This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json) Hash identifier: Q3BmHfEWqDGalkNHTD/2yJhala0ZqzN+v7HM3X4cjD4= Subject key identifier: 73:EB:E7:94:42:44:EA:BB:35:36:2C:08:FE:18:9C:75:E6:D0:10:08 Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Certificate serial: 019B50053473E971779697AB01A2091D9344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft Manifest number: 04E0 Signing time: Wed 24 Dec 2025 11:01:16 +0000 Manifest this update: Wed 24 Dec 2025 11:01:16 +0000 Manifest next update: Thu 25 Dec 2025 11:01:16 +0000 Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=) 2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: ANUMW6dftZhBhyqbR8gqKharlgzfxSbsCKHdOcs1+sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:34:73:e9:71:77:96:97:ab:01:a2:09:1d:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Validity Not Before: Dec 24 11:01:16 2025 GMT Not After : Dec 25 11:01:16 2025 GMT Subject: CN=73ebe7944244eabb35362c08fe189c75e6d01008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:00:c7:32:de:cc:c9:b7:05:9d:20:28:d6: c3:ba:56:b3:fb:35:e3:39:0a:1e:24:0c:fe:46:df: ee:cd:5a:90:40:0b:de:d6:7e:d1:ec:23:01:b8:ed: d4:d0:84:6f:bc:ec:70:0f:c3:b8:b8:80:f2:f3:93: 3d:e1:60:67:b8:5a:59:2e:d9:fd:e0:85:87:95:72: fd:ce:a7:74:5d:aa:30:ef:b8:24:6b:cf:ef:7b:f5: 16:46:1f:90:c0:d8:11:c8:f9:a1:d1:82:b0:da:86: ac:01:b5:ae:42:4a:45:b3:8e:41:53:a3:b1:6b:49: e2:c0:ba:9c:b9:22:aa:58:bd:df:3b:3b:50:59:69: 45:50:21:00:bb:90:86:54:21:b3:43:ee:88:55:ee: fd:c3:1f:dc:08:b4:98:5c:26:ba:e6:84:ac:75:c6: 63:12:3b:a8:a9:dd:7d:9a:eb:06:e9:45:60:a1:05: 64:25:9c:9b:a7:13:d5:b8:7c:52:8e:4a:17:e6:88: 92:9b:10:98:d6:e9:89:84:07:bc:22:00:83:b2:ff: 6d:b3:ba:4b:34:80:22:14:f4:e2:f1:38:e7:d4:e8: 23:d3:65:ef:d1:25:36:7f:b2:49:1a:3e:86:75:04: 63:bd:14:bb:23:c9:5d:b8:a8:d8:a3:34:85:58:6b: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:E7:94:42:44:EA:BB:35:36:2C:08:FE:18:9C:75:E6:D0:10:08 X509v3 Authority Key Identifier: keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2f:a1:26:38:f0:66:d0:02:bf:d7:d8:0e:ba:13:9c:5b:b7: f8:af:78:41:75:d6:86:95:ec:e7:64:ff:cb:c6:2b:d2:fa:91: a7:cf:13:84:bd:b9:0e:27:5f:17:ee:67:91:ea:92:5d:09:98: b9:60:ef:3e:11:2e:e5:ad:7e:62:92:30:e0:68:5a:58:2f:d2: 3b:79:6f:31:8e:a5:d5:50:68:3e:ce:9e:57:c1:59:a0:0e:8e: 43:2e:5a:09:1c:5b:45:6b:d2:3c:ca:5d:88:fb:6d:f8:b6:e5: 41:83:87:99:ff:f7:b6:45:42:4d:9f:f9:c0:7c:a9:09:b5:36: 72:d2:13:da:51:e8:fb:9d:92:45:86:fb:ff:77:75:84:72:b8: e6:81:a3:b3:cd:76:1c:fd:a6:8a:39:17:58:9b:47:45:49:49: fb:02:fc:25:34:ab:f4:9c:2c:a5:a3:46:8f:0f:cb:d7:38:ff: ef:64:c2:d5:19:5d:94:eb:83:2d:b2:3f:07:a2:0c:ac:3e:aa: 62:c9:61:49:d3:82:c8:0f:7a:23:3a:26:d3:fa:2f:5d:14:dc: ce:15:21:86:e5:45:97:a0:c4:0b:f1:93:cb:19:27:0e:b8:a1: 25:8e:84:7f:be:7a:0a:04:3a:32:7f:6f:3e:ba:66:31:45:84: f5:a6:9b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBTRz6XF3lperAaIJHZNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzUyNmJiMzFiOWUzMGM0OTA0NWY0MzY4YzYwMmVlOThi ZWMwMWEwHhcNMjUxMjI0MTEwMTE2WhcNMjUxMjI1MTEwMTE2WjAzMTEwLwYDVQQD Eyg3M2ViZTc5NDQyNDRlYWJiMzUzNjJjMDhmZTE4OWM3NWU2ZDAxMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGIAxzLezMm3BZ0gKNbDulaz+zXj OQoeJAz+Rt/uzVqQQAve1n7R7CMBuO3U0IRvvOxwD8O4uIDy85M94WBnuFpZLtn9 4IWHlXL9zqd0Xaow77gka8/ve/UWRh+QwNgRyPmh0YKw2oasAbWuQkpFs45BU6Ox a0niwLqcuSKqWL3fOztQWWlFUCEAu5CGVCGzQ+6IVe79wx/cCLSYXCa65oSsdcZj Ejuoqd19musG6UVgoQVkJZybpxPVuHxSjkoX5oiSmxCY1umJhAe8IgCDsv9ts7pL NIAiFPTi8Tjn1Ogj02Xv0SU2f7JJGj6GdQRjvRS7I8lduKjYozSFWGu3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPr55RCROq7NTYsCP4YnHXm0BAIMB8GA1UdIwQY MBaAFI01JrsxueMMSQRfQ2jGAu6YvsAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAt NzI1M2RhMzUxMGVlLzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAtNzI1M2RhMzUxMGVl LzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS+hJjjw ZtACv9fYDroTnFu3+K94QXXWhpXs52T/y8Yr0vqRp88ThL25DidfF+5nkeqSXQmY uWDvPhEu5a1+YpIw4GhaWC/SO3lvMY6l1VBoPs6eV8FZoA6OQy5aCRxbRWvSPMpd iPtt+LblQYOHmf/3tkVCTZ/5wHypCbU2ctIT2lHo+52SRYb7/3d1hHK45oGjs812 HP2mijkXWJtHRUlJ+wL8JTSr9JwspaNGjw/L1zj/72TC1RldlOuDLbI/B6IMrD6q YslhSdOCyA96Izom0/ovXRTczhUhhuVFl6DEC/GTyxknDrihJY6Ef756CgQ6Mn9v PrpmMUWE9aab1g== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:12 2025 by rpki-client