This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json) Hash identifier: Qmz4BWlNLZkVrW8iKQ212jpJqWAVADHIdr6c7PWVkIg= Subject key identifier: 86:15:55:09:75:1E:8E:07:43:B4:52:66:CE:E5:43:DE:B4:0D:09:85 Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Certificate serial: 019B1FF42758FF61EC133EBE11243AFC5B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft Manifest number: 1249 Signing time: Mon 15 Dec 2025 03:00:53 +0000 Manifest this update: Mon 15 Dec 2025 03:00:53 +0000 Manifest next update: Tue 16 Dec 2025 03:00:53 +0000 Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=) 2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=) 3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=) 4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: I3OhTv0QbPgXPXQ6SEAzi1TH4uOz8A4HbLbRGOLTd94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:27:58:ff:61:ec:13:3e:be:11:24:3a:fc:5b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Validity Not Before: Dec 15 03:00:53 2025 GMT Not After : Dec 16 03:00:53 2025 GMT Subject: CN=86155509751e8e0743b45266cee543deb40d0985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:70:83:76:cd:98:31:8d:75:46:75:72:b4: 58:ef:36:5d:78:09:e5:e6:2b:97:a4:d3:01:c2:1f: 95:fa:8c:29:fc:7b:85:cd:70:04:89:49:0a:e7:16: 51:d5:1c:db:20:1a:c1:c3:84:b0:07:c9:9b:d6:f6: c1:3a:f1:4c:f4:ce:10:90:46:87:d4:e2:f4:5b:6d: 56:77:cc:33:fd:21:4c:14:be:0f:81:24:2a:f4:65: bf:5b:70:c0:34:b8:8d:7c:dc:87:77:d7:df:74:6f: 6a:f0:49:5d:1e:96:57:2e:57:2f:39:7c:e6:b4:51: a8:fd:ed:99:2b:0c:1b:f9:cd:77:6d:b8:88:60:36: 0d:05:fc:e2:a3:ce:89:68:3c:05:e4:a5:88:de:2b: db:8c:05:98:d0:23:11:a7:70:80:b2:35:f4:e1:7e: a7:e9:e7:62:5b:b2:2a:53:bf:c3:c5:b9:5d:eb:2f: eb:a4:15:84:8c:53:8e:1f:4e:d9:10:b7:10:a6:b3: 4b:1c:d3:9e:5b:6d:a7:3a:31:f2:90:59:22:7a:83: 93:27:46:38:bc:df:d1:2a:ef:e9:d5:f4:aa:61:c0: 30:fc:2a:a1:82:97:86:ce:8a:3b:a4:63:6d:13:eb: 6c:70:e0:91:b5:92:be:7c:42:cd:ff:e5:9c:1d:79: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:55:09:75:1E:8E:07:43:B4:52:66:CE:E5:43:DE:B4:0D:09:85 X509v3 Authority Key Identifier: keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:26:db:50:5b:fa:ee:b1:37:7a:75:0b:b6:8f:d6:e2:a0:7e: d9:55:0f:e0:b8:15:58:1a:20:d4:19:c5:f1:70:ce:d3:55:5b: 83:99:35:18:bb:37:fd:77:21:84:07:7e:df:a7:9b:38:37:2d: 82:78:5a:89:a3:b8:91:fe:e5:4a:12:2e:1f:8d:d6:44:30:81: ab:1f:a4:c0:1b:48:5e:20:c6:18:1a:9c:b2:84:a1:df:95:28: 56:cf:1c:27:f5:63:98:ef:b6:c4:4d:1b:02:80:98:83:34:16: bb:38:93:db:94:9e:1d:dd:6d:db:74:c2:43:b0:1e:03:08:82: 56:b3:2b:d4:c2:48:66:df:ac:7b:5f:ac:9b:e1:00:2a:66:35: 7b:e6:a2:e7:83:33:cc:14:e7:9c:fe:5f:3c:e2:81:ca:ca:1b: 2a:31:4a:12:c3:17:64:f2:b3:2b:1f:c8:07:66:ee:c2:39:db: 91:7e:fa:13:99:2c:45:21:68:8f:52:4b:f1:6b:c7:d5:84:1f: 13:e8:d4:f3:2c:86:1c:99:5b:ed:bf:36:0c:a8:70:51:42:5a: 38:10:bc:3e:00:b6:26:00:08:80:57:33:56:2d:77:47:ba:f5: 7c:84:ab:15:e6:f8:27:4e:2c:e9:75:71:32:dc:00:df:15:b7: 75:b7:c9:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9CdY/2HsEz6+ESQ6/FteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5 NzRjZjIwHhcNMjUxMjE1MDMwMDUzWhcNMjUxMjE2MDMwMDUzWjAzMTEwLwYDVQQD Eyg4NjE1NTUwOTc1MWU4ZTA3NDNiNDUyNjZjZWU1NDNkZWI0MGQwOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqtwg3bNmDGNdUZ1crRY7zZdeAnl 5iuXpNMBwh+V+owp/HuFzXAEiUkK5xZR1RzbIBrBw4SwB8mb1vbBOvFM9M4QkEaH 1OL0W21Wd8wz/SFMFL4PgSQq9GW/W3DANLiNfNyHd9ffdG9q8EldHpZXLlcvOXzm tFGo/e2ZKwwb+c13bbiIYDYNBfzio86JaDwF5KWI3ivbjAWY0CMRp3CAsjX04X6n 6ediW7IqU7/Dxbld6y/rpBWEjFOOH07ZELcQprNLHNOeW22nOjHykFkieoOTJ0Y4 vN/RKu/p1fSqYcAw/CqhgpeGzoo7pGNtE+tscOCRtZK+fELN/+WcHXkBhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYVVQl1Ho4HQ7RSZs7lQ960DQmFMB8GA1UdIwQY MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSbbUFv6 7rE3enULto/W4qB+2VUP4LgVWBog1BnF8XDO01Vbg5k1GLs3/XchhAd+36ebODct gnhaiaO4kf7lShIuH43WRDCBqx+kwBtIXiDGGBqcsoSh35UoVs8cJ/VjmO+2xE0b AoCYgzQWuziT25SeHd1t23TCQ7AeAwiCVrMr1MJIZt+se1+sm+EAKmY1e+ai54Mz zBTnnP5fPOKBysobKjFKEsMXZPKzKx/IB2buwjnbkX76E5ksRSFoj1JL8WvH1YQf E+jU8yyGHJlb7b82DKhwUUJaOBC8PgC2JgAIgFczVi13R7r1fISrFeb4J04s6XVx MtwA3xW3dbfJIg== -----END CERTIFICATE-----Generated at Mon Dec 15 08:08:44 2025 by rpki-client