This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json) Hash identifier: RsNTSEftZpTCeeUp8NMXV52BjjltEGc0Breg+qoVIOw= Subject key identifier: E0:D3:97:E4:5A:F0:4C:0A:3C:19:AC:CE:EA:B9:DE:63:58:AF:82:30 Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17 Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517 Certificate serial: 019B47023982E342A6138544BFC00A032544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 17:01:26 +0000 Manifest this update: Mon 22 Dec 2025 17:01:26 +0000 Manifest next update: Tue 23 Dec 2025 17:01:26 +0000 Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=) 2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: NMTGfGlbC+abD/UweUEbQbM2MKHkkNvKnxSoIJUJdOg=) 3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:39:82:e3:42:a6:13:85:44:bf:c0:0a:03:25:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517 Validity Not Before: Dec 22 17:01:26 2025 GMT Not After : Dec 23 17:01:26 2025 GMT Subject: CN=e0d397e45af04c0a3c19acceeab9de6358af8230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:c1:5b:ae:10:7a:31:07:71:29:80:6a:8c: 24:07:64:98:a2:06:89:f7:a2:d9:3a:bb:bc:5e:d8: 09:fe:1f:06:81:48:f1:a2:a3:32:ec:36:53:b5:73: 59:ee:db:24:72:59:7b:a3:34:91:73:a7:3c:02:df: 6b:12:0c:96:b7:d6:97:40:7b:78:de:16:0d:69:10: e6:92:e7:c8:04:85:68:9d:11:85:8a:6f:c3:cd:60: 4f:50:cb:b3:5e:e4:3b:61:0f:18:06:9f:93:54:aa: 1b:c0:61:4c:a9:d5:94:f1:29:f8:37:a7:a5:ee:85: 3a:50:bf:88:3b:c9:9d:d4:35:a4:cc:30:db:32:79: 80:3c:bc:e3:0e:67:75:df:18:e2:db:66:d0:ba:80: c7:23:c4:71:1d:af:3a:de:a4:39:fb:65:4a:38:c0: 74:5c:b5:ac:93:83:50:8a:07:85:78:ec:66:a2:9b: 7a:cd:e5:04:61:3e:69:ad:c9:82:d6:42:fb:44:72: 37:82:67:ad:ea:df:bf:0d:ca:c2:76:a9:e1:c7:73: 1c:ab:8a:c6:c6:a6:16:b5:06:37:d0:80:1b:64:42: 31:71:9c:b7:0a:b7:d0:b5:7a:16:b8:c6:75:ed:ed: 53:c3:df:38:b5:69:7d:3d:d8:06:a4:1d:c9:ff:77: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D3:97:E4:5A:F0:4C:0A:3C:19:AC:CE:EA:B9:DE:63:58:AF:82:30 X509v3 Authority Key Identifier: keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5f:02:35:05:2e:2f:7f:bf:10:a2:30:56:ed:3a:14:03:55: 11:ee:b8:c5:f3:31:4b:09:fc:ad:4e:a7:e9:83:a2:1e:41:2a: 22:fd:72:15:8a:e1:f1:65:f4:f7:62:51:25:ee:cc:f3:7e:55: bc:50:ec:fe:72:e8:66:44:c1:ba:8d:f2:16:19:59:21:a1:8e: 73:30:f5:8e:2f:9d:ec:1c:e2:c4:08:50:38:cc:f4:71:74:44: 0f:53:33:75:52:ec:2e:d1:b6:dd:16:f1:d9:32:cd:ec:d1:e9: 43:db:3c:57:e4:ec:96:81:ac:5e:1d:e5:7b:9b:ef:60:9e:5c: 58:73:9f:c8:93:9c:d3:58:4a:1c:68:d0:16:71:52:f8:af:b9: b1:93:78:e2:a7:e5:d3:49:5f:f6:85:37:8f:7a:32:11:04:1b: 02:0f:24:d4:fc:f8:24:e1:00:88:c1:c5:60:f0:5e:1e:33:0e: 14:02:2c:a5:d1:b6:4c:11:af:c8:a7:d6:64:a9:e7:30:5e:10: c1:06:0c:41:38:e6:53:5d:ef:79:a8:0c:02:97:f7:e6:e9:46: b3:66:a5:96:79:d2:55:91:35:d2:b3:cb:0b:2c:0f:ea:14:69: 39:08:14:24:87:e8:cf:fb:d3:3b:f5:00:da:47:60:30:37:80: 91:dd:07:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAjmC40KmE4VEv8AKAyVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGQ5Yjg0OWMwZGFmYWUzODZmNDcwMTIzYjA5MjYxYWUz NTU1MTcwHhcNMjUxMjIyMTcwMTI2WhcNMjUxMjIzMTcwMTI2WjAzMTEwLwYDVQQD EyhlMGQzOTdlNDVhZjA0YzBhM2MxOWFjY2VlYWI5ZGU2MzU4YWY4MjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZPBW64QejEHcSmAaowkB2SYogaJ 96LZOru8XtgJ/h8GgUjxoqMy7DZTtXNZ7tskcll7ozSRc6c8At9rEgyWt9aXQHt4 3hYNaRDmkufIBIVonRGFim/DzWBPUMuzXuQ7YQ8YBp+TVKobwGFMqdWU8Sn4N6el 7oU6UL+IO8md1DWkzDDbMnmAPLzjDmd13xji22bQuoDHI8RxHa863qQ5+2VKOMB0 XLWsk4NQigeFeOxmopt6zeUEYT5prcmC1kL7RHI3gmet6t+/DcrCdqnhx3Mcq4rG xqYWtQY30IAbZEIxcZy3CrfQtXoWuMZ17e1Tw984tWl9PdgGpB3J/3cabwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODTl+Ra8EwKPBmszuq53mNYr4IwMB8GA1UdIwQY MBaAFCXdm4ScDa+uOG9HASOwkmGuNVUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUt N2ZmZDVjNTUwMzg1LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUtN2ZmZDVjNTUwMzg1 LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvV8CNQUu L3+/EKIwVu06FANVEe64xfMxSwn8rU6n6YOiHkEqIv1yFYrh8WX092JRJe7M835V vFDs/nLoZkTBuo3yFhlZIaGOczD1ji+d7BzixAhQOMz0cXRED1MzdVLsLtG23Rbx 2TLN7NHpQ9s8V+TsloGsXh3le5vvYJ5cWHOfyJOc01hKHGjQFnFS+K+5sZN44qfl 00lf9oU3j3oyEQQbAg8k1Pz4JOEAiMHFYPBeHjMOFAIspdG2TBGvyKfWZKnnMF4Q wQYMQTjmU13veagMApf35ulGs2allnnSVZE10rPLCywP6hRpOQgUJIfoz/vTO/UA 2kdgMDeAkd0Hpg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:08 2025 by rpki-client