This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json) Hash identifier: SR99urxH5cKcJ8vbLpCwlxFA0Fo71gv62Jk64LSHXkE= Subject key identifier: EB:CB:E1:8A:BF:6F:92:39:A1:AF:3B:72:B1:FE:B3:22:62:24:F5:8B Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74 Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874 Certificate serial: 019B341F968F7C9EE2608D55520A45F2509A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 01:00:43 +0000 Manifest this update: Fri 19 Dec 2025 01:00:43 +0000 Manifest next update: Sat 20 Dec 2025 01:00:43 +0000 Files and hashes: 1: 13LPCIXvES8LEtmN2UIoYKY4n_Y.roa (hash: 4LIMWZOg9N973/gN0CnLf86/GLDB8ETEhEs1Mg+FxZA=) 2: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: Zg/yuxwd27DDsnR44mJdyusYbERFvi7XuGWfEP70dS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:96:8f:7c:9e:e2:60:8d:55:52:0a:45:f2:50:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874 Validity Not Before: Dec 19 01:00:43 2025 GMT Not After : Dec 20 01:00:43 2025 GMT Subject: CN=ebcbe18abf6f9239a1af3b72b1feb3226224f58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:1c:45:ab:6a:9a:f8:87:c5:33:dd:fd:10: 29:79:60:00:83:d3:c4:00:bf:38:64:c9:21:a6:e3: 28:99:2a:24:3a:22:44:ee:9b:b4:ef:7a:e1:a4:6d: 79:2d:d7:c2:c5:29:54:8f:16:6e:22:91:f1:a9:a6: e4:46:82:f8:b3:e2:44:cc:4b:7d:2a:8a:00:9a:9d: fe:2e:a5:47:5a:1a:a0:d0:81:eb:ed:4b:ba:88:8f: 64:9d:ff:ad:be:63:42:a0:ef:a0:27:e4:e9:d0:41: 96:9a:d2:38:8d:7b:e6:13:87:dc:de:e3:76:30:98: e8:67:0e:63:88:70:48:e2:fa:5e:7b:12:8b:0a:80: 4a:a1:70:2a:08:76:b0:6b:18:63:90:af:5b:ef:08: 29:5e:bf:d4:40:28:27:66:c2:5f:ff:4a:cb:28:05: 98:95:3f:d1:5c:d9:8e:6f:5b:fd:d7:1a:05:1b:8c: fb:80:3e:8e:b9:5b:97:32:32:ba:03:b2:b2:52:d9: ff:f8:a9:f6:7d:09:a0:01:7a:fe:39:0e:c3:77:61: c3:80:da:35:fb:ae:8c:33:b9:83:09:f8:e9:d5:32: e6:0e:a6:53:d6:37:30:84:28:f3:15:db:a4:ae:3d: f4:be:09:b8:dc:bb:8b:fa:a2:67:fd:f0:33:79:24: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CB:E1:8A:BF:6F:92:39:A1:AF:3B:72:B1:FE:B3:22:62:24:F5:8B X509v3 Authority Key Identifier: keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:93:1a:33:9a:43:76:d5:75:b5:7f:59:0b:1b:72:74:d7:88: 65:78:6d:30:ef:e8:70:71:5f:10:dd:72:aa:65:9c:aa:a1:f2: bd:a2:91:4f:38:38:30:d1:41:ab:5f:5c:b8:d3:e5:0e:46:19: e6:e5:ec:75:83:e4:1e:42:18:31:ae:68:c3:c5:0c:e0:35:94: ac:91:b8:0e:8a:1b:6f:4a:6d:13:d2:5c:11:5e:a9:24:06:c9: e7:62:99:0e:58:44:21:88:a6:70:ca:d7:46:82:59:cf:8b:05: 79:cd:7c:30:1d:98:f3:73:0e:f3:48:7e:52:fe:f0:b6:72:8f: d1:a8:8c:f6:71:1a:bd:1f:b4:84:fc:bb:4f:16:fb:f8:e0:14: 4c:59:30:3d:e9:d9:c0:32:67:2f:1f:6d:06:f9:64:45:40:b6: 83:8e:8b:5b:f9:e6:92:8a:4d:4c:b3:ae:1a:54:91:1e:c5:63: ad:6d:c1:49:50:c7:b9:70:17:d1:c8:28:3a:bd:4f:02:b4:42: 48:d8:8b:a1:7a:02:a8:4d:4a:46:b5:51:98:ec:b7:aa:00:f4: d1:47:f6:f9:fc:d0:b0:9a:19:32:99:ea:e1:6d:6f:16:cf:e1: f5:08:de:ad:67:e1:99:28:fd:1a:9e:a7:9c:d8:18:03:17:a5: 26:18:c2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5aPfJ7iYI1VUgpF8lCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MzhlNzkxNmRjNjRjZDYxMDBjYzEwZjZmYWE2YmNi YTE4NzQwHhcNMjUxMjE5MDEwMDQzWhcNMjUxMjIwMDEwMDQzWjAzMTEwLwYDVQQD EyhlYmNiZTE4YWJmNmY5MjM5YTFhZjNiNzJiMWZlYjMyMjYyMjRmNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnwcRatqmviHxTPd/RApeWAAg9PE AL84ZMkhpuMomSokOiJE7pu073rhpG15LdfCxSlUjxZuIpHxqabkRoL4s+JEzEt9 KooAmp3+LqVHWhqg0IHr7Uu6iI9knf+tvmNCoO+gJ+Tp0EGWmtI4jXvmE4fc3uN2 MJjoZw5jiHBI4vpeexKLCoBKoXAqCHawaxhjkK9b7wgpXr/UQCgnZsJf/0rLKAWY lT/RXNmOb1v91xoFG4z7gD6OuVuXMjK6A7KyUtn/+Kn2fQmgAXr+OQ7Dd2HDgNo1 +66MM7mDCfjp1TLmDqZT1jcwhCjzFdukrj30vgm43LuL+qJn/fAzeSRO/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvL4Yq/b5I5oa87crH+syJiJPWLMB8GA1UdIwQY MBaAFCaPU455FtxkzWEAzBD2+qa8uhh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMt NjBkYjNmNWVmZDllLzEvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMtNjBkYjNmNWVmZDll LzEvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapMaM5pD dtV1tX9ZCxtydNeIZXhtMO/ocHFfEN1yqmWcqqHyvaKRTzg4MNFBq19cuNPlDkYZ 5uXsdYPkHkIYMa5ow8UM4DWUrJG4Doobb0ptE9JcEV6pJAbJ52KZDlhEIYimcMrX RoJZz4sFec18MB2Y83MO80h+Uv7wtnKP0aiM9nEavR+0hPy7Txb7+OAUTFkwPenZ wDJnLx9tBvlkRUC2g46LW/nmkopNTLOuGlSRHsVjrW3BSVDHuXAX0cgoOr1PArRC SNiLoXoCqE1KRrVRmOy3qgD00Uf2+fzQsJoZMpnq4W1vFs/h9QjerWfhmSj9Gp6n nNgYAxelJhjCAA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:12:55 2025 by rpki-client