This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json) Hash identifier: kvm6IykH2G0RPTmyWYy0bqORU1cgJgjb6v+r5EZ20Xo= Subject key identifier: 67:96:EC:F9:C4:FE:58:3B:F6:76:88:F1:AA:99:49:00:8C:30:70:F8 Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a Certificate serial: 019B4AA80733EF62FDDD2D14CD1B8F6FEA1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft Manifest number: 09F3 Signing time: Tue 23 Dec 2025 10:01:24 +0000 Manifest this update: Tue 23 Dec 2025 10:01:24 +0000 Manifest next update: Wed 24 Dec 2025 10:01:24 +0000 Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=) 2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: LF5/jzKO7SBzgZwr0hs/U1A2j+KhAhvxxyyMsJsSiJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:07:33:ef:62:fd:dd:2d:14:cd:1b:8f:6f:ea:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a Validity Not Before: Dec 23 10:01:24 2025 GMT Not After : Dec 24 10:01:24 2025 GMT Subject: CN=6796ecf9c4fe583bf67688f1aa9949008c3070f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:85:17:6b:90:08:82:a2:8c:21:79:70:88:9b: 74:51:f7:f0:eb:ef:4b:a7:fb:d9:fd:31:4a:0a:b5: 7e:1b:14:06:00:4f:b1:62:36:e6:c7:7d:11:c4:c2: a8:8c:59:0d:c6:e4:0d:20:5e:88:f5:de:f2:3b:34: 6a:08:43:5a:8e:40:d8:8d:f4:25:8a:ef:ff:67:2b: fb:4f:5d:75:82:fd:b3:92:f7:a9:9d:27:1f:90:b9: 10:25:11:2f:70:33:cd:bf:03:b1:52:c2:d8:c8:d7: 0a:7f:59:f0:68:5f:01:97:66:ef:8e:a7:0a:b0:88: 8e:68:38:b5:9d:be:41:e8:32:2b:ff:eb:b1:04:7e: ca:ae:82:4d:e4:0d:49:bc:51:e8:39:da:26:17:7a: 48:97:fc:6a:44:bd:06:24:55:23:94:40:08:7e:09: f3:c8:bb:39:43:0c:d3:64:05:32:08:ba:28:a9:51: 4f:77:34:9b:1d:6a:6e:f3:26:c6:9c:92:f1:a1:fa: e8:86:52:20:84:c4:69:56:2a:f9:60:f6:34:b4:65: a5:bb:e9:3a:85:f0:df:9a:5b:9d:b7:24:2d:2a:6b: 94:8b:02:18:1d:a7:af:85:ef:ff:b6:d2:e3:da:60: 08:40:e4:45:df:3a:52:f6:b5:1c:9a:b4:ff:4a:41: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:96:EC:F9:C4:FE:58:3B:F6:76:88:F1:AA:99:49:00:8C:30:70:F8 X509v3 Authority Key Identifier: keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ef:74:9c:b4:2d:c0:16:50:09:fa:a6:c6:2d:97:b0:42:4c: bb:e1:fa:ad:e9:d8:94:ed:a2:e9:2b:77:33:96:22:fd:d1:9d: 02:97:26:e7:6b:08:ed:e2:a4:bf:e8:e0:af:31:af:f4:2d:87: d9:00:52:fb:bd:fc:a5:cb:f6:a6:5a:4b:c6:a6:4d:b7:23:96: 59:6a:34:0d:49:1f:59:07:c6:47:ad:70:fb:22:f6:bb:18:42: ab:ef:76:34:f9:d0:33:87:6a:34:b9:b7:09:ba:e8:53:31:ca: 3f:b7:cf:e6:5f:c3:e6:a3:c2:06:dd:a9:3e:54:ee:9a:23:90: b1:38:59:c0:98:98:e1:dc:6f:cd:ce:6e:b0:c9:e5:cd:16:64: d2:5d:11:42:98:ee:e6:99:02:be:02:e7:3b:f0:8b:82:fb:c4: a8:d0:fb:9c:96:59:cd:97:29:79:13:a2:50:4f:6f:5d:b5:67: cd:23:29:d2:3b:74:25:07:c7:2e:31:93:d5:5a:16:d1:ed:7b: 9e:70:b5:3f:e3:44:99:96:22:13:25:31:1e:48:de:73:08:14: 02:d0:cb:4e:bc:39:d3:80:46:08:e7:eb:c1:bd:4f:ed:45:9b: 9d:b4:fd:9c:8b:ae:e9:85:cf:22:37:2c:45:c6:5f:5a:a6:fd: fb:63:93:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqAcz72L93S0UzRuPb+ocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl NDU4MGEwHhcNMjUxMjIzMTAwMTI0WhcNMjUxMjI0MTAwMTI0WjAzMTEwLwYDVQQD Eyg2Nzk2ZWNmOWM0ZmU1ODNiZjY3Njg4ZjFhYTk5NDkwMDhjMzA3MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IUXa5AIgqKMIXlwiJt0Uffw6+9L p/vZ/TFKCrV+GxQGAE+xYjbmx30RxMKojFkNxuQNIF6I9d7yOzRqCENajkDYjfQl iu//Zyv7T111gv2zkvepnScfkLkQJREvcDPNvwOxUsLYyNcKf1nwaF8Bl2bvjqcK sIiOaDi1nb5B6DIr/+uxBH7KroJN5A1JvFHoOdomF3pIl/xqRL0GJFUjlEAIfgnz yLs5QwzTZAUyCLooqVFPdzSbHWpu8ybGnJLxofrohlIghMRpVir5YPY0tGWlu+k6 hfDfmludtyQtKmuUiwIYHaevhe//ttLj2mAIQORF3zpS9rUcmrT/SkFItwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeW7PnE/lg79naI8aqZSQCMMHD4MB8GA1UdIwQY MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4 LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju90nLQt wBZQCfqmxi2XsEJMu+H6renYlO2i6St3M5Yi/dGdApcm52sI7eKkv+jgrzGv9C2H 2QBS+738pcv2plpLxqZNtyOWWWo0DUkfWQfGR61w+yL2uxhCq+92NPnQM4dqNLm3 CbroUzHKP7fP5l/D5qPCBt2pPlTumiOQsThZwJiY4dxvzc5usMnlzRZk0l0RQpju 5pkCvgLnO/CLgvvEqND7nJZZzZcpeROiUE9vXbVnzSMp0jt0JQfHLjGT1VoW0e17 nnC1P+NEmZYiEyUxHkjecwgUAtDLTrw504BGCOfrwb1P7UWbnbT9nIuu6YXPIjcs RcZfWqb9+2OTKg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:15 2025 by rpki-client