This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json) Hash identifier: 8fOY3Ng8ZxYERdDPeWouFLzKxrug91qXkcXC9kWUx6Q= Subject key identifier: E4:30:34:1E:C4:DC:F3:4C:10:88:8F:6A:A9:88:78:24:7C:7C:85:74 Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Certificate serial: 019B47A643789E548701032EB6CAE65B165F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft Manifest number: 154B Signing time: Mon 22 Dec 2025 20:00:37 +0000 Manifest this update: Mon 22 Dec 2025 20:00:37 +0000 Manifest next update: Tue 23 Dec 2025 20:00:37 +0000 Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=) 2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=) 3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: g6gXUmM1hOLOce0yYdY+JkD+8jTowYAMLxMYqZSL2+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:43:78:9e:54:87:01:03:2e:b6:ca:e6:5b:16:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Validity Not Before: Dec 22 20:00:37 2025 GMT Not After : Dec 23 20:00:37 2025 GMT Subject: CN=e430341ec4dcf34c10888f6aa98878247c7c8574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:a4:4a:dd:8f:fc:a2:d0:51:45:b0:7c:c7: 0c:a5:ac:0c:d7:e1:d4:48:7f:e1:4c:da:26:cd:9b: 75:89:c4:62:1a:7d:56:2f:2f:8b:94:f7:b5:2b:19: 0a:e5:29:4c:2c:42:32:2d:e5:93:1f:82:0b:5e:44: ba:cd:5d:b2:fa:53:4c:e8:da:4a:99:a1:2f:fd:0c: f1:0f:38:ea:f8:51:da:4a:ad:56:47:7f:4a:17:6e: da:d0:06:da:74:33:1b:c1:df:6f:4d:10:94:b0:ff: e4:87:33:00:51:a2:a9:99:7a:4f:bc:8c:99:22:c5: 48:35:05:b6:25:93:23:7b:63:a8:55:15:d5:81:e2: 11:85:c6:17:a2:3f:5b:e8:5a:79:c9:e5:0d:dc:c1: e8:5f:ed:2f:27:30:ad:19:15:98:dc:51:42:69:8e: e4:d4:9c:3b:ac:01:d6:48:a3:e3:f8:77:c4:6a:67: f9:99:24:9a:ab:c0:13:27:c8:52:d0:23:ba:53:e0: d4:54:84:fd:35:e6:13:62:63:37:8a:1e:89:23:eb: c7:16:52:74:d5:55:0f:6b:79:c1:ec:48:18:7e:47: 17:44:d6:41:a2:ad:10:ef:72:d3:48:a7:ae:7a:e8: 6e:5c:ca:ee:0d:f5:d1:1d:c0:36:7c:2e:48:12:e4: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:34:1E:C4:DC:F3:4C:10:88:8F:6A:A9:88:78:24:7C:7C:85:74 X509v3 Authority Key Identifier: keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:7b:79:89:8b:d0:89:2d:0a:3e:c8:5a:f1:11:94:02:d5: b7:92:8a:a3:44:bc:c7:1c:c8:93:c8:cd:95:eb:83:7a:6e:65: 3c:4d:51:b2:24:13:ad:d5:57:e7:bf:e8:0c:6e:0b:95:c3:80: 48:75:7b:92:23:5a:87:41:e0:5a:e0:3e:21:d8:b8:d0:56:9e: 37:e7:49:fc:ec:84:88:d3:10:cd:76:7a:a7:c4:af:79:ff:73: 3b:24:0c:34:47:77:60:69:0c:e6:86:4c:c3:33:1e:02:57:ec: 79:1b:0a:8c:1d:61:5a:78:f7:1f:e6:e1:b4:6e:9d:aa:7c:62: 85:67:a3:e6:cd:a4:36:6f:cd:b7:b9:76:4f:4c:63:94:9c:a1: b2:ba:ac:da:fd:54:6d:2f:66:42:67:ad:e9:15:a4:82:64:b5: 11:7d:35:04:62:a0:a6:b7:14:9f:71:73:b3:59:67:a2:3e:b2: f9:9e:69:32:58:98:df:bd:5c:6b:b3:95:d9:76:68:dc:0f:d1: a8:a0:76:0a:2a:12:98:94:f3:00:64:98:dd:63:b0:df:a3:92: 28:24:e8:29:32:2f:6a:6a:95:5a:3d:f0:65:35:77:80:17:06: 2a:e3:36:83:9f:5a:bb:49:ab:7e:e5:16:5d:16:4e:a1:77:25: e6:7f:d3:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpkN4nlSHAQMutsrmWxZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw ZjQ1MWYwHhcNMjUxMjIyMjAwMDM3WhcNMjUxMjIzMjAwMDM3WjAzMTEwLwYDVQQD EyhlNDMwMzQxZWM0ZGNmMzRjMTA4ODhmNmFhOTg4NzgyNDdjN2M4NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUKkSt2P/KLQUUWwfMcMpawM1+HU SH/hTNomzZt1icRiGn1WLy+LlPe1KxkK5SlMLEIyLeWTH4ILXkS6zV2y+lNM6NpK maEv/QzxDzjq+FHaSq1WR39KF27a0AbadDMbwd9vTRCUsP/khzMAUaKpmXpPvIyZ IsVINQW2JZMje2OoVRXVgeIRhcYXoj9b6Fp5yeUN3MHoX+0vJzCtGRWY3FFCaY7k 1Jw7rAHWSKPj+HfEamf5mSSaq8ATJ8hS0CO6U+DUVIT9NeYTYmM3ih6JI+vHFlJ0 1VUPa3nB7EgYfkcXRNZBoq0Q73LTSKeueuhuXMruDfXRHcA2fC5IEuSBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQwNB7E3PNMEIiPaqmIeCR8fIV0MB8GA1UdIwQY MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1 LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFx7eYmL 0IktCj7IWvERlALVt5KKo0S8xxzIk8jNleuDem5lPE1RsiQTrdVX57/oDG4LlcOA SHV7kiNah0HgWuA+Idi40FaeN+dJ/OyEiNMQzXZ6p8Svef9zOyQMNEd3YGkM5oZM wzMeAlfseRsKjB1hWnj3H+bhtG6dqnxihWej5s2kNm/Nt7l2T0xjlJyhsrqs2v1U bS9mQmet6RWkgmS1EX01BGKgprcUn3Fzs1lnoj6y+Z5pMliY371ca7OV2XZo3A/R qKB2CioSmJTzAGSY3WOw36OSKCToKTIvamqVWj3wZTV3gBcGKuM2g59au0mrfuUW XRZOoXcl5n/TMw== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:29 2025 by rpki-client