This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json) Hash identifier: jfH7lgGqhVZ9OKY3L9t8SJc+BENSANppz9lGw0WkRK4= Subject key identifier: 1D:0F:03:CC:12:AA:0E:D2:C0:CB:A6:B2:D1:F0:A4:7B:AF:4D:83:75 Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Certificate serial: 019B405BCDD1FEFAD9BFDAAD1D64743D6A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:01:56 +0000 Manifest this update: Sun 21 Dec 2025 10:01:56 +0000 Manifest next update: Mon 22 Dec 2025 10:01:56 +0000 Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=) 2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: gwJMJkvp1jofTI2rDHY+NLViOPwSdUT9O0ChTL2IFJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:cd:d1:fe:fa:d9:bf:da:ad:1d:64:74:3d:6a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829 Validity Not Before: Dec 21 10:01:56 2025 GMT Not After : Dec 22 10:01:56 2025 GMT Subject: CN=1d0f03cc12aa0ed2c0cba6b2d1f0a47baf4d8375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:75:e1:4a:1b:5e:a0:9b:b1:87:7d:fe:40: 15:97:d1:7a:79:c4:8f:24:b6:8f:b4:a5:34:ed:06: a2:88:3b:50:0d:53:13:37:b7:1f:8e:8c:c2:5d:33: 8a:9c:68:53:d5:cd:ec:57:f5:e8:08:11:4d:3d:27: 01:c8:d3:0e:84:49:fa:95:47:a9:cf:d5:03:56:86: 70:c8:09:4a:ea:be:df:32:8d:8b:82:d6:17:e9:ba: 85:95:45:04:aa:a3:8f:2e:b9:75:e0:b8:59:2f:ec: 90:76:c8:a1:e4:e3:1a:21:5c:cb:60:28:aa:78:8f: 33:3b:9e:48:d1:7a:43:92:58:e9:1b:dc:cf:65:f6: b1:0d:1d:9c:4f:c0:67:9e:1b:80:29:e9:2d:1c:59: eb:9a:4c:7f:22:e6:20:6f:73:d5:d5:cb:18:84:be: ba:59:88:6b:a8:1e:44:6a:61:50:5f:e0:35:7a:f0: 0a:90:03:9a:3c:f3:ce:0e:0d:78:89:f5:cb:22:f5: 7d:a0:16:66:b5:f7:5a:bc:76:3f:af:3f:f1:b7:65: e8:a0:cd:ef:f1:1e:f2:f4:f6:ab:48:f7:61:94:ea: 97:11:ed:d3:be:66:f1:69:6c:2f:1c:bf:cb:5b:2b: 60:1e:bf:1e:c9:4b:86:bd:70:18:13:14:4a:70:d4: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:03:CC:12:AA:0E:D2:C0:CB:A6:B2:D1:F0:A4:7B:AF:4D:83:75 X509v3 Authority Key Identifier: keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ab:65:32:f8:35:43:3e:f4:f1:6c:ad:8f:cc:cb:ac:a3:cd: 7c:b3:24:5b:74:05:32:57:ce:33:a0:1c:c5:79:02:4f:a7:7f: b3:2b:e0:b9:9f:aa:ab:8f:98:55:cd:dd:aa:ce:2a:d5:c6:ec: 61:0e:ba:57:6a:5a:75:0a:08:bb:e8:0e:9f:73:74:a9:2d:9b: dd:26:81:56:2e:47:6b:e3:54:40:0e:0a:ec:3f:9e:00:e6:7e: 1b:02:02:8e:ff:e4:32:bf:f3:2e:bd:bb:11:d7:9e:16:2a:53: 61:86:fb:08:78:a5:5b:2e:51:52:3f:48:5f:ec:c5:d0:a3:11: 7d:1c:65:86:a0:f4:b7:b6:79:78:00:13:5d:5f:9b:b3:24:57: eb:24:da:ba:16:bc:96:69:e7:6e:ba:7f:d8:60:1a:1a:4b:09: 5e:2d:cf:76:8d:72:ee:c6:e5:a8:ae:35:ed:71:b9:71:38:47: b9:0c:a8:a5:83:82:bc:81:93:26:a8:d4:53:3a:ac:cd:98:5f: a5:28:bb:b3:e2:5c:04:85:7c:f4:72:e6:e3:50:2e:7f:40:27: 30:c2:ba:cb:a2:c9:64:64:66:fa:8f:19:88:50:13:87:28:2c: 4f:e6:6d:8a:dd:9a:97:5b:3a:f9:4a:06:5d:ab:59:a2:1b:7a: a7:39:2e:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW83R/vrZv9qtHWR0PWqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz MjA4MjkwHhcNMjUxMjIxMTAwMTU2WhcNMjUxMjIyMTAwMTU2WjAzMTEwLwYDVQQD EygxZDBmMDNjYzEyYWEwZWQyYzBjYmE2YjJkMWYwYTQ3YmFmNGQ4Mzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQF14UobXqCbsYd9/kAVl9F6ecSP JLaPtKU07QaiiDtQDVMTN7cfjozCXTOKnGhT1c3sV/XoCBFNPScByNMOhEn6lUep z9UDVoZwyAlK6r7fMo2LgtYX6bqFlUUEqqOPLrl14LhZL+yQdsih5OMaIVzLYCiq eI8zO55I0XpDkljpG9zPZfaxDR2cT8BnnhuAKektHFnrmkx/IuYgb3PV1csYhL66 WYhrqB5EamFQX+A1evAKkAOaPPPODg14ifXLIvV9oBZmtfdavHY/rz/xt2XooM3v 8R7y9ParSPdhlOqXEe3TvmbxaWwvHL/LWytgHr8eyUuGvXAYExRKcNQ4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0PA8wSqg7SwMumstHwpHuvTYN1MB8GA1UdIwQY MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0 LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqtlMvg1 Qz708Wytj8zLrKPNfLMkW3QFMlfOM6AcxXkCT6d/syvguZ+qq4+YVc3dqs4q1cbs YQ66V2padQoIu+gOn3N0qS2b3SaBVi5Ha+NUQA4K7D+eAOZ+GwICjv/kMr/zLr27 EdeeFipTYYb7CHilWy5RUj9IX+zF0KMRfRxlhqD0t7Z5eAATXV+bsyRX6yTauha8 lmnnbrp/2GAaGksJXi3Pdo1y7sblqK417XG5cThHuQyopYOCvIGTJqjUUzqszZhf pSi7s+JcBIV89HLm41Auf0AnMMK6y6LJZGRm+o8ZiFAThygsT+Ztit2al1s6+UoG XatZoht6pzkuHA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:59:17 2025 by rpki-client