This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json) Hash identifier: +1j8V/Y9bBAcs9J+3SmAH4b0iudnFEFlGTpWipTy0VI= Subject key identifier: E1:9A:BF:3F:EC:C2:46:6C:9E:96:7A:C9:88:5B:A2:60:4E:C0:E1:D4 Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Certificate serial: 019B4F297EF2A4612FD3877985B5AC7CA445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft Manifest number: 0CC2 Signing time: Wed 24 Dec 2025 07:01:18 +0000 Manifest this update: Wed 24 Dec 2025 07:01:18 +0000 Manifest next update: Thu 25 Dec 2025 07:01:18 +0000 Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=) 2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: TNm5pK7GDLmhFbgNztT27de9+sdfFhmcdAZjatKnSMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:7e:f2:a4:61:2f:d3:87:79:85:b5:ac:7c:a4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Validity Not Before: Dec 24 07:01:18 2025 GMT Not After : Dec 25 07:01:18 2025 GMT Subject: CN=e19abf3fecc2466c9e967ac9885ba2604ec0e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:f7:20:4c:fa:37:9c:3f:c4:b2:45:f6:1a: dd:cc:e6:98:4b:9e:0e:5f:7c:61:c7:85:69:c1:43: 76:57:be:12:6e:7b:e8:e9:51:56:46:bf:91:f6:1d: f4:6d:76:73:0c:06:d0:db:96:fb:0b:94:c2:12:c2: 87:02:92:1f:3b:f1:e2:8e:50:09:df:be:35:8f:04: a2:c8:4a:48:9c:23:9a:01:cd:ec:b4:46:0e:48:af: 17:d7:bc:01:96:12:13:d8:08:a1:ec:b9:ad:7d:c5: 7d:d0:18:f5:b9:26:73:14:37:91:e8:08:5c:3d:b6: 1c:78:b5:7b:f1:fc:45:9a:bb:2a:1c:71:d1:81:bd: 20:68:91:89:84:49:51:e5:4b:d5:3f:69:7f:dc:7d: 42:9b:ad:f3:f9:ac:5c:9d:2e:90:ee:c1:09:d5:a3: 64:37:59:d8:03:f4:d7:16:87:9e:2c:b3:35:9f:00: ad:5b:01:0d:9d:1d:3d:77:a2:51:29:a8:70:b7:c3: 07:6d:3e:ed:4d:a4:8e:51:25:fe:2c:8f:20:74:c0: d1:70:49:32:d0:67:f9:66:b9:a6:6e:41:ca:f2:bb: d5:17:e6:95:0b:15:c6:b2:49:3b:59:fb:1e:f5:52: 19:e3:b6:48:92:d9:0e:7c:7e:01:1f:3f:76:86:7b: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:BF:3F:EC:C2:46:6C:9E:96:7A:C9:88:5B:A2:60:4E:C0:E1:D4 X509v3 Authority Key Identifier: keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:43:e2:d8:6c:e9:b7:cb:38:3e:19:50:ae:27:b8:cc:1f:80: 0b:73:94:42:79:2e:ac:5e:fa:39:f8:9c:a7:c4:25:60:69:32: ec:ac:2c:32:ee:2c:3a:2f:6a:86:e3:d6:28:89:5f:ba:cd:67: c5:b2:68:8b:93:5b:90:a9:e0:2a:95:c0:db:87:13:d4:19:c5: d1:e1:d4:5a:fc:5c:42:93:4d:85:09:94:f1:2f:8c:71:50:3e: f4:94:50:57:ea:39:1d:4a:24:1e:77:34:18:f5:78:ff:91:8f: 7d:57:b1:27:ae:6c:03:b3:96:62:08:fb:c5:a1:fb:a5:e2:1c: e3:1e:f2:3e:18:1b:dc:2a:4f:cc:a2:1a:64:24:ab:8c:9e:8b: 8e:2f:ce:46:e7:f5:a7:e6:da:d9:96:fc:d7:21:2b:7d:f8:22: e9:c6:2c:26:b8:9c:6e:0f:ff:c3:7e:61:46:83:92:1a:94:b6: cc:8e:4a:eb:3e:95:7a:28:87:37:0f:d6:98:28:b6:71:de:c7: d1:d1:70:3a:79:86:ff:76:7f:b2:4f:58:84:96:42:27:ef:b5: 02:d8:2d:f0:c3:ca:34:5a:ee:1e:dc:dc:4f:c0:de:dc:a8:f2: 3b:73:a7:c9:4e:e2:2d:ac:b0:2b:b8:56:4f:73:2a:a6:b9:86: 4a:07:a6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKX7ypGEv04d5hbWsfKRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm NmE1Y2YwHhcNMjUxMjI0MDcwMTE4WhcNMjUxMjI1MDcwMTE4WjAzMTEwLwYDVQQD EyhlMTlhYmYzZmVjYzI0NjZjOWU5NjdhYzk4ODViYTI2MDRlYzBlMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBP3IEz6N5w/xLJF9hrdzOaYS54O X3xhx4VpwUN2V74Sbnvo6VFWRr+R9h30bXZzDAbQ25b7C5TCEsKHApIfO/HijlAJ 3741jwSiyEpInCOaAc3stEYOSK8X17wBlhIT2Aih7LmtfcV90Bj1uSZzFDeR6Ahc PbYceLV78fxFmrsqHHHRgb0gaJGJhElR5UvVP2l/3H1Cm63z+axcnS6Q7sEJ1aNk N1nYA/TXFoeeLLM1nwCtWwENnR09d6JRKahwt8MHbT7tTaSOUSX+LI8gdMDRcEky 0Gf5ZrmmbkHK8rvVF+aVCxXGskk7Wfse9VIZ47ZIktkOfH4BHz92hnuQdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGavz/swkZsnpZ6yYhbomBOwOHUMB8GA1UdIwQY MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkPi2Gzp t8s4PhlQrie4zB+AC3OUQnkurF76Oficp8QlYGky7KwsMu4sOi9qhuPWKIlfus1n xbJoi5NbkKngKpXA24cT1BnF0eHUWvxcQpNNhQmU8S+McVA+9JRQV+o5HUokHnc0 GPV4/5GPfVexJ65sA7OWYgj7xaH7peIc4x7yPhgb3CpPzKIaZCSrjJ6Lji/ORuf1 p+ba2Zb81yErffgi6cYsJricbg//w35hRoOSGpS2zI5K6z6VeiiHNw/WmCi2cd7H 0dFwOnmG/3Z/sk9YhJZCJ++1Atgt8MPKNFruHtzcT8De3KjyO3OnyU7iLaywK7hW T3MqprmGSgemCA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:08 2025 by rpki-client