This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json) Hash identifier: NvwdpIVjlGS2r8+etm99eymeJBntqcbeEDSW3rTc3A4= Subject key identifier: 37:9A:7C:2C:D7:4E:95:76:88:CF:AD:4F:84:2E:A2:9D:7E:8F:B8:28 Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B5418767F47BF54DE68253D5D39466610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft Manifest number: 087E Signing time: Thu 25 Dec 2025 06:00:47 +0000 Manifest this update: Thu 25 Dec 2025 06:00:47 +0000 Manifest next update: Fri 26 Dec 2025 06:00:47 +0000 Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=) 2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=) 3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=) 4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: jCuagIKrxizwDN8+zlGKaQHIrztw0eMciGzT0KpTIoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:76:7f:47:bf:54:de:68:25:3d:5d:39:46:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Dec 25 06:00:47 2025 GMT Not After : Dec 26 06:00:47 2025 GMT Subject: CN=379a7c2cd74e957688cfad4f842ea29d7e8fb828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:32:23:7c:36:01:a6:d7:07:a5:3a:8c:01: 95:fe:04:9c:83:81:a1:9a:6a:15:14:99:fc:74:4b: a2:e6:e2:c3:07:ab:15:1d:2c:36:f1:00:e3:c8:1c: 05:55:b7:ad:84:fd:1d:5b:ad:54:9a:c9:db:37:79: 2d:e9:95:19:b3:50:7f:8a:f5:06:85:eb:43:1b:67: eb:0d:4c:31:96:99:e7:2b:80:78:3d:a9:de:0f:62: 19:91:31:20:58:25:19:93:50:2f:96:30:b4:b3:30: d5:8b:6b:3d:b8:f5:b5:1e:bf:0e:ad:f8:63:62:c7: ae:a8:b4:ca:2a:d9:42:5c:0f:64:5a:84:5a:85:26: a5:a6:ad:a1:8e:20:db:26:8c:9d:f1:a1:06:09:53: 0e:79:53:41:69:06:67:1e:45:2a:97:17:9e:30:0b: ca:08:d9:e8:be:7c:d9:56:29:dc:3e:b3:f8:62:e5: e3:4a:84:24:33:d2:b6:bb:62:75:79:71:92:3a:31: 66:ff:c1:04:00:30:13:9b:6e:44:7e:9c:a5:db:51: 06:e8:f2:91:a4:7e:10:aa:c9:50:f4:51:ac:08:c4: d7:18:45:c7:44:d7:23:7b:48:a9:a4:e9:cc:0a:85: 26:c3:12:0d:f7:3e:a8:46:2b:39:eb:be:8b:68:82: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9A:7C:2C:D7:4E:95:76:88:CF:AD:4F:84:2E:A2:9D:7E:8F:B8:28 X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:91:32:0e:ea:73:04:19:81:a5:8b:39:41:0c:c7:ff:ef:43: 5a:33:e6:79:ec:62:85:69:95:9c:63:da:ab:15:86:bf:f1:54: 44:d8:3d:43:90:28:b3:79:f5:89:9d:d1:71:70:ad:0a:fa:5f: 65:3a:d3:8b:c5:36:f7:a8:f5:5c:62:dd:92:cf:69:1a:c6:0f: d7:f5:eb:54:2f:4a:06:ff:45:dc:aa:da:4f:43:68:37:10:75: ba:c9:0b:60:dd:30:01:c7:83:2d:e8:21:96:a2:b5:ac:2e:2d: d1:67:cb:c6:10:0f:cc:94:59:e5:87:6a:85:e7:36:8e:60:53: 87:88:ca:a0:3f:6b:0b:de:21:2d:f6:e1:b8:f3:ea:09:9f:16: 52:dc:e4:1b:21:09:0e:7a:a0:68:40:a2:e7:18:e1:b0:58:2a: 6c:0a:c9:5d:ea:09:ea:ba:1b:03:75:eb:7b:52:ec:9d:d3:f2: 56:35:c9:1f:09:af:e8:37:e4:98:63:bb:62:14:46:df:33:f6: 3e:4c:ab:81:d3:63:fe:15:fc:09:cc:e8:51:19:1e:a6:78:85: 5a:36:d0:f7:72:38:99:7b:fb:68:b5:33:2b:5a:9a:04:5d:6e: 7f:95:2d:5c:a1:42:34:94:b7:d4:84:8a:2c:c9:84:e1:5d:1d: 1d:ed:08:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGHZ/R79U3mglPV05RmYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjUxMjI1MDYwMDQ3WhcNMjUxMjI2MDYwMDQ3WjAzMTEwLwYDVQQD EygzNzlhN2MyY2Q3NGU5NTc2ODhjZmFkNGY4NDJlYTI5ZDdlOGZiODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDQyI3w2AabXB6U6jAGV/gScg4Gh mmoVFJn8dEui5uLDB6sVHSw28QDjyBwFVbethP0dW61UmsnbN3kt6ZUZs1B/ivUG hetDG2frDUwxlpnnK4B4PaneD2IZkTEgWCUZk1AvljC0szDVi2s9uPW1Hr8Orfhj YseuqLTKKtlCXA9kWoRahSalpq2hjiDbJoyd8aEGCVMOeVNBaQZnHkUqlxeeMAvK CNnovnzZVincPrP4YuXjSoQkM9K2u2J1eXGSOjFm/8EEADATm25Efpyl21EG6PKR pH4QqslQ9FGsCMTXGEXHRNcje0ippOnMCoUmwxIN9z6oRis5676LaIJCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeafCzXTpV2iM+tT4Quop1+j7goMB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZEyDupz BBmBpYs5QQzH/+9DWjPmeexihWmVnGPaqxWGv/FURNg9Q5Aos3n1iZ3RcXCtCvpf ZTrTi8U296j1XGLdks9pGsYP1/XrVC9KBv9F3KraT0NoNxB1uskLYN0wAceDLegh lqK1rC4t0WfLxhAPzJRZ5Ydqhec2jmBTh4jKoD9rC94hLfbhuPPqCZ8WUtzkGyEJ DnqgaECi5xjhsFgqbArJXeoJ6robA3Xre1LsndPyVjXJHwmv6DfkmGO7YhRG3zP2 PkyrgdNj/hX8CczoURkepniFWjbQ93I4mXv7aLUzK1qaBF1uf5UtXKFCNJS31ISK LMmE4V0dHe0IkA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:56:59 2025 by rpki-client