This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json) Hash identifier: 6ZhAhc3SWWdqogpBRpgIRM18Zk9xkijAaB/P0zs+Y3k= Subject key identifier: 8A:2E:B1:28:1A:18:95:58:3D:97:EF:E3:55:6C:14:81:DE:8C:01:FC Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B40C9205D376E1200F39A8304E6712FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft Manifest number: 0874 Signing time: Sun 21 Dec 2025 12:01:21 +0000 Manifest this update: Sun 21 Dec 2025 12:01:21 +0000 Manifest next update: Mon 22 Dec 2025 12:01:21 +0000 Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=) 2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=) 3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=) 4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: 5zVjauZjhFXIpizVO+2DbnNBSkSTpfjQmu6ZAcKqE8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:20:5d:37:6e:12:00:f3:9a:83:04:e6:71:2f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Dec 21 12:01:21 2025 GMT Not After : Dec 22 12:01:21 2025 GMT Subject: CN=8a2eb1281a1895583d97efe3556c1481de8c01fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:2b:81:d2:51:ad:4d:04:01:0a:06:16:1a: 08:ec:df:7f:d9:fb:21:e3:42:3b:a3:63:ff:ed:7e: 5b:5a:19:33:8a:e6:2a:06:82:d8:b5:a4:04:54:38: 89:9f:22:3e:5d:48:82:98:7e:29:69:8f:2b:f6:71: 69:73:72:00:24:43:78:38:51:6f:e8:f9:25:7f:79: 41:31:c0:71:f2:df:5c:79:f7:8b:36:63:b9:ea:f7: 86:68:91:a8:8d:7c:8a:d7:d0:8c:82:7c:04:d7:e4: 7e:f4:88:39:4e:62:43:b7:e0:5e:5a:86:40:8a:10: 54:58:be:95:fc:7c:84:87:20:81:26:7c:9b:cc:db: cb:9d:6d:27:2d:cb:7a:bc:89:ed:25:b5:2a:9b:e4: f9:8c:14:07:4f:3a:ca:d9:7f:8b:80:c2:b2:75:bb: d3:b5:b9:23:d3:71:2c:70:4f:ca:3b:5a:db:98:f3: 2c:bd:3b:77:62:c5:0a:0f:b4:e4:fb:f3:56:f3:87: 59:dc:40:88:d1:42:50:f1:87:ff:b7:d2:7c:71:8e: ee:a7:d5:38:64:d2:90:48:e5:5d:cc:20:d7:be:bd: 08:f4:6e:0f:ee:ba:bf:4e:68:40:11:74:bf:e9:82: ed:16:7b:df:09:1b:29:45:7d:3b:af:59:82:9b:c0: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2E:B1:28:1A:18:95:58:3D:97:EF:E3:55:6C:14:81:DE:8C:01:FC X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:47:cb:43:fa:23:bc:9a:0f:16:a5:9b:2c:71:e4:60:8a:5c: 43:1d:36:45:79:6e:30:c7:04:75:42:8d:77:cf:c9:75:5d:e2: ed:26:37:c1:79:7b:87:79:71:35:cc:94:fd:c4:86:83:8d:79: 33:41:58:af:69:b2:99:68:d4:ac:97:84:9a:8b:45:c6:c6:a5: f7:4b:47:57:0f:d9:d2:07:62:03:9b:0c:ae:5c:b2:8e:ed:7f: b4:8c:15:02:74:5e:b7:4a:4e:9e:bd:63:df:08:87:cb:5f:b2: ba:20:2b:3b:67:29:dc:84:2e:22:f3:5e:92:75:1b:c3:7e:c3: a1:27:3c:0a:3d:77:8c:de:1f:f2:68:54:51:e2:08:95:66:17: 72:7e:da:d6:19:a4:97:da:00:56:78:7c:02:d1:1d:e1:3c:5e: 46:7a:d3:cc:1f:e7:76:71:d4:67:46:cb:a8:c8:1d:2d:8a:a5: 0c:b1:15:76:b0:ff:f2:fb:71:04:a5:d6:2a:99:5a:ec:bc:9a: a6:08:39:66:b8:d3:54:30:16:51:50:4d:c6:b0:df:a3:b3:a7: cf:eb:8d:33:38:20:64:fa:c6:b8:30:45:af:5e:42:ed:f1:04: 28:e0:bc:7a:f3:ff:b6:32:01:3c:85:09:92:0b:fe:ef:79:98: 14:46:3b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySBdN24SAPOagwTmcS+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjUxMjIxMTIwMTIxWhcNMjUxMjIyMTIwMTIxWjAzMTEwLwYDVQQD Eyg4YTJlYjEyODFhMTg5NTU4M2Q5N2VmZTM1NTZjMTQ4MWRlOGMwMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVcrgdJRrU0EAQoGFhoI7N9/2fsh 40I7o2P/7X5bWhkziuYqBoLYtaQEVDiJnyI+XUiCmH4paY8r9nFpc3IAJEN4OFFv 6Pklf3lBMcBx8t9cefeLNmO56veGaJGojXyK19CMgnwE1+R+9Ig5TmJDt+BeWoZA ihBUWL6V/HyEhyCBJnybzNvLnW0nLct6vIntJbUqm+T5jBQHTzrK2X+LgMKydbvT tbkj03EscE/KO1rbmPMsvTt3YsUKD7Tk+/NW84dZ3ECI0UJQ8Yf/t9J8cY7up9U4 ZNKQSOVdzCDXvr0I9G4P7rq/TmhAEXS/6YLtFnvfCRspRX07r1mCm8D+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIousSgaGJVYPZfv41VsFIHejAH8MB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikfLQ/oj vJoPFqWbLHHkYIpcQx02RXluMMcEdUKNd8/JdV3i7SY3wXl7h3lxNcyU/cSGg415 M0FYr2mymWjUrJeEmotFxsal90tHVw/Z0gdiA5sMrlyyju1/tIwVAnRet0pOnr1j 3wiHy1+yuiArO2cp3IQuIvNeknUbw37DoSc8Cj13jN4f8mhUUeIIlWYXcn7a1hmk l9oAVnh8AtEd4TxeRnrTzB/ndnHUZ0bLqMgdLYqlDLEVdrD/8vtxBKXWKpla7Lya pgg5ZrjTVDAWUVBNxrDfo7Onz+uNMzggZPrGuDBFr15C7fEEKOC8evP/tjIBPIUJ kgv+73mYFEY7QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:18 2025 by rpki-client