This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json) Hash identifier: vPkM33dfSy9kxx+k82d3WL1mHFjaqa/feGDxQjwPp8c= Subject key identifier: 1D:AE:D6:B8:4E:C1:BE:BC:AD:CE:94:BE:F9:10:B5:B4:8D:07:42:49 Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Certificate serial: 019B631DB91ECE6D4C94A3E17A6FF70BBB96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 04:00:50 +0000 Manifest this update: Sun 28 Dec 2025 04:00:50 +0000 Manifest next update: Mon 29 Dec 2025 04:00:50 +0000 Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: /rEdFnL1Omu6k11eXYreQsspwgYXGopeB6J7+M5kCF0=) 2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:b9:1e:ce:6d:4c:94:a3:e1:7a:6f:f7:0b:bb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Validity Not Before: Dec 28 04:00:50 2025 GMT Not After : Dec 29 04:00:50 2025 GMT Subject: CN=1daed6b84ec1bebcadce94bef910b5b48d074249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:51:d2:eb:62:5f:d3:56:31:3a:d4:9a:b2: e1:f6:79:17:8c:d4:44:ea:02:1f:38:53:4b:d4:de: cc:93:98:96:a6:49:cb:34:14:68:8f:65:13:a5:f0: 57:08:c3:a4:7d:e3:b4:9d:23:a5:b8:19:a4:ae:e9: 2f:37:ed:9f:cf:26:a2:d8:7e:81:38:97:36:10:4c: 80:a6:72:cc:94:b2:a5:20:66:00:87:2b:df:94:d8: 09:ad:05:ff:f1:4e:1c:f7:be:23:05:fa:ee:9a:ed: cf:24:bf:44:40:ef:f2:d9:69:99:67:99:b6:72:60: 6f:da:d1:81:63:4c:7b:f8:f1:13:75:f7:56:84:41: 09:43:1d:2b:8f:6a:b3:76:59:ca:4d:87:dd:77:77: b2:1d:81:cd:20:82:b0:63:7d:c3:09:1a:55:f3:42: 74:8d:1b:39:b5:18:f1:03:a7:12:4a:9a:77:33:44: a3:c3:95:4d:38:a4:18:24:18:19:32:22:f0:94:20: d3:d8:a9:39:09:aa:6d:ed:67:52:2e:ad:dc:c6:0d: 2a:e5:e9:17:92:d2:b1:94:b0:a5:7e:65:24:26:1a: cb:c1:78:57:be:db:24:d1:e0:26:60:d8:47:12:ad: d0:8d:a5:be:0d:b9:ab:53:77:a3:4b:3f:5c:95:ad: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AE:D6:B8:4E:C1:BE:BC:AD:CE:94:BE:F9:10:B5:B4:8D:07:42:49 X509v3 Authority Key Identifier: keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8b:00:f8:d5:94:92:43:54:17:cb:ad:c8:66:08:7c:43:d3: 04:13:92:01:b9:cd:c6:2a:2a:d7:77:1b:11:aa:23:59:8c:78: 92:21:4b:ad:c3:43:14:fe:3c:6d:73:f9:0c:31:1b:78:d6:9b: f8:4e:80:48:bb:04:47:0a:65:19:49:ba:4c:2f:e7:d5:13:b9: 77:83:db:f1:69:58:20:c5:95:77:be:62:88:bc:35:11:27:a6: 96:dc:6b:85:f2:4f:1f:ca:92:73:3c:77:31:e6:53:91:0b:41: b3:44:70:18:75:49:4d:df:3f:e8:35:46:b1:f1:81:22:f2:77: 6f:a8:83:08:50:0f:6d:8d:e0:7d:4a:2a:c2:11:5f:19:62:e6: f5:2b:f8:78:ff:62:7f:50:95:aa:e6:af:74:8f:0c:b2:bb:b0: b1:23:7f:f9:c5:a7:6f:44:52:98:d1:c7:5e:4e:f9:72:89:df: cd:2d:05:12:9c:bf:94:50:ee:3e:45:45:78:e3:de:10:72:a1: 86:03:c0:2f:ed:5d:ff:e3:96:18:3a:4c:71:7d:3b:51:58:77: 8d:16:ed:01:a7:34:7d:5d:07:dd:dd:be:4d:4f:13:a5:f8:0c: 22:a2:21:02:47:d4:85:90:75:d1:a8:a9:9d:13:7c:54:7c:cf: ef:fe:9a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHbkezm1MlKPhem/3C7uWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmNiMzVjM2Y1NmIyNzk4ZmY2MWJkNGQ5YTVjZWQwZWUw MzlmYjAwHhcNMjUxMjI4MDQwMDUwWhcNMjUxMjI5MDQwMDUwWjAzMTEwLwYDVQQD EygxZGFlZDZiODRlYzFiZWJjYWRjZTk0YmVmOTEwYjViNDhkMDc0MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno9R0utiX9NWMTrUmrLh9nkXjNRE 6gIfOFNL1N7Mk5iWpknLNBRoj2UTpfBXCMOkfeO0nSOluBmkrukvN+2fzyai2H6B OJc2EEyApnLMlLKlIGYAhyvflNgJrQX/8U4c974jBfrumu3PJL9EQO/y2WmZZ5m2 cmBv2tGBY0x7+PETdfdWhEEJQx0rj2qzdlnKTYfdd3eyHYHNIIKwY33DCRpV80J0 jRs5tRjxA6cSSpp3M0Sjw5VNOKQYJBgZMiLwlCDT2Kk5Capt7WdSLq3cxg0q5ekX ktKxlLClfmUkJhrLwXhXvtsk0eAmYNhHEq3QjaW+DbmrU3ejSz9cla3YDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2u1rhOwb68rc6UvvkQtbSNB0JJMB8GA1UdIwQY MBaAFCUss1w/VrJ5j/Yb1NmlztDuA5+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMt NTZjNmExMDMxZGJiLzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMtNTZjNmExMDMxZGJi LzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASosA+NWU kkNUF8utyGYIfEPTBBOSAbnNxioq13cbEaojWYx4kiFLrcNDFP48bXP5DDEbeNab +E6ASLsERwplGUm6TC/n1RO5d4Pb8WlYIMWVd75iiLw1ESemltxrhfJPH8qSczx3 MeZTkQtBs0RwGHVJTd8/6DVGsfGBIvJ3b6iDCFAPbY3gfUoqwhFfGWLm9Sv4eP9i f1CVquavdI8MsruwsSN/+cWnb0RSmNHHXk75confzS0FEpy/lFDuPkVFeOPeEHKh hgPAL+1d/+OWGDpMcX07UVh3jRbtAac0fV0H3d2+TU8TpfgMIqIhAkfUhZB10aip nRN8VHzP7/6aeg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:33 2025 by rpki-client