This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json) Hash identifier: NE+NCS1pmfd/5LxcvhGCe+pQbejFBjrqLFWddxk/a5Y= Subject key identifier: 43:46:D6:2E:E1:28:76:2F:E1:09:00:EC:7C:47:79:25:01:9D:DA:4C Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Certificate serial: 019B5B652073E74E1D327DA51A984BE77CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft Manifest number: 0A54 Signing time: Fri 26 Dec 2025 16:01:52 +0000 Manifest this update: Fri 26 Dec 2025 16:01:52 +0000 Manifest next update: Sat 27 Dec 2025 16:01:52 +0000 Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=) 2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: JTr3tFl/TjzDWs6vu11bm2h2mu4G1u0TFAD5LjbcONs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:20:73:e7:4e:1d:32:7d:a5:1a:98:4b:e7:7c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Validity Not Before: Dec 26 16:01:52 2025 GMT Not After : Dec 27 16:01:52 2025 GMT Subject: CN=4346d62ee128762fe10900ec7c477925019dda4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:c4:c8:15:b5:93:ab:db:42:c3:66:af:46: 29:00:1f:1d:9d:a9:42:4e:da:9f:c7:1e:e0:a9:75: d3:e9:a8:3c:f7:00:c8:6d:dc:44:e7:82:e9:07:98: 9b:8a:c1:56:ab:e6:f4:77:18:c9:2d:e2:29:61:6e: bb:23:06:0e:ee:47:fe:26:6b:83:79:9e:fe:a4:b0: cb:44:1d:ee:5c:8c:2a:7b:13:ce:07:d2:ad:50:c2: 3b:de:4f:42:ee:7e:32:57:43:11:00:fb:3d:fd:50: 7f:8d:91:91:a2:2d:eb:a6:9d:48:a2:ff:ed:6c:0e: 1a:d4:ff:9f:4e:e1:f7:7e:45:91:46:c9:49:ab:70: 56:43:e8:29:6d:97:12:1e:ad:58:59:09:ca:a1:f4: 19:f3:fe:f4:69:9f:d5:14:22:54:dd:cc:3d:bd:50: 03:17:b5:db:48:0b:fd:3b:f2:20:b4:74:39:59:be: e5:db:6b:c6:a1:38:e0:8b:15:a8:88:fb:88:1e:5f: 09:5e:99:c5:e6:d6:df:b6:a8:fb:cd:13:b1:9b:7f: 8b:cd:b2:4a:93:08:4f:6a:44:82:eb:c1:98:40:a2: f8:3e:25:a6:0b:7f:c3:47:d6:98:f3:59:20:5a:d7: ce:a6:a0:ed:2d:60:86:04:12:c8:78:96:16:41:be: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:D6:2E:E1:28:76:2F:E1:09:00:EC:7C:47:79:25:01:9D:DA:4C X509v3 Authority Key Identifier: keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:63:af:88:e2:8c:73:b9:69:f0:81:ff:54:87:2f:bf:8e: 27:89:a0:2d:5b:ad:c9:b7:6e:9a:c1:68:ef:64:6f:7f:db:10: 22:ed:b0:81:39:9b:6c:0b:3b:ec:8e:d0:52:88:fc:0c:a3:62: e3:ad:43:ab:61:60:74:77:6d:21:a6:32:5f:31:da:6e:df:1c: 07:db:a4:50:02:75:bb:f5:5b:54:5f:12:78:7e:18:4a:31:bf: d4:b6:be:5d:83:bf:5d:31:e6:54:d3:12:e4:2e:dc:8d:5d:24: e9:7b:e0:60:f6:aa:3a:35:d9:5c:fd:3d:e5:7a:87:5f:fd:82: 86:84:36:30:5f:95:92:e3:6b:29:4c:2b:e5:fb:62:51:28:d0: c2:82:85:08:3b:fc:84:b0:59:d9:4c:07:04:b1:0f:20:f9:64: 18:f2:ff:ab:e5:c6:37:e1:aa:82:88:07:bb:1b:d1:ce:a5:d5: 1d:b3:d2:0c:b0:3e:f3:8c:48:70:78:43:12:c5:d8:8d:38:19: 5a:f1:62:d4:14:b6:3e:22:a7:d9:3d:d0:06:ae:ec:af:ae:83: e1:5e:5d:9f:6c:37:54:b1:c1:82:0a:9a:6c:64:b4:68:53:80: aa:ec:3e:3e:57:d8:42:b0:4a:18:10:8f:49:7d:7b:e1:ef:25: 7b:31:0b:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZSBz504dMn2lGphL53zbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjQzYWJiN2M1NzFhYWE5Y2UyMjNjZjYxYzQ3ZTU0Zjll MWNhM2IwHhcNMjUxMjI2MTYwMTUyWhcNMjUxMjI3MTYwMTUyWjAzMTEwLwYDVQQD Eyg0MzQ2ZDYyZWUxMjg3NjJmZTEwOTAwZWM3YzQ3NzkyNTAxOWRkYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+XEyBW1k6vbQsNmr0YpAB8dnalC Ttqfxx7gqXXT6ag89wDIbdxE54LpB5ibisFWq+b0dxjJLeIpYW67IwYO7kf+JmuD eZ7+pLDLRB3uXIwqexPOB9KtUMI73k9C7n4yV0MRAPs9/VB/jZGRoi3rpp1Iov/t bA4a1P+fTuH3fkWRRslJq3BWQ+gpbZcSHq1YWQnKofQZ8/70aZ/VFCJU3cw9vVAD F7XbSAv9O/IgtHQ5Wb7l22vGoTjgixWoiPuIHl8JXpnF5tbftqj7zROxm3+LzbJK kwhPakSC68GYQKL4PiWmC3/DR9aY81kgWtfOpqDtLWCGBBLIeJYWQb7JgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENG1i7hKHYv4QkA7HxHeSUBndpMMB8GA1UdIwQY MBaAFI0kOrt8VxqqnOIjz2HEflT54co7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3Nzgt MTUxODVmNGRkOTU1LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3NzgtMTUxODVmNGRkOTU1 LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnJjr4ji jHO5afCB/1SHL7+OJ4mgLVutybdumsFo72Rvf9sQIu2wgTmbbAs77I7QUoj8DKNi 461Dq2FgdHdtIaYyXzHabt8cB9ukUAJ1u/VbVF8SeH4YSjG/1La+XYO/XTHmVNMS 5C7cjV0k6XvgYPaqOjXZXP095XqHX/2ChoQ2MF+VkuNrKUwr5ftiUSjQwoKFCDv8 hLBZ2UwHBLEPIPlkGPL/q+XGN+GqgogHuxvRzqXVHbPSDLA+84xIcHhDEsXYjTgZ WvFi1BS2PiKn2T3QBq7sr66D4V5dn2w3VLHBggqabGS0aFOAquw+PlfYQrBKGBCP SX174e8lezELLg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:44 2025 by rpki-client