This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json) Hash identifier: FFtw2MM1wesErA8VhF7j1lfeRuv0WLQkrFr8zCQXISU= Subject key identifier: 1B:67:14:DC:A6:09:68:FA:CB:A0:ED:CA:04:E2:63:87:5B:2C:51:4F Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Certificate serial: 019B3F113CFDDC936FCFC2F82FEC6A61C385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 04:00:52 +0000 Manifest this update: Sun 21 Dec 2025 04:00:52 +0000 Manifest next update: Mon 22 Dec 2025 04:00:52 +0000 Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=) 2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: Qha9Cxzq34hGYxG8U1HFt1H2fwTKJSSdgO16Zh3hGB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:3c:fd:dc:93:6f:cf:c2:f8:2f:ec:6a:61:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Validity Not Before: Dec 21 04:00:52 2025 GMT Not After : Dec 22 04:00:52 2025 GMT Subject: CN=1b6714dca60968facba0edca04e263875b2c514f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:8e:2d:24:83:5a:3a:95:c6:f7:24:03:cd: 16:22:19:4f:95:3d:a0:8c:78:5d:2a:2f:de:9a:41: d2:3f:88:18:23:d7:54:0c:e0:38:27:7f:39:36:2e: 2d:01:6b:2b:f6:16:dd:83:da:4b:88:3e:2a:31:a4: cc:32:22:8c:22:57:88:02:68:28:13:d3:f1:2e:29: 56:1a:13:f4:e0:6a:10:5a:92:de:aa:3a:cb:27:2f: 7d:11:39:6f:b0:b7:29:16:0b:9f:ea:91:9e:c0:bd: 91:21:13:af:c4:04:5a:73:a2:cf:29:71:20:59:ca: 26:2c:45:2e:90:b9:30:68:d8:a8:4a:08:1e:9a:39: e6:10:71:d3:41:26:8a:aa:4e:3b:30:44:18:1f:a5: bc:17:3c:52:d4:41:42:19:05:7e:0f:0f:e1:5a:fa: 08:cb:1f:4b:e8:17:0a:9e:03:a9:9d:ba:aa:b6:fa: 7b:c2:25:3c:35:1d:97:8a:fa:5c:6f:e0:51:0e:b0: 8d:48:cb:4c:72:49:7b:10:be:2f:87:04:ec:06:83: 7b:cd:c1:94:11:72:7d:bc:9c:df:93:79:78:e0:aa: bf:86:23:e3:6a:d3:4b:e5:fe:81:78:3e:f8:74:1b: 13:01:0d:7c:04:f2:73:c7:b0:a5:43:85:b4:91:79: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:14:DC:A6:09:68:FA:CB:A0:ED:CA:04:E2:63:87:5B:2C:51:4F X509v3 Authority Key Identifier: keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f3:b1:41:4c:fc:f6:7e:fe:7b:35:32:f0:68:11:45:da:5b: 3a:50:78:67:c3:cf:73:02:ba:2b:07:01:68:1a:ef:28:b9:3f: 93:ac:ab:99:6b:10:54:7d:dc:81:cf:f6:fa:10:31:3f:9a:a3: 49:40:5d:1c:4d:bc:ed:21:90:ad:8e:a2:b9:14:40:2b:8a:78: 82:61:7b:9d:3f:e2:4d:33:e5:b2:e5:28:05:0a:f7:08:97:6b: ed:e2:37:79:47:8d:6a:37:a7:11:4c:c9:60:f3:c2:ec:86:dd: c4:82:95:be:88:08:19:f1:c5:74:34:15:63:59:a8:34:ae:9f: 75:5d:b2:1c:81:f7:2c:e2:71:86:e5:b1:97:8b:ae:7e:6a:e2: 6d:02:d5:b1:73:e0:39:6d:e9:c0:1c:64:f9:f8:8b:d6:42:44: 92:e8:c1:57:64:fb:eb:56:93:25:39:49:e2:ac:ef:a4:a4:fb: 55:06:4b:9d:18:4f:76:5b:8b:eb:2a:91:e5:6d:df:2c:d9:7a: 0c:b9:a5:36:e8:c7:94:00:4e:ec:63:49:16:99:2d:8a:e8:78: 8a:b5:0f:7a:aa:40:10:e4:1f:c2:1b:dd:0c:95:7e:63:34:d0: a3:a7:a6:ab:40:29:32:b3:f1:17:fb:00:93:b9:d3:7e:72:d8: 72:b3:5b:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETz93JNvz8L4L+xqYcOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2 Mzc4MzkwHhcNMjUxMjIxMDQwMDUyWhcNMjUxMjIyMDQwMDUyWjAzMTEwLwYDVQQD EygxYjY3MTRkY2E2MDk2OGZhY2JhMGVkY2EwNGUyNjM4NzViMmM1MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD6OLSSDWjqVxvckA80WIhlPlT2g jHhdKi/emkHSP4gYI9dUDOA4J385Ni4tAWsr9hbdg9pLiD4qMaTMMiKMIleIAmgo E9PxLilWGhP04GoQWpLeqjrLJy99ETlvsLcpFguf6pGewL2RIROvxARac6LPKXEg WcomLEUukLkwaNioSggemjnmEHHTQSaKqk47MEQYH6W8FzxS1EFCGQV+Dw/hWvoI yx9L6BcKngOpnbqqtvp7wiU8NR2Xivpcb+BRDrCNSMtMckl7EL4vhwTsBoN7zcGU EXJ9vJzfk3l44Kq/hiPjatNL5f6BeD74dBsTAQ18BPJzx7ClQ4W0kXmEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtnFNymCWj6y6DtygTiY4dbLFFPMB8GA1UdIwQY MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3 LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfOxQUz8 9n7+ezUy8GgRRdpbOlB4Z8PPcwK6KwcBaBrvKLk/k6yrmWsQVH3cgc/2+hAxP5qj SUBdHE287SGQrY6iuRRAK4p4gmF7nT/iTTPlsuUoBQr3CJdr7eI3eUeNajenEUzJ YPPC7IbdxIKVvogIGfHFdDQVY1moNK6fdV2yHIH3LOJxhuWxl4uufmribQLVsXPg OW3pwBxk+fiL1kJEkujBV2T761aTJTlJ4qzvpKT7VQZLnRhPdluL6yqR5W3fLNl6 DLmlNujHlABO7GNJFpktiuh4irUPeqpAEOQfwhvdDJV+YzTQo6emq0ApMrPxF/sA k7nTfnLYcrNbCA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:21 2025 by rpki-client