This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json) Hash identifier: VKn2Pb+36FA7LjMdHrCOvEuNlsXGeNS1e9A+MKaqxHk= Subject key identifier: 8D:59:CE:E0:F3:DB:06:BE:D5:AD:2B:EC:66:64:68:57:3E:EA:05:A4 Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Certificate serial: 019B3C7F6A2E96C14B8CC97A36953996D5F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:21 +0000 Manifest this update: Sat 20 Dec 2025 16:02:21 +0000 Manifest next update: Sun 21 Dec 2025 16:02:21 +0000 Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=) 2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: 66JOZMsnD4xS4FRWPI3TZkz7Nw3iaC5OW56vl1yclb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6a:2e:96:c1:4b:8c:c9:7a:36:95:39:96:d5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Validity Not Before: Dec 20 16:02:21 2025 GMT Not After : Dec 21 16:02:21 2025 GMT Subject: CN=8d59cee0f3db06bed5ad2bec666468573eea05a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:8d:ac:70:40:c6:31:06:c5:d1:53:4a:bd: ed:fb:90:82:c4:7b:a0:7a:35:db:f0:90:1b:9f:77: e5:5f:61:6b:29:87:24:4d:ea:d2:e9:1f:b1:76:27: 84:7d:df:ad:c6:44:92:ef:3d:9f:78:9c:46:fa:99: 83:85:47:a2:ad:23:cd:fe:7d:aa:ac:56:12:5f:fe: ea:b4:88:40:7e:03:4f:86:02:be:82:70:01:aa:89: f0:be:c3:06:23:2d:d8:3a:55:70:fa:6a:98:65:bb: f8:4d:db:43:98:79:3f:b4:fb:47:76:30:f9:9e:56: 53:9d:c1:51:8e:04:1b:9a:7d:9c:ef:8d:64:19:1d: 0c:9b:eb:aa:0c:60:0f:7f:82:44:03:2c:43:84:3b: fb:b9:8b:c5:9c:94:14:bc:05:5f:a3:3e:b1:9b:1d: 22:81:10:44:d6:26:de:ca:16:8d:fa:81:57:70:d5: 9d:fe:23:53:5e:c7:5a:f3:ab:18:91:5d:f1:76:62: 3a:00:ac:64:eb:e3:9e:15:10:c3:26:7f:d2:9f:82: 2d:d0:a0:3b:70:a6:63:81:73:63:df:d7:b4:d2:b7: dd:7c:19:5a:25:6a:d4:2c:17:03:d4:46:70:c0:d1: ba:71:9d:51:1a:7b:ce:bb:60:46:34:cd:be:2f:f0: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:CE:E0:F3:DB:06:BE:D5:AD:2B:EC:66:64:68:57:3E:EA:05:A4 X509v3 Authority Key Identifier: keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:7b:53:10:25:d8:93:2d:60:a5:a8:c1:b6:46:7e:1c:89:a3: 4f:c3:ee:4c:ae:80:da:f0:2e:43:d5:17:e3:64:f5:14:7b:0a: cd:83:1a:37:90:fe:07:3a:df:9e:31:38:80:82:65:35:8b:37: 06:1a:fd:9a:78:9c:bb:ce:4a:32:f4:99:b3:84:04:b2:50:07: 90:b5:77:bd:37:c9:5a:31:1f:2b:65:28:c1:34:9c:2d:d7:32: f7:9d:1d:ca:34:56:53:cd:61:12:2e:3f:29:74:72:55:a2:7c: f6:08:ee:6e:6c:63:54:b0:96:e2:e3:e4:1f:f3:9a:eb:49:1b: 57:7e:45:b2:b7:3b:7e:5f:94:cd:86:b0:c7:04:73:7c:bf:1d: 80:fa:db:62:9b:55:d1:89:97:63:73:7c:07:9a:98:e5:5f:b9: 70:99:71:c3:28:75:e1:8c:ec:6a:d2:bc:f8:c4:bf:82:8c:5a: b2:85:53:6f:e2:bb:1b:9f:c4:2d:a8:f6:92:7d:76:ec:49:98: a1:7b:a6:3f:20:b8:e5:8d:9f:07:d1:ce:01:1d:3b:c6:84:dd: b0:46:8b:4e:84:0d:f2:ea:9f:9c:9f:6a:b4:e3:d8:7a:98:d2: a9:b1:11:f7:f2:55:26:9c:28:91:74:b2:6d:24:83:f0:cf:35: a8:66:61:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2oulsFLjMl6NpU5ltXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0 YWQ4YjMwHhcNMjUxMjIwMTYwMjIxWhcNMjUxMjIxMTYwMjIxWjAzMTEwLwYDVQQD Eyg4ZDU5Y2VlMGYzZGIwNmJlZDVhZDJiZWM2NjY0Njg1NzNlZWEwNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnseNrHBAxjEGxdFTSr3t+5CCxHug ejXb8JAbn3flX2FrKYckTerS6R+xdieEfd+txkSS7z2feJxG+pmDhUeirSPN/n2q rFYSX/7qtIhAfgNPhgK+gnABqonwvsMGIy3YOlVw+mqYZbv4TdtDmHk/tPtHdjD5 nlZTncFRjgQbmn2c741kGR0Mm+uqDGAPf4JEAyxDhDv7uYvFnJQUvAVfoz6xmx0i gRBE1ibeyhaN+oFXcNWd/iNTXsda86sYkV3xdmI6AKxk6+OeFRDDJn/Sn4It0KA7 cKZjgXNj39e00rfdfBlaJWrULBcD1EZwwNG6cZ1RGnvOu2BGNM2+L/CoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1ZzuDz2wa+1a0r7GZkaFc+6gWkMB8GA1UdIwQY MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2 LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3tTECXY ky1gpajBtkZ+HImjT8PuTK6A2vAuQ9UX42T1FHsKzYMaN5D+BzrfnjE4gIJlNYs3 Bhr9mnicu85KMvSZs4QEslAHkLV3vTfJWjEfK2UowTScLdcy950dyjRWU81hEi4/ KXRyVaJ89gjubmxjVLCW4uPkH/Oa60kbV35Fsrc7fl+UzYawxwRzfL8dgPrbYptV 0YmXY3N8B5qY5V+5cJlxwyh14YzsatK8+MS/goxasoVTb+K7G5/ELaj2kn127EmY oXumPyC45Y2fB9HOAR07xoTdsEaLToQN8uqfnJ9qtOPYepjSqbER9/JVJpwokXSy bSSD8M81qGZhug== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:50 2025 by rpki-client