This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json) Hash identifier: YmTTjwOXNqaBs0gvs+1bVgAsN4Oe8x3weqbKiSmn9a0= Subject key identifier: 10:55:EF:0C:4B:19:8F:6F:E6:82:8E:F6:CA:02:77:B9:BD:6D:1B:26 Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76 Certificate serial: 019B3F485A68BB761DC51461AC30AD260ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft Manifest number: 0FA6 Signing time: Sun 21 Dec 2025 05:01:04 +0000 Manifest this update: Sun 21 Dec 2025 05:01:04 +0000 Manifest next update: Mon 22 Dec 2025 05:01:04 +0000 Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=) 2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: zlqi5crs2pYbrZNWx87Meukyn0I1J0RgMTK2j01U3Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:5a:68:bb:76:1d:c5:14:61:ac:30:ad:26:0a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76 Validity Not Before: Dec 21 05:01:04 2025 GMT Not After : Dec 22 05:01:04 2025 GMT Subject: CN=1055ef0c4b198f6fe6828ef6ca0277b9bd6d1b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:f0:25:1d:2a:e6:31:97:6b:4e:91:f3:d2: d0:5b:24:42:6c:05:c7:8e:b6:c5:05:95:cd:bb:06: 2e:97:8d:6a:3b:a6:ec:3e:69:16:58:6f:08:4f:4a: 7f:3b:a4:ca:8d:68:f2:6b:f3:da:a3:40:f9:40:e0: 82:7b:3a:0a:81:d1:1e:02:f7:20:86:e7:d5:25:82: 1e:27:61:4d:e6:33:ac:c2:f8:cb:bd:a7:d9:5d:ca: 78:47:7a:46:5f:96:5d:0c:a5:86:0f:24:f1:2e:0a: 53:77:ff:c3:5f:7c:e3:fe:d2:e5:d8:f1:ab:de:1f: a5:53:72:f2:35:11:72:d1:79:44:42:20:61:7e:40: 5c:f4:29:da:88:74:f8:0e:62:73:c6:85:a6:a6:12: 66:00:ff:63:15:f3:9e:ae:4c:11:37:da:7a:d7:7d: ac:62:8d:f9:4c:05:1e:e0:7c:9b:b8:30:55:82:53: ec:0b:8b:b5:cf:85:b7:33:e5:cc:95:2f:01:b7:9e: 4c:48:ff:95:e6:92:81:14:ea:47:da:ce:76:1e:f3: 06:42:51:c9:a6:59:bd:f3:2b:b0:91:47:5f:b7:7f: b3:18:fa:49:48:dd:c2:2c:11:bd:f2:5d:b9:fb:e8: 52:d8:89:75:1a:d5:7a:5a:a0:fa:26:25:d9:11:89: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:55:EF:0C:4B:19:8F:6F:E6:82:8E:F6:CA:02:77:B9:BD:6D:1B:26 X509v3 Authority Key Identifier: keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:57:2f:eb:2a:86:f4:5f:f5:e3:bd:cd:d5:1c:fd:f1:4a:73: 6b:d4:7b:30:75:e7:e9:3a:d7:06:95:85:f1:5a:8d:60:06:81: d1:dc:d3:cd:82:4f:a8:04:d2:71:44:a2:ff:1e:7f:2b:71:a2: 2b:60:e4:e8:24:cc:92:bb:73:91:6c:0d:32:29:02:cb:cd:01: 2c:fe:26:d3:80:05:95:fd:c6:f0:a1:5e:07:f4:74:11:dc:79: 66:61:81:22:b7:59:dc:2e:89:0e:df:de:17:d9:8f:6a:6d:68: 9c:53:cd:4d:85:06:48:73:20:9e:56:31:ab:20:f1:4c:25:0c: 96:b7:0b:88:15:e7:93:80:6f:a4:62:4e:d1:e9:33:40:a8:14: 43:9e:ba:e1:d4:78:4e:79:9a:3b:9c:f3:c1:e0:04:8b:ad:fd: 72:b3:ed:07:54:51:42:a5:3e:68:8c:b9:5b:09:be:ae:89:72: f8:1e:7e:01:35:ad:73:4b:7f:8b:44:43:3f:4f:f4:fe:bb:08: 5b:be:78:a8:74:34:16:c0:85:d2:8a:e3:42:fd:bc:3c:6b:0e: ee:53:3a:ee:ce:3b:4b:57:a0:60:00:9e:03:92:00:49:bb:68: 39:43:1a:4a:6c:b1:c6:13:c9:4f:65:d7:2a:51:a8:69:13:6c: b5:f1:e2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFpou3YdxRRhrDCtJgq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx ODhiNzYwHhcNMjUxMjIxMDUwMTA0WhcNMjUxMjIyMDUwMTA0WjAzMTEwLwYDVQQD EygxMDU1ZWYwYzRiMTk4ZjZmZTY4MjhlZjZjYTAyNzdiOWJkNmQxYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnwJR0q5jGXa06R89LQWyRCbAXH jrbFBZXNuwYul41qO6bsPmkWWG8IT0p/O6TKjWjya/Pao0D5QOCCezoKgdEeAvcg hufVJYIeJ2FN5jOswvjLvafZXcp4R3pGX5ZdDKWGDyTxLgpTd//DX3zj/tLl2PGr 3h+lU3LyNRFy0XlEQiBhfkBc9CnaiHT4DmJzxoWmphJmAP9jFfOerkwRN9p6132s Yo35TAUe4HybuDBVglPsC4u1z4W3M+XMlS8Bt55MSP+V5pKBFOpH2s52HvMGQlHJ plm98yuwkUdft3+zGPpJSN3CLBG98l25++hS2Il1GtV6WqD6JiXZEYlJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBV7wxLGY9v5oKO9soCd7m9bRsmMB8GA1UdIwQY MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1cv6yqG 9F/1473N1Rz98Upza9R7MHXn6TrXBpWF8VqNYAaB0dzTzYJPqATScUSi/x5/K3Gi K2Dk6CTMkrtzkWwNMikCy80BLP4m04AFlf3G8KFeB/R0Edx5ZmGBIrdZ3C6JDt/e F9mPam1onFPNTYUGSHMgnlYxqyDxTCUMlrcLiBXnk4BvpGJO0ekzQKgUQ5664dR4 TnmaO5zzweAEi639crPtB1RRQqU+aIy5Wwm+roly+B5+ATWtc0t/i0RDP0/0/rsI W754qHQ0FsCF0orjQv28PGsO7lM67s47S1egYACeA5IASbtoOUMaSmyxxhPJT2XX KlGoaRNstfHiSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:13 2025 by rpki-client