This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json) Hash identifier: ZCqTp74gvSTHZzpeKEvODQJH4vJYp0JVegMGeBV1ygg= Subject key identifier: 0C:D8:6F:DF:49:BF:2A:97:5D:75:E1:B8:02:02:72:93:05:6F:47:49 Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Certificate serial: 019B3D5992ABCC0EDD22CD5D63AE61349C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft Manifest number: 03E2 Signing time: Sat 20 Dec 2025 20:00:38 +0000 Manifest this update: Sat 20 Dec 2025 20:00:38 +0000 Manifest next update: Sun 21 Dec 2025 20:00:38 +0000 Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=) 2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=) 3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: rEWAUt3EY/+ndCklbV1HV0dqeSuA3tERQeQXrSXVYkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:92:ab:cc:0e:dd:22:cd:5d:63:ae:61:34:9c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Validity Not Before: Dec 20 20:00:38 2025 GMT Not After : Dec 21 20:00:38 2025 GMT Subject: CN=0cd86fdf49bf2a975d75e1b802027293056f4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:56:e0:c4:79:1b:2d:90:84:45:83:e5:d0: 72:1a:3d:61:5b:9f:21:6a:0a:48:0a:b3:a0:3b:8b: 47:23:26:f2:26:97:84:af:90:72:bc:a1:e1:44:a9: d7:06:dd:36:c3:d7:26:f7:29:9f:98:f5:ee:58:ae: 72:3d:73:98:0a:38:35:81:05:30:05:37:53:b9:69: 9b:82:95:00:a3:af:a5:6e:0b:a2:21:30:ff:82:ff: 8e:cb:d6:54:71:f8:8e:2d:da:7d:46:70:4e:78:cb: 2f:31:8a:9d:b7:f0:04:e0:03:cf:ac:b6:57:0b:e9: a3:c7:26:bc:e3:46:62:92:60:fe:b6:fa:d2:1a:ec: 9f:52:cf:e6:af:25:7a:50:49:92:32:37:a8:55:98: e9:80:73:dd:be:f9:29:88:78:bf:d3:6e:d5:15:11: cb:f4:b0:a7:2d:8c:36:33:d7:48:98:eb:97:16:38: 69:f8:76:2e:74:66:7b:59:ee:1a:35:1f:4a:a5:5e: f0:04:ca:06:38:27:2a:5e:ec:33:c9:c0:a5:3a:bc: 35:5f:a2:3f:e2:c7:f8:29:b3:b4:4c:1c:46:e3:13: 2e:61:3e:cc:9c:bd:05:87:f8:1c:b3:eb:2c:db:a3: a3:20:7e:4a:1a:c6:1e:ec:77:8e:32:2a:a7:94:9e: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:6F:DF:49:BF:2A:97:5D:75:E1:B8:02:02:72:93:05:6F:47:49 X509v3 Authority Key Identifier: keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fe:4a:30:e3:6d:be:e2:ad:33:92:61:7e:bc:39:83:bd:1f: ac:35:59:c6:4d:99:30:88:46:b4:1a:a7:7c:fc:00:02:7f:e0: 1f:80:64:b9:75:60:a8:50:88:4d:62:09:28:e0:c7:9b:71:19: 22:8f:55:ff:79:0c:c3:a3:7a:5c:d2:39:ea:57:90:f1:0e:99: c4:62:c7:66:83:ed:21:25:57:e7:fd:54:d1:0c:da:29:4c:eb: 25:41:6f:1f:9f:ba:78:45:59:da:82:5c:2c:01:f3:52:dd:39: 90:2a:2b:1e:fc:ca:51:7c:4f:c6:dd:e8:27:a9:f8:c3:b3:c0: 9c:91:31:7a:07:93:08:9e:b7:0b:e5:55:3a:00:8a:d7:f2:ff: fc:9d:30:a6:e0:4e:cf:0a:f5:bf:f6:d4:be:e8:ea:36:0b:e5: 3b:07:c9:21:05:4e:f9:a0:5c:a7:a4:53:80:c7:ee:06:4f:ed: 23:b1:09:7b:de:2d:6b:77:21:a7:af:e0:42:85:1c:f0:09:88: c6:ec:f0:cd:5a:39:97:5a:0d:89:de:ce:66:77:a6:f9:4a:39: a5:84:79:25:4b:f4:f1:21:f5:32:41:ec:6b:5d:ac:0b:6b:49: 38:1b:30:ae:6d:2e:07:f6:de:bb:06:4f:43:a5:74:5d:a8:72: 7c:eb:48:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZKrzA7dIs1dY65hNJyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj ZjU1MjYwHhcNMjUxMjIwMjAwMDM4WhcNMjUxMjIxMjAwMDM4WjAzMTEwLwYDVQQD EygwY2Q4NmZkZjQ5YmYyYTk3NWQ3NWUxYjgwMjAyNzI5MzA1NmY0NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtelW4MR5Gy2QhEWD5dByGj1hW58h agpICrOgO4tHIybyJpeEr5ByvKHhRKnXBt02w9cm9ymfmPXuWK5yPXOYCjg1gQUw BTdTuWmbgpUAo6+lbguiITD/gv+Oy9ZUcfiOLdp9RnBOeMsvMYqdt/AE4APPrLZX C+mjxya840ZikmD+tvrSGuyfUs/mryV6UEmSMjeoVZjpgHPdvvkpiHi/027VFRHL 9LCnLYw2M9dImOuXFjhp+HYudGZ7We4aNR9KpV7wBMoGOCcqXuwzycClOrw1X6I/ 4sf4KbO0TBxG4xMuYT7MnL0Fh/gcs+ss26OjIH5KGsYe7HeOMiqnlJ4sgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzYb99JvyqXXXXhuAICcpMFb0dJMB8GA1UdIwQY MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv5KMONt vuKtM5Jhfrw5g70frDVZxk2ZMIhGtBqnfPwAAn/gH4BkuXVgqFCITWIJKODHm3EZ Io9V/3kMw6N6XNI56leQ8Q6ZxGLHZoPtISVX5/1U0QzaKUzrJUFvH5+6eEVZ2oJc LAHzUt05kCorHvzKUXxPxt3oJ6n4w7PAnJExegeTCJ63C+VVOgCK1/L//J0wpuBO zwr1v/bUvujqNgvlOwfJIQVO+aBcp6RTgMfuBk/tI7EJe94ta3chp6/gQoUc8AmI xuzwzVo5l1oNid7OZnem+Uo5pYR5JUv08SH1MkHsa12sC2tJOBswrm0uB/beuwZP Q6V0XahyfOtI2A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:41 2025 by rpki-client