This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json) Hash identifier: UNtKYH2UV6roQ4bhuyAtqX5dVIqr4rfrQnt3ijKEDq4= Subject key identifier: 12:2E:C4:A7:63:FA:64:78:C2:E2:99:4A:3E:D0:26:5D:DD:66:02:88 Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Certificate serial: 019B52611B30AFB02D23C90370F1AE402827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft Manifest number: 14D4 Signing time: Wed 24 Dec 2025 22:00:54 +0000 Manifest this update: Wed 24 Dec 2025 22:00:54 +0000 Manifest next update: Thu 25 Dec 2025 22:00:54 +0000 Files and hashes: 1: Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa (hash: iwMpY36khSGjNTrmpB2B0AqQ83qJVqJRDA0DSjAiZW0=) 2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: MCZcsTg27WHs5W2riuixIhYR1pu1rKwBAQJBnkoVGKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:1b:30:af:b0:2d:23:c9:03:70:f1:ae:40:28:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Validity Not Before: Dec 24 22:00:54 2025 GMT Not After : Dec 25 22:00:54 2025 GMT Subject: CN=122ec4a763fa6478c2e2994a3ed0265ddd660288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:f9:3e:1c:e7:98:05:de:00:31:4d:c0:b2: 62:31:9d:6c:62:2d:f7:b1:ce:03:38:e2:12:01:73: 17:f7:e0:2f:7f:a8:5a:78:7b:fa:22:b7:b6:f8:ec: 82:d4:61:50:6b:d9:18:5f:fa:55:78:bb:eb:a9:05: dd:bf:d3:4f:b9:b3:20:36:16:b2:43:a4:78:81:17: 4d:dd:12:d4:81:fe:db:4f:68:eb:b4:1e:51:2b:1f: 75:12:f2:a0:07:2b:0c:02:a9:79:96:b3:1b:00:a4: ab:56:64:17:d6:f0:c1:71:1d:b8:47:ca:31:2f:3f: b4:85:c4:7c:02:b0:10:21:a5:aa:68:34:c8:52:c5: 09:8a:2a:48:ed:8b:a6:42:1f:b4:85:cb:f4:6d:68: 10:e0:f7:6f:f7:77:1d:6c:d2:c9:9a:c8:42:1e:f2: c8:a3:2b:8f:45:2b:06:ca:c1:ab:ca:ce:f3:9a:a2: 96:6d:c9:08:31:15:43:08:84:fb:c2:45:c7:c5:ac: 16:7c:f1:a6:74:1e:d5:f2:4b:0b:9b:ff:48:ce:bb: 1b:c3:bb:9c:12:aa:a1:c2:65:96:f7:a1:e8:ef:09: d8:da:60:da:1c:54:b4:66:9c:d6:67:02:ea:c0:57: 05:21:4c:34:43:ff:35:99:b0:2e:7f:48:fd:71:53: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2E:C4:A7:63:FA:64:78:C2:E2:99:4A:3E:D0:26:5D:DD:66:02:88 X509v3 Authority Key Identifier: keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:35:25:3b:df:49:d7:74:55:89:87:2e:4b:17:b0:3d:1c:a5: f4:c1:56:f4:67:17:7d:ef:57:40:e5:5e:64:71:f4:fa:76:b8: d1:a7:26:f9:58:26:5d:15:0c:77:be:de:33:8e:a9:d8:d1:bd: dc:27:50:ac:d9:6f:52:69:12:55:6b:ae:bf:c4:48:58:c4:a5: 0a:22:14:32:05:ac:69:b3:af:4f:4b:c0:bb:bd:a0:58:5d:10: ec:f3:d7:cf:f9:29:ae:8f:4c:75:cb:a3:b8:af:e0:8d:d1:dc: 3c:35:3d:5e:a6:c1:92:4b:ba:c9:f4:ff:2d:8c:67:b4:e8:ab: 4e:e9:32:79:98:e3:6e:ae:c5:a7:e9:28:7a:3a:56:4c:50:c4: 39:a9:f2:04:11:8b:e8:d7:9e:41:18:9f:b6:5f:fa:bc:90:54: 19:5b:60:5e:9d:12:e1:b6:cd:69:bc:3f:9d:01:b7:ff:02:89: a8:33:18:9e:b8:ee:c4:37:ae:eb:f9:52:b1:34:27:dc:01:39: a8:5d:7b:ce:e3:fd:ec:8e:63:4e:2c:e6:47:96:50:7f:56:af: e2:86:cd:e4:65:09:db:23:a5:a7:58:61:7c:9a:ca:54:8d:a0: 6d:9a:06:38:26:da:58:72:af:c1:0f:2b:ab:95:3f:e9:56:2f: c4:a3:56:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYRswr7AtI8kDcPGuQCgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2 M2MwYTkwHhcNMjUxMjI0MjIwMDU0WhcNMjUxMjI1MjIwMDU0WjAzMTEwLwYDVQQD EygxMjJlYzRhNzYzZmE2NDc4YzJlMjk5NGEzZWQwMjY1ZGRkNjYwMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3n5PhznmAXeADFNwLJiMZ1sYi33 sc4DOOISAXMX9+Avf6haeHv6Ire2+OyC1GFQa9kYX/pVeLvrqQXdv9NPubMgNhay Q6R4gRdN3RLUgf7bT2jrtB5RKx91EvKgBysMAql5lrMbAKSrVmQX1vDBcR24R8ox Lz+0hcR8ArAQIaWqaDTIUsUJiipI7YumQh+0hcv0bWgQ4Pdv93cdbNLJmshCHvLI oyuPRSsGysGrys7zmqKWbckIMRVDCIT7wkXHxawWfPGmdB7V8ksLm/9Izrsbw7uc EqqhwmWW96Ho7wnY2mDaHFS0ZpzWZwLqwFcFIUw0Q/81mbAuf0j9cVNSWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIuxKdj+mR4wuKZSj7QJl3dZgKIMB8GA1UdIwQY MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjUlO99J 13RViYcuSxewPRyl9MFW9GcXfe9XQOVeZHH0+na40acm+VgmXRUMd77eM46p2NG9 3CdQrNlvUmkSVWuuv8RIWMSlCiIUMgWsabOvT0vAu72gWF0Q7PPXz/kpro9Mdcuj uK/gjdHcPDU9XqbBkku6yfT/LYxntOirTukyeZjjbq7Fp+koejpWTFDEOanyBBGL 6NeeQRiftl/6vJBUGVtgXp0S4bbNabw/nQG3/wKJqDMYnrjuxDeu6/lSsTQn3AE5 qF17zuP97I5jTizmR5ZQf1av4obN5GUJ2yOlp1hhfJrKVI2gbZoGOCbaWHKvwQ8r q5U/6VYvxKNWXQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:20:13 2025 by rpki-client