This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json) Hash identifier: /Cxfw0bUuUcFQ2vJ/ILIKy+B62JMKqlwm39q2yNT1sk= Subject key identifier: 20:73:60:2C:98:E0:FD:AF:CE:4B:C4:09:71:2A:00:AA:97:E4:F6:27 Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Certificate serial: 019B410043D5821FC4F3A537E7D4EB809FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 13:01:34 +0000 Manifest this update: Sun 21 Dec 2025 13:01:34 +0000 Manifest next update: Mon 22 Dec 2025 13:01:34 +0000 Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=) 2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: ib9nkvkL5+W/0+Z2E0CoeTqHfKJ+z4KtQ0tf3mt1jbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:43:d5:82:1f:c4:f3:a5:37:e7:d4:eb:80:9f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Validity Not Before: Dec 21 13:01:34 2025 GMT Not After : Dec 22 13:01:34 2025 GMT Subject: CN=2073602c98e0fdafce4bc409712a00aa97e4f627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:d8:e9:16:0c:d4:e6:45:05:53:3f:90:b3: 82:fd:a1:f1:e7:10:68:c2:5b:c4:d8:ce:1c:5a:b7: c9:a1:87:e2:1b:5c:2d:63:4d:ce:c8:0c:9e:e8:12: e5:0c:d4:08:7c:3a:6f:39:94:f6:45:91:15:ac:e6: a8:22:30:7a:2b:6c:ef:de:7c:12:88:45:b7:c5:30: fd:4f:92:0c:01:dc:1a:6b:50:0d:a4:c0:0b:2d:52: c9:a9:00:d0:02:b4:ae:76:2f:2b:9f:c4:1e:fb:69: 5e:93:50:5e:15:55:f0:c5:7e:a1:3f:7c:5a:d5:cc: 0a:d3:04:5b:0d:95:45:26:a9:c5:68:a1:f4:33:ea: 47:07:4b:04:93:08:cb:a8:49:97:fa:e6:df:64:1c: 12:09:86:0b:b8:96:40:61:a2:ad:5f:e2:a6:8a:a3: 3b:7c:38:7f:7f:d7:40:d4:7a:fc:98:81:7c:14:23: 25:fd:16:0f:1e:4a:12:f3:3d:31:b8:d0:1c:4c:4b: 97:6e:8c:77:92:fa:c4:71:c8:5b:0c:37:19:e7:7b: a0:d7:07:16:be:8f:98:cf:c2:6b:ad:ac:14:01:32: bd:66:d6:48:c3:bc:8a:de:dc:56:d3:48:17:9a:04: 74:bc:dc:c7:77:0e:1e:74:c8:4f:0f:bd:6c:82:7e: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:73:60:2C:98:E0:FD:AF:CE:4B:C4:09:71:2A:00:AA:97:E4:F6:27 X509v3 Authority Key Identifier: keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:79:e0:c2:dd:fc:13:a8:99:76:54:55:c5:4f:ba:d2:b6:48: 8b:36:78:5a:f1:b2:9d:96:d1:0c:99:96:8f:c0:39:70:15:05: d7:2a:7e:2a:5f:34:bf:bc:29:7e:60:9e:32:5c:5c:f1:1c:8b: 1c:5c:af:e9:64:1f:7d:f3:b5:cf:3c:ff:f5:6f:b9:73:d3:5c: 87:e6:67:92:90:b9:28:2f:de:ab:b8:38:32:a1:f3:c0:03:15: 29:00:43:ac:3f:36:bd:05:ee:31:e9:fe:80:fe:d5:83:94:ee: 53:35:1d:6f:98:91:ad:6f:e6:61:96:7d:6d:a4:e0:e2:8f:5c: e7:63:60:1e:5b:40:32:49:84:ec:a1:b8:30:ca:a5:93:45:32: 95:96:ce:c4:d9:2b:e2:f4:01:2b:2e:7a:c5:f2:c8:f9:a6:a2: 77:0f:57:d4:4c:83:67:93:85:f0:97:25:e7:4b:e8:cf:ec:a2: b2:90:fd:40:e0:0a:f3:18:14:ea:e8:ce:09:a8:19:a3:71:24: 5b:d6:6a:d0:8b:2e:ce:46:9b:b7:a6:33:39:f2:c2:7a:25:28: 94:a5:ae:ab:3d:56:a7:44:a0:c4:0f:8c:90:2d:74:9a:bb:e9: df:d1:af:d4:c5:9c:a0:09:55:72:13:26:5f:3f:68:91:0f:4f: 23:67:f9:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEPVgh/E86U359TrgJ/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2 Mzc4MzkwHhcNMjUxMjIxMTMwMTM0WhcNMjUxMjIyMTMwMTM0WjAzMTEwLwYDVQQD EygyMDczNjAyYzk4ZTBmZGFmY2U0YmM0MDk3MTJhMDBhYTk3ZTRmNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjY6RYM1OZFBVM/kLOC/aHx5xBo wlvE2M4cWrfJoYfiG1wtY03OyAye6BLlDNQIfDpvOZT2RZEVrOaoIjB6K2zv3nwS iEW3xTD9T5IMAdwaa1ANpMALLVLJqQDQArSudi8rn8Qe+2lek1BeFVXwxX6hP3xa 1cwK0wRbDZVFJqnFaKH0M+pHB0sEkwjLqEmX+ubfZBwSCYYLuJZAYaKtX+KmiqM7 fDh/f9dA1Hr8mIF8FCMl/RYPHkoS8z0xuNAcTEuXbox3kvrEcchbDDcZ53ug1wcW vo+Yz8JrrawUATK9ZtZIw7yK3txW00gXmgR0vNzHdw4edMhPD71sgn7YVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBzYCyY4P2vzkvECXEqAKqX5PYnMB8GA1UdIwQY MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3 LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHngwt38 E6iZdlRVxU+60rZIizZ4WvGynZbRDJmWj8A5cBUF1yp+Kl80v7wpfmCeMlxc8RyL HFyv6WQfffO1zzz/9W+5c9Nch+ZnkpC5KC/eq7g4MqHzwAMVKQBDrD82vQXuMen+ gP7Vg5TuUzUdb5iRrW/mYZZ9baTg4o9c52NgHltAMkmE7KG4MMqlk0UylZbOxNkr 4vQBKy56xfLI+aaidw9X1EyDZ5OF8Jcl50voz+yispD9QOAK8xgU6ujOCagZo3Ek W9Zq0Isuzkabt6YzOfLCeiUolKWuqz1Wp0SgxA+MkC10mrvp39Gv1MWcoAlVchMm Xz9okQ9PI2f5Og== -----END CERTIFICATE-----Generated at Sun Dec 21 21:12:01 2025 by rpki-client