This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json) Hash identifier: U1LnVHy5mR6XnN06oKtuC1xtU5L3y4gSUQfPdbg2ft8= Subject key identifier: 25:30:12:F3:70:34:F6:31:DF:B3:80:AE:F7:BA:3B:9B:DE:BF:92:FC Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Certificate serial: 019B0F6E6C2F303AD2AD2A05ADB0E149E732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft Manifest number: 0C19 Signing time: Thu 11 Dec 2025 22:00:53 +0000 Manifest this update: Thu 11 Dec 2025 22:00:53 +0000 Manifest next update: Fri 12 Dec 2025 22:00:53 +0000 Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=) 2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: UxIpESd1CAbRN0aCtlhak0PykV/a1kECzfZv+dYYIXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:6c:2f:30:3a:d2:ad:2a:05:ad:b0:e1:49:e7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3 Validity Not Before: Dec 11 22:00:53 2025 GMT Not After : Dec 12 22:00:53 2025 GMT Subject: CN=253012f37034f631dfb380aef7ba3b9bdebf92fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:e6:7f:e3:72:46:d0:6b:2c:0d:f5:a6:54: 8d:ca:ef:32:54:aa:01:4b:7a:06:16:28:13:50:9f: 4a:3e:ef:37:9a:2e:7f:c9:31:c1:15:9f:2e:d2:eb: 08:f4:45:d3:20:e9:08:2e:22:ea:c1:f8:a5:aa:b8: 5b:c1:9c:27:4d:8d:7f:43:69:e2:71:58:51:ea:80: 94:8c:4e:24:34:22:3f:8c:85:c6:55:10:ba:66:9d: 8e:04:36:da:c4:92:a1:9e:3e:eb:8b:ac:f4:67:ee: 12:18:08:cd:74:6d:12:ea:d7:19:38:86:cc:c6:b7: ed:c8:07:0e:b0:43:ba:8b:84:8e:43:bb:d5:10:a9: 31:b9:57:34:b6:7a:d1:7f:2b:47:8b:c0:c4:ab:28: 81:5a:25:73:31:55:fd:03:ec:70:33:e3:8c:62:45: 00:1f:4e:e1:cf:08:cd:eb:7f:df:6d:a0:88:00:03: c5:b8:2a:ef:a0:73:e7:96:55:dd:66:21:11:f2:42: 76:a6:aa:38:53:b7:de:fc:2b:57:9f:a5:44:82:64: a8:61:77:5e:26:13:34:60:21:51:06:de:e7:cb:55: f5:4a:f1:3b:f5:ea:9a:22:9d:bc:d0:ec:22:bf:0f: 69:e3:5a:af:93:9c:8c:8c:94:c9:7d:f0:7e:6e:d8: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:12:F3:70:34:F6:31:DF:B3:80:AE:F7:BA:3B:9B:DE:BF:92:FC X509v3 Authority Key Identifier: keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:51:4c:fe:d0:d1:7c:99:1b:e6:01:e4:0a:ad:01:b8:5a: 80:8c:81:2d:8a:77:f6:ae:1c:a5:b7:be:19:8a:e6:d7:98:f1: 18:b2:2b:52:32:71:80:11:3c:42:cb:3c:ee:55:84:91:26:fe: c8:c4:73:cf:3d:f1:07:7d:a8:52:96:3f:33:f6:7b:bf:1d:21: 83:1d:02:66:0a:8a:a0:6f:3e:97:91:b9:f6:77:82:52:da:98: 8a:ec:3d:2d:3c:e7:5a:2e:2b:b3:c6:4d:0d:29:28:48:9d:6a: 57:53:a9:f5:e5:ff:0c:ce:2e:d1:5c:aa:81:f3:b8:7e:b9:d0: 8d:a0:e6:2e:15:6e:2d:69:33:71:0e:9d:81:8b:b3:9c:c7:38: 9d:14:ac:4d:70:18:46:46:06:f5:17:7e:9a:07:86:72:31:7e: d2:52:52:37:35:9b:46:84:a6:bf:0a:65:5f:46:c5:f6:34:7c: 90:ed:fe:f6:c1:d3:f1:93:71:6e:e5:57:70:7b:d1:2f:ea:45: 26:89:93:52:29:42:91:ac:b1:6f:61:9c:c5:7b:11:79:64:c2: 2d:13:40:03:83:93:58:6f:04:d6:fa:b4:42:8c:4c:b1:f1:0c: f3:66:15:56:2b:94:e4:cc:66:05:73:fb:72:83:d3:aa:18:9b: 61:7a:05:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmwvMDrSrSoFrbDhSecyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4 NzZjZDMwHhcNMjUxMjExMjIwMDUzWhcNMjUxMjEyMjIwMDUzWjAzMTEwLwYDVQQD EygyNTMwMTJmMzcwMzRmNjMxZGZiMzgwYWVmN2JhM2I5YmRlYmY5MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzmf+NyRtBrLA31plSNyu8yVKoB S3oGFigTUJ9KPu83mi5/yTHBFZ8u0usI9EXTIOkILiLqwfilqrhbwZwnTY1/Q2ni cVhR6oCUjE4kNCI/jIXGVRC6Zp2OBDbaxJKhnj7ri6z0Z+4SGAjNdG0S6tcZOIbM xrftyAcOsEO6i4SOQ7vVEKkxuVc0tnrRfytHi8DEqyiBWiVzMVX9A+xwM+OMYkUA H07hzwjN63/fbaCIAAPFuCrvoHPnllXdZiER8kJ2pqo4U7fe/CtXn6VEgmSoYXde JhM0YCFRBt7ny1X1SvE79eqaIp280Owivw9p41qvk5yMjJTJffB+bth9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUwEvNwNPYx37OArve6O5vev5L8MB8GA1UdIwQY MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0 LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAppRTP7Q 0XyZG+YB5AqtAbhagIyBLYp39q4cpbe+GYrm15jxGLIrUjJxgBE8Qss87lWEkSb+ yMRzzz3xB32oUpY/M/Z7vx0hgx0CZgqKoG8+l5G59neCUtqYiuw9LTznWi4rs8ZN DSkoSJ1qV1Op9eX/DM4u0VyqgfO4frnQjaDmLhVuLWkzcQ6dgYuznMc4nRSsTXAY RkYG9Rd+mgeGcjF+0lJSNzWbRoSmvwplX0bF9jR8kO3+9sHT8ZNxbuVXcHvRL+pF JomTUilCkayxb2GcxXsReWTCLRNAA4OTWG8E1vq0QoxMsfEM82YVViuU5MxmBXP7 coPTqhibYXoF8w== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:33 2025 by rpki-client