This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json) Hash identifier: O0B5uug/n+Fe4pCwgPkmiqni3lSJRtfoQpXFyfYGptg= Subject key identifier: A8:61:4B:79:2A:0A:00:DD:E5:9C:F9:F5:30:B0:DB:61:5E:28:76:67 Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Certificate serial: 019B4B836A54CEF4C06B1F9FAE3FCF26095E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft Manifest number: 04B8 Signing time: Tue 23 Dec 2025 14:01:02 +0000 Manifest this update: Tue 23 Dec 2025 14:01:02 +0000 Manifest next update: Wed 24 Dec 2025 14:01:02 +0000 Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=) 2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: fH45mTvAuunGS3a3i1tM/jISFsuBrrpZ7ULz4pyg5iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:6a:54:ce:f4:c0:6b:1f:9f:ae:3f:cf:26:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Validity Not Before: Dec 23 14:01:02 2025 GMT Not After : Dec 24 14:01:02 2025 GMT Subject: CN=a8614b792a0a00dde59cf9f530b0db615e287667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:82:4a:44:89:af:0f:d3:f3:aa:92:23:bd: 45:52:4b:25:6c:c7:ee:45:0d:79:6d:35:78:f8:56: 06:37:b9:f4:f8:57:a2:30:83:57:e9:44:09:79:76: a9:24:98:48:cf:df:21:7b:5f:08:69:e4:6c:d5:0e: 12:51:84:8b:e1:b7:84:5d:cf:1c:5b:a6:ac:10:25: 96:c9:48:e9:11:1c:da:f0:b9:cb:a9:54:ad:ca:98: 47:08:ec:f9:2a:fd:fe:d2:36:58:bd:13:01:38:88: 40:ee:37:2e:6b:69:21:48:8d:f1:4e:11:87:a3:2e: c1:c0:8e:7f:29:6b:3a:e6:92:13:29:8b:59:3d:43: 2d:11:0d:1c:b3:24:66:d2:1a:45:41:4a:c1:95:56: a7:4e:02:f5:b9:69:3a:71:7a:3f:b0:3f:6e:dc:88: 0e:a4:cf:d2:93:54:d7:4b:83:ff:0f:d2:cc:93:4d: 57:3c:25:fc:e7:c0:23:d5:21:01:48:26:50:62:35: 43:7d:47:ba:9b:01:74:f6:5a:e6:17:7d:60:64:6e: 12:cf:6c:f8:4a:c3:48:55:29:fd:67:d0:21:1b:14: 4c:fb:3f:a4:13:14:8b:50:04:50:90:ef:ff:fc:8f: 1f:ec:2a:0b:68:0b:30:26:d8:b8:58:ff:1f:a5:15: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:61:4B:79:2A:0A:00:DD:E5:9C:F9:F5:30:B0:DB:61:5E:28:76:67 X509v3 Authority Key Identifier: keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:26:9c:2f:00:15:d4:13:a4:e8:5b:68:e1:b0:1d:39:d1:37: 68:3f:dd:e7:d2:44:a8:52:c9:48:45:75:3c:b9:90:f4:c8:ea: 33:ff:3c:a3:e7:85:85:94:fb:d9:35:f1:ed:e8:ab:51:87:54: 58:1d:2e:9e:52:81:81:be:b9:cb:be:a0:4a:11:24:62:93:f1: fa:3c:e9:72:49:ad:81:6a:b2:ce:35:21:ba:d2:60:42:7e:de: 01:e2:cf:a3:fe:dc:73:32:90:06:43:99:3f:dc:ee:93:a2:01: e1:17:df:b6:a4:58:9f:e9:71:6b:a1:d4:76:8a:e1:47:18:d8: 4a:18:63:c0:f4:7f:9d:75:20:00:d9:68:7f:db:06:94:c0:8a: a8:26:98:4c:ad:2f:8d:97:41:04:8f:05:e2:83:0a:db:57:0c: ee:40:8a:1c:15:8c:db:ea:21:2e:e3:22:da:6c:68:e4:10:94: 90:57:b2:da:6f:e8:24:80:9b:25:92:f3:8f:25:f3:47:ee:49: b3:06:a1:f7:89:a5:27:3e:54:71:e9:05:00:98:93:e8:ba:d5: 87:4c:b0:07:52:b4:3f:f6:ec:fb:ae:5e:5d:6b:bc:b7:8b:da: 00:33:4d:3b:46:9c:b5:c1:b1:3c:0f:15:f8:9e:7e:e0:00:c3: 5a:9c:2c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg2pUzvTAax+frj/PJgleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl MWQxNmIwHhcNMjUxMjIzMTQwMTAyWhcNMjUxMjI0MTQwMTAyWjAzMTEwLwYDVQQD EyhhODYxNGI3OTJhMGEwMGRkZTU5Y2Y5ZjUzMGIwZGI2MTVlMjg3NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZyCSkSJrw/T86qSI71FUkslbMfu RQ15bTV4+FYGN7n0+FeiMINX6UQJeXapJJhIz98he18IaeRs1Q4SUYSL4beEXc8c W6asECWWyUjpERza8LnLqVStyphHCOz5Kv3+0jZYvRMBOIhA7jcua2khSI3xThGH oy7BwI5/KWs65pITKYtZPUMtEQ0csyRm0hpFQUrBlVanTgL1uWk6cXo/sD9u3IgO pM/Sk1TXS4P/D9LMk01XPCX858Aj1SEBSCZQYjVDfUe6mwF09lrmF31gZG4Sz2z4 SsNIVSn9Z9AhGxRM+z+kExSLUARQkO///I8f7CoLaAswJti4WP8fpRX/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhhS3kqCgDd5Zz59TCw22FeKHZnMB8GA1UdIwQY MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyacLwAV 1BOk6Fto4bAdOdE3aD/d59JEqFLJSEV1PLmQ9MjqM/88o+eFhZT72TXx7eirUYdU WB0unlKBgb65y76gShEkYpPx+jzpckmtgWqyzjUhutJgQn7eAeLPo/7cczKQBkOZ P9zuk6IB4RfftqRYn+lxa6HUdorhRxjYShhjwPR/nXUgANlof9sGlMCKqCaYTK0v jZdBBI8F4oMK21cM7kCKHBWM2+ohLuMi2mxo5BCUkFey2m/oJICbJZLzjyXzR+5J swah94mlJz5UcekFAJiT6LrVh0ywB1K0P/bs+65eXWu8t4vaADNNO0actcGxPA8V +J5+4ADDWpwsWg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:10 2025 by rpki-client