This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json) Hash identifier: 4+rWIzpf7cV1snn9jyUnPgzkOj8Yvh5uDKRDVDcc7YQ= Subject key identifier: BA:A9:61:5A:33:03:45:38:7A:A1:8E:EC:6F:E9:24:CF:69:BA:FC:E8 Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae Certificate serial: 019B3D90B3FC84D2376D9F8B5C8593E2095E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft Manifest number: 0744 Signing time: Sat 20 Dec 2025 21:00:51 +0000 Manifest this update: Sat 20 Dec 2025 21:00:51 +0000 Manifest next update: Sun 21 Dec 2025 21:00:51 +0000 Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=) 2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: C0riKQeV8VClMam0olbudxtKIcuG3narZqtQxzvx7AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b3:fc:84:d2:37:6d:9f:8b:5c:85:93:e2:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae Validity Not Before: Dec 20 21:00:51 2025 GMT Not After : Dec 21 21:00:51 2025 GMT Subject: CN=baa9615a330345387aa18eec6fe924cf69bafce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:c6:16:49:3e:e4:a6:c3:b1:d6:de:40:3b: 17:df:2e:86:85:3b:aa:c9:a2:d3:53:6a:dd:c9:ad: b4:25:15:00:67:3d:a0:c5:b4:cc:3b:d9:96:3b:d3: 7e:15:7b:5d:e5:7d:2d:e5:17:21:46:8e:e3:dc:9f: ff:80:19:65:7c:fa:d0:6a:a9:97:62:4f:ac:c5:d3: 4b:2f:1f:d6:bd:20:ec:ba:56:ce:bc:53:eb:cc:14: e0:9c:12:09:c4:8a:ca:86:35:8d:ff:c9:af:04:69: 91:bc:63:34:d1:7a:e0:97:04:bc:9c:c2:67:3c:77: 3c:78:61:73:cf:a0:7b:f0:8f:9a:14:e6:7c:8e:43: 03:dd:09:82:c3:60:d2:61:a7:d5:f5:e6:d2:78:11: 21:54:cd:45:86:20:2f:73:9b:5c:33:14:6b:8c:a6: f7:91:88:9a:4a:bc:fa:fa:c3:ac:bc:7e:ce:29:e6: 10:a5:a5:4a:7b:f5:48:ec:86:db:a5:93:11:ff:0b: 76:b0:0b:e5:d2:6f:ae:12:35:f4:a9:cc:86:15:59: 0f:c7:e1:23:de:a4:06:fc:79:d2:60:4a:d7:0c:39: 7d:3c:74:88:10:7b:82:15:06:5b:ac:3f:be:0f:c3: bc:b9:9b:78:d9:31:fb:a1:73:8d:3e:3a:64:66:66: f6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A9:61:5A:33:03:45:38:7A:A1:8E:EC:6F:E9:24:CF:69:BA:FC:E8 X509v3 Authority Key Identifier: keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:82:46:9f:6b:6c:1c:70:1f:7b:bd:31:d4:82:58:e3:dc: 59:ca:ee:d6:61:06:39:0d:4b:a1:f9:2d:80:bb:ba:d3:41:e6: 31:e8:3e:ea:66:3c:d5:48:2d:f9:3f:b3:76:26:2d:9a:a0:a3: c8:81:96:8a:15:8c:da:60:aa:c1:6d:b4:b1:3e:07:9d:3d:62: 5e:ee:fd:e4:f2:a8:28:4d:2a:31:9d:8e:fa:f3:1a:f1:f1:d5: 0a:fb:1a:d9:5a:b5:2b:83:7d:72:a6:9d:82:9c:31:c1:3b:39: 37:45:7e:9b:5e:87:87:da:49:71:96:0e:ef:21:9c:25:eb:c6: a5:15:1d:1b:b4:8b:9d:7f:c4:d7:37:4f:99:9a:55:0e:ab:71: 06:a7:a1:37:6f:b1:aa:d3:c3:27:80:16:f3:23:41:fb:19:43: 0a:84:0c:25:00:91:34:21:71:38:88:86:29:09:ce:9e:ad:5e: fc:2e:45:d7:db:db:79:b0:da:ca:e2:62:9e:5d:91:40:f3:78: d3:bd:9a:21:db:1f:6e:c2:4c:5e:cf:1c:d4:18:45:8d:d1:44: 5b:16:d3:8c:77:7c:1b:e4:ad:d7:70:6a:6d:2e:27:36:d0:a1: 9b:ca:ab:f9:f3:9c:d0:05:36:9e:48:de:aa:be:99:8d:cb:95: aa:77:ff:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLP8hNI3bZ+LXIWT4gleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Y2M5ZDUwMDdjMDA1ODk5MzI5YmNlZTM2NjMzMDhhMzdk NDBlYWUwHhcNMjUxMjIwMjEwMDUxWhcNMjUxMjIxMjEwMDUxWjAzMTEwLwYDVQQD EyhiYWE5NjE1YTMzMDM0NTM4N2FhMThlZWM2ZmU5MjRjZjY5YmFmY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDfGFkk+5KbDsdbeQDsX3y6GhTuq yaLTU2rdya20JRUAZz2gxbTMO9mWO9N+FXtd5X0t5RchRo7j3J//gBllfPrQaqmX Yk+sxdNLLx/WvSDsulbOvFPrzBTgnBIJxIrKhjWN/8mvBGmRvGM00XrglwS8nMJn PHc8eGFzz6B78I+aFOZ8jkMD3QmCw2DSYafV9ebSeBEhVM1FhiAvc5tcMxRrjKb3 kYiaSrz6+sOsvH7OKeYQpaVKe/VI7IbbpZMR/wt2sAvl0m+uEjX0qcyGFVkPx+Ej 3qQG/HnSYErXDDl9PHSIEHuCFQZbrD++D8O8uZt42TH7oXONPjpkZmb25QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqpYVozA0U4eqGO7G/pJM9puvzoMB8GA1UdIwQY MBaAFCbMnVAHwAWJkym87jZjMIo31A6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgt M2NiYTRiZTRjMjllLzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgtM2NiYTRiZTRjMjll LzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq2CRp9r bBxwH3u9MdSCWOPcWcru1mEGOQ1LofktgLu600HmMeg+6mY81Ugt+T+zdiYtmqCj yIGWihWM2mCqwW20sT4HnT1iXu795PKoKE0qMZ2O+vMa8fHVCvsa2Vq1K4N9cqad gpwxwTs5N0V+m16Hh9pJcZYO7yGcJevGpRUdG7SLnX/E1zdPmZpVDqtxBqehN2+x qtPDJ4AW8yNB+xlDCoQMJQCRNCFxOIiGKQnOnq1e/C5F19vbebDayuJinl2RQPN4 072aIdsfbsJMXs8c1BhFjdFEWxbTjHd8G+St13BqbS4nNtChm8qr+fOc0AU2nkje qr6ZjcuVqnf/bg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:03 2025 by rpki-client