This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json) Hash identifier: s3fC5YAO8psnmXHTEwgK77VZW1HOP3Siwr9M1BhYGQo= Subject key identifier: 87:17:FF:7B:81:94:49:4C:7C:18:C0:F1:23:53:26:7C:11:76:A7:71 Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Certificate serial: 019B4437B95DFD21910C90C16E824CC4DE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 04:01:00 +0000 Manifest this update: Mon 22 Dec 2025 04:01:00 +0000 Manifest next update: Tue 23 Dec 2025 04:01:00 +0000 Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=) 2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: S/bonL73/h2jis2FVb2obqD+OnIp5mUl05YvORZsQSU=) 3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:b9:5d:fd:21:91:0c:90:c1:6e:82:4c:c4:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d Validity Not Before: Dec 22 04:01:00 2025 GMT Not After : Dec 23 04:01:00 2025 GMT Subject: CN=8717ff7b8194494c7c18c0f12353267c1176a771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:02:15:e1:a2:c5:07:21:d5:86:2c:88:f4: 23:5d:34:dc:16:66:6c:44:fd:95:87:35:6b:ce:06: 01:d9:81:1d:a5:87:f1:62:39:6a:49:40:13:df:9d: 3b:0c:ef:3a:15:22:a6:7d:d4:c4:52:3d:38:10:02: 1b:f2:e9:ba:2f:51:93:dc:4a:50:f9:d2:1f:92:d1: 0a:03:2c:db:db:45:80:ad:e8:df:00:b7:f9:43:b2: 2b:c6:83:93:2a:7c:51:dc:47:54:25:0f:18:ee:8b: e8:88:f5:53:1c:7c:5f:ea:86:32:dc:46:b9:44:cd: 97:38:22:20:39:d6:a4:c6:cd:cf:61:27:f6:0d:b5: 65:8c:33:b8:a4:b8:69:b6:e2:7d:11:27:72:48:6a: 67:48:fa:28:dc:92:7b:cd:7d:85:b4:fe:df:01:44: 07:50:9b:56:7d:28:14:bd:3f:a1:93:ec:84:98:ad: f1:c2:cb:63:8b:87:41:72:d9:58:ac:bc:2d:a9:15: bd:db:ad:b0:03:01:83:c9:b7:01:99:b4:12:32:3b: d9:38:da:76:9d:c0:1d:ee:0e:b5:9c:7d:12:50:6d: d1:6a:a7:42:39:a3:ee:56:cd:31:c1:0c:38:b0:6e: 21:97:6b:e4:d5:35:a0:ca:31:6f:77:05:58:17:f2: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:FF:7B:81:94:49:4C:7C:18:C0:F1:23:53:26:7C:11:76:A7:71 X509v3 Authority Key Identifier: keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:f4:74:dd:8c:b2:29:b0:5d:70:0f:ee:20:82:60:8b:28: fc:3b:b9:bf:5b:8b:4d:77:cc:81:88:2c:a3:81:98:6e:c9:3d: 7c:04:b8:20:64:51:96:d7:4f:ab:d2:f4:98:61:04:94:1f:be: 08:81:67:72:6f:24:7a:a8:3d:38:0d:1a:c5:d2:ab:de:70:c6: e2:ad:46:d1:93:b5:bb:8d:9a:e0:af:a0:0f:cc:c3:5c:c1:9b: 1d:1e:3f:ff:fd:66:68:51:70:db:00:cd:0f:d6:dc:27:ad:8b: ec:4e:ed:b6:7e:a1:5d:9f:98:78:4f:5b:3c:2d:21:b9:29:72: 82:b5:4d:49:7f:39:12:96:08:d5:aa:24:0b:d6:b3:31:92:41: df:94:b9:5d:c0:28:28:1a:60:5e:99:ea:dc:27:f4:06:f4:d0: 92:2a:0d:ce:c6:79:59:51:be:47:b3:8d:26:05:6f:e3:a7:6a: 56:6d:3a:6f:a3:32:c5:12:a3:9a:58:16:34:b5:10:25:32:c0: 48:e9:f2:51:47:bc:72:73:fd:88:0d:d1:fd:16:03:8c:4a:9d: 32:f9:33:68:de:28:5d:5f:85:29:d4:10:4e:14:4b:77:70:c8: 92:d2:83:62:e9:66:38:d0:51:02:8c:2a:5d:c1:61:4c:ea:2b: 2a:09:f1:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN7ld/SGRDJDBboJMxN4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0 MGVkMmQwHhcNMjUxMjIyMDQwMTAwWhcNMjUxMjIzMDQwMTAwWjAzMTEwLwYDVQQD Eyg4NzE3ZmY3YjgxOTQ0OTRjN2MxOGMwZjEyMzUzMjY3YzExNzZhNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4CFeGixQch1YYsiPQjXTTcFmZs RP2VhzVrzgYB2YEdpYfxYjlqSUAT3507DO86FSKmfdTEUj04EAIb8um6L1GT3EpQ +dIfktEKAyzb20WArejfALf5Q7IrxoOTKnxR3EdUJQ8Y7ovoiPVTHHxf6oYy3Ea5 RM2XOCIgOdakxs3PYSf2DbVljDO4pLhptuJ9ESdySGpnSPoo3JJ7zX2FtP7fAUQH UJtWfSgUvT+hk+yEmK3xwstji4dBctlYrLwtqRW9262wAwGDybcBmbQSMjvZONp2 ncAd7g61nH0SUG3RaqdCOaPuVs0xwQw4sG4hl2vk1TWgyjFvdwVYF/LNEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcX/3uBlElMfBjA8SNTJnwRdqdxMB8GA1UdIwQY MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUr0dN2M simwXXAP7iCCYIso/Du5v1uLTXfMgYgso4GYbsk9fAS4IGRRltdPq9L0mGEElB++ CIFncm8keqg9OA0axdKr3nDG4q1G0ZO1u42a4K+gD8zDXMGbHR4///1maFFw2wDN D9bcJ62L7E7ttn6hXZ+YeE9bPC0huSlygrVNSX85EpYI1aokC9azMZJB35S5XcAo KBpgXpnq3Cf0BvTQkioNzsZ5WVG+R7ONJgVv46dqVm06b6MyxRKjmlgWNLUQJTLA SOnyUUe8cnP9iA3R/RYDjEqdMvkzaN4oXV+FKdQQThRLd3DIktKDYulmONBRAowq XcFhTOorKgnx8w== -----END CERTIFICATE-----Generated at Mon Dec 22 06:27:12 2025 by rpki-client