This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json) Hash identifier: +pzvGdYgae06Y821k3B+Of07aD/4vCKMbG3dTMUGvPQ= Subject key identifier: DE:3F:E0:AF:C2:45:50:A7:B9:2B:BD:CC:A8:D3:D1:E6:B9:3A:24:99 Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Certificate serial: 019B25F613410B2D0155B3A286E379FDD9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft Manifest number: 18 Signing time: Tue 16 Dec 2025 07:00:42 +0000 Manifest this update: Tue 16 Dec 2025 07:00:42 +0000 Manifest next update: Wed 17 Dec 2025 07:00:42 +0000 Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=) 2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: 3YLVA3PoD44pIes8TOT0AxwaAxNSMVkPcB9eHChXk5I=) 3: yU6M8D2PmhF2Sd5R-vOSjFCLSRA.roa (hash: U9bGy/Y68QQJEGfI8xO2m7ZqBZYaniV4Y7/FY/rY8nM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:13:41:0b:2d:01:55:b3:a2:86:e3:79:fd:d9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Validity Not Before: Dec 16 07:00:42 2025 GMT Not After : Dec 17 07:00:42 2025 GMT Subject: CN=de3fe0afc24550a7b92bbdcca8d3d1e6b93a2499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:ab:3e:37:4f:49:f2:c5:e1:85:1d:ab:57: fd:a7:fc:84:32:fb:e1:3a:4f:52:19:dd:24:1a:29: 51:37:80:82:16:25:58:ac:60:f3:ee:77:fe:99:3a: e8:a9:45:a7:38:ab:d5:bd:0b:f4:19:e5:ae:75:7f: 79:34:fe:e7:d8:26:5c:c3:60:4b:15:e5:98:cd:2d: 83:dc:56:92:97:d6:98:60:f1:23:1b:c1:d6:c5:8a: 22:86:dd:94:8a:24:c7:6d:42:00:3e:aa:41:67:85: 93:50:be:2f:7a:cd:bf:11:55:07:b7:a8:84:4f:7d: 47:2e:e9:03:cf:3e:79:52:24:3d:b4:b8:40:b5:a0: e8:48:ce:dc:bd:30:01:d0:e9:fc:bf:d3:a8:43:8d: 47:f4:60:fd:40:7e:a1:7d:a7:dd:10:a8:82:21:2b: 52:47:37:1e:5e:25:87:ef:cc:71:9d:95:b4:23:43: 63:9c:be:46:1a:1e:52:7a:bb:3f:c9:04:a5:c8:df: a1:95:48:60:33:39:e2:56:a0:df:ba:d6:73:41:e8: 28:1e:e7:75:66:58:5f:d2:ee:4e:46:8d:4e:f6:7a: 30:18:27:65:9d:88:41:0a:fd:3f:0a:13:80:76:8d: 12:c3:8f:04:62:c2:b6:6e:e8:17:5a:c9:34:29:69: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3F:E0:AF:C2:45:50:A7:B9:2B:BD:CC:A8:D3:D1:E6:B9:3A:24:99 X509v3 Authority Key Identifier: keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d1:a3:4e:0a:30:37:c4:cb:75:cb:15:2b:83:a1:11:6c:2c: 07:e6:dd:0c:7a:2d:53:90:10:74:fe:b2:be:5e:14:9c:17:89: 38:0c:87:3f:30:da:89:61:01:a7:fb:27:23:ca:99:62:27:a8: 65:a4:d8:d8:80:78:08:2d:3b:63:1c:a9:9f:ad:14:82:74:03: a6:e9:e4:2b:6f:ac:58:66:59:30:4e:17:3b:b8:f4:c9:6d:e1: f4:44:a4:29:0c:84:24:42:27:eb:e5:7d:aa:52:73:a5:30:6a: 54:aa:e6:31:b5:85:8a:1f:2b:2a:c2:34:84:d3:46:03:d4:8a: 84:49:9e:ba:0d:87:e9:67:d8:67:91:c3:d3:82:56:07:7f:38: 57:f5:86:1c:0f:73:49:81:01:3e:c1:c7:03:6d:45:a7:bb:58: 8e:92:7e:94:e4:c5:77:54:37:15:c6:15:28:93:29:fd:38:01: 50:f5:ae:e5:83:9d:5a:1d:14:4e:f7:ec:3f:22:78:c5:50:ca: ed:e1:37:2d:1a:79:3c:bd:54:21:81:79:0e:4b:d3:58:97:06: 46:fd:6b:d9:93:a5:f3:9a:e6:97:4c:ce:60:88:f3:60:17:4d: e6:18:ce:3a:12:e6:46:3d:e4:06:fb:7c:93:8b:e4:a1:b0:64: ea:5b:bb:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9hNBCy0BVbOihuN5/dndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzE1ZDhlYzQ3YTJiMGUyMDQzYTc4MjJkYjY3YWMyMzEx N2NjODcwHhcNMjUxMjE2MDcwMDQyWhcNMjUxMjE3MDcwMDQyWjAzMTEwLwYDVQQD EyhkZTNmZTBhZmMyNDU1MGE3YjkyYmJkY2NhOGQzZDFlNmI5M2EyNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtarPjdPSfLF4YUdq1f9p/yEMvvh Ok9SGd0kGilRN4CCFiVYrGDz7nf+mTroqUWnOKvVvQv0GeWudX95NP7n2CZcw2BL FeWYzS2D3FaSl9aYYPEjG8HWxYoiht2UiiTHbUIAPqpBZ4WTUL4ves2/EVUHt6iE T31HLukDzz55UiQ9tLhAtaDoSM7cvTAB0On8v9OoQ41H9GD9QH6hfafdEKiCIStS RzceXiWH78xxnZW0I0NjnL5GGh5Sers/yQSlyN+hlUhgMzniVqDfutZzQegoHud1 Zlhf0u5ORo1O9nowGCdlnYhBCv0/ChOAdo0Sw48EYsK2bugXWsk0KWlNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4/4K/CRVCnuSu9zKjT0ea5OiSZMB8GA1UdIwQY MBaAFCXBXY7EeisOIEOngi22esIxF8yHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYt NDNlMmIxNTk2NTdkLzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYtNDNlMmIxNTk2NTdk LzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9GjTgow N8TLdcsVK4OhEWwsB+bdDHotU5AQdP6yvl4UnBeJOAyHPzDaiWEBp/snI8qZYieo ZaTY2IB4CC07Yxypn60UgnQDpunkK2+sWGZZME4XO7j0yW3h9ESkKQyEJEIn6+V9 qlJzpTBqVKrmMbWFih8rKsI0hNNGA9SKhEmeug2H6WfYZ5HD04JWB384V/WGHA9z SYEBPsHHA21Fp7tYjpJ+lOTFd1Q3FcYVKJMp/TgBUPWu5YOdWh0UTvfsPyJ4xVDK 7eE3LRp5PL1UIYF5DkvTWJcGRv1r2ZOl85rml0zOYIjzYBdN5hjOOhLmRj3kBvt8 k4vkobBk6lu7JQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:04 2025 by rpki-client