This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json) Hash identifier: 9DzgXAL2qRI0cR5KWkjAUYNjyyYpx4RIl99TUN9WmjY= Subject key identifier: EE:18:28:01:C0:C0:76:13:07:0B:D5:EB:14:9C:94:38:EC:C9:71:89 Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a Certificate serial: 019B1D97DD3E709F521A783EE5AA2AFF2513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 16:00:50 +0000 Manifest this update: Sun 14 Dec 2025 16:00:50 +0000 Manifest next update: Mon 15 Dec 2025 16:00:50 +0000 Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=) 2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=) 3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 6DGS8hEMkS292ThJfPZ1nAgBj9GQXftUyYwuqSWJUvw=) 4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:97:dd:3e:70:9f:52:1a:78:3e:e5:aa:2a:ff:25:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a Validity Not Before: Dec 14 16:00:50 2025 GMT Not After : Dec 15 16:00:50 2025 GMT Subject: CN=ee182801c0c07613070bd5eb149c9438ecc97189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:50:cc:9c:22:b9:dc:9b:3d:8d:c3:10:84: c3:08:d1:d8:bf:3a:08:f1:00:13:1f:30:ad:f9:a4: 1e:74:3f:3f:d0:18:25:d8:97:b6:ef:41:f8:ce:77: 0c:bd:b7:5f:27:80:e8:29:4d:ff:82:e6:23:cb:0b: 1b:66:e9:ff:b8:86:21:57:54:87:f6:7d:08:e7:e5: 2a:41:26:9a:d4:05:61:67:23:d7:29:fd:7f:40:01: e3:22:dc:a7:ff:8b:4c:c5:82:e6:8d:92:ee:62:4a: 83:cc:8d:57:23:c1:4e:7d:9b:57:5a:18:13:79:13: 9f:c6:29:22:3d:49:55:3d:16:f9:09:3a:e5:b1:85: 4e:7f:c9:88:a6:64:bb:6c:ad:7e:7c:93:a8:7c:c2: 5b:6a:91:78:79:f8:35:79:15:2a:b7:2f:03:da:0b: 60:8b:7a:f1:67:a6:dd:df:91:70:cc:ae:2e:1e:2f: 93:ad:a5:e3:1a:62:ba:e8:74:b8:10:20:07:b7:81: 09:9b:00:11:b5:25:4a:ae:12:05:a2:7e:0a:85:65: 3f:44:cb:7f:74:fe:bd:27:66:11:22:97:8e:55:12: a2:c4:19:b8:88:4f:b8:5f:43:36:a3:0f:90:17:73: f7:bb:10:07:53:a8:a1:b4:09:3f:4d:8c:82:cd:ee: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:18:28:01:C0:C0:76:13:07:0B:D5:EB:14:9C:94:38:EC:C9:71:89 X509v3 Authority Key Identifier: keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:aa:2f:6a:2e:36:6d:32:f5:2b:ea:06:3a:9d:ae:cf:c0:1d: 75:4c:2b:0e:f1:26:2c:e0:f3:d5:8d:aa:2a:1d:23:0d:f1:4f: ef:c9:e1:0e:61:f9:50:bc:f1:cd:57:a2:d2:46:01:42:1d:8d: 9b:1e:bc:f9:70:4c:5a:17:45:58:c0:eb:10:ae:3f:63:44:fb: e3:c4:63:47:8c:c7:dd:44:bd:11:a8:54:75:7c:d4:db:88:12: 90:68:93:db:1b:69:b1:81:9e:22:5e:26:c3:87:e1:90:8c:42: 53:f7:a4:ad:d0:4b:c2:9e:62:f3:41:74:b8:6f:f6:06:19:44: 04:6d:c4:8d:fa:35:06:ab:d8:6f:aa:8a:36:39:18:b5:96:ec: f7:f7:b7:40:11:0e:fd:ec:f2:bc:87:e1:e9:0f:c4:08:b6:da: 19:ca:59:b6:2e:e4:4b:59:bd:24:cc:f0:78:56:a2:5b:9a:8c: 92:ac:78:ab:07:0b:42:b7:e8:7f:96:a6:74:50:a1:b8:78:85: a0:cc:1f:a6:a8:c7:cd:9e:07:7c:f4:5d:7a:65:81:a9:cd:7b: 1a:f9:cd:78:6c:2e:a4:3f:bf:d7:39:4a:08:f5:fd:37:bd:a0: 2b:05:a4:4f:8a:dd:9b:63:07:95:18:9f:c3:02:70:c6:ff:98: 72:9d:6b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdl90+cJ9SGng+5aoq/yUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll Yzc1M2EwHhcNMjUxMjE0MTYwMDUwWhcNMjUxMjE1MTYwMDUwWjAzMTEwLwYDVQQD EyhlZTE4MjgwMWMwYzA3NjEzMDcwYmQ1ZWIxNDljOTQzOGVjYzk3MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16RQzJwiudybPY3DEITDCNHYvzoI 8QATHzCt+aQedD8/0Bgl2Je270H4zncMvbdfJ4DoKU3/guYjywsbZun/uIYhV1SH 9n0I5+UqQSaa1AVhZyPXKf1/QAHjItyn/4tMxYLmjZLuYkqDzI1XI8FOfZtXWhgT eROfxikiPUlVPRb5CTrlsYVOf8mIpmS7bK1+fJOofMJbapF4efg1eRUqty8D2gtg i3rxZ6bd35FwzK4uHi+TraXjGmK66HS4ECAHt4EJmwARtSVKrhIFon4KhWU/RMt/ dP69J2YRIpeOVRKixBm4iE+4X0M2ow+QF3P3uxAHU6ihtAk/TYyCze5j1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4YKAHAwHYTBwvV6xSclDjsyXGJMB8GA1UdIwQY MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt OWM1ZTFkZWIyYzMzLzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKovai42 bTL1K+oGOp2uz8AddUwrDvEmLODz1Y2qKh0jDfFP78nhDmH5ULzxzVei0kYBQh2N mx68+XBMWhdFWMDrEK4/Y0T748RjR4zH3US9EahUdXzU24gSkGiT2xtpsYGeIl4m w4fhkIxCU/ekrdBLwp5i80F0uG/2BhlEBG3Ejfo1BqvYb6qKNjkYtZbs9/e3QBEO /ezyvIfh6Q/ECLbaGcpZti7kS1m9JMzweFaiW5qMkqx4qwcLQrfof5amdFChuHiF oMwfpqjHzZ4HfPRdemWBqc17GvnNeGwupD+/1zlKCPX9N72gKwWkT4rdm2MHlRif wwJwxv+Ycp1roA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:41 2025 by rpki-client