This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json) Hash identifier: WxfU9sKonWOp+Zx72sT2IImsGLLk+Wslm0q2TCGboDQ= Subject key identifier: 43:C3:11:9A:C4:3C:6B:46:27:61:EE:E0:7D:57:06:18:29:07:A0:5A Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019B3DFEC7B8A9FA3E610639847B0F0FCC20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft Manifest number: 016D Signing time: Sat 20 Dec 2025 23:01:05 +0000 Manifest this update: Sat 20 Dec 2025 23:01:05 +0000 Manifest next update: Sun 21 Dec 2025 23:01:05 +0000 Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: ywnhXd5/YlPuh/5PwnyT12wDr19x8cU01nMa+80FKls=) 2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c7:b8:a9:fa:3e:61:06:39:84:7b:0f:0f:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Dec 20 23:01:05 2025 GMT Not After : Dec 21 23:01:05 2025 GMT Subject: CN=43c3119ac43c6b462761eee07d5706182907a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:d9:bb:a4:35:6c:2f:0a:42:e2:a5:c5:3a: a4:05:87:a4:17:72:d6:07:07:75:44:5b:7a:e4:a1: cd:51:04:83:e3:b4:f7:9e:ba:c2:de:cb:34:fb:aa: cc:67:e0:f3:52:b7:de:53:af:c6:23:aa:57:14:6e: af:65:36:d0:99:28:47:5f:9d:fd:c2:1c:6a:19:92: 9f:dd:bf:35:71:d1:cf:78:58:48:97:46:9a:a7:e7: c5:2a:1f:23:77:f2:d0:b3:39:47:e9:52:27:08:a9: a0:df:26:01:67:f9:c4:e9:46:b4:27:ba:6e:29:97: 84:0f:66:4c:8b:f4:e5:58:8b:72:89:4f:cd:7f:d1: 4d:f3:92:95:cc:95:d8:65:a0:01:01:a4:d3:fe:a8: 4e:8e:ed:ae:b5:26:f3:73:7a:a1:e6:0f:cb:94:6d: 41:dc:7d:fa:a2:ab:ce:5d:11:6b:7b:9c:fb:2d:cf: a4:72:59:54:18:0b:12:b8:66:03:90:45:18:36:e3: 47:e9:c1:70:85:a7:3d:48:03:1c:9e:d0:ca:ca:b8: d8:19:6a:3b:e1:6a:ca:a0:24:e3:7c:43:45:83:69: 10:01:ea:ee:74:48:c6:a3:14:5b:a3:31:32:c9:77: 8c:4e:37:c5:8e:ec:c7:ae:39:b2:08:0d:a1:c3:0e: 28:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C3:11:9A:C4:3C:6B:46:27:61:EE:E0:7D:57:06:18:29:07:A0:5A X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:19:38:73:19:a5:e2:70:7c:cb:74:fa:a6:20:1a:2d:1a:f1: 89:7e:31:c3:50:e4:76:b4:5d:ff:81:7b:1e:12:89:6d:5a:ac: 1b:45:ed:0f:d6:95:4a:d1:da:ad:e4:94:32:32:65:e8:2a:74: be:38:34:c4:73:e4:79:80:56:ae:bf:44:7a:bf:64:df:d3:eb: bd:11:fd:30:69:f9:57:06:05:5d:b1:62:50:67:a9:af:a1:3f: 72:66:7a:bc:a4:ea:62:20:40:cc:78:bb:7e:7b:47:d2:c1:eb: 5d:38:28:f1:8f:da:2b:5e:6a:87:bd:fd:d7:ed:3d:9a:e0:9e: 68:ac:af:dd:61:d9:5c:15:db:a9:72:c6:92:86:b7:9a:a1:02: 52:2a:3a:1a:7f:c4:15:54:ea:7c:6d:25:03:4a:0d:6e:bb:34: 81:57:33:b7:19:36:06:ee:82:75:ee:bd:43:ce:3c:f0:bd:af: 26:5d:22:4f:cf:44:69:74:c1:06:6e:a7:fb:09:44:8b:a3:6d: 7f:57:3b:1a:ac:a6:fe:4e:ab:05:ea:fd:55:b8:9f:2d:68:1f: e6:99:a2:45:a4:32:4e:2c:b8:02:df:59:22:97:42:52:90:66: 95:f5:67:b0:70:ea:52:74:7a:ab:a6:17:a9:78:dc:5b:1f:79: da:31:58:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/se4qfo+YQY5hHsPD8wgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjUxMjIwMjMwMTA1WhcNMjUxMjIxMjMwMTA1WjAzMTEwLwYDVQQD Eyg0M2MzMTE5YWM0M2M2YjQ2Mjc2MWVlZTA3ZDU3MDYxODI5MDdhMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhDZu6Q1bC8KQuKlxTqkBYekF3LW Bwd1RFt65KHNUQSD47T3nrrC3ss0+6rMZ+DzUrfeU6/GI6pXFG6vZTbQmShHX539 whxqGZKf3b81cdHPeFhIl0aap+fFKh8jd/LQszlH6VInCKmg3yYBZ/nE6Ua0J7pu KZeED2ZMi/TlWItyiU/Nf9FN85KVzJXYZaABAaTT/qhOju2utSbzc3qh5g/LlG1B 3H36oqvOXRFre5z7Lc+kcllUGAsSuGYDkEUYNuNH6cFwhac9SAMcntDKyrjYGWo7 4WrKoCTjfENFg2kQAerudEjGoxRbozEyyXeMTjfFjuzHrjmyCA2hww4o5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPDEZrEPGtGJ2Hu4H1XBhgpB6BaMB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhk4cxml 4nB8y3T6piAaLRrxiX4xw1DkdrRd/4F7HhKJbVqsG0XtD9aVStHareSUMjJl6Cp0 vjg0xHPkeYBWrr9Eer9k39PrvRH9MGn5VwYFXbFiUGepr6E/cmZ6vKTqYiBAzHi7 fntH0sHrXTgo8Y/aK15qh7391+09muCeaKyv3WHZXBXbqXLGkoa3mqECUio6Gn/E FVTqfG0lA0oNbrs0gVcztxk2Bu6Cde69Q8488L2vJl0iT89EaXTBBm6n+wlEi6Nt f1c7Gqym/k6rBer9VbifLWgf5pmiRaQyTiy4At9ZIpdCUpBmlfVnsHDqUnR6q6YX qXjcWx952jFYGg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:00 2025 by rpki-client