This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json) Hash identifier: rasUtZYVXLrgfbPVPn38hOZA7pgjajxwZZKqe5K2xqY= Subject key identifier: 18:5D:19:11:A3:03:C6:D1:17:1C:85:7A:C3:CE:BF:7B:A5:DC:13:80 Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Certificate serial: 019B2061F8AFC640F8ABB8DBB5B8647F18E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft Manifest number: 0A43 Signing time: Mon 15 Dec 2025 05:00:50 +0000 Manifest this update: Mon 15 Dec 2025 05:00:50 +0000 Manifest next update: Tue 16 Dec 2025 05:00:50 +0000 Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=) 2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: owiKWLb4dC6YG0LJ5VtTe7PuGhcfkHNYDDstzn459lY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:f8:af:c6:40:f8:ab:b8:db:b5:b8:64:7f:18:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a Validity Not Before: Dec 15 05:00:50 2025 GMT Not After : Dec 16 05:00:50 2025 GMT Subject: CN=185d1911a303c6d1171c857ac3cebf7ba5dc1380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:d0:a0:10:eb:78:75:bc:21:3d:86:04:a4: 7b:e7:b4:f8:f4:16:a4:ba:78:cc:ee:5d:78:e7:5c: b4:b5:46:80:8e:28:42:4e:7c:b6:c0:ef:8d:42:2b: 2e:06:a5:cd:21:56:0b:62:db:2d:3b:15:50:ef:82: 4f:f9:13:66:1f:a1:59:9e:f1:48:79:e3:91:10:19: 02:ab:49:0a:84:04:55:5b:d4:55:12:01:e8:9e:da: 8d:2a:cd:aa:39:94:15:92:c2:39:45:4c:22:df:2b: 03:30:d8:cf:80:46:1d:9d:88:6d:6b:75:e4:19:c7: ff:6b:b2:cd:f0:46:ab:ab:88:06:70:1c:8d:93:7e: 52:37:fc:53:5c:6a:cc:cc:34:f5:b1:dc:5f:63:bc: 60:cc:19:bb:5b:19:42:b2:a0:4f:3a:5a:ba:e0:88: 90:3d:20:e1:8b:33:56:e6:ff:37:2f:d6:29:3e:89: c1:5c:56:ea:84:ef:31:da:53:32:b8:7c:70:09:5d: 20:bb:7b:b6:34:74:ad:ab:fc:35:7b:ab:d4:4c:1e: 29:bf:04:f1:71:0c:d5:dd:41:e6:5d:a3:88:18:0a: b1:5f:f5:f9:fa:44:05:df:ba:4d:8c:a2:37:be:f7: 47:e7:db:2e:0a:72:fd:0e:ef:88:a4:a7:e5:66:e9: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:19:11:A3:03:C6:D1:17:1C:85:7A:C3:CE:BF:7B:A5:DC:13:80 X509v3 Authority Key Identifier: keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c2:80:26:c5:db:b6:ec:a1:7f:e4:3d:c0:df:eb:cb:e2:fa: eb:22:89:27:fc:fc:83:a5:2d:f8:61:09:8a:3f:aa:55:f8:5f: 44:74:70:e2:1b:62:f9:ae:b1:df:a6:67:43:c2:d4:37:7a:37: ca:68:43:7d:62:38:d2:76:02:88:50:3f:e9:d0:88:21:9f:25: 2e:7b:1f:83:68:c1:59:29:11:29:2f:73:5b:c6:8f:92:e9:77: 19:5c:10:d6:df:9b:17:11:72:06:74:74:aa:c0:90:83:be:54: 1c:f5:ef:8c:79:14:3e:4f:d0:9b:87:3e:a8:4e:36:d2:19:48: 72:04:37:4c:e1:06:b7:36:cf:c8:3d:79:7d:9e:41:17:6d:d9: c8:b7:69:13:14:14:69:07:bf:9b:71:0c:89:16:49:73:82:74: 65:9e:b9:10:f6:b9:a1:53:db:29:06:07:ea:84:a1:76:72:03: 45:39:10:60:61:9a:23:4f:3b:4c:02:44:e7:aa:73:b3:bb:eb: 64:76:84:50:0b:76:fe:bf:0d:bb:b9:6d:a2:e3:f7:ab:13:34: fb:f1:72:77:3c:01:83:ce:7d:51:af:11:aa:43:34:13:1f:5a: fe:fb:1d:87:93:99:41:73:36:20:a4:9d:6e:7f:cd:cc:d9:69: 0b:6a:d2:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYfivxkD4q7jbtbhkfxjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh ZTRkMWEwHhcNMjUxMjE1MDUwMDUwWhcNMjUxMjE2MDUwMDUwWjAzMTEwLwYDVQQD EygxODVkMTkxMWEzMDNjNmQxMTcxYzg1N2FjM2NlYmY3YmE1ZGMxMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xPQoBDreHW8IT2GBKR757T49Bak unjM7l1451y0tUaAjihCTny2wO+NQisuBqXNIVYLYtstOxVQ74JP+RNmH6FZnvFI eeOREBkCq0kKhARVW9RVEgHontqNKs2qOZQVksI5RUwi3ysDMNjPgEYdnYhta3Xk Gcf/a7LN8Earq4gGcByNk35SN/xTXGrMzDT1sdxfY7xgzBm7WxlCsqBPOlq64IiQ PSDhizNW5v83L9YpPonBXFbqhO8x2lMyuHxwCV0gu3u2NHStq/w1e6vUTB4pvwTx cQzV3UHmXaOIGAqxX/X5+kQF37pNjKI3vvdH59suCnL9Du+IpKflZul8DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhdGRGjA8bRFxyFesPOv3ul3BOAMB8GA1UdIwQY MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMKAJsXb tuyhf+Q9wN/ry+L66yKJJ/z8g6Ut+GEJij+qVfhfRHRw4hti+a6x36ZnQ8LUN3o3 ymhDfWI40nYCiFA/6dCIIZ8lLnsfg2jBWSkRKS9zW8aPkul3GVwQ1t+bFxFyBnR0 qsCQg75UHPXvjHkUPk/Qm4c+qE420hlIcgQ3TOEGtzbPyD15fZ5BF23ZyLdpExQU aQe/m3EMiRZJc4J0ZZ65EPa5oVPbKQYH6oShdnIDRTkQYGGaI087TAJE56pzs7vr ZHaEUAt2/r8Nu7ltouP3qxM0+/FydzwBg859Ua8RqkM0Ex9a/vsdh5OZQXM2IKSd bn/NzNlpC2rSIA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:33 2025 by rpki-client