This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json) Hash identifier: erDWd8Dt4qenXt1YOFZiBi3PhFbDV7hayoDfwHFVX9E= Subject key identifier: DC:A5:D4:DD:B7:95:FB:8C:ED:D1:C9:B6:12:33:D9:E9:2A:54:C3:AC Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Certificate serial: 019B1E3C9F2711CE2A7AAC96FCA9C2200569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft Manifest number: 14B9 Signing time: Sun 14 Dec 2025 19:00:47 +0000 Manifest this update: Sun 14 Dec 2025 19:00:47 +0000 Manifest next update: Mon 15 Dec 2025 19:00:47 +0000 Files and hashes: 1: Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa (hash: iwMpY36khSGjNTrmpB2B0AqQ83qJVqJRDA0DSjAiZW0=) 2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: 2M/yrioCySoaRnq+z44/yv0g6shzk0o7E8JcJpfw6zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:9f:27:11:ce:2a:7a:ac:96:fc:a9:c2:20:05:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Validity Not Before: Dec 14 19:00:47 2025 GMT Not After : Dec 15 19:00:47 2025 GMT Subject: CN=dca5d4ddb795fb8cedd1c9b61233d9e92a54c3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:3e:ef:a4:b9:f2:81:38:28:5b:47:e9:f6: 3b:26:02:e7:e1:7b:a8:90:32:e3:11:2e:44:36:e9: fd:54:07:30:37:19:18:da:c5:82:e1:63:81:c3:ec: a7:42:d9:02:26:1e:9f:45:ae:3f:b8:eb:a9:2e:b4: d8:24:d0:13:a9:fb:48:e1:04:5d:c4:53:d3:38:f7: 77:33:89:6b:31:af:94:f2:46:20:cb:80:eb:29:3e: b9:69:9f:ba:c2:8c:00:49:39:59:a9:35:72:07:ca: 55:77:28:fa:96:a4:63:53:37:b0:7d:83:4a:ee:98: 0b:d1:d5:d5:f5:48:85:95:a4:85:11:d0:28:70:a6: bc:7d:10:17:0c:4d:d6:85:7a:ad:23:61:81:16:f7: 6d:98:8b:03:cc:f2:f7:75:ab:5e:82:3c:9a:62:fb: 44:74:e5:62:a6:7e:79:50:67:ae:db:fa:67:8e:28: 9f:92:06:1d:fb:41:57:b4:90:29:e9:20:b7:cb:be: 74:56:a6:78:a5:ae:c8:02:ab:17:fa:d8:b5:2f:58: c1:99:c7:8a:7d:6e:bb:d2:5f:9b:1c:0f:9d:64:7c: 0d:5d:e3:28:94:9c:f3:3f:46:35:f4:c2:0a:2d:ca: ae:fb:50:8d:3d:55:f6:58:ba:5e:3d:ef:02:c7:fa: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A5:D4:DD:B7:95:FB:8C:ED:D1:C9:B6:12:33:D9:E9:2A:54:C3:AC X509v3 Authority Key Identifier: keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:15:86:b7:24:3a:f8:0e:0a:2c:bb:cd:45:44:7f:88:58:aa: f2:99:06:65:ba:5a:db:03:74:c2:e2:d6:f5:07:b0:8f:6a:20: 35:fd:af:b5:a6:80:5d:cc:bc:fc:65:e1:5a:c3:48:ae:35:cb: 95:e2:90:b3:18:9b:20:b8:7b:7c:d0:d7:74:32:73:e4:dc:1b: 10:a6:2d:85:e8:6b:38:e2:2f:43:26:f4:e0:19:1d:83:5a:cd: 99:b9:b7:44:dd:3d:95:83:0f:03:ab:11:90:e8:e1:7a:c0:7f: 9f:81:37:67:36:0b:7e:55:4b:62:97:54:8f:c1:fb:15:b5:e8: f8:95:2b:05:d7:74:2b:15:29:3e:6e:b1:c7:83:0a:47:f6:9b: 1c:d4:7d:be:45:04:ec:30:e0:e8:81:bf:a8:8b:5a:b8:7e:9c: cd:e9:02:dd:77:7c:3a:4f:a3:ee:53:db:00:2e:bb:c0:d9:84: 40:3e:30:40:c3:0e:50:61:92:a4:b1:0a:04:c7:ec:40:15:18: 8e:96:6b:84:e5:a2:b7:48:3e:54:c3:6b:a4:98:56:de:f8:1b: b5:ff:44:cb:2a:36:15:fb:6a:b6:4f:76:46:59:39:af:c7:b9: ca:b5:ae:59:b2:78:84:f0:ba:ae:52:cf:19:07:4b:61:d7:6d: a2:38:61:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePJ8nEc4qeqyW/KnCIAVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2 M2MwYTkwHhcNMjUxMjE0MTkwMDQ3WhcNMjUxMjE1MTkwMDQ3WjAzMTEwLwYDVQQD EyhkY2E1ZDRkZGI3OTVmYjhjZWRkMWM5YjYxMjMzZDllOTJhNTRjM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uk+76S58oE4KFtH6fY7JgLn4Xuo kDLjES5ENun9VAcwNxkY2sWC4WOBw+ynQtkCJh6fRa4/uOupLrTYJNATqftI4QRd xFPTOPd3M4lrMa+U8kYgy4DrKT65aZ+6wowASTlZqTVyB8pVdyj6lqRjUzewfYNK 7pgL0dXV9UiFlaSFEdAocKa8fRAXDE3WhXqtI2GBFvdtmIsDzPL3dategjyaYvtE dOVipn55UGeu2/pnjiifkgYd+0FXtJAp6SC3y750VqZ4pa7IAqsX+ti1L1jBmceK fW670l+bHA+dZHwNXeMolJzzP0Y19MIKLcqu+1CNPVX2WLpePe8Cx/pI2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyl1N23lfuM7dHJthIz2ekqVMOsMB8GA1UdIwQY MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBWGtyQ6 +A4KLLvNRUR/iFiq8pkGZbpa2wN0wuLW9Qewj2ogNf2vtaaAXcy8/GXhWsNIrjXL leKQsxibILh7fNDXdDJz5NwbEKYthehrOOIvQyb04Bkdg1rNmbm3RN09lYMPA6sR kOjhesB/n4E3ZzYLflVLYpdUj8H7FbXo+JUrBdd0KxUpPm6xx4MKR/abHNR9vkUE 7DDg6IG/qItauH6czekC3Xd8Ok+j7lPbAC67wNmEQD4wQMMOUGGSpLEKBMfsQBUY jpZrhOWit0g+VMNrpJhW3vgbtf9Eyyo2Fftqtk92Rlk5r8e5yrWuWbJ4hPC6rlLP GQdLYddtojhhBA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:43 2025 by rpki-client