This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json) Hash identifier: jdzu1cTmmeagtgWNqsyrIehByLfROaFjKKIOPF+yig8= Subject key identifier: 38:6D:4F:5C:61:57:8D:AC:5C:2C:55:A4:D6:E1:22:79:26:4C:5F:EB Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Certificate serial: 019B45EED3E8E47DEDD098A1DA9D3D339F61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft Manifest number: 0EEC Signing time: Mon 22 Dec 2025 12:00:38 +0000 Manifest this update: Mon 22 Dec 2025 12:00:38 +0000 Manifest next update: Tue 23 Dec 2025 12:00:38 +0000 Files and hashes: 1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=) 2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: 38S4kLadf+Aqh3VnsS2s+CjWHRXZeKOq3BlHli5Cx0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:d3:e8:e4:7d:ed:d0:98:a1:da:9d:3d:33:9f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Validity Not Before: Dec 22 12:00:38 2025 GMT Not After : Dec 23 12:00:38 2025 GMT Subject: CN=386d4f5c61578dac5c2c55a4d6e12279264c5feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:e5:ec:b1:a6:53:c0:10:ab:36:01:28:a5: ec:11:51:d7:e8:c9:17:50:d9:6d:e6:0f:64:5a:b1: 45:af:48:28:af:51:ce:dc:38:58:aa:9d:e9:64:36: 92:21:f5:ff:a6:b6:42:ff:96:a7:54:84:f6:fb:a4: ee:b5:3b:fb:1a:80:3b:31:74:9c:b5:15:a0:c0:db: 45:ef:bb:e3:7d:2f:ca:68:24:9f:7e:ae:31:6d:9d: 74:e1:0a:9a:a4:fe:63:1f:ba:00:12:4b:78:e5:de: 50:b8:b2:03:c8:4c:77:c4:51:35:13:a7:72:68:72: b4:cd:ff:be:2c:8a:35:28:39:18:9e:64:49:24:1b: 1f:53:bb:33:1b:9b:7e:18:de:60:dc:41:92:c4:d2: bc:ae:5e:28:0a:ab:ac:39:b2:fd:c6:89:cf:3a:62: 8f:0c:ef:2f:5c:09:9b:99:89:42:45:27:68:f8:b6: de:93:fd:2e:6f:58:c6:fc:37:29:37:e1:c3:be:6d: a2:e3:51:df:c3:15:43:78:c1:d3:89:fc:f4:99:e1: 27:bc:5a:4e:f4:0e:74:89:e6:8b:c0:41:1e:48:b3: c3:17:f9:56:c2:75:a4:da:2a:90:db:90:ca:a9:93: ca:7c:62:a8:3c:d0:ed:5a:ca:b5:65:ec:1c:2c:f1: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:4F:5C:61:57:8D:AC:5C:2C:55:A4:D6:E1:22:79:26:4C:5F:EB X509v3 Authority Key Identifier: keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ed:f3:b1:ee:24:36:39:8d:d3:b1:58:b6:8a:5c:28:e2:02: 67:c1:6d:7c:62:59:87:f1:b9:83:ff:43:8b:6e:21:04:3a:ff: af:95:f1:58:3e:a0:eb:7f:ed:30:3f:f3:80:ea:b2:8a:a2:7f: 4f:75:26:6d:f2:1b:73:1d:eb:7d:0e:82:58:b2:5f:2e:bb:a8: 33:c5:d2:53:21:86:19:bd:70:1f:41:aa:39:b5:05:0c:32:14: 03:5c:8f:34:29:c5:7b:37:c8:cc:bc:29:2d:48:3a:2b:ac:9a: 62:b4:94:93:c0:b4:a6:be:43:5b:e1:00:bf:4c:6d:70:2f:90: 30:6d:4c:15:71:00:39:a3:24:d7:d6:79:39:d8:42:a6:79:17: a4:c7:69:fd:28:ec:dd:64:de:64:36:f7:c5:0e:61:ca:1d:ee: 19:74:7a:79:a6:dc:7f:c3:53:30:23:62:a8:ca:88:b2:6d:71: da:d4:ec:97:c5:d0:3c:68:0f:9c:ad:1d:72:8f:b5:6f:97:52: 4f:d5:ab:9c:c8:ce:66:aa:c3:1c:98:d4:3d:83:6d:a0:3e:5e: dc:67:8d:72:2b:8d:15:5f:fe:dd:c7:aa:45:93:e5:94:e6:3f: f4:0e:37:49:54:d7:12:5b:c1:b9:dc:90:f6:22:80:ba:b8:6e: 95:54:58:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7tPo5H3t0Jih2p09M59hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmQ3NGM2ZDExZDYzY2E1ZGUzY2M2MzdjZTk2N2VlOTc2 MDRjNjcwHhcNMjUxMjIyMTIwMDM4WhcNMjUxMjIzMTIwMDM4WjAzMTEwLwYDVQQD EygzODZkNGY1YzYxNTc4ZGFjNWMyYzU1YTRkNmUxMjI3OTI2NGM1ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ITl7LGmU8AQqzYBKKXsEVHX6MkX UNlt5g9kWrFFr0gor1HO3DhYqp3pZDaSIfX/prZC/5anVIT2+6TutTv7GoA7MXSc tRWgwNtF77vjfS/KaCSffq4xbZ104QqapP5jH7oAEkt45d5QuLIDyEx3xFE1E6dy aHK0zf++LIo1KDkYnmRJJBsfU7szG5t+GN5g3EGSxNK8rl4oCqusObL9xonPOmKP DO8vXAmbmYlCRSdo+Lbek/0ub1jG/DcpN+HDvm2i41HfwxVDeMHTifz0meEnvFpO 9A50ieaLwEEeSLPDF/lWwnWk2iqQ25DKqZPKfGKoPNDtWsq1ZewcLPEF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhtT1xhV42sXCxVpNbhInkmTF/rMB8GA1UdIwQY MBaAFIy9dMbRHWPKXePMY3zpZ+6XYExnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUt NmM4ZTVkMTkzNzdlLzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUtNmM4ZTVkMTkzNzdl LzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO3zse4k NjmN07FYtopcKOICZ8FtfGJZh/G5g/9Di24hBDr/r5XxWD6g63/tMD/zgOqyiqJ/ T3UmbfIbcx3rfQ6CWLJfLruoM8XSUyGGGb1wH0GqObUFDDIUA1yPNCnFezfIzLwp LUg6K6yaYrSUk8C0pr5DW+EAv0xtcC+QMG1MFXEAOaMk19Z5OdhCpnkXpMdp/Sjs 3WTeZDb3xQ5hyh3uGXR6eabcf8NTMCNiqMqIsm1x2tTsl8XQPGgPnK0dco+1b5dS T9WrnMjOZqrDHJjUPYNtoD5e3GeNciuNFV/+3ceqRZPllOY/9A43SVTXElvBudyQ 9iKAurhulVRYbA== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:32 2025 by rpki-client