This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json) Hash identifier: Z1rTw0wlIsTocsDcm2MUusGOvheSWNCYYxQ573L9Pjs= Subject key identifier: FF:0A:C8:53:55:AD:FD:BB:9F:E2:85:88:84:49:CA:6B:22:20:02:9C Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70 Certificate serial: 019B3DC74F1E68398CE5D8F6C2FF9970E5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft Manifest number: 1340 Signing time: Sat 20 Dec 2025 22:00:30 +0000 Manifest this update: Sat 20 Dec 2025 22:00:30 +0000 Manifest next update: Sun 21 Dec 2025 22:00:30 +0000 Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=) 2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: tVFnHRaGyzhyb3NdWKUUz7liVVD67THgeTElZr63+NA=) 3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:4f:1e:68:39:8c:e5:d8:f6:c2:ff:99:70:e5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70 Validity Not Before: Dec 20 22:00:30 2025 GMT Not After : Dec 21 22:00:30 2025 GMT Subject: CN=ff0ac85355adfdbb9fe285888449ca6b2220029c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:1c:4c:82:bc:f7:3e:e7:a2:0d:7e:48:d7: f8:c6:e9:de:96:b9:53:3d:21:26:08:dd:5c:de:30: 16:2d:d4:99:fa:2b:2b:a2:90:dc:df:87:30:28:84: 03:a9:d5:7d:39:e5:44:5d:e8:62:0e:fe:7d:27:74: 4f:07:86:f9:be:4e:c4:fe:93:46:dd:a7:0e:3c:3e: aa:91:38:a5:ad:51:61:62:3a:9d:10:6e:38:bf:bf: 7e:d7:e6:21:7a:d2:02:25:4a:47:07:1d:f0:be:c5: 4d:54:8b:7a:af:d3:81:bb:40:89:43:1d:1d:31:46: b5:77:d4:46:2e:cb:1e:82:28:4f:1c:33:38:be:3d: f1:d7:90:58:96:2e:9a:7e:07:69:f1:80:31:1b:76: f3:f5:cc:74:31:7e:9e:8c:c1:e2:7e:5a:f2:f2:f7: 73:8e:20:33:b8:da:b6:60:df:5a:f5:10:01:80:99: c3:68:a0:d1:7b:6f:1a:4b:06:2b:e1:db:3e:fb:8b: 99:9f:c0:23:b9:0c:99:71:13:e3:37:91:92:35:16: 86:08:8a:f7:d3:46:e9:04:e1:72:3a:34:a4:53:32: d9:c0:a4:7c:d4:b6:cd:fb:2a:07:e7:4c:2f:33:02: e1:aa:34:86:df:83:60:30:6f:08:0b:d5:4c:e2:2b: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:C8:53:55:AD:FD:BB:9F:E2:85:88:84:49:CA:6B:22:20:02:9C X509v3 Authority Key Identifier: keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:95:66:da:2e:b4:b9:ee:cf:76:60:00:f9:b5:5f:ed:78:cf: 4a:27:14:8a:d2:46:7a:87:11:cb:f7:13:26:d8:19:f5:75:7b: 6b:64:cc:ca:3d:24:a1:67:6e:f7:24:26:99:91:88:36:5e:6a: 39:8e:01:b4:62:86:6a:fc:89:41:8a:4c:16:20:60:43:5c:27: c1:f8:7a:e8:bd:8d:44:00:78:44:4f:9d:b7:60:cc:0a:8a:e6: 32:8e:b2:d6:10:ae:57:63:ca:0c:fc:6b:f1:cb:f8:2b:19:b7: 12:4a:c3:fa:a4:de:0d:6a:03:50:9e:a7:cb:0f:6b:91:79:4f: 3f:45:6f:0a:98:9a:55:ad:58:fb:4c:c9:82:8c:15:e0:01:a0: da:80:71:58:32:61:7a:31:a8:96:fe:51:bd:b8:a1:60:0c:83: 90:87:a0:99:ca:2b:d6:27:25:4b:98:cd:c7:94:3c:02:3f:7b: 7a:52:01:d3:2b:13:47:a1:dc:17:e8:b9:e9:b7:ec:f9:57:d3: 24:4a:00:df:3c:e6:4e:8a:97:5b:b9:ed:7d:d6:51:a0:7e:04: 37:10:e3:d5:a1:ac:c5:63:66:34:09:37:bb:4f:1f:10:f4:06: f2:55:94:64:7b:8a:d8:f8:62:c7:aa:1c:5d:fd:36:2e:86:48: 51:46:f7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x08eaDmM5dj2wv+ZcOX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw MWRmNzAwHhcNMjUxMjIwMjIwMDMwWhcNMjUxMjIxMjIwMDMwWjAzMTEwLwYDVQQD EyhmZjBhYzg1MzU1YWRmZGJiOWZlMjg1ODg4NDQ5Y2E2YjIyMjAwMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i8cTIK89z7nog1+SNf4xunelrlT PSEmCN1c3jAWLdSZ+isropDc34cwKIQDqdV9OeVEXehiDv59J3RPB4b5vk7E/pNG 3acOPD6qkTilrVFhYjqdEG44v79+1+YhetICJUpHBx3wvsVNVIt6r9OBu0CJQx0d MUa1d9RGLssegihPHDM4vj3x15BYli6afgdp8YAxG3bz9cx0MX6ejMHiflry8vdz jiAzuNq2YN9a9RABgJnDaKDRe28aSwYr4ds++4uZn8AjuQyZcRPjN5GSNRaGCIr3 00bpBOFyOjSkUzLZwKR81LbN+yoH50wvMwLhqjSG34NgMG8IC9VM4ivveQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8KyFNVrf27n+KFiIRJymsiIAKcMB8GA1UdIwQY MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5 LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpVm2i60 ue7PdmAA+bVf7XjPSicUitJGeocRy/cTJtgZ9XV7a2TMyj0koWdu9yQmmZGINl5q OY4BtGKGavyJQYpMFiBgQ1wnwfh66L2NRAB4RE+dt2DMCormMo6y1hCuV2PKDPxr 8cv4Kxm3EkrD+qTeDWoDUJ6nyw9rkXlPP0VvCpiaVa1Y+0zJgowV4AGg2oBxWDJh ejGolv5RvbihYAyDkIegmcor1iclS5jNx5Q8Aj97elIB0ysTR6HcF+i56bfs+VfT JEoA3zzmToqXW7ntfdZRoH4ENxDj1aGsxWNmNAk3u08fEPQG8lWUZHuK2Phix6oc Xf02LoZIUUb31w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:57 2025 by rpki-client