This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json) Hash identifier: Hcoh5v6a6JYEe8LxvV3aHB6R8hR6yUmTGV74G8df6sA= Subject key identifier: 67:0F:6D:89:78:8E:9F:85:4B:52:AA:A1:61:92:84:B1:63:3A:EE:1D Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Certificate serial: 019B3CEC314765C289EE7BFA3EA2FCC13485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft Manifest number: 0DB4 Signing time: Sat 20 Dec 2025 18:01:10 +0000 Manifest this update: Sat 20 Dec 2025 18:01:10 +0000 Manifest next update: Sun 21 Dec 2025 18:01:10 +0000 Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=) 2: f2uKIXD1jA4Z0v4z1RdATwz-xfg.roa (hash: 6x0kOLgd5nuPVwZ+RuAYmofGsQm+qa7W1kBXJD3t3zw=) 3: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: 4Ch9Qs2McDIjYLSc8T0/R12O3QrKDLt2D28kn2Xa7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:31:47:65:c2:89:ee:7b:fa:3e:a2:fc:c1:34:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Validity Not Before: Dec 20 18:01:10 2025 GMT Not After : Dec 21 18:01:10 2025 GMT Subject: CN=670f6d89788e9f854b52aaa1619284b1633aee1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:84:ef:cf:2b:e1:1b:b6:b9:f9:0d:f1:98: e7:45:c0:ec:de:f4:cc:22:d9:6e:6b:e5:7b:67:fb: dc:52:63:31:01:10:2c:db:5b:45:ee:ff:9c:02:3a: 40:59:f1:fb:ba:a0:64:df:90:fa:80:23:5b:8b:22: af:d2:45:46:70:f3:6d:e2:84:74:69:2c:f2:c8:42: 39:4e:15:e1:17:85:07:09:a1:25:4a:22:73:1a:f7: 93:e5:3a:cb:7a:7d:7d:66:c5:f9:0f:97:f8:f4:e1: e0:57:c4:b1:f5:74:34:da:d1:3a:ed:b9:95:94:fe: 24:38:82:2d:24:e6:17:c7:b3:01:3c:75:0c:ff:a0: fe:1f:42:5d:70:3c:c5:90:e1:2c:00:1e:e5:81:39: 32:7c:e6:6b:93:30:60:10:68:ff:58:9a:17:4b:5b: d8:e5:e1:84:9d:0f:96:1b:e6:27:40:da:ad:4b:ed: f2:e7:6f:90:52:20:f1:a4:e3:8b:fd:45:bd:2b:39: 80:c5:d2:20:69:18:f1:68:dc:f4:55:11:1b:34:80: d5:1e:f6:a3:3e:7c:bb:08:3f:be:0c:1d:b0:97:33: 8c:4d:f2:ed:0d:40:f8:f5:3a:5d:a5:b6:c5:d9:fe: 5b:00:b2:ad:62:9b:00:73:20:42:29:8e:52:14:ca: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:6D:89:78:8E:9F:85:4B:52:AA:A1:61:92:84:B1:63:3A:EE:1D X509v3 Authority Key Identifier: keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:78:2b:af:40:95:66:ca:1d:8b:c2:8e:ec:f7:27:44:00:07: e5:c9:94:bb:06:99:1a:17:9b:cb:d1:66:5e:d5:6f:b3:f3:e0: d8:e9:f4:77:2f:9f:57:cf:cc:dc:7f:2c:56:24:d4:0f:64:32: e2:46:14:90:e5:69:27:55:ef:37:cf:7f:8b:42:c5:68:0d:6b: 25:55:1d:5d:0b:18:26:48:97:7f:fe:84:9a:a9:de:b7:fa:69: 50:cc:26:bb:ad:ba:21:61:2b:0f:ed:8c:c6:43:5a:2c:32:68: ff:3d:20:56:73:6f:41:21:ad:13:fd:c1:7a:43:a9:d4:c5:ea: 1a:4f:49:92:c3:67:17:15:8b:ff:69:59:51:b1:ae:2f:d3:ed: 07:87:cd:82:aa:dc:5d:32:2c:7e:fb:95:ef:3f:46:d1:a4:62: 68:1b:8c:3c:5a:c2:d1:c4:cd:89:80:6b:b7:e0:43:2d:ac:9d: da:d2:8b:84:3e:ac:95:99:44:dc:8f:09:2e:47:e7:11:88:e0: ee:07:e2:d1:f0:58:c1:52:73:32:ff:83:2f:ea:98:e9:b9:da: df:e2:61:75:c2:3f:e6:9b:f4:c5:5d:94:1f:e3:9a:5e:54:5e: 84:37:a2:78:aa:a6:d0:6b:6b:5f:ce:fe:44:f8:6f:c9:12:b5: 9d:7f:37:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87DFHZcKJ7nv6PqL8wTSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3 NmUzNzUwHhcNMjUxMjIwMTgwMTEwWhcNMjUxMjIxMTgwMTEwWjAzMTEwLwYDVQQD Eyg2NzBmNmQ4OTc4OGU5Zjg1NGI1MmFhYTE2MTkyODRiMTYzM2FlZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJeE788r4Ru2ufkN8ZjnRcDs3vTM Itlua+V7Z/vcUmMxARAs21tF7v+cAjpAWfH7uqBk35D6gCNbiyKv0kVGcPNt4oR0 aSzyyEI5ThXhF4UHCaElSiJzGveT5TrLen19ZsX5D5f49OHgV8Sx9XQ02tE67bmV lP4kOIItJOYXx7MBPHUM/6D+H0JdcDzFkOEsAB7lgTkyfOZrkzBgEGj/WJoXS1vY 5eGEnQ+WG+YnQNqtS+3y52+QUiDxpOOL/UW9KzmAxdIgaRjxaNz0VREbNIDVHvaj Pny7CD++DB2wlzOMTfLtDUD49TpdpbbF2f5bALKtYpsAcyBCKY5SFMrrTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcPbYl4jp+FS1KqoWGShLFjOu4dMB8GA1UdIwQY MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt NmE4YzNiNjc2YjU3LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3 LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXgrr0CV Zsodi8KO7PcnRAAH5cmUuwaZGheby9FmXtVvs/Pg2On0dy+fV8/M3H8sViTUD2Qy 4kYUkOVpJ1XvN89/i0LFaA1rJVUdXQsYJkiXf/6Emqnet/ppUMwmu626IWErD+2M xkNaLDJo/z0gVnNvQSGtE/3BekOp1MXqGk9JksNnFxWL/2lZUbGuL9PtB4fNgqrc XTIsfvuV7z9G0aRiaBuMPFrC0cTNiYBrt+BDLayd2tKLhD6slZlE3I8JLkfnEYjg 7gfi0fBYwVJzMv+DL+qY6bna3+JhdcI/5pv0xV2UH+OaXlRehDeieKqm0GtrX87+ RPhvyRK1nX83cQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:31 2025 by rpki-client