This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json) Hash identifier: LybQtOumTnEDByHyLvGHxIRL17jKwUuzIGocACRDpWo= Subject key identifier: F2:19:DA:51:54:F3:C6:30:FC:96:19:AD:0B:34:E5:EE:4D:22:0C:14 Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Certificate serial: 019B21AC07FC0B1C1B932DE5FC1BD1EEA88A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft Manifest number: 06ED Signing time: Mon 15 Dec 2025 11:01:20 +0000 Manifest this update: Mon 15 Dec 2025 11:01:20 +0000 Manifest next update: Tue 16 Dec 2025 11:01:20 +0000 Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=) 2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: xCg2VzYHBPYN2C8wLOvbm+/ZKwtGVe+TrXdiLCbGpKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ac:07:fc:0b:1c:1b:93:2d:e5:fc:1b:d1:ee:a8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Validity Not Before: Dec 15 11:01:20 2025 GMT Not After : Dec 16 11:01:20 2025 GMT Subject: CN=f219da5154f3c630fc9619ad0b34e5ee4d220c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:cb:5e:c9:9c:fb:b9:0f:67:c8:65:37:62: bf:91:41:5f:e5:b1:54:70:06:bf:d9:25:59:ac:2f: 80:5b:11:a7:26:35:7e:51:54:53:30:6f:24:a3:0b: a0:fe:17:ce:af:8c:6c:93:50:ac:67:9b:76:2e:3d: b8:ba:c4:6b:83:f0:92:26:fc:51:5b:61:40:08:c6: 08:9d:de:6e:f7:26:03:47:d2:25:81:90:cb:b9:ba: 1c:b2:68:72:b4:a1:3c:32:53:b5:cb:6a:31:47:ad: 1e:14:95:41:63:7a:88:05:f9:49:12:2c:04:db:64: 65:d6:c0:97:b0:7c:02:1f:f2:66:47:e6:f5:40:ec: b5:37:98:3e:37:38:11:f0:33:fc:35:72:46:e4:d1: 81:fe:86:e7:b0:78:ae:c8:70:bf:a4:0b:d5:bb:1d: c0:68:0a:1a:be:d5:d0:d5:51:9f:49:1b:ee:ec:61: 83:31:34:93:65:62:0d:1a:a2:e4:85:59:d2:57:7a: 5b:c6:f3:5a:11:5f:67:54:03:ce:8b:bd:ae:33:bb: 22:35:90:63:55:e6:53:c4:d5:fc:c8:da:d2:27:09: 65:79:f9:47:40:6e:61:10:5d:29:53:54:25:e0:de: b1:3c:94:35:2e:12:06:97:91:95:e7:76:bb:76:fb: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:19:DA:51:54:F3:C6:30:FC:96:19:AD:0B:34:E5:EE:4D:22:0C:14 X509v3 Authority Key Identifier: keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:bf:c5:69:b1:fc:e6:06:4a:02:58:65:e9:e4:7d:e2:bd: 44:dc:d0:54:8f:56:d2:1d:f7:b3:7b:1f:e2:2e:f6:7c:bb:7b: a8:2f:4e:6a:e7:1b:bf:df:cb:de:21:ee:6e:dd:d2:0b:ab:85: 61:44:b5:41:89:8e:41:3a:df:d7:71:de:3f:a8:60:d8:44:3d: d9:44:1c:c8:74:68:6b:fc:86:80:16:b5:fd:0a:4d:94:60:15: 0a:8f:1d:3b:87:ab:46:54:ca:50:aa:d1:45:41:f5:cb:85:ac: 23:1e:0f:09:24:b2:a9:f6:e8:cb:af:64:b3:4e:e8:1b:b8:59: 4e:e0:17:80:18:34:57:c2:ec:ad:e2:64:09:7d:94:46:8a:58: 2b:c2:ca:5d:7f:4f:13:18:f7:c7:5f:a0:17:65:ce:52:5a:76: 01:1a:58:f4:25:57:f7:17:91:5e:1f:b2:c7:34:47:87:ed:e2: 88:6b:ab:ca:ca:36:96:ce:9f:80:58:cd:5e:ec:37:5c:1c:f6: 69:36:3d:19:7a:21:2e:df:6d:1f:01:15:51:cc:bd:0e:17:02: 94:17:43:b7:51:6b:94:d8:c3:d0:73:e2:7f:31:0b:ca:03:48: e9:6b:cc:a7:5c:81:4d:65:69:2d:e5:3a:9c:58:de:d9:a0:9f: a6:2f:d7:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshrAf8Cxwbky3l/BvR7qiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTI4MmE1NzZmZDYyYTBhMjQxNjZiNWVjMWYxMjRlNDI1 OGRiNDkwHhcNMjUxMjE1MTEwMTIwWhcNMjUxMjE2MTEwMTIwWjAzMTEwLwYDVQQD EyhmMjE5ZGE1MTU0ZjNjNjMwZmM5NjE5YWQwYjM0ZTVlZTRkMjIwYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLbLXsmc+7kPZ8hlN2K/kUFf5bFU cAa/2SVZrC+AWxGnJjV+UVRTMG8kowug/hfOr4xsk1CsZ5t2Lj24usRrg/CSJvxR W2FACMYInd5u9yYDR9IlgZDLubocsmhytKE8MlO1y2oxR60eFJVBY3qIBflJEiwE 22Rl1sCXsHwCH/JmR+b1QOy1N5g+NzgR8DP8NXJG5NGB/obnsHiuyHC/pAvVux3A aAoavtXQ1VGfSRvu7GGDMTSTZWINGqLkhVnSV3pbxvNaEV9nVAPOi72uM7siNZBj VeZTxNX8yNrSJwlleflHQG5hEF0pU1Ql4N6xPJQ1LhIGl5GV53a7dvt6owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIZ2lFU88Yw/JYZrQs05e5NIgwUMB8GA1UdIwQY MBaAFPySgqV2/WKgokFmtewfEk5CWNtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjIt NWNlOTgzMmU3NDk1LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjItNWNlOTgzMmU3NDk1 LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdO/xWmx /OYGSgJYZenkfeK9RNzQVI9W0h33s3sf4i72fLt7qC9Oaucbv9/L3iHubt3SC6uF YUS1QYmOQTrf13HeP6hg2EQ92UQcyHRoa/yGgBa1/QpNlGAVCo8dO4erRlTKUKrR RUH1y4WsIx4PCSSyqfboy69ks07oG7hZTuAXgBg0V8LsreJkCX2URopYK8LKXX9P Exj3x1+gF2XOUlp2ARpY9CVX9xeRXh+yxzRHh+3iiGuryso2ls6fgFjNXuw3XBz2 aTY9GXohLt9tHwEVUcy9DhcClBdDt1FrlNjD0HPifzELygNI6WvMp1yBTWVpLeU6 nFje2aCfpi/X7Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:28 2025 by rpki-client