This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json) Hash identifier: GpOAh3IRcCSA2AVA67zlJHs+e9lGacUTIbHYbwhJCWk= Subject key identifier: B3:29:CB:7E:01:92:93:A2:6B:70:E8:EB:7F:03:93:C4:D1:AC:59:10 Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b Certificate serial: 019B3FED255164428478C20F02839676E468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft Manifest number: 184E Signing time: Sun 21 Dec 2025 08:01:04 +0000 Manifest this update: Sun 21 Dec 2025 08:01:04 +0000 Manifest next update: Mon 22 Dec 2025 08:01:04 +0000 Files and hashes: 1: 1-iShH5SYJiiJuCHyL-0EvBsap1I.roa (hash: kLqxZPUtdZK8fLI/x0G9E1tU+TNPbPl9AKfGqEvxW9k=) 2: Rf_I8sVPVAx3LZhj_xscEQ7dKso.roa (hash: QIzGhLtmnI3gBcnuHzazR5OpMcTJCQFdpzvqA7C/+5I=) 3: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: 8QZHla1O+ZazW6Scf/pi+ZEyu14xgUCvwO+GrJ1uKxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:25:51:64:42:84:78:c2:0f:02:83:96:76:e4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b Validity Not Before: Dec 21 08:01:04 2025 GMT Not After : Dec 22 08:01:04 2025 GMT Subject: CN=b329cb7e019293a26b70e8eb7f0393c4d1ac5910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:ac:c5:99:23:21:ad:2d:50:c4:d0:5a:e8: 40:48:1c:7e:71:14:a8:b0:cd:6f:b9:8f:97:14:19: 2c:56:78:19:90:0a:84:c1:fe:d4:c0:47:b5:b0:a4: c3:32:6e:84:e6:43:1f:5e:1e:be:6c:c1:56:4c:94: 8f:a9:6e:78:0a:62:88:f3:9f:94:7d:4f:4e:aa:3f: 75:10:f7:d3:36:93:6a:09:89:2c:cd:7b:f1:63:f5: 13:dc:70:09:61:c6:c5:ef:6a:e2:ab:31:0c:09:a2: 4b:54:e7:2c:4e:87:9c:35:24:65:0f:33:a1:73:99: 0e:c6:f2:a3:c4:e9:40:19:08:54:d9:29:b2:2d:53: 1a:00:41:53:52:b1:4a:8e:05:59:2e:06:73:79:d5: 32:26:a9:cf:88:b1:74:ec:3b:0c:2b:07:c0:9e:00: 91:97:86:5a:e1:ab:44:28:2f:30:a0:8c:0c:16:b4: 3b:79:82:ab:a3:ae:66:db:4f:7c:66:55:72:fa:b2: f6:8e:3b:8a:03:93:35:05:a1:e0:5a:d9:99:2f:cd: e0:e8:d1:c5:9c:23:dd:71:57:83:4c:ae:9b:9f:f7: 24:d4:4f:49:6c:17:24:e5:25:32:be:58:e7:86:13: af:fe:f2:d4:9e:84:e1:16:4c:06:9f:b8:3d:16:e8: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:29:CB:7E:01:92:93:A2:6B:70:E8:EB:7F:03:93:C4:D1:AC:59:10 X509v3 Authority Key Identifier: keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1d:84:c1:81:96:6c:4b:1c:ed:d6:75:84:f3:47:a5:10:0f: 5c:9a:91:56:1c:ff:59:d6:85:37:32:ed:4c:b1:2c:1b:c9:9f: b5:b8:36:d9:57:66:c9:ef:0a:55:2c:24:fe:26:62:62:df:b2: e4:de:b0:51:84:9e:43:7d:ee:9d:4a:db:fb:af:55:ba:d4:be: be:62:af:7d:68:f8:b1:88:67:86:86:17:16:6c:99:7d:17:9a: 87:3d:f6:08:22:b6:c4:12:e9:c2:cf:cb:16:54:e1:7e:18:e1: 3f:af:f5:0a:ec:c5:43:23:1a:8a:e4:b8:f9:87:f2:e0:45:a4: ec:ae:47:02:ad:37:a3:bd:4c:f9:87:11:b8:c7:c7:60:bc:37: 8b:73:d3:9a:76:c6:8c:bd:73:f6:0e:db:a9:8c:b5:c2:0b:f8: 80:32:c0:65:b1:97:9d:65:c9:13:47:59:9b:04:e8:d2:8d:54: 6e:a6:e1:ee:fc:9d:7f:a3:04:3d:e9:84:98:a6:81:94:cb:2a: b9:97:c2:73:2f:d4:bc:b5:b0:e3:06:9b:a4:44:3f:36:b7:dd: 2f:d3:55:b9:1d:49:5a:05:24:34:62:16:c8:ea:4a:77:6a:73: 9f:ec:5f:0f:13:25:61:b7:21:29:08:61:ec:85:5f:bb:d7:57: bc:91:90:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7SVRZEKEeMIPAoOWduRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZTQyYzU2MGZjMjI4YjViYjRmNGNmMDBlZGUyZGZlMjZj NjYzMGIwHhcNMjUxMjIxMDgwMTA0WhcNMjUxMjIyMDgwMTA0WjAzMTEwLwYDVQQD EyhiMzI5Y2I3ZTAxOTI5M2EyNmI3MGU4ZWI3ZjAzOTNjNGQxYWM1OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG6sxZkjIa0tUMTQWuhASBx+cRSo sM1vuY+XFBksVngZkAqEwf7UwEe1sKTDMm6E5kMfXh6+bMFWTJSPqW54CmKI85+U fU9Oqj91EPfTNpNqCYkszXvxY/UT3HAJYcbF72riqzEMCaJLVOcsToecNSRlDzOh c5kOxvKjxOlAGQhU2SmyLVMaAEFTUrFKjgVZLgZzedUyJqnPiLF07DsMKwfAngCR l4Za4atEKC8woIwMFrQ7eYKro65m2098ZlVy+rL2jjuKA5M1BaHgWtmZL83g6NHF nCPdcVeDTK6bn/ck1E9JbBck5SUyvljnhhOv/vLUnoThFkwGn7g9FuiuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMpy34BkpOia3Do638Dk8TRrFkQMB8GA1UdIwQY MBaAFI3kLFYPwii1u09M8A7eLf4mxmMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMt M2JmODNiN2UxN2JjLzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMtM2JmODNiN2UxN2Jj LzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARx2EwYGW bEsc7dZ1hPNHpRAPXJqRVhz/WdaFNzLtTLEsG8mftbg22Vdmye8KVSwk/iZiYt+y 5N6wUYSeQ33unUrb+69VutS+vmKvfWj4sYhnhoYXFmyZfReahz32CCK2xBLpws/L FlThfhjhP6/1CuzFQyMaiuS4+Yfy4EWk7K5HAq03o71M+YcRuMfHYLw3i3PTmnbG jL1z9g7bqYy1wgv4gDLAZbGXnWXJE0dZmwTo0o1Ubqbh7vydf6MEPemEmKaBlMsq uZfCcy/UvLWw4wabpEQ/NrfdL9NVuR1JWgUkNGIWyOpKd2pzn+xfDxMlYbchKQhh 7IVfu9dXvJGQwQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:02:27 2025 by rpki-client