMGVlLzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAtNzI1M2RhMzUxMGVl LzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicE12wJG eiEYBT7yYFiNM73NMD8ZQxddVCcLHOdKSu1e8AXQTfZ7AEOrJJ1h7Tw4Ro5Sy4wz lkyU7S4HsxIMhAV20d3BPRJ8Pvtg6gf+chzklMBeC2Z9+CvYJ43z0i/TC5NPy4VV 0bkSWD4vvEve6HvnzzYcjDAGOls9xqR1S+TZ9brKbCQ7a7jdxbi8v+b+PSDwASEM 5MziZCqFwpuIaqEeMde28RcKfR3IIziAUdO7Ib6VOq4AAjNJtK0tOpTgpQ4McKoX McQUiZqiFzKa2mU6wGInvulvaHPsVDZP4+VtNDVmZtyQChOjAaBzBfQc+0RxKCAG XzcZlJ7MffV4wg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:41:35 2025 by rpki-client