This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json) Hash identifier: g61Ovyg+RYIplyeN/J0vn7jTdP369bbkEpDbmslmpuA= Subject key identifier: 40:6C:D5:65:3B:02:DA:A6:0A:AB:68:28:7E:6D:12:AF:16:68:EB:B0 Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f Certificate serial: 019B4E8497C6FBAE8FDF6C7E9A0896C4A6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 04:01:10 +0000 Manifest this update: Wed 24 Dec 2025 04:01:10 +0000 Manifest next update: Thu 25 Dec 2025 04:01:10 +0000 Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: T1kbUeUaa+Za4GJfGtOTcr7qofu3XnIOmVQuCLd/9Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:97:c6:fb:ae:8f:df:6c:7e:9a:08:96:c4:a6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f Validity Not Before: Dec 24 04:01:10 2025 GMT Not After : Dec 25 04:01:10 2025 GMT Subject: CN=406cd5653b02daa60aab68287e6d12af1668ebb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:e5:73:ef:ef:d0:e9:b0:39:d4:24:52:4f: 5f:eb:26:8e:8f:b9:b9:fc:f5:fa:65:50:72:87:13: 4d:6f:66:3a:47:5c:74:f3:e6:d4:e8:ee:ae:55:71: 1a:c1:dc:90:7c:56:02:b9:ab:53:3f:fd:0a:e0:bc: 01:6a:5e:f5:e9:37:05:b5:a3:21:fd:52:ad:f7:4e: 47:2f:ec:b1:33:a6:15:cb:89:b8:1c:ba:51:73:34: 06:e9:a1:b5:ef:76:af:58:58:ac:c8:29:32:6a:2f: b9:cf:c6:d9:c4:a2:f8:51:a9:ca:ea:27:be:76:cb: 6e:bd:3f:6d:10:44:a3:89:01:28:b2:ab:4d:86:f2: 17:65:ab:eb:e1:dc:5d:a5:c3:3b:7f:de:ca:d9:23: f9:e2:40:09:28:77:59:16:21:62:73:99:b2:05:08: 3f:ad:b5:02:de:a5:40:f4:b2:62:62:3d:57:cd:24: ae:94:7d:e7:f4:5c:8f:58:d3:a4:8b:72:c1:b8:11: 7c:6b:7f:14:e0:ed:5b:14:f2:fc:e7:78:e8:c1:43: ee:f2:37:4e:94:51:fc:25:a9:9e:3d:38:09:de:36: 76:df:50:c2:65:0c:a3:e6:1f:cc:b9:70:bf:d3:af: cd:a4:b1:c1:e3:e5:53:e0:08:63:76:2e:ce:e8:5b: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6C:D5:65:3B:02:DA:A6:0A:AB:68:28:7E:6D:12:AF:16:68:EB:B0 X509v3 Authority Key Identifier: keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:4b:c5:5f:cc:f4:69:0a:4c:5e:ab:55:33:f4:ab:da:91: 19:46:9a:a1:9e:e8:94:74:6f:54:1a:08:78:ff:7d:7e:0f:38: 40:0f:f3:40:0e:ab:8e:05:ca:30:7e:1f:24:df:83:d3:0e:89: 51:a1:f0:cf:35:3a:ea:d5:e3:53:a0:fc:d1:e6:20:ff:c3:f0: fd:31:4e:8d:74:af:6f:0d:fe:0e:08:62:c5:13:4c:d2:5d:4c: cd:3c:5f:d7:25:82:9f:46:73:9f:1f:5b:1c:a9:00:39:ce:58: 35:6b:b9:f4:84:49:c5:c8:bf:06:0d:7a:77:78:97:51:d6:40: 62:da:85:7f:56:d1:6d:af:8f:0d:b9:37:41:2f:b6:6f:b5:17: a2:89:4a:27:d5:d7:98:71:30:a5:fc:5c:0f:ec:1a:29:34:a2: 7c:a6:92:78:75:ee:b2:69:61:ae:68:94:f6:89:2e:0a:9f:9a: 27:de:ff:da:66:d5:ca:63:33:22:6e:7e:03:b8:d3:b8:c9:c1: 01:5a:38:eb:0e:47:68:37:01:80:0e:4b:56:05:32:f5:1d:1d: d9:4e:ea:78:4f:24:09:94:80:8c:40:7b:0b:a7:ad:4e:8f:f5: 7b:21:e5:d9:1c:28:7a:e6:c9:60:1f:97:65:87:ff:a3:1d:ee: 4b:f7:d0:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhJfG+66P32x+mgiWxKbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzhjMzlmMWUyMTRjN2VjZGYyZjBlYzk1Nzg0NzAxZjJk MTI4OGYwHhcNMjUxMjI0MDQwMTEwWhcNMjUxMjI1MDQwMTEwWjAzMTEwLwYDVQQD Eyg0MDZjZDU2NTNiMDJkYWE2MGFhYjY4Mjg3ZTZkMTJhZjE2NjhlYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3lc+/v0OmwOdQkUk9f6yaOj7m5 /PX6ZVByhxNNb2Y6R1x08+bU6O6uVXEawdyQfFYCuatTP/0K4LwBal716TcFtaMh /VKt905HL+yxM6YVy4m4HLpRczQG6aG173avWFisyCkyai+5z8bZxKL4UanK6ie+ dstuvT9tEESjiQEosqtNhvIXZavr4dxdpcM7f97K2SP54kAJKHdZFiFic5myBQg/ rbUC3qVA9LJiYj1XzSSulH3n9FyPWNOki3LBuBF8a38U4O1bFPL853jowUPu8jdO lFH8JamePTgJ3jZ231DCZQyj5h/MuXC/06/NpLHB4+VT4Ahjdi7O6FtGqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBs1WU7AtqmCqtoKH5tEq8WaOuwMB8GA1UdIwQY MBaAFK44w58eIUx+zfLw7JV4RwHy0SiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjIt MTAxYmFiMGRmMmRmLzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjItMTAxYmFiMGRmMmRm LzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHxLxV/M 9GkKTF6rVTP0q9qRGUaaoZ7olHRvVBoIeP99fg84QA/zQA6rjgXKMH4fJN+D0w6J UaHwzzU66tXjU6D80eYg/8Pw/TFOjXSvbw3+DghixRNM0l1MzTxf1yWCn0Zznx9b HKkAOc5YNWu59IRJxci/Bg16d3iXUdZAYtqFf1bRba+PDbk3QS+2b7UXoolKJ9XX mHEwpfxcD+waKTSifKaSeHXusmlhrmiU9okuCp+aJ97/2mbVymMzIm5+A7jTuMnB AVo46w5HaDcBgA5LVgUy9R0d2U7qeE8kCZSAjEB7C6etTo/1eyHl2RwoeubJYB+X ZYf/ox3uS/fQ1Q== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:30 2025 by rpki-client