This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json) Hash identifier: 27R/zNxuO26Q556oBEVm9e9jK7MPRSyreZD1nTlrLfo= Subject key identifier: 36:C9:28:FA:0E:48:35:E5:9E:8A:26:0A:22:FF:C9:EB:27:2A:86:E0 Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09 Certificate serial: 019B747FFA411C6BA62CE0DDD8EA5BDD4DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft Manifest number: 0EB3 Signing time: Wed 31 Dec 2025 13:01:42 +0000 Manifest this update: Wed 31 Dec 2025 13:01:42 +0000 Manifest next update: Thu 01 Jan 2026 13:01:42 +0000 Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=) 2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: P3BBSPptjjsRb+pfJlkMbyOTnm3EzxzeFg/HxP/3bug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:fa:41:1c:6b:a6:2c:e0:dd:d8:ea:5b:dd:4d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09 Validity Not Before: Dec 31 13:01:42 2025 GMT Not After : Jan 1 13:01:42 2026 GMT Subject: CN=36c928fa0e4835e59e8a260a22ffc9eb272a86e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:38:3a:15:39:e7:e7:37:64:02:d5:f0:54: 44:b4:1e:54:80:6a:1d:ec:da:62:d4:5c:6e:6e:cb: 7f:97:58:f0:36:87:03:69:85:82:17:b1:9e:b2:4c: 6b:94:7e:7d:a5:1c:0d:1e:ae:7d:5f:a5:bd:54:32: ea:16:b5:56:72:39:3a:55:d7:68:1e:f4:cb:25:b4: 82:4f:82:cc:c4:7b:e6:3a:a7:5c:bc:10:7e:85:63: 6f:f8:06:ed:38:2b:a9:98:18:62:2f:ac:05:fb:55: de:87:e0:1f:f0:c3:03:15:b8:d6:b8:e8:61:d7:a1: 29:3c:6e:a1:cb:e8:dc:ec:c1:6c:cf:fc:51:68:4c: 5d:e3:c5:51:77:81:50:1d:b0:d5:80:4e:1f:d1:48: 78:b1:2f:6a:67:48:7b:c2:f3:68:a4:33:7a:28:81: 10:9b:79:23:ad:bb:16:e2:66:96:46:b1:1d:03:ad: dc:2d:ee:c9:11:e3:e3:5b:18:93:18:5d:a3:5b:ee: d7:c4:82:ac:c8:19:ff:85:17:59:09:4c:43:bb:24: 79:c2:50:d6:e4:ca:48:7e:c2:c2:c7:d7:42:97:10: cf:0c:0b:30:d3:89:01:5f:73:93:f3:e9:99:a3:b0: b2:32:23:d4:3e:4a:6e:8c:ab:48:95:9c:15:e1:e3: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C9:28:FA:0E:48:35:E5:9E:8A:26:0A:22:FF:C9:EB:27:2A:86:E0 X509v3 Authority Key Identifier: keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:01:b7:b4:11:5d:ae:d2:98:bd:4b:fc:2c:d2:5c:97:3d:5e: 66:ff:ee:79:53:0f:e0:a8:05:77:aa:c3:4b:de:44:05:ef:af: b4:60:09:19:32:64:14:78:56:24:31:80:15:62:f4:b2:75:c9: 5a:ea:be:0e:99:f3:d9:28:04:43:fc:47:d3:f7:79:e8:4b:03: 41:97:c3:c1:93:bf:07:01:16:b7:52:11:76:ec:36:0e:f0:f3: a3:60:9f:88:98:5b:b9:f9:59:9c:a7:54:71:f5:5a:72:e0:58: 56:c8:54:a2:44:d9:65:6e:ec:d6:c8:b4:d0:4a:eb:13:95:7b: 2a:e3:65:8e:79:d4:7c:be:60:88:78:0d:5b:b8:75:0f:8b:ca: a3:1b:f9:04:09:21:d2:61:47:db:33:27:66:df:69:6a:74:a3: 48:ac:ec:ff:18:10:cc:0b:16:b3:8c:d0:eb:3a:75:49:4e:31: 17:f1:98:8b:14:32:b0:59:37:f4:76:31:75:71:f0:3c:af:4a: d2:1d:e1:a1:d6:c0:e7:46:6f:c9:b9:b9:0a:97:33:ed:38:25: 4b:37:07:aa:8b:64:20:c4:dd:a6:8a:94:80:d1:12:4a:db:ee: 40:d2:e3:5b:71:ae:28:6e:9e:4b:86:b8:6c:f5:71:6b:64:c6: a2:c0:67:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f/pBHGumLODd2Opb3U2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODEwZWRjNTFhYmQ2MWU2OWYzYzY5ZWU0OWQ4OGU5ODk2 YTZmMDkwHhcNMjUxMjMxMTMwMTQyWhcNMjYwMTAxMTMwMTQyWjAzMTEwLwYDVQQD EygzNmM5MjhmYTBlNDgzNWU1OWU4YTI2MGEyMmZmYzllYjI3MmE4NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvc4OhU55+c3ZALV8FREtB5UgGod 7Npi1Fxubst/l1jwNocDaYWCF7GeskxrlH59pRwNHq59X6W9VDLqFrVWcjk6Vddo HvTLJbSCT4LMxHvmOqdcvBB+hWNv+AbtOCupmBhiL6wF+1Xeh+Af8MMDFbjWuOhh 16EpPG6hy+jc7MFsz/xRaExd48VRd4FQHbDVgE4f0Uh4sS9qZ0h7wvNopDN6KIEQ m3kjrbsW4maWRrEdA63cLe7JEePjWxiTGF2jW+7XxIKsyBn/hRdZCUxDuyR5wlDW 5MpIfsLCx9dClxDPDAsw04kBX3OT8+mZo7CyMiPUPkpujKtIlZwV4eObaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbJKPoOSDXlnoomCiL/yesnKobgMB8GA1UdIwQY MBaAFIyBDtxRq9YeafPGnuSdiOmJam8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEt NDAxNDQ3OGJiNmM4LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEtNDAxNDQ3OGJiNmM4 LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAG3tBFd rtKYvUv8LNJclz1eZv/ueVMP4KgFd6rDS95EBe+vtGAJGTJkFHhWJDGAFWL0snXJ Wuq+Dpnz2SgEQ/xH0/d56EsDQZfDwZO/BwEWt1IRduw2DvDzo2CfiJhbuflZnKdU cfVacuBYVshUokTZZW7s1si00ErrE5V7KuNljnnUfL5giHgNW7h1D4vKoxv5BAkh 0mFH2zMnZt9panSjSKzs/xgQzAsWs4zQ6zp1SU4xF/GYixQysFk39HYxdXHwPK9K 0h3hodbA50Zvybm5Cpcz7TglSzcHqotkIMTdpoqUgNESStvuQNLjW3GuKG6eS4a4 bPVxa2TGosBnrA== -----END CERTIFICATE-----Generated at Wed Dec 31 22:50:58 2025 by rpki-client