This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json) Hash identifier: Yw9QQmHmE3+bc4sK90J1CZbTwUI3JCqAgV3u4JETaos= Subject key identifier: 22:5B:F6:7F:EC:62:C3:54:E0:E3:DF:7F:9F:0A:1E:E0:F5:62:34:CE Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Certificate serial: 019B55CFC7DF44BAE540727792185E94287F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 14:00:39 +0000 Manifest this update: Thu 25 Dec 2025 14:00:39 +0000 Manifest next update: Fri 26 Dec 2025 14:00:39 +0000 Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: +chUblcY5iMMHiNUWaIV67DZnC4IUZtaSe3r2BVWUTI=) 2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:c7:df:44:ba:e5:40:72:77:92:18:5e:94:28:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Dec 26 14:00:39 2025 GMT Subject: CN=225bf67fec62c354e0e3df7f9f0a1ee0f56234ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:af:d4:48:9b:2b:a9:6c:fa:1e:68:8a:73: ce:42:8a:07:ab:18:1b:cd:3b:3a:44:cf:95:b9:d1: 7f:e7:20:53:22:74:55:8c:92:3a:49:b9:78:d7:91: 15:b4:12:2d:cb:c6:b8:67:1c:f3:01:d5:38:50:62: f5:eb:b2:b5:0c:5e:8d:05:ab:3d:5b:36:b0:fe:3b: 71:71:a4:ab:f2:1b:44:c2:f6:f1:73:77:05:2c:a6: a8:37:7e:ea:c5:86:98:0e:0c:7a:b2:a4:2d:88:fe: 95:51:0f:e7:9f:ab:d0:8b:d2:5e:27:be:b0:d3:95: 25:1c:c1:29:40:e5:a3:17:aa:7f:53:b5:9c:a7:75: 5a:be:f7:c1:a8:0f:c6:72:a1:5a:15:22:e1:2b:4c: 1c:38:9c:0d:26:f9:be:65:e2:3e:2c:f4:44:09:b7: f0:56:39:38:07:cb:c1:48:1b:74:9c:b9:d3:13:16: df:c3:ab:78:65:1f:0f:45:18:50:96:ce:57:46:ab: 59:27:a6:61:43:0e:dd:94:73:80:6a:48:88:b5:05: 9e:83:57:2b:21:da:a6:85:d1:1c:1e:9c:21:e6:06: ff:77:5d:f3:a3:fc:b6:e7:41:b1:3b:16:11:1e:eb: d2:73:42:07:a9:b5:1b:44:f6:4a:13:4b:16:07:60: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:F6:7F:EC:62:C3:54:E0:E3:DF:7F:9F:0A:1E:E0:F5:62:34:CE X509v3 Authority Key Identifier: keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bf:ee:ea:a7:11:f2:ff:0e:1a:ca:38:2b:e5:14:ae:86:fb: 13:10:3b:6c:08:4f:17:45:99:fe:93:7b:34:cc:87:0c:ac:74: c4:09:20:12:7d:cd:a6:3b:2d:e5:eb:eb:7f:b5:84:4c:91:b8: dc:e1:a4:59:82:e6:92:38:c4:a6:29:e4:40:1b:60:eb:2d:7e: f2:87:68:58:ea:24:54:52:d9:85:bb:58:c0:51:87:ae:bf:30: b9:c9:af:82:9c:35:d6:b6:44:6b:84:73:e1:d3:3e:4b:f7:16: 91:70:b0:72:5e:28:50:0d:f6:f1:4d:3b:3b:c9:70:73:b9:ee: 21:01:82:6f:f4:c6:6c:2f:4c:48:f4:fe:00:bf:2e:03:b2:cc: fc:6e:9a:fe:17:40:b9:34:03:9f:5a:36:87:53:7c:a8:68:6b: 0a:5a:dc:6c:82:ce:67:21:fb:06:f2:96:0f:11:75:24:a2:7b: 9b:3d:1d:cb:7b:9c:62:f9:eb:3e:5c:98:76:c7:bc:b0:f0:37: e0:43:75:2e:16:75:d0:1d:8e:7e:e3:5a:5c:37:71:11:c2:01: 98:7c:35:ee:43:ff:ac:80:2c:74:df:6e:18:4b:f8:84:b8:fb: 6d:7c:76:dc:7d:4d:db:02:bf:63:09:fd:bc:23:b6:80:2d:b6: f7:ef:44:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz8ffRLrlQHJ3khhelCh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj ZTNmYTkwHhcNMjUxMjI1MTQwMDM5WhcNMjUxMjI2MTQwMDM5WjAzMTEwLwYDVQQD EygyMjViZjY3ZmVjNjJjMzU0ZTBlM2RmN2Y5ZjBhMWVlMGY1NjIzNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9iv1EibK6ls+h5oinPOQooHqxgb zTs6RM+VudF/5yBTInRVjJI6Sbl415EVtBIty8a4ZxzzAdU4UGL167K1DF6NBas9 Wzaw/jtxcaSr8htEwvbxc3cFLKaoN37qxYaYDgx6sqQtiP6VUQ/nn6vQi9JeJ76w 05UlHMEpQOWjF6p/U7Wcp3VavvfBqA/GcqFaFSLhK0wcOJwNJvm+ZeI+LPRECbfw Vjk4B8vBSBt0nLnTExbfw6t4ZR8PRRhQls5XRqtZJ6ZhQw7dlHOAakiItQWeg1cr IdqmhdEcHpwh5gb/d13zo/y250GxOxYRHuvSc0IHqbUbRPZKE0sWB2AzYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJb9n/sYsNU4OPff58KHuD1YjTOMB8GA1UdIwQY MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt MzI5Y2I1MTZkOTM3LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3 LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr/u6qcR 8v8OGso4K+UUrob7ExA7bAhPF0WZ/pN7NMyHDKx0xAkgEn3Npjst5evrf7WETJG4 3OGkWYLmkjjEpinkQBtg6y1+8odoWOokVFLZhbtYwFGHrr8wucmvgpw11rZEa4Rz 4dM+S/cWkXCwcl4oUA328U07O8lwc7nuIQGCb/TGbC9MSPT+AL8uA7LM/G6a/hdA uTQDn1o2h1N8qGhrClrcbILOZyH7BvKWDxF1JKJ7mz0dy3ucYvnrPlyYdse8sPA3 4EN1LhZ10B2OfuNaXDdxEcIBmHw17kP/rIAsdN9uGEv4hLj7bXx23H1N2wK/Ywn9 vCO2gC229+9EpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:14:07 2025 by rpki-client