This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json) Hash identifier: xH8PRVBO7HgnQD+vIwW2bXL3THVr2rIGUnnEEkRSQu8= Subject key identifier: 02:D0:EA:DF:33:3A:F9:A5:2C:B7:F2:13:AE:02:69:98:39:CB:EB:AD Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Certificate serial: 019B522AA1D012CDFBC736706CCB8DFB65BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft Manifest number: 14A2 Signing time: Wed 24 Dec 2025 21:01:24 +0000 Manifest this update: Wed 24 Dec 2025 21:01:24 +0000 Manifest next update: Thu 25 Dec 2025 21:01:24 +0000 Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=) 2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=) 3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: n9dcWMOY2U7ZjVpWfllbMlVDB3MTPaPjMslIcWAbyUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:a1:d0:12:cd:fb:c7:36:70:6c:cb:8d:fb:65:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Validity Not Before: Dec 24 21:01:24 2025 GMT Not After : Dec 25 21:01:24 2025 GMT Subject: CN=02d0eadf333af9a52cb7f213ae02699839cbebad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:73:8d:b1:5c:f5:6e:1e:cb:d9:84:ba:95: ab:54:cd:c1:1a:80:e7:a6:e4:48:46:46:c3:71:2d: 86:86:a9:a8:a6:80:30:c0:20:c4:07:02:7b:19:f5: bf:67:3e:71:a7:87:0a:ae:bd:ee:83:06:80:30:65: 4b:6c:89:9d:9a:1a:36:61:15:fd:2d:97:9a:b9:6c: 34:ed:ed:fa:67:8f:23:78:60:17:0e:a6:fa:54:fb: 7e:e9:f8:49:4d:b1:cd:2b:96:25:de:57:95:8e:dd: d8:0b:2d:d8:1d:3f:ff:bf:89:72:fe:72:90:51:c1: 33:16:04:96:4b:34:5f:10:bf:61:05:42:09:5e:00: cc:8d:05:9c:86:46:11:b8:55:d7:91:9f:2a:36:f1: 8e:1a:a2:dc:8c:21:9f:80:1c:20:0f:f7:b5:2d:25: 68:7b:5d:f7:d3:59:83:2c:fd:14:8c:31:f7:96:36: 1e:77:82:b8:e7:b7:22:66:b8:b7:80:30:f7:f5:b4: 0f:09:d1:89:30:39:9e:ec:1d:d8:17:5c:91:1c:b1: b9:cc:af:df:11:e2:2b:03:a6:f6:2c:5f:55:ae:23: 66:41:96:99:66:d3:af:28:22:10:ba:5f:f4:64:f8: 82:73:0d:38:63:90:cf:21:b2:09:90:c7:62:f4:ff: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D0:EA:DF:33:3A:F9:A5:2C:B7:F2:13:AE:02:69:98:39:CB:EB:AD X509v3 Authority Key Identifier: keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:38:09:27:5e:96:01:fa:9d:e7:c8:0f:e1:5f:8c:1d:74: 3a:e1:56:ec:b4:6f:40:07:e3:3a:2d:b9:6c:c4:ca:e7:1d:3e: bf:dd:8f:e0:d1:0e:af:04:dc:8a:7a:34:31:ac:6b:bb:c3:dc: b8:78:a8:e4:ae:24:a5:0b:d6:f0:50:a0:ce:d9:19:09:a8:87: 26:bf:ae:62:b2:0b:9e:b1:d3:2d:45:b4:6e:4b:43:70:ba:71: 43:dd:a5:e6:83:75:bf:9c:5b:59:ff:43:9c:22:fb:75:af:9d: 66:b5:14:ad:a3:90:53:9c:bf:00:19:f6:6f:7a:c3:78:7b:65: bb:52:6d:89:ff:81:4c:be:93:c7:11:1f:a5:99:f3:e8:1a:31: 40:0d:97:44:bc:e2:05:7c:9a:de:6d:70:89:38:6b:f6:0e:88: 88:e0:9b:5b:77:ee:ea:77:0c:c7:58:af:4b:b4:b4:70:c9:7f: 71:44:cc:ed:ee:43:30:52:f1:3b:1b:59:fc:0d:db:ae:a6:da: ab:fa:ce:31:be:d2:d5:34:c2:e4:69:84:73:5d:9a:d1:5a:b3: ce:fa:99:4a:07:30:6c:cc:45:ab:95:f6:6c:1d:35:b8:1d:e9: e6:15:b3:6c:05:3e:af:ac:89:6e:9d:9c:81:c4:07:e7:e1:00: 3d:b6:c0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKqHQEs37xzZwbMuN+2W6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3 MDBjN2MwHhcNMjUxMjI0MjEwMTI0WhcNMjUxMjI1MjEwMTI0WjAzMTEwLwYDVQQD EygwMmQwZWFkZjMzM2FmOWE1MmNiN2YyMTNhZTAyNjk5ODM5Y2JlYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSlzjbFc9W4ey9mEupWrVM3BGoDn puRIRkbDcS2GhqmopoAwwCDEBwJ7GfW/Zz5xp4cKrr3ugwaAMGVLbImdmho2YRX9 LZeauWw07e36Z48jeGAXDqb6VPt+6fhJTbHNK5Yl3leVjt3YCy3YHT//v4ly/nKQ UcEzFgSWSzRfEL9hBUIJXgDMjQWchkYRuFXXkZ8qNvGOGqLcjCGfgBwgD/e1LSVo e13301mDLP0UjDH3ljYed4K457ciZri3gDD39bQPCdGJMDme7B3YF1yRHLG5zK/f EeIrA6b2LF9VriNmQZaZZtOvKCIQul/0ZPiCcw04Y5DPIbIJkMdi9P+howIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALQ6t8zOvmlLLfyE64CaZg5y+utMB8GA1UdIwQY MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLM4CSde lgH6nefID+FfjB10OuFW7LRvQAfjOi25bMTK5x0+v92P4NEOrwTcino0Maxru8Pc uHio5K4kpQvW8FCgztkZCaiHJr+uYrILnrHTLUW0bktDcLpxQ92l5oN1v5xbWf9D nCL7da+dZrUUraOQU5y/ABn2b3rDeHtlu1Jtif+BTL6TxxEfpZnz6BoxQA2XRLzi BXya3m1wiThr9g6IiOCbW3fu6ncMx1ivS7S0cMl/cUTM7e5DMFLxOxtZ/A3brqba q/rOMb7S1TTC5GmEc12a0VqzzvqZSgcwbMxFq5X2bB01uB3p5hWzbAU+r6yJbp2c gcQH5+EAPbbArw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:21:22 2025 by rpki-client