This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json) Hash identifier: ep7HgOFE0ctqYPxVIaRmrwQ6z6Zb/Zb5LlA4mub92MI= Subject key identifier: BA:5A:10:1C:43:E9:37:D1:EE:8C:51:C7:97:4D:A4:51:4D:63:FC:1F Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019B2DB0C0896F7AE4D5A133BE8423D756BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft Manifest number: 62 Signing time: Wed 17 Dec 2025 19:01:56 +0000 Manifest this update: Wed 17 Dec 2025 19:01:56 +0000 Manifest next update: Thu 18 Dec 2025 19:01:56 +0000 Files and hashes: 1: IuFMGMo0qQPNaw_HwikeG1qpC1g.roa (hash: pfIr6AYyv+yYDp1crXdTbGLCvoMDiRQhQRhnL5paHiM=) 2: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: vwpd41wRrLipXMQNNiwyjoW2DfkCoedb007iyp0EoMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:c0:89:6f:7a:e4:d5:a1:33:be:84:23:d7:56:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Dec 17 19:01:56 2025 GMT Not After : Dec 18 19:01:56 2025 GMT Subject: CN=ba5a101c43e937d1ee8c51c7974da4514d63fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:dd:d3:d5:de:86:16:0a:35:83:56:65:4c: 07:60:8f:db:22:46:48:06:b3:5b:6c:2b:e8:a4:b9: 90:bb:90:db:56:3f:7b:ad:a9:82:38:c4:26:16:cc: d6:4e:9c:dc:ac:9c:0c:71:5f:bb:d3:23:69:38:38: fe:d4:5f:8d:0a:89:8b:ec:47:9d:cf:05:93:ff:b8: 52:c8:9a:64:df:50:a2:6a:a1:e1:0c:71:c2:c9:fc: d4:79:f2:47:e8:af:64:d2:5e:93:1a:3d:b9:be:16: 81:ad:30:25:26:34:d1:01:14:a4:43:82:16:56:a3: 24:83:67:c2:d3:cd:f8:5a:d9:c2:72:e1:d7:19:12: 17:21:fd:10:8d:4e:0d:0c:ca:7b:e3:14:24:75:c5: 04:a3:02:27:e1:3c:4c:e7:2f:d5:68:5c:91:62:d2: 91:1f:9e:c4:fa:65:ae:f4:97:58:47:e5:01:15:32: 97:42:7a:22:81:5c:51:26:b8:14:91:29:57:30:52: 1e:9e:86:a3:c3:b1:c6:bc:c2:68:00:a6:b8:9e:ef: 41:2f:44:c2:be:f1:3f:8e:da:64:73:89:41:03:e8: 5e:64:ff:75:84:1d:ce:12:81:32:0e:7d:0b:7b:bc: e1:ff:cc:2e:40:50:30:db:b9:b4:77:bc:68:cd:3d: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5A:10:1C:43:E9:37:D1:EE:8C:51:C7:97:4D:A4:51:4D:63:FC:1F X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0b:dc:20:ab:2c:5a:1c:eb:18:bf:dc:08:5e:73:a7:92:81: 1a:81:e4:06:19:1c:17:44:d1:cc:bc:06:f6:e8:c0:33:26:97: a0:66:68:be:41:91:46:8a:48:23:eb:c2:04:7b:82:c0:91:ed: d8:94:e3:9d:ec:5e:ee:dd:5d:dd:e2:3d:4e:70:89:1d:e8:b0: cf:6f:99:2d:f7:43:e3:58:03:ac:75:35:96:4e:2c:ac:47:f2: ac:5f:90:45:10:30:fc:b6:63:5a:bb:74:ef:b9:0b:a8:d4:3e: a7:0d:55:d5:f0:83:6f:85:be:52:6b:d2:44:fa:96:ff:ea:4b: 57:62:b7:e3:fb:e2:6e:7d:18:28:b0:f8:76:a2:57:0f:65:d6: 4e:4a:37:fd:1a:8b:f9:17:4a:85:e9:bc:d7:b0:37:a9:fa:16: 77:7d:17:ba:04:12:f4:f6:9a:b8:ec:6a:13:7c:89:49:10:a8: 7b:4a:b7:d8:0a:f2:ae:c0:2a:8c:12:fd:57:96:6d:12:f4:3b: 32:5e:6b:fc:52:99:99:39:e2:c5:5e:c9:7d:00:1f:c9:97:a1: 87:12:86:90:d2:ac:02:c4:35:f8:3b:4a:01:ec:22:1b:27:30: 28:b3:f6:1e:d0:69:9e:63:08:cf:de:0e:d5:4a:23:35:00:99: 57:7d:96:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsMCJb3rk1aEzvoQj11a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjUxMjE3MTkwMTU2WhcNMjUxMjE4MTkwMTU2WjAzMTEwLwYDVQQD EyhiYTVhMTAxYzQzZTkzN2QxZWU4YzUxYzc5NzRkYTQ1MTRkNjNmYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOzd09XehhYKNYNWZUwHYI/bIkZI BrNbbCvopLmQu5DbVj97ramCOMQmFszWTpzcrJwMcV+70yNpODj+1F+NComL7Eed zwWT/7hSyJpk31CiaqHhDHHCyfzUefJH6K9k0l6TGj25vhaBrTAlJjTRARSkQ4IW VqMkg2fC0834WtnCcuHXGRIXIf0QjU4NDMp74xQkdcUEowIn4TxM5y/VaFyRYtKR H57E+mWu9JdYR+UBFTKXQnoigVxRJrgUkSlXMFIenoajw7HGvMJoAKa4nu9BL0TC vvE/jtpkc4lBA+heZP91hB3OEoEyDn0Le7zh/8wuQFAw27m0d7xozT3odwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpaEBxD6TfR7oxRx5dNpFFNY/wfMB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAvcIKss WhzrGL/cCF5zp5KBGoHkBhkcF0TRzLwG9ujAMyaXoGZovkGRRopII+vCBHuCwJHt 2JTjnexe7t1d3eI9TnCJHeiwz2+ZLfdD41gDrHU1lk4srEfyrF+QRRAw/LZjWrt0 77kLqNQ+pw1V1fCDb4W+UmvSRPqW/+pLV2K34/vibn0YKLD4dqJXD2XWTko3/RqL +RdKhem817A3qfoWd30XugQS9PaauOxqE3yJSRCoe0q32AryrsAqjBL9V5ZtEvQ7 Ml5r/FKZmTnixV7JfQAfyZehhxKGkNKsAsQ1+DtKAewiGycwKLP2HtBpnmMIz94O 1UojNQCZV32Wtw== -----END CERTIFICATE-----Generated at Wed Dec 17 23:05:04 2025 by rpki-client