This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json) Hash identifier: D+3V/QzGfL4Aoh91nEPfTVKfXcI5tHBQnFoww2W9F2o= Subject key identifier: AD:F1:23:F0:A0:49:77:A4:95:1A:7B:96:FC:0F:11:51:02:68:12:75 Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c Certificate serial: 019B4D3A7F8C94B91E2D77E7BD187B5A8227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft Manifest number: 116C Signing time: Tue 23 Dec 2025 22:00:37 +0000 Manifest this update: Tue 23 Dec 2025 22:00:37 +0000 Manifest next update: Wed 24 Dec 2025 22:00:37 +0000 Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=) 2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: t4eAWD4fSXXi38r/yxyUAlxI8HSkcW2D4EPpdM5cJtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:7f:8c:94:b9:1e:2d:77:e7:bd:18:7b:5a:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c Validity Not Before: Dec 23 22:00:37 2025 GMT Not After : Dec 24 22:00:37 2025 GMT Subject: CN=adf123f0a04977a4951a7b96fc0f115102681275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:0b:ae:16:ce:84:37:02:89:9c:b1:61:b3: c1:03:ba:98:b7:9a:a0:b9:96:fd:1b:6b:af:07:9f: 4a:4e:75:b8:07:91:66:bb:ca:34:c1:59:c4:39:b6: 0b:20:e6:e3:05:80:cd:92:8d:10:58:08:e7:17:a4: a0:ac:0d:95:9e:ad:e7:3c:59:f8:57:e8:68:98:10: 15:89:2e:d0:8b:73:88:9e:56:0d:90:74:8d:d4:03: 06:74:f0:35:20:45:40:76:8c:bf:36:d4:02:45:f8: 4a:c7:a5:4e:0e:90:85:56:0d:8a:14:90:a6:cc:b6: 17:ba:1c:df:bb:19:fb:16:88:6f:28:7d:25:e1:da: 98:31:af:08:d8:4f:d6:12:10:b2:d8:7f:16:ae:6f: 7b:08:80:99:2a:6a:32:fb:a8:1c:d4:81:95:73:19: 29:8f:97:1b:ee:30:59:b6:33:2f:38:7e:5f:e6:4a: ba:d8:97:cb:31:40:dd:94:68:e2:b3:98:13:89:01: d4:01:28:d3:12:30:fd:b5:17:69:2e:6c:da:8a:a2: f6:42:5b:bc:7e:9b:c8:46:a8:a9:1e:36:e3:2f:ed: 0d:12:f3:7c:1e:e4:4f:1c:62:79:44:e5:13:7e:d4: 49:a0:cf:57:95:41:59:de:86:86:8c:c3:74:91:a5: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F1:23:F0:A0:49:77:A4:95:1A:7B:96:FC:0F:11:51:02:68:12:75 X509v3 Authority Key Identifier: keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:13:fe:80:83:a3:d8:c1:bd:5e:55:ff:b6:9d:29:30:4e:23: 78:ca:fa:78:44:60:ab:58:2c:b4:e3:87:28:1e:e1:1c:0b:a4: b0:a7:d0:1f:9e:28:32:3f:76:d7:35:43:ee:93:8f:b8:4e:24: 34:da:9e:71:ab:0b:2b:fb:b7:a1:7d:5a:25:0c:67:33:44:54: aa:c1:f4:0d:b2:9d:98:61:70:63:81:2a:95:ae:69:b1:8a:af: 40:72:78:cb:81:88:19:6f:7c:bd:a1:7b:20:ce:ea:56:f8:bd: 7c:5c:15:de:28:9c:43:8e:76:e9:c7:7e:57:91:50:d3:c5:4b: 55:d8:d6:83:f1:ea:37:a7:58:50:13:c6:a9:78:76:6e:45:a4: e8:e4:04:8d:70:1f:9b:66:9d:dc:d7:92:fe:cc:40:ec:4c:49: 8b:ac:f1:5f:c2:81:54:8e:e9:3b:4a:7b:58:d4:96:14:eb:87: 1f:a5:dd:b5:ad:14:c4:e9:17:4c:ec:d1:3c:3a:cf:54:8a:52: 05:48:47:5c:ed:e4:44:e7:18:98:25:2e:2c:3a:b8:26:37:30: 2a:47:5f:91:c7:08:00:c9:c0:99:8b:da:3e:41:80:64:56:de: 73:08:e1:7c:1c:af:f1:6c:98:90:a0:86:bb:22:e2:63:51:18: 4a:09:cc:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOn+MlLkeLXfnvRh7WoInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzNhODZiYmM1YzJiYWI0NTJmZjAzZjQ1YTllYWYwYTYx MGM0MGMwHhcNMjUxMjIzMjIwMDM3WhcNMjUxMjI0MjIwMDM3WjAzMTEwLwYDVQQD EyhhZGYxMjNmMGEwNDk3N2E0OTUxYTdiOTZmYzBmMTE1MTAyNjgxMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjULrhbOhDcCiZyxYbPBA7qYt5qg uZb9G2uvB59KTnW4B5Fmu8o0wVnEObYLIObjBYDNko0QWAjnF6SgrA2Vnq3nPFn4 V+homBAViS7Qi3OInlYNkHSN1AMGdPA1IEVAdoy/NtQCRfhKx6VODpCFVg2KFJCm zLYXuhzfuxn7FohvKH0l4dqYMa8I2E/WEhCy2H8Wrm97CICZKmoy+6gc1IGVcxkp j5cb7jBZtjMvOH5f5kq62JfLMUDdlGjis5gTiQHUASjTEjD9tRdpLmzaiqL2Qlu8 fpvIRqipHjbjL+0NEvN8HuRPHGJ5ROUTftRJoM9XlUFZ3oaGjMN0kaVmiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3xI/CgSXeklRp7lvwPEVECaBJ1MB8GA1UdIwQY MBaAFCQzqGu8XCurRS/wP0Wp6vCmEMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDkt MDViNmM5YzE2NDQxLzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDktMDViNmM5YzE2NDQx LzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBP+gIOj 2MG9XlX/tp0pME4jeMr6eERgq1gstOOHKB7hHAuksKfQH54oMj921zVD7pOPuE4k NNqecasLK/u3oX1aJQxnM0RUqsH0DbKdmGFwY4Eqla5psYqvQHJ4y4GIGW98vaF7 IM7qVvi9fFwV3iicQ4526cd+V5FQ08VLVdjWg/HqN6dYUBPGqXh2bkWk6OQEjXAf m2ad3NeS/sxA7ExJi6zxX8KBVI7pO0p7WNSWFOuHH6Xdta0UxOkXTOzRPDrPVIpS BUhHXO3kROcYmCUuLDq4JjcwKkdfkccIAMnAmYvaPkGAZFbecwjhfByv8WyYkKCG uyLiY1EYSgnMdA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:02 2025 by rpki-client