This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json) Hash identifier: MylMIBuH8r4cuDpDSJe3Yyodun2f4uo2Tea8PgF4MpU= Subject key identifier: 40:5E:32:C6:D7:83:41:E8:41:3A:69:3E:2F:5C:32:73:88:81:1F:A2 Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Certificate serial: 019B680D46CDC81A5D7371AE7B4F6390E301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft Manifest number: 1012 Signing time: Mon 29 Dec 2025 03:00:59 +0000 Manifest this update: Mon 29 Dec 2025 03:00:59 +0000 Manifest next update: Tue 30 Dec 2025 03:00:59 +0000 Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=) 2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: MpGCmyyYSeh2O8r/N9GEzywyLyxgxre8Xb6gEPoaERI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:46:cd:c8:1a:5d:73:71:ae:7b:4f:63:90:e3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Validity Not Before: Dec 29 03:00:59 2025 GMT Not After : Dec 30 03:00:59 2025 GMT Subject: CN=405e32c6d78341e8413a693e2f5c327388811fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:ee:80:11:d1:95:ed:7f:a9:07:9c:95:23: 9c:de:9c:9c:2d:04:eb:53:9b:04:bf:d4:c9:f9:ac: dc:93:c7:ca:96:50:bc:77:29:62:01:9d:c1:2f:29: 7b:ab:7b:1c:1b:d4:ee:d4:d3:e0:6c:d4:94:cf:4f: f2:3f:d1:df:19:3b:cd:29:b8:44:63:7b:7d:05:c6: 06:13:a6:a1:6f:37:51:b1:70:c8:00:48:63:4b:09: 54:39:eb:d3:0b:05:3d:cd:aa:e7:6c:eb:c3:1f:68: 99:bc:14:27:78:33:6f:4a:39:08:67:70:f3:6e:22: c3:7b:8c:ac:c5:74:2a:00:fb:ca:ca:0d:ad:bc:79: a7:da:79:8a:b7:26:d2:e9:b0:63:c3:bb:d9:49:24: 5a:b3:85:51:98:1b:3c:07:e8:7e:c2:bb:0e:71:af: df:fd:bb:84:b5:71:94:68:9a:59:d2:68:a4:b3:b3: d4:4f:e9:29:fd:77:45:6c:56:8c:9c:79:67:b0:f5: be:e4:1c:ab:f8:d3:3b:7f:d6:d7:78:11:2e:b0:26: 77:8d:ae:8f:77:b0:45:a3:e2:bd:02:c9:0c:a5:4c: f0:ff:91:19:a2:f4:e7:a2:b8:96:ea:55:6a:54:67: 21:68:31:9f:2f:b5:47:d5:ec:cd:06:85:3f:93:97: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5E:32:C6:D7:83:41:E8:41:3A:69:3E:2F:5C:32:73:88:81:1F:A2 X509v3 Authority Key Identifier: keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f2:a5:2f:28:ee:7f:74:31:e4:81:63:bc:3f:1f:94:a1:60: ec:2b:3e:0d:7e:f4:a9:c8:c3:99:e8:dc:21:c9:57:ea:f3:8b: d8:b7:66:e9:e5:a6:65:40:86:73:f8:7f:9c:4f:58:d2:22:a9: 0f:a3:27:de:cb:a6:6c:f8:c6:bc:c5:47:a0:05:76:8b:1b:17: 14:e4:d2:12:b9:d9:4f:ac:82:7d:a6:87:6e:b4:75:b6:02:8f: d0:25:f2:d0:8b:76:52:87:af:99:c7:8c:40:1e:c1:51:92:50: 88:e8:f0:1b:3f:86:5d:72:12:05:b0:f5:f9:93:ae:b8:c8:01: d4:47:c2:8b:7b:26:8b:91:d2:19:29:5a:e3:c8:9c:c9:57:8f: 93:af:a0:be:10:61:32:3b:d6:fb:22:77:f0:b9:d5:3b:4c:01: 0d:7c:f4:6a:37:98:ae:d8:50:77:b2:18:9c:d8:20:58:46:68: ed:19:f2:e6:05:8d:25:1b:15:56:49:a9:e1:d3:49:8f:b9:b6: de:8b:a0:2c:ca:20:8b:f1:87:b5:68:ff:df:1d:fe:93:7f:55: 06:cc:66:1f:f5:ff:a1:29:52:c5:24:70:a6:cc:1a:cb:83:0d: 31:01:ab:30:07:9f:3d:f2:08:cf:2c:52:2b:2b:24:35:f3:4c: d0:6a:8c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDUbNyBpdc3Gue09jkOMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm ZGZmZjgwHhcNMjUxMjI5MDMwMDU5WhcNMjUxMjMwMDMwMDU5WjAzMTEwLwYDVQQD Eyg0MDVlMzJjNmQ3ODM0MWU4NDEzYTY5M2UyZjVjMzI3Mzg4ODExZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8LugBHRle1/qQeclSOc3pycLQTr U5sEv9TJ+azck8fKllC8dyliAZ3BLyl7q3scG9Tu1NPgbNSUz0/yP9HfGTvNKbhE Y3t9BcYGE6ahbzdRsXDIAEhjSwlUOevTCwU9zarnbOvDH2iZvBQneDNvSjkIZ3Dz biLDe4ysxXQqAPvKyg2tvHmn2nmKtybS6bBjw7vZSSRas4VRmBs8B+h+wrsOca/f /buEtXGUaJpZ0miks7PUT+kp/XdFbFaMnHlnsPW+5Byr+NM7f9bXeBEusCZ3ja6P d7BFo+K9AskMpUzw/5EZovTnoriW6lVqVGchaDGfL7VH1ezNBoU/k5cBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBeMsbXg0HoQTppPi9cMnOIgR+iMB8GA1UdIwQY MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5 LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPKlLyju f3Qx5IFjvD8flKFg7Cs+DX70qcjDmejcIclX6vOL2Ldm6eWmZUCGc/h/nE9Y0iKp D6Mn3sumbPjGvMVHoAV2ixsXFOTSErnZT6yCfaaHbrR1tgKP0CXy0It2UoevmceM QB7BUZJQiOjwGz+GXXISBbD1+ZOuuMgB1EfCi3smi5HSGSla48icyVePk6+gvhBh MjvW+yJ38LnVO0wBDXz0ajeYrthQd7IYnNggWEZo7Rny5gWNJRsVVkmp4dNJj7m2 3ougLMogi/GHtWj/3x3+k39VBsxmH/X/oSlSxSRwpsway4MNMQGrMAefPfIIzyxS KyskNfNM0GqMng== -----END CERTIFICATE-----Generated at Mon Dec 29 07:07:44 2025 by rpki-client