This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json) Hash identifier: UxtS+ssdKtkjEmEMojjb9IPIbXH+27sgzuAkCNHHZjw= Subject key identifier: E3:AB:7F:61:F7:2E:B0:69:FD:F2:BB:7E:1A:E6:63:27:42:6C:0C:5D Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e Certificate serial: 019B4392F05E6BD6B8AEFDC4CDF479F7E4E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft Manifest number: 0437 Signing time: Mon 22 Dec 2025 01:01:01 +0000 Manifest this update: Mon 22 Dec 2025 01:01:01 +0000 Manifest next update: Tue 23 Dec 2025 01:01:01 +0000 Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=) 2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=) 3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: mJOZybmtRd8y96meO8KG9kL4hOP/ti+v4J7qzMQzglI=) 4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:f0:5e:6b:d6:b8:ae:fd:c4:cd:f4:79:f7:e4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e Validity Not Before: Dec 22 01:01:01 2025 GMT Not After : Dec 23 01:01:01 2025 GMT Subject: CN=e3ab7f61f72eb069fdf2bb7e1ae66327426c0c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:8d:ce:e9:14:86:80:d1:73:e9:7c:41:fb: 76:7c:7d:3e:47:69:87:05:76:a2:04:55:79:5a:f2: a1:1f:39:68:d7:31:77:d0:ca:41:bc:d0:0e:33:82: eb:47:35:16:1e:a4:66:5c:4c:84:8d:9f:eb:db:e0: 53:6a:f2:44:62:62:1a:4c:d1:55:e7:3e:84:de:9e: 78:b9:12:e1:a1:2c:e1:c4:6b:84:6f:72:92:42:f1: 7c:dd:5f:e8:ad:19:bf:56:c8:7e:66:ec:ef:10:0c: 57:cf:3a:4a:95:6f:d6:da:bf:e6:a5:94:23:c2:3b: 6f:47:57:a8:4d:81:db:81:da:ea:1e:20:86:22:ec: e8:1f:e2:81:d7:d2:a6:ee:bb:cc:5a:a1:65:87:cb: 28:0c:19:fe:99:80:92:9d:59:60:6c:d4:dd:8b:99: 93:f8:08:fd:f4:ed:ad:ff:fe:b9:6b:a0:3e:0f:43: 48:01:37:9d:3f:95:cf:84:7d:ed:7e:2b:01:85:fa: 61:dc:7f:0a:6d:34:6a:ec:fc:22:18:6d:c4:d0:29: e5:d7:4f:89:bc:82:ef:83:43:dc:d6:a3:5c:94:b6: 34:54:96:f1:95:38:a5:83:7a:b7:07:bf:39:0b:0a: 75:f4:54:c4:50:22:06:9a:7a:8a:61:07:1a:e4:14: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AB:7F:61:F7:2E:B0:69:FD:F2:BB:7E:1A:E6:63:27:42:6C:0C:5D X509v3 Authority Key Identifier: keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d2:d6:19:38:91:e5:6b:19:d6:c4:f7:e9:a7:77:cc:0c:27: 70:db:85:04:1e:f3:8d:05:b4:d6:fe:c3:94:f7:88:f7:ff:88: f6:77:a1:82:0b:1b:2a:bf:4b:df:fb:6b:aa:d8:99:82:bd:51: 28:1e:70:08:d0:3d:bf:fc:37:8f:b1:46:46:a4:ce:e8:4c:d4: cf:9c:dc:3e:ea:12:9c:12:6d:42:6f:37:ea:3a:59:ff:97:eb: 15:06:8e:58:8f:9a:11:a7:4c:7a:d9:59:7f:76:97:bb:5d:c0: 11:3a:42:1e:bd:08:d3:e1:27:9c:69:be:67:ad:0d:5b:b8:02: 50:64:f0:1b:97:dc:29:a9:de:1a:16:a3:8b:09:2c:45:d0:e0: 70:36:85:5c:69:bc:c7:fc:62:4b:aa:88:80:46:55:44:f0:be: e7:5b:18:b7:5b:bc:c1:65:3b:6e:ca:15:98:f9:b5:1d:a4:4a: 9f:52:ec:e8:56:04:98:d5:dc:a9:75:ab:b6:9b:41:b0:50:ee: b2:57:cf:17:8a:b8:b5:2a:f3:8c:ef:1a:68:e4:64:83:ef:51: 70:87:f9:7a:79:87:90:e6:81:58:f9:1e:7d:5f:24:e0:78:90: eb:3d:2a:07:0f:ce:60:44:0f:9e:41:b5:f8:7a:43:55:da:f2: 05:fc:79:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkvBea9a4rv3EzfR59+TlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm MTZjMmUwHhcNMjUxMjIyMDEwMTAxWhcNMjUxMjIzMDEwMTAxWjAzMTEwLwYDVQQD EyhlM2FiN2Y2MWY3MmViMDY5ZmRmMmJiN2UxYWU2NjMyNzQyNmMwYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIyNzukUhoDRc+l8Qft2fH0+R2mH BXaiBFV5WvKhHzlo1zF30MpBvNAOM4LrRzUWHqRmXEyEjZ/r2+BTavJEYmIaTNFV 5z6E3p54uRLhoSzhxGuEb3KSQvF83V/orRm/Vsh+ZuzvEAxXzzpKlW/W2r/mpZQj wjtvR1eoTYHbgdrqHiCGIuzoH+KB19Km7rvMWqFlh8soDBn+mYCSnVlgbNTdi5mT +Aj99O2t//65a6A+D0NIATedP5XPhH3tfisBhfph3H8KbTRq7PwiGG3E0Cnl10+J vILvg0Pc1qNclLY0VJbxlTilg3q3B785Cwp19FTEUCIGmnqKYQca5BR1lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOrf2H3LrBp/fK7fhrmYydCbAxdMB8GA1UdIwQY MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt ZjgzOTQ2YzJjODJlLzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9LWGTiR 5WsZ1sT36ad3zAwncNuFBB7zjQW01v7DlPeI9/+I9nehggsbKr9L3/trqtiZgr1R KB5wCNA9v/w3j7FGRqTO6EzUz5zcPuoSnBJtQm836jpZ/5frFQaOWI+aEadMetlZ f3aXu13AETpCHr0I0+EnnGm+Z60NW7gCUGTwG5fcKaneGhajiwksRdDgcDaFXGm8 x/xiS6qIgEZVRPC+51sYt1u8wWU7bsoVmPm1HaRKn1Ls6FYEmNXcqXWrtptBsFDu slfPF4q4tSrzjO8aaORkg+9RcIf5enmHkOaBWPkefV8k4HiQ6z0qBw/OYEQPnkG1 +HpDVdryBfx50g== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:53 2025 by rpki-client