This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft File: Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json) Hash identifier: RJVKCaaDNcoZTLJvTDgu/SkE42dOUzMj4k8wvDcMxhA= Subject key identifier: 67:42:77:3A:6F:92:BC:FB:9E:9F:8D:D3:93:5B:CA:87:74:92:7D:29 Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9 Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9 Certificate serial: 019B6D6AB0E313527A87D7477860B405D774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft Manifest number: 13C4 Signing time: Tue 30 Dec 2025 04:01:07 +0000 Manifest this update: Tue 30 Dec 2025 04:01:07 +0000 Manifest next update: Wed 31 Dec 2025 04:01:07 +0000 Files and hashes: 1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=) 2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: TcSZOhsK3ByKT/5LCmOP0dp+4OuJQu7VNkmcVu3g3zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:b0:e3:13:52:7a:87:d7:47:78:60:b4:05:d7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9 Validity Not Before: Dec 30 04:01:07 2025 GMT Not After : Dec 31 04:01:07 2025 GMT Subject: CN=6742773a6f92bcfb9e9f8dd3935bca8774927d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:52:2f:8d:92:b3:b4:70:b8:5e:fe:f5:93: c2:1d:56:70:f7:cd:92:a9:86:d8:a2:eb:39:2f:9b: bf:de:d4:69:92:e7:62:64:3c:f1:98:72:c4:e1:b5: 6d:a8:1d:08:b0:97:f0:96:18:11:34:3b:37:a0:4f: 33:5f:36:75:60:5c:2d:6c:6f:36:76:46:8b:09:1c: 2c:15:41:ad:f7:02:17:c0:9f:d5:d6:cb:da:e7:ef: 2d:26:de:bc:af:c6:bc:24:1e:92:cc:29:29:25:8c: de:37:bf:bf:59:d0:9f:b5:c3:3f:83:80:b0:46:26: 9e:da:8c:54:93:52:a5:35:98:24:22:71:08:1c:81: 56:b7:b9:10:66:52:99:ce:d7:0e:39:b1:f6:24:15: f0:3b:0e:70:6a:79:b9:2f:37:9f:53:8b:ef:a5:a9: d0:46:75:7c:eb:b7:b3:1d:38:bf:04:50:24:c5:2d: 9a:e5:81:11:24:47:72:44:3a:cd:35:b4:23:03:ef: 37:e4:42:91:0e:de:8a:bb:d2:cb:cc:1e:f0:9a:cd: b5:d5:7b:43:a6:ad:61:4c:33:ed:3a:79:73:f7:32: 06:bb:d4:d4:1e:1e:27:21:f9:3b:b9:b0:17:5c:48: 84:1a:10:d4:ad:a6:04:75:d4:58:bf:a8:d5:76:ae: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:42:77:3A:6F:92:BC:FB:9E:9F:8D:D3:93:5B:CA:87:74:92:7D:29 X509v3 Authority Key Identifier: keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:30:30:2e:54:f1:d1:ae:4c:d2:34:28:e7:bd:b2:22:48:81: 8e:45:ec:04:05:be:29:0e:3b:0a:19:2d:ca:5a:f2:17:28:2b: 31:f1:a9:b4:e4:8f:2b:54:bb:ae:3a:a8:fe:b2:55:aa:69:16: 8b:f8:71:0a:a5:34:76:64:f1:13:f8:bb:93:6f:bb:b0:69:19: f2:c7:e4:9c:5f:be:81:9d:04:9c:57:14:fc:09:09:9a:a9:bb: e3:1b:6a:fa:98:c6:de:7b:8d:cc:82:a9:c4:71:be:9a:de:cc: 4f:eb:e0:a2:9c:3b:aa:88:72:1d:64:56:db:81:ee:92:9a:a9: 16:70:6b:8d:04:69:82:f3:7d:da:f4:da:ff:b6:8f:0d:a7:c9: c9:b2:7a:55:2d:8a:f2:4f:23:dc:43:d6:9e:e1:dc:3a:5a:9b: c9:13:d3:b4:4e:0b:26:f2:d1:63:19:f2:1a:c3:66:76:34:b8: a1:fc:79:fb:da:80:95:25:02:7f:46:11:64:25:fb:ae:b3:90: 63:b1:04:c0:b4:16:d7:4f:a5:f9:e4:36:f0:4d:84:34:32:8d: 3f:56:f2:ce:d0:a4:38:0e:4d:4d:99:97:41:ad:68:c3:5f:0f: 7a:c2:f5:ce:25:99:07:61:ed:aa:de:60:65:86:20:43:56:e9: 7c:37:f5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttarDjE1J6h9dHeGC0Bdd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGMyZWRjMTNiYjJhM2M2MzI2MjEyMWI5ZWFhZDE4OGJl ZGJhZTkwHhcNMjUxMjMwMDQwMTA3WhcNMjUxMjMxMDQwMTA3WjAzMTEwLwYDVQQD Eyg2NzQyNzczYTZmOTJiY2ZiOWU5ZjhkZDM5MzViY2E4Nzc0OTI3ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPNSL42Ss7RwuF7+9ZPCHVZw982S qYbYous5L5u/3tRpkudiZDzxmHLE4bVtqB0IsJfwlhgRNDs3oE8zXzZ1YFwtbG82 dkaLCRwsFUGt9wIXwJ/V1sva5+8tJt68r8a8JB6SzCkpJYzeN7+/WdCftcM/g4Cw Riae2oxUk1KlNZgkInEIHIFWt7kQZlKZztcOObH2JBXwOw5wanm5LzefU4vvpanQ RnV867ezHTi/BFAkxS2a5YERJEdyRDrNNbQjA+835EKRDt6Ku9LLzB7wms211XtD pq1hTDPtOnlz9zIGu9TUHh4nIfk7ubAXXEiEGhDUraYEddRYv6jVdq78DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdCdzpvkrz7np+N05Nbyod0kn0pMB8GA1UdIwQY MBaAFCaMLtwTuyo8YyYhIbnqrRiL7brpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5Yzct ZjAxMTVjODVmM2JhLzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yY2IzYzktM2QwMS00Y2EyLWI5YzctZjAxMTVjODVmM2Jh LzEvSm93dTNCTzdLanhqSmlFaHVlcXRHSXZ0dXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzAwLlTx 0a5M0jQo572yIkiBjkXsBAW+KQ47ChktylryFygrMfGptOSPK1S7rjqo/rJVqmkW i/hxCqU0dmTxE/i7k2+7sGkZ8sfknF++gZ0EnFcU/AkJmqm74xtq+pjG3nuNzIKp xHG+mt7MT+vgopw7qohyHWRW24HukpqpFnBrjQRpgvN92vTa/7aPDafJybJ6VS2K 8k8j3EPWnuHcOlqbyRPTtE4LJvLRYxnyGsNmdjS4ofx5+9qAlSUCf0YRZCX7rrOQ Y7EEwLQW10+l+eQ28E2ENDKNP1byztCkOA5NTZmXQa1ow18PesL1ziWZB2Htqt5g ZYYgQ1bpfDf1UA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:20 2025 by rpki-client