This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json) Hash identifier: X3py5Pn6/bpLSrBRZrYIzLZTHfNYgWn+nxwyveNLcd0= Subject key identifier: 21:FE:23:94:60:42:2B:8B:94:B2:B9:99:F3:DD:1A:E1:8D:35:7D:31 Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Certificate serial: 019B5907BCD37E72C65EC9617419A14DB8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft Manifest number: 038B Signing time: Fri 26 Dec 2025 05:00:37 +0000 Manifest this update: Fri 26 Dec 2025 05:00:37 +0000 Manifest next update: Sat 27 Dec 2025 05:00:37 +0000 Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=) 2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: wJ2NGZnubSl5o6msz4wMgVNsjBa/mwlxJxYWWbde4ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bc:d3:7e:72:c6:5e:c9:61:74:19:a1:4d:b8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44 Validity Not Before: Dec 26 05:00:37 2025 GMT Not After : Dec 27 05:00:37 2025 GMT Subject: CN=21fe239460422b8b94b2b999f3dd1ae18d357d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:d2:9c:17:dc:b3:d2:44:d9:0a:76:7d:d0: 5c:b7:c0:07:08:9e:04:5f:07:e5:9e:d5:1d:a1:e0: 4b:6e:89:58:7d:b4:47:cd:e9:ea:72:72:9e:86:c4: e5:e5:10:80:b2:6f:0d:93:fb:93:10:4a:fc:f6:ba: cc:03:10:3d:f3:a6:11:3c:35:01:f4:09:36:e2:41: 17:82:d6:7b:0c:8d:e6:a9:f7:cc:a4:d1:3a:5e:42: 32:5b:a1:75:a7:b6:56:8e:68:0c:c2:45:f5:fc:b2: a2:29:19:82:ac:39:60:6e:0c:be:21:b7:21:5e:67: 54:54:5b:e5:24:53:b9:ee:ba:83:17:bd:8c:ea:6b: 2e:2d:f2:b8:33:f5:0f:5a:87:b8:3a:a4:fc:ec:05: d8:af:14:f9:e4:fe:eb:99:40:40:5e:c0:68:84:80: 7e:84:85:35:32:82:2a:24:18:eb:10:61:6e:11:95: cc:c2:ae:19:fa:c4:9d:d6:a4:8d:3f:76:1e:ec:16: 8f:8d:53:a9:f3:a0:da:c0:9f:0b:6a:f6:d7:ce:33: 88:39:22:08:20:d7:cf:9f:af:6b:9c:f6:db:48:a1: 40:0e:90:87:b5:94:cc:d4:3d:6a:13:52:c9:0b:0d: 1c:12:36:03:4c:29:14:21:90:66:c7:33:8f:bd:75: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:23:94:60:42:2B:8B:94:B2:B9:99:F3:DD:1A:E1:8D:35:7D:31 X509v3 Authority Key Identifier: keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0e:d1:49:55:ff:60:b2:f8:91:35:b3:a8:33:2a:18:18:b6: ab:43:98:f7:73:2a:a1:ac:99:f3:e1:30:55:f7:83:14:e5:ae: 70:fa:51:f0:bd:90:5e:17:fe:01:2a:68:81:f8:29:82:d0:98: f5:9f:9f:15:a9:4c:4b:56:06:29:e4:35:e3:61:42:cb:9b:3c: 60:2a:3e:2f:d8:de:b3:93:2c:d2:d7:7f:50:02:f6:95:60:4b: d5:53:51:b7:ec:03:8b:0e:af:84:3d:ce:5a:6b:7d:25:4f:a2: 45:ab:ac:d3:c6:fc:e9:4d:dc:1c:e4:3e:c5:76:94:6c:65:66: 89:0e:28:af:65:3b:d8:d0:3f:ba:c3:62:92:8c:de:ac:09:43: f3:20:7f:44:5d:90:2a:03:9c:fb:f3:92:14:38:c4:6b:2a:aa: eb:03:32:56:15:46:27:c6:a8:82:7d:c3:07:32:74:11:76:2e: 00:ad:0a:94:04:c3:3b:b9:4b:e4:68:83:42:d2:5a:69:27:ee: 71:08:54:04:50:63:5d:b6:ab:e4:24:79:2e:88:57:1e:63:2a: 41:37:bf:32:3d:8e:19:1d:dc:21:a0:15:90:c2:09:ce:4d:a7: d3:dd:8e:fa:35:f8:29:37:6d:f4:40:34:92:54:44:80:e2:a0: 6b:5f:61:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB7zTfnLGXslhdBmhTbj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4 ZjhiNDQwHhcNMjUxMjI2MDUwMDM3WhcNMjUxMjI3MDUwMDM3WjAzMTEwLwYDVQQD EygyMWZlMjM5NDYwNDIyYjhiOTRiMmI5OTlmM2RkMWFlMThkMzU3ZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRHSnBfcs9JE2Qp2fdBct8AHCJ4E XwflntUdoeBLbolYfbRHzenqcnKehsTl5RCAsm8Nk/uTEEr89rrMAxA986YRPDUB 9Ak24kEXgtZ7DI3mqffMpNE6XkIyW6F1p7ZWjmgMwkX1/LKiKRmCrDlgbgy+Ibch XmdUVFvlJFO57rqDF72M6msuLfK4M/UPWoe4OqT87AXYrxT55P7rmUBAXsBohIB+ hIU1MoIqJBjrEGFuEZXMwq4Z+sSd1qSNP3Ye7BaPjVOp86DawJ8LavbXzjOIOSII INfPn69rnPbbSKFADpCHtZTM1D1qE1LJCw0cEjYDTCkUIZBmxzOPvXUf+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH+I5RgQiuLlLK5mfPdGuGNNX0xMB8GA1UdIwQY MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5 LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw7RSVX/ YLL4kTWzqDMqGBi2q0OY93MqoayZ8+EwVfeDFOWucPpR8L2QXhf+ASpogfgpgtCY 9Z+fFalMS1YGKeQ142FCy5s8YCo+L9jes5Ms0td/UAL2lWBL1VNRt+wDiw6vhD3O Wmt9JU+iRaus08b86U3cHOQ+xXaUbGVmiQ4or2U72NA/usNikozerAlD8yB/RF2Q KgOc+/OSFDjEayqq6wMyVhVGJ8aogn3DBzJ0EXYuAK0KlATDO7lL5GiDQtJaaSfu cQhUBFBjXbar5CR5LohXHmMqQTe/Mj2OGR3cIaAVkMIJzk2n092O+jX4KTdt9EA0 klREgOKga19hKg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client