This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json) Hash identifier: Hu/PZVtDEzUV1r7hNo1FJ6pvm1+bycLE0/hy4c0kkAQ= Subject key identifier: 10:A2:C4:EF:8A:12:6C:69:F7:3C:18:95:80:74:E6:56:18:BF:49:F7 Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Certificate serial: 019B390F69AEC9DCA1358768E402457B0ABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft Manifest number: 0343 Signing time: Sat 20 Dec 2025 00:01:09 +0000 Manifest this update: Sat 20 Dec 2025 00:01:09 +0000 Manifest next update: Sun 21 Dec 2025 00:01:09 +0000 Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: IdqXYY3SV8kGFNv179g4Pm5s+gdvBIgWYOYUC2w4pNM=) 2: tI3vS8bXRpYk2uJT942ZTBiVKdc.roa (hash: m8AWxg57zCEgWp5C3CXYTmTH0M1td7C0p+1vWuP3iI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:69:ae:c9:dc:a1:35:87:68:e4:02:45:7b:0a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Validity Not Before: Dec 20 00:01:09 2025 GMT Not After : Dec 21 00:01:09 2025 GMT Subject: CN=10a2c4ef8a126c69f73c18958074e65618bf49f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:4d:2b:80:4d:36:2a:ff:45:98:77:53:bf: c6:e7:fb:02:a1:81:93:f4:05:9a:03:fd:13:ab:8c: 78:6c:79:10:22:f8:e1:4d:6e:f3:70:36:58:7c:90: 9a:54:36:4f:7f:12:9d:32:d5:ce:19:79:cf:fb:41: d4:92:c5:d9:3e:48:b5:e2:75:5e:d0:95:27:67:16: c6:a6:c7:09:0e:78:e6:f5:8c:87:2d:6d:83:6d:fe: db:df:9b:82:95:d6:89:66:67:34:bd:12:f8:a4:73: 4a:22:b5:f3:b8:4d:ec:2b:2f:3b:8a:75:f6:66:1a: 09:38:fa:4c:b3:2b:2c:5d:b6:cb:2d:f5:61:a1:76: 29:86:c1:05:22:1d:38:57:1e:b4:10:04:3b:6a:64: 20:1b:b9:6e:1b:c4:a7:66:7c:72:b4:4c:bf:76:c7: 6f:83:a6:1f:99:ca:75:7f:3d:92:78:56:d2:53:91: b3:b4:cd:7a:4c:8f:51:3a:94:2a:e9:3e:dd:fe:7e: 40:70:f0:9d:88:4e:8e:aa:ff:2d:ba:a6:74:28:59: 30:fd:39:45:d7:c4:70:b5:75:a8:74:54:b9:a2:59: bf:74:68:6a:85:65:6c:0e:df:55:22:30:a8:b0:98: 4e:53:52:a9:c2:de:29:94:58:8e:b2:cc:7a:6e:c6: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:C4:EF:8A:12:6C:69:F7:3C:18:95:80:74:E6:56:18:BF:49:F7 X509v3 Authority Key Identifier: keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e4:b1:17:f5:1b:93:3f:f1:c0:b0:10:d3:81:86:ba:40:c7: 7e:ab:06:2e:b3:f9:4d:5e:0a:4b:24:6d:88:73:94:37:23:c4: b9:10:e6:04:39:79:3b:d5:12:22:d4:4e:13:65:54:fd:4e:38: 33:fb:79:61:55:c5:bc:15:a8:2b:9e:b8:ed:67:b4:50:65:dc: 4b:07:80:66:64:4e:f8:c6:d9:c5:11:8c:48:ba:15:2a:db:ef: f4:83:10:cc:f8:e3:4b:92:9f:9c:58:45:c7:49:7b:08:40:8a: 75:41:fb:e1:88:4e:5c:48:2e:a5:6c:be:85:5b:1c:df:99:34: 08:5c:92:83:c6:cb:b2:35:9f:bf:f3:a2:69:61:10:2d:92:dc: c3:ab:fa:96:e2:de:6e:01:53:c7:25:a3:e2:7b:b0:d1:2b:50: bb:aa:9d:ef:d3:d8:cb:dc:87:fa:28:df:56:eb:fb:e0:20:ae: 89:b4:c6:b4:3f:7c:f5:1b:5c:33:75:d3:53:17:47:23:cb:6a: 25:a1:96:1b:7c:d6:e3:c6:5c:53:be:06:af:5c:25:5d:81:1d: 81:df:ca:97:11:c1:4d:90:51:88:0a:97:75:9a:6e:2a:c8:2b: 1d:c5:b2:c1:cd:89:54:55:77:f4:8b:a9:3b:c4:54:ad:e1:1c: 62:a5:27:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2muydyhNYdo5AJFewq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi YmM5NmQwHhcNMjUxMjIwMDAwMTA5WhcNMjUxMjIxMDAwMTA5WjAzMTEwLwYDVQQD EygxMGEyYzRlZjhhMTI2YzY5ZjczYzE4OTU4MDc0ZTY1NjE4YmY0OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22JNK4BNNir/RZh3U7/G5/sCoYGT 9AWaA/0Tq4x4bHkQIvjhTW7zcDZYfJCaVDZPfxKdMtXOGXnP+0HUksXZPki14nVe 0JUnZxbGpscJDnjm9YyHLW2Dbf7b35uCldaJZmc0vRL4pHNKIrXzuE3sKy87inX2 ZhoJOPpMsyssXbbLLfVhoXYphsEFIh04Vx60EAQ7amQgG7luG8SnZnxytEy/dsdv g6Yfmcp1fz2SeFbSU5GztM16TI9ROpQq6T7d/n5AcPCdiE6Oqv8tuqZ0KFkw/TlF 18RwtXWodFS5olm/dGhqhWVsDt9VIjCosJhOU1Kpwt4plFiOssx6bsZ77wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCixO+KEmxp9zwYlYB05lYYv0n3MB8GA1UdIwQY MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0 LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOSxF/Ub kz/xwLAQ04GGukDHfqsGLrP5TV4KSyRtiHOUNyPEuRDmBDl5O9USItROE2VU/U44 M/t5YVXFvBWoK5647We0UGXcSweAZmRO+MbZxRGMSLoVKtvv9IMQzPjjS5KfnFhF x0l7CECKdUH74YhOXEgupWy+hVsc35k0CFySg8bLsjWfv/OiaWEQLZLcw6v6luLe bgFTxyWj4nuw0StQu6qd79PYy9yH+ijfVuv74CCuibTGtD989RtcM3XTUxdHI8tq JaGWG3zW48ZcU74Gr1wlXYEdgd/KlxHBTZBRiAqXdZpuKsgrHcWywc2JVFV39Iup O8RUreEcYqUnZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:28:43 2025 by rpki-client