This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json) Hash identifier: 2BWDWrm7yOAQ9bOe/RyB23/JB3iOyXVgelJb2//rrTo= Subject key identifier: 1E:5C:07:FA:E9:64:01:65:B7:08:0E:0B:3A:1B:CC:3D:E7:8E:13:B2 Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Certificate serial: 019B4994FFE303A9785851F2C01CB6DB80D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft Manifest number: 04B7 Signing time: Tue 23 Dec 2025 05:01:00 +0000 Manifest this update: Tue 23 Dec 2025 05:01:00 +0000 Manifest next update: Wed 24 Dec 2025 05:01:00 +0000 Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=) 2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: evXm7wKVt9YZS4uuyobPBry7i9cJmRm3KST8z3ZOxLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:ff:e3:03:a9:78:58:51:f2:c0:1c:b6:db:80:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b Validity Not Before: Dec 23 05:01:00 2025 GMT Not After : Dec 24 05:01:00 2025 GMT Subject: CN=1e5c07fae9640165b7080e0b3a1bcc3de78e13b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:91:c4:42:44:d4:f1:2d:02:e3:4b:cc:ad: 8a:0d:e7:3a:08:19:f5:7d:3a:2b:c0:07:aa:31:a7: 06:db:82:61:3b:fd:9c:1d:a8:e1:76:9d:02:dc:5c: fd:3d:e5:c7:bc:2b:c2:73:42:fe:93:5b:ca:eb:d2: 25:69:2c:31:db:80:0e:40:6f:da:c0:e9:02:32:f9: a5:af:86:55:9f:98:1c:59:06:38:5b:36:cf:f3:13: 6c:13:ff:b0:3f:48:0f:bf:69:22:6b:77:33:b9:ac: 38:1c:62:fd:ef:fc:4a:9f:d3:bc:aa:69:22:71:f5: 84:60:f4:51:56:4e:30:27:aa:2e:11:9d:57:45:47: a8:73:e4:4f:a9:7b:7d:4f:04:26:c1:cc:e3:19:d8: fa:ce:b4:19:24:07:06:02:6c:97:31:43:7a:4e:e1: e8:1e:cd:de:47:a9:9b:e0:d4:ed:4e:b1:f1:4a:f8: 3d:88:94:c9:50:75:80:69:0e:46:2b:cb:cd:01:c1: bb:1d:eb:a5:d3:7e:0c:61:ab:06:11:95:65:fd:e6: 25:7a:d4:72:33:64:2a:ac:fe:38:b3:79:d9:2b:ef: d4:b5:f4:7d:8a:8f:7d:8e:35:a3:1c:f7:13:f4:15: 87:51:64:bc:ee:da:7a:cd:51:2e:bb:28:63:39:cd: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5C:07:FA:E9:64:01:65:B7:08:0E:0B:3A:1B:CC:3D:E7:8E:13:B2 X509v3 Authority Key Identifier: keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:33:ad:fa:d8:b4:56:5b:00:5e:06:7c:78:96:3b:c9:31: 7b:b6:50:5b:4f:70:d3:8a:ca:72:ed:8f:b9:9b:81:64:9a:8a: c2:26:a6:5c:34:b7:0b:8f:b2:5c:99:ab:2f:51:f5:32:a1:86: 00:92:e0:b4:24:af:b6:aa:c7:78:9b:ff:30:88:1d:ba:ad:32: 54:93:d9:33:3b:92:e9:ff:56:87:e1:ba:42:91:88:69:b2:d1: d9:4a:65:24:4f:fb:e5:96:c2:a1:72:4d:3d:24:96:a3:38:79: a4:9d:a0:78:3a:0c:ba:3a:e7:d0:a6:b3:af:8f:40:84:73:ba: 6c:06:fe:c9:39:1b:8d:0a:86:d8:bb:c7:9f:45:61:41:32:56: 16:73:d5:ae:9c:86:16:de:60:5c:3e:c4:e8:96:45:1d:5a:87: 9a:54:79:5c:32:ab:96:8a:07:58:df:97:46:98:be:b1:8e:a5: 6e:30:e6:34:71:3f:5a:e5:ca:0e:01:af:76:10:8c:23:b0:95: 03:b6:a0:e4:ed:df:98:d8:89:64:fa:11:4c:2c:0b:f5:d7:7d: a0:2c:6f:a9:96:bc:6b:c3:da:cb:5a:2a:56:25:c9:4e:62:74: 93:ed:c7:00:04:87:12:56:3d:a5:e0:b1:0d:5e:f1:63:c0:ad: ab:7c:7a:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlP/jA6l4WFHywBy224DUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl MWQxNmIwHhcNMjUxMjIzMDUwMTAwWhcNMjUxMjI0MDUwMTAwWjAzMTEwLwYDVQQD EygxZTVjMDdmYWU5NjQwMTY1YjcwODBlMGIzYTFiY2MzZGU3OGUxM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovqRxEJE1PEtAuNLzK2KDec6CBn1 fTorwAeqMacG24JhO/2cHajhdp0C3Fz9PeXHvCvCc0L+k1vK69IlaSwx24AOQG/a wOkCMvmlr4ZVn5gcWQY4WzbP8xNsE/+wP0gPv2kia3czuaw4HGL97/xKn9O8qmki cfWEYPRRVk4wJ6ouEZ1XRUeoc+RPqXt9TwQmwczjGdj6zrQZJAcGAmyXMUN6TuHo Hs3eR6mb4NTtTrHxSvg9iJTJUHWAaQ5GK8vNAcG7Heul034MYasGEZVl/eYletRy M2QqrP44s3nZK+/UtfR9io99jjWjHPcT9BWHUWS87tp6zVEuuyhjOc2yEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5cB/rpZAFltwgOCzobzD3njhOyMB8GA1UdIwQY MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/QzrfrY tFZbAF4GfHiWO8kxe7ZQW09w04rKcu2PuZuBZJqKwiamXDS3C4+yXJmrL1H1MqGG AJLgtCSvtqrHeJv/MIgduq0yVJPZMzuS6f9Wh+G6QpGIabLR2UplJE/75ZbCoXJN PSSWozh5pJ2geDoMujrn0Kazr49AhHO6bAb+yTkbjQqG2LvHn0VhQTJWFnPVrpyG Ft5gXD7E6JZFHVqHmlR5XDKrlooHWN+XRpi+sY6lbjDmNHE/WuXKDgGvdhCMI7CV A7ag5O3fmNiJZPoRTCwL9dd9oCxvqZa8a8Pay1oqViXJTmJ0k+3HAASHElY9peCx DV7xY8Ctq3x61g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:35 2025 by rpki-client