This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json) Hash identifier: zI0ZES48y1lW8WqjOoUs7V3YicbFD4xwk7GPiGsLbcs= Subject key identifier: 03:B8:A2:A3:2F:ED:8F:BD:28:63:A1:39:93:61:E2:D6:DB:1A:41:0E Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452 Certificate serial: 019B424A42F6AABEF0A7938024B031E23FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft Manifest number: 104C Signing time: Sun 21 Dec 2025 19:02:01 +0000 Manifest this update: Sun 21 Dec 2025 19:02:01 +0000 Manifest next update: Mon 22 Dec 2025 19:02:01 +0000 Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=) 2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: 0NrsbgamZd4EYoqLhb6wEZgrAwiQ9eKP/tunKikFmKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:42:f6:aa:be:f0:a7:93:80:24:b0:31:e2:3f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452 Validity Not Before: Dec 21 19:02:01 2025 GMT Not After : Dec 22 19:02:01 2025 GMT Subject: CN=03b8a2a32fed8fbd2863a1399361e2d6db1a410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:01:04:4f:40:d2:77:53:32:df:d1:a7:4a: 9c:d4:6b:96:f6:0f:6e:6c:c7:04:da:82:84:f0:8a: a8:7e:4c:9e:25:62:19:4a:45:6d:3b:4c:8b:ac:a0: 3f:3f:dd:c1:a8:95:19:9f:ed:86:83:e7:c0:f2:fd: 53:13:34:af:93:76:9b:94:39:63:13:e1:f2:dc:12: a6:85:4b:e2:ef:6d:1f:16:a9:9c:b0:2f:65:f0:f8: 78:1d:0f:88:ac:53:1e:ce:b4:07:24:6d:43:89:a4: 96:70:3a:a2:6a:c5:62:a1:15:5c:9c:a3:39:5c:02: 4e:da:9a:80:43:5b:dd:fe:73:1f:71:fd:9d:07:af: f8:9c:e6:2b:6c:ff:e9:cd:e2:90:43:a1:b2:43:7c: d3:97:3a:a2:7b:97:f9:76:04:02:9e:4c:93:df:79: 79:8e:e8:ef:56:07:7f:dc:4b:9b:b9:0c:d1:fe:ad: ad:ec:a9:1e:04:cb:d4:3b:7f:a8:23:76:f9:7c:14: 9f:43:cb:10:89:d3:64:f1:9b:83:04:b4:0c:4c:1a: 66:16:70:1f:d8:d8:ad:d7:a9:6b:ee:0f:af:75:77: c7:74:32:63:c5:d3:b9:76:1d:fa:22:f9:7e:d5:3b: 4c:03:0b:bb:76:df:ed:99:fa:58:a7:e7:42:7c:78: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B8:A2:A3:2F:ED:8F:BD:28:63:A1:39:93:61:E2:D6:DB:1A:41:0E X509v3 Authority Key Identifier: keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:64:04:1e:65:a5:61:b9:91:0f:9c:ad:93:19:bd:54:fa:f6: 60:15:56:7f:ca:84:37:83:4f:53:79:94:3f:0b:85:f5:ff:e3: ac:86:e5:25:d8:60:43:7e:fd:a2:a1:61:3c:d3:fc:d5:c0:f8: 64:a6:f8:3c:db:0f:c7:5a:bc:0b:9b:f2:70:b2:62:7d:dc:38: 21:a6:10:32:e5:39:7f:b5:a3:f7:24:32:10:c5:d6:a6:1e:c1: 36:bf:af:21:d3:89:04:5b:dd:fb:06:40:fb:a7:55:0b:1e:e6: 73:a3:45:35:ad:70:bf:8e:c0:e7:19:c2:8e:f4:69:55:89:31: 0e:f8:91:90:f3:2b:ac:d1:bb:b1:98:b1:5e:39:23:bd:f0:95: eb:c4:2b:1b:6e:bf:f6:16:a1:e1:7f:b6:17:f8:e4:56:d0:a5: f3:02:b2:0c:90:ce:6a:64:65:7a:7d:3a:04:52:c7:b3:2b:17: ea:24:22:8f:d6:b0:fb:4d:d8:d1:36:58:c8:c4:56:75:b3:86: a0:5f:e0:b8:27:68:06:07:03:2e:75:22:f3:0a:df:53:af:75: 02:45:49:8e:b1:f1:b4:16:07:af:df:b4:e4:3a:72:85:3c:a6: c5:45:ec:8f:c3:40:de:c4:fa:ec:b5:a6:05:f4:88:ef:51:25: 93:fd:91:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSkL2qr7wp5OAJLAx4j/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3 NTY0NTIwHhcNMjUxMjIxMTkwMjAxWhcNMjUxMjIyMTkwMjAxWjAzMTEwLwYDVQQD EygwM2I4YTJhMzJmZWQ4ZmJkMjg2M2ExMzk5MzYxZTJkNmRiMWE0MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWYBBE9A0ndTMt/Rp0qc1GuW9g9u bMcE2oKE8IqofkyeJWIZSkVtO0yLrKA/P93BqJUZn+2Gg+fA8v1TEzSvk3ablDlj E+Hy3BKmhUvi720fFqmcsC9l8Ph4HQ+IrFMezrQHJG1DiaSWcDqiasVioRVcnKM5 XAJO2pqAQ1vd/nMfcf2dB6/4nOYrbP/pzeKQQ6GyQ3zTlzqie5f5dgQCnkyT33l5 jujvVgd/3EubuQzR/q2t7KkeBMvUO3+oI3b5fBSfQ8sQidNk8ZuDBLQMTBpmFnAf 2Nit16lr7g+vdXfHdDJjxdO5dh36Ivl+1TtMAwu7dt/tmfpYp+dCfHjC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO4oqMv7Y+9KGOhOZNh4tbbGkEOMB8GA1UdIwQY MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt MGNiMjE4ZTVlNzA3LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3 LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWQEHmWl YbmRD5ytkxm9VPr2YBVWf8qEN4NPU3mUPwuF9f/jrIblJdhgQ379oqFhPNP81cD4 ZKb4PNsPx1q8C5vycLJifdw4IaYQMuU5f7Wj9yQyEMXWph7BNr+vIdOJBFvd+wZA +6dVCx7mc6NFNa1wv47A5xnCjvRpVYkxDviRkPMrrNG7sZixXjkjvfCV68QrG26/ 9hah4X+2F/jkVtCl8wKyDJDOamRlen06BFLHsysX6iQij9aw+03Y0TZYyMRWdbOG oF/guCdoBgcDLnUi8wrfU691AkVJjrHxtBYHr9+05DpyhTymxUXsj8NA3sT67LWm BfSI71Elk/2RmA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:21:10 2025 by rpki-client