This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json) Hash identifier: rpZ+DabbmqljsYFYmMxi17PUis4L/JZ5XNpK4FdCBRQ= Subject key identifier: 7F:23:00:4C:CD:02:C4:7E:8A:DB:57:01:9A:67:7D:F4:6E:DE:95:58 Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Certificate serial: 019B74ECA5B2EFE1DC94F4A78B687E70D0E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 15:00:24 +0000 Manifest this update: Wed 31 Dec 2025 15:00:24 +0000 Manifest next update: Thu 01 Jan 2026 15:00:24 +0000 Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=) 2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: de/ZgDpEnT5LkxN3pjvDCegEY5UvHVSB2ob5Caq0VQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:a5:b2:ef:e1:dc:94:f4:a7:8b:68:7e:70:d0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Validity Not Before: Dec 31 15:00:24 2025 GMT Not After : Jan 1 15:00:24 2026 GMT Subject: CN=7f23004ccd02c47e8adb57019a677df46ede9558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:e4:de:fe:9c:c6:a0:fe:58:5a:06:db:04: 76:c8:db:f2:69:83:24:00:2e:27:14:85:19:6a:24: af:01:49:ab:09:b0:0e:93:32:0a:5d:f4:9e:65:cb: 44:52:fc:d4:07:0e:8f:94:45:fa:a5:ff:93:56:fb: ea:17:41:47:ad:4d:f5:5f:8d:22:a9:63:3d:e0:28: f5:7a:d5:aa:04:38:da:37:3a:b6:0a:69:40:71:4f: a2:13:00:93:4a:b7:80:f3:8a:3d:91:ec:ea:ce:78: bb:5c:86:37:20:bc:7c:c1:15:41:a2:19:d6:b9:30: a9:16:c1:22:50:01:88:9f:50:74:fe:2b:fc:39:21: af:cf:a2:c6:2c:cd:b8:dd:de:61:dc:68:fc:ca:9d: 20:09:00:18:9a:66:8c:75:ab:bc:6f:80:d3:0c:92: 2e:49:bf:ea:28:61:4b:b6:20:0f:09:df:a1:cd:03: ab:ee:7a:b8:91:8c:44:3a:99:0b:54:1f:6b:25:d4: 0a:8a:9e:33:d2:b0:66:e6:80:b8:53:4f:15:ce:fc: ba:9b:17:22:fc:e4:c9:6a:d7:ec:96:dc:30:ba:9a: 43:fa:87:8b:02:5f:10:6f:30:20:82:65:36:e9:09: a9:2b:64:fb:bb:70:58:e4:af:3c:d9:10:a8:28:26: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:23:00:4C:CD:02:C4:7E:8A:DB:57:01:9A:67:7D:F4:6E:DE:95:58 X509v3 Authority Key Identifier: keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:62:33:3f:95:ad:9f:9b:a5:ed:c5:63:64:60:45:e5:f5:cf: bd:d8:15:42:a6:0b:a0:99:00:96:db:8c:06:06:2b:06:ad:9f: 6b:d7:e0:e8:37:12:73:e7:c7:31:69:ef:9f:ef:71:62:fe:07: 29:2e:b0:3f:b1:35:14:5a:24:06:69:54:b2:d0:c2:0a:6e:cd: bb:ea:6a:83:ee:72:85:cb:4c:38:45:f7:90:4f:69:7a:a2:4a: 11:3c:45:82:a9:6d:2b:07:bc:d0:55:7f:59:7e:2b:c6:85:c7: 76:92:2f:0d:36:66:0f:3b:b8:28:83:cc:a9:3f:31:77:3e:c5: e6:81:1d:cc:de:c3:cf:b7:75:39:32:25:65:fa:e6:da:59:fe: 6b:9e:37:c8:89:a5:51:0e:c0:b4:44:1b:5b:c4:ff:d8:b2:56: b1:9d:9e:81:6e:7a:c0:b6:e0:8c:22:3e:20:8c:1a:bf:47:fc: 7a:a3:2b:48:c6:c5:0f:7c:a5:22:39:87:a9:65:eb:8b:5a:9d: bd:dd:f7:8d:59:e1:60:44:eb:ee:86:cd:bd:de:35:1f:77:d5: b4:46:48:69:6e:63:f2:93:19:26:e0:4c:56:d0:c2:00:c1:5a: 04:81:6a:09:9a:03:5d:de:e0:81:11:e3:a9:a7:11:60:e4:f0: 57:dd:48:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07KWy7+HclPSni2h+cNDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx MmM3OGEwHhcNMjUxMjMxMTUwMDI0WhcNMjYwMTAxMTUwMDI0WjAzMTEwLwYDVQQD Eyg3ZjIzMDA0Y2NkMDJjNDdlOGFkYjU3MDE5YTY3N2RmNDZlZGU5NTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Erk3v6cxqD+WFoG2wR2yNvyaYMk AC4nFIUZaiSvAUmrCbAOkzIKXfSeZctEUvzUBw6PlEX6pf+TVvvqF0FHrU31X40i qWM94Cj1etWqBDjaNzq2CmlAcU+iEwCTSreA84o9kezqzni7XIY3ILx8wRVBohnW uTCpFsEiUAGIn1B0/iv8OSGvz6LGLM243d5h3Gj8yp0gCQAYmmaMdau8b4DTDJIu Sb/qKGFLtiAPCd+hzQOr7nq4kYxEOpkLVB9rJdQKip4z0rBm5oC4U08Vzvy6mxci /OTJatfsltwwuppD+oeLAl8QbzAggmU26QmpK2T7u3BY5K882RCoKCZxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8jAEzNAsR+ittXAZpnffRu3pVYMB8GA1UdIwQY MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4 LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGIzP5Wt n5ul7cVjZGBF5fXPvdgVQqYLoJkAltuMBgYrBq2fa9fg6DcSc+fHMWnvn+9xYv4H KS6wP7E1FFokBmlUstDCCm7Nu+pqg+5yhctMOEX3kE9peqJKETxFgqltKwe80FV/ WX4rxoXHdpIvDTZmDzu4KIPMqT8xdz7F5oEdzN7Dz7d1OTIlZfrm2ln+a543yIml UQ7AtEQbW8T/2LJWsZ2egW56wLbgjCI+IIwav0f8eqMrSMbFD3ylIjmHqWXri1qd vd33jVnhYETr7obNvd41H3fVtEZIaW5j8pMZJuBMVtDCAMFaBIFqCZoDXd7ggRHj qacRYOTwV91IEw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:07:53 2025 by rpki-client