This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft File: jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json) Hash identifier: YNTHywp6dUjB2vyQXFutu0IsFcK6oO2tR/2eQduJBzQ= Subject key identifier: 76:AB:6E:7B:C8:B4:7B:2D:01:8E:71:0D:EF:CB:7B:B1:8D:51:52:77 Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09 Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509 Certificate serial: 019B2C2FA2C293D9EB4E3E0541A509C961FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:01:17 +0000 Manifest this update: Wed 17 Dec 2025 12:01:17 +0000 Manifest next update: Thu 18 Dec 2025 12:01:17 +0000 Files and hashes: 1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=) 2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: vYTDGCHdxDZNIxRgxeoCcM7YCjE0Ev1iiZUnWkyU4AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a2:c2:93:d9:eb:4e:3e:05:41:a5:09:c9:61:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509 Validity Not Before: Dec 17 12:01:17 2025 GMT Not After : Dec 18 12:01:17 2025 GMT Subject: CN=76ab6e7bc8b47b2d018e710defcb7bb18d515277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:c5:84:13:6a:31:18:7c:5f:3a:29:0f:bb: 4f:a6:24:7b:d2:74:01:15:d5:25:56:de:26:8f:a8: b7:aa:ba:68:7c:f2:24:98:b6:98:53:d2:ce:77:5c: 86:23:56:dd:f8:68:80:e4:3d:ae:c3:3d:75:89:3f: e5:35:af:8d:ee:6a:e2:d3:88:c0:9c:de:44:29:58: fc:ae:8d:88:05:43:36:73:1c:dd:89:a6:2d:fc:db: dd:05:57:20:46:6a:d7:bd:45:c6:bb:82:38:31:2d: 6d:93:64:26:5c:99:52:e6:87:0c:e6:f5:94:d4:3f: d6:a7:02:bc:3d:db:8e:ae:98:2e:30:6a:8a:e9:3a: 70:2e:4f:f2:30:be:92:ae:30:e9:df:5d:0c:de:b2: ec:65:b9:a9:92:b3:26:0d:2d:7c:1b:39:1c:5f:44: 11:2b:9f:2e:86:b7:6a:7b:df:fb:c6:39:ad:a0:50: b9:2d:01:58:04:18:59:34:b4:a8:a5:e3:10:18:92: be:b2:53:0d:cb:42:08:ff:c4:70:a3:97:d3:47:b0: 14:c6:68:7c:74:b0:42:47:ab:74:b8:5b:f1:12:63: 2e:63:05:6e:0b:9c:40:ac:ae:f1:7e:c8:ef:1a:1d: a3:39:2b:24:73:02:36:bf:aa:08:26:68:17:af:06: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AB:6E:7B:C8:B4:7B:2D:01:8E:71:0D:EF:CB:7B:B1:8D:51:52:77 X509v3 Authority Key Identifier: keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:3e:7e:1e:ca:6f:0b:13:c3:de:9d:8f:35:00:00:c5:32:9d: 23:ea:a1:ff:70:dd:96:b0:ef:a5:6e:e7:98:d3:b0:d2:7e:2e: a3:e0:56:16:9b:64:b8:6d:21:09:d1:c7:72:ed:dc:bf:f7:68: 1e:a5:74:9a:bb:f3:57:a9:5b:76:7a:9a:ba:61:f1:57:7e:dd: 58:a0:f0:2c:f6:59:b9:8d:a2:10:3d:9e:47:ad:01:e2:9a:15: 0c:66:d3:d2:cd:e3:35:40:72:7e:7c:aa:b3:80:ba:bb:41:d9: 12:80:28:dd:f4:37:4f:87:d5:fb:50:d6:ba:f9:f5:84:0e:fe: c2:f2:3f:0b:35:b6:1e:24:74:e2:03:c8:af:5e:86:78:47:05: 34:10:88:80:4c:87:1b:ea:6e:d1:89:34:ec:72:c7:94:0f:c9: 5f:07:10:2e:f5:1f:dc:2b:20:00:68:00:aa:9e:6a:f0:f3:c6: a6:9c:1b:07:b9:48:fb:42:5e:03:ce:39:59:ca:ab:8b:1a:94: 6c:bb:b5:85:05:c3:cf:3a:ce:7b:9a:40:28:8d:6b:89:e2:74: c5:de:3f:67:3c:f1:e4:92:65:16:ac:30:88:d3:1c:e0:cc:fa: 03:4e:a2:53:43:72:4a:90:5a:44:55:31:92:d6:74:f8:93:11: 62:a6:a4:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6LCk9nrTj4FQaUJyWH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm ZGQ1MDkwHhcNMjUxMjE3MTIwMTE3WhcNMjUxMjE4MTIwMTE3WjAzMTEwLwYDVQQD Eyg3NmFiNmU3YmM4YjQ3YjJkMDE4ZTcxMGRlZmNiN2JiMThkNTE1Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEDFhBNqMRh8XzopD7tPpiR70nQB FdUlVt4mj6i3qrpofPIkmLaYU9LOd1yGI1bd+GiA5D2uwz11iT/lNa+N7mri04jA nN5EKVj8ro2IBUM2cxzdiaYt/NvdBVcgRmrXvUXGu4I4MS1tk2QmXJlS5ocM5vWU 1D/WpwK8PduOrpguMGqK6TpwLk/yML6SrjDp310M3rLsZbmpkrMmDS18GzkcX0QR K58uhrdqe9/7xjmtoFC5LQFYBBhZNLSopeMQGJK+slMNy0II/8Rwo5fTR7AUxmh8 dLBCR6t0uFvxEmMuYwVuC5xArK7xfsjvGh2jOSskcwI2v6oIJmgXrwb+rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHarbnvItHstAY5xDe/Le7GNUVJ3MB8GA1UdIwQY MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt OTJkOTRjZDdiMDI0LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0 LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7D5+Hspv CxPD3p2PNQAAxTKdI+qh/3DdlrDvpW7nmNOw0n4uo+BWFptkuG0hCdHHcu3cv/do HqV0mrvzV6lbdnqaumHxV37dWKDwLPZZuY2iED2eR60B4poVDGbT0s3jNUByfnyq s4C6u0HZEoAo3fQ3T4fV+1DWuvn1hA7+wvI/CzW2HiR04gPIr16GeEcFNBCIgEyH G+pu0Yk07HLHlA/JXwcQLvUf3CsgAGgAqp5q8PPGppwbB7lI+0JeA845WcqrixqU bLu1hQXDzzrOe5pAKI1rieJ0xd4/Zzzx5JJlFqwwiNMc4Mz6A06iU0NySpBaRFUx ktZ0+JMRYqak3g== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:50 2025 by rpki-client