This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json) Hash identifier: +T4+V+mlZQR8DZkXE3+Eq3XA297j+N0IHhT5f8MAV5Q= Subject key identifier: A5:C6:95:16:0D:19:62:7D:56:51:F0:BD:2C:4A:97:3C:59:0F:49:D4 Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf Certificate serial: 019B0F6EAB5F4558E3C40F02AF516C48082E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft Manifest number: 1397 Signing time: Thu 11 Dec 2025 22:01:09 +0000 Manifest this update: Thu 11 Dec 2025 22:01:09 +0000 Manifest next update: Fri 12 Dec 2025 22:01:09 +0000 Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=) 2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: PerS9v0fNskGZt1HU2bLK1Mkp+pvGQmBG7Bv3WIMyKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:ab:5f:45:58:e3:c4:0f:02:af:51:6c:48:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf Validity Not Before: Dec 11 22:01:09 2025 GMT Not After : Dec 12 22:01:09 2025 GMT Subject: CN=a5c695160d19627d5651f0bd2c4a973c590f49d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:5c:2b:41:5b:24:b6:a8:1b:72:ae:aa:01: 26:89:c4:88:1e:a8:38:89:b7:c1:29:e6:bd:17:c2: a2:7c:74:08:54:6f:50:fe:05:93:be:4d:ab:02:ea: f2:23:34:c9:37:ec:9e:d3:b8:0f:87:13:a1:2c:0b: 0e:cb:f2:14:71:5b:81:17:8b:6c:59:24:d7:b8:84: 2a:24:9a:c7:28:c2:8f:a5:aa:a5:7a:17:5d:4b:39: 86:4b:d7:69:92:b4:d3:3e:7e:ba:5e:2b:07:5a:c8: 5b:03:d8:45:01:df:70:b9:f8:46:bc:11:03:8b:d1: e9:21:64:ef:56:64:36:cd:47:65:1e:ea:4f:3e:05: 52:01:70:cf:c6:ab:5f:62:10:4e:d8:db:71:d3:b0: 70:0d:c2:94:90:4d:14:ab:54:0d:ce:97:fc:79:21: 39:5d:09:5c:93:b3:9b:63:b4:59:52:b3:47:50:59: 9b:a1:52:29:09:d3:24:6f:21:14:3c:b8:de:67:28: 2b:c6:01:05:d6:21:b4:f5:26:94:c4:f2:c2:79:8c: bf:3e:80:73:4d:12:5c:23:43:2a:57:96:36:8d:a5: 55:ad:a7:c4:18:b3:0b:87:d8:dd:e7:b5:b5:bf:61: 48:5c:e8:2a:18:20:47:49:fa:2d:4c:0d:46:00:b1: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C6:95:16:0D:19:62:7D:56:51:F0:BD:2C:4A:97:3C:59:0F:49:D4 X509v3 Authority Key Identifier: keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c5:48:17:e0:fc:45:81:f3:33:88:6a:61:1d:03:25:16:4d: c2:b5:3f:cc:35:49:e3:ab:b8:a0:57:cc:69:81:3e:0f:9e:52: e1:54:99:14:45:b8:51:3d:ab:eb:74:90:61:b7:fe:8a:49:f2: 00:b2:88:76:a8:4a:7d:cb:25:97:e3:62:d1:a7:91:eb:77:01: 13:0d:07:e0:70:01:58:9d:bb:22:62:50:02:89:16:f4:0a:78: a4:cf:ba:14:8d:64:aa:e2:22:e7:ca:74:89:a8:63:b5:9e:5f: 8b:dd:4a:cf:5f:ba:c5:1a:76:fc:44:48:bf:6b:70:60:88:08: f9:af:4c:04:ea:96:80:31:67:13:ff:7d:d1:f6:d3:6d:e4:72: 45:4b:56:bb:f8:c9:79:9d:93:1e:6d:37:80:2e:27:4b:01:b8: 58:de:2d:3a:e7:9a:fa:13:61:b7:fc:37:9b:fb:ce:fd:f1:83: 58:9a:cf:90:03:15:e2:4b:38:4f:7d:4b:4d:ba:70:38:ff:6d: 16:25:c5:e0:8e:97:e0:a5:6d:75:1c:a3:08:de:1f:14:7a:9a: 42:3d:44:ea:ed:0b:d8:4a:9d:0c:7c:cd:b4:0c:db:97:02:7d: c0:1a:b7:e3:0c:0a:6d:46:92:b5:e6:1a:54:9f:a5:da:f1:db: 31:e7:64:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbqtfRVjjxA8Cr1FsSAguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk NzBmY2YwHhcNMjUxMjExMjIwMTA5WhcNMjUxMjEyMjIwMTA5WjAzMTEwLwYDVQQD EyhhNWM2OTUxNjBkMTk2MjdkNTY1MWYwYmQyYzRhOTczYzU5MGY0OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1cK0FbJLaoG3KuqgEmicSIHqg4 ibfBKea9F8KifHQIVG9Q/gWTvk2rAuryIzTJN+ye07gPhxOhLAsOy/IUcVuBF4ts WSTXuIQqJJrHKMKPpaqlehddSzmGS9dpkrTTPn66XisHWshbA9hFAd9wufhGvBED i9HpIWTvVmQ2zUdlHupPPgVSAXDPxqtfYhBO2Ntx07BwDcKUkE0Uq1QNzpf8eSE5 XQlck7ObY7RZUrNHUFmboVIpCdMkbyEUPLjeZygrxgEF1iG09SaUxPLCeYy/PoBz TRJcI0MqV5Y2jaVVrafEGLMLh9jd57W1v2FIXOgqGCBHSfotTA1GALFaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXGlRYNGWJ9VlHwvSxKlzxZD0nUMB8GA1UdIwQY MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It MGFlNjk2YmQzNjhhLzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8VIF+D8 RYHzM4hqYR0DJRZNwrU/zDVJ46u4oFfMaYE+D55S4VSZFEW4UT2r63SQYbf+ikny ALKIdqhKfcsll+Ni0aeR63cBEw0H4HABWJ27ImJQAokW9Ap4pM+6FI1kquIi58p0 iahjtZ5fi91Kz1+6xRp2/ERIv2twYIgI+a9MBOqWgDFnE/990fbTbeRyRUtWu/jJ eZ2THm03gC4nSwG4WN4tOuea+hNht/w3m/vO/fGDWJrPkAMV4ks4T31LTbpwOP9t FiXF4I6X4KVtdRyjCN4fFHqaQj1E6u0L2EqdDHzNtAzblwJ9wBq34wwKbUaSteYa VJ+l2vHbMedkSg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:36:46 2025 by rpki-client