This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json) Hash identifier: 9Rs3IQryYe5qyJjjR/S4wQNBPVoo3Sn/mUqq+Sy5NSM= Subject key identifier: 39:58:21:3A:86:16:D6:77:C5:27:C3:9E:C5:EB:99:3D:C3:B4:DA:EF Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Certificate serial: 019B5AF68D0375AD12B64925C00CA4285012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft Manifest number: 0A61 Signing time: Fri 26 Dec 2025 14:01:05 +0000 Manifest this update: Fri 26 Dec 2025 14:01:05 +0000 Manifest next update: Sat 27 Dec 2025 14:01:05 +0000 Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=) 2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: FSbWcBJZ6s5L6Q0ygjDsmlOmMm8git6snIYKrk53CK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:8d:03:75:ad:12:b6:49:25:c0:0c:a4:28:50:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f Validity Not Before: Dec 26 14:01:05 2025 GMT Not After : Dec 27 14:01:05 2025 GMT Subject: CN=3958213a8616d677c527c39ec5eb993dc3b4daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:26:48:a0:49:fd:9b:41:75:3a:ba:62:75: 83:35:30:5a:cd:14:39:09:8b:dc:15:58:ab:3e:1e: b2:d6:eb:4b:bb:87:0b:cf:b4:24:1f:9c:cd:20:57: 5c:ae:7b:9d:ee:aa:a8:72:9a:c7:9f:f6:15:e2:c7: ea:39:53:0b:7a:0b:9b:ed:9f:36:2d:a2:9f:37:a2: c8:23:c5:6e:f8:84:0d:a8:bd:c6:3e:e6:bd:0b:44: 01:c4:0d:3f:f7:9b:7f:89:86:82:67:89:ac:f4:b1: e9:29:34:8a:40:b8:77:0a:13:23:55:9f:ba:69:10: 84:3e:f2:b5:fa:16:13:a5:73:1a:1b:ae:82:ca:f1: ad:fe:41:8e:5b:6c:4b:22:d4:65:a0:e8:6f:c5:b9: 1d:2b:01:1b:ce:fa:f3:62:18:8f:77:ab:82:93:64: 67:2b:1e:55:1c:d9:32:4d:1f:a5:ac:2e:d4:54:1e: 5c:95:30:4b:48:44:cc:11:74:c3:b8:b7:4d:fc:5f: e0:f6:10:e4:a8:b9:ea:05:e3:a6:5b:54:87:9e:76: 3e:f8:ec:65:15:cf:90:a5:24:bd:72:b8:e2:27:86: 71:0f:29:15:3c:7f:f9:8b:33:a6:ef:bd:06:c8:23: 81:92:1a:4c:ed:9b:f3:43:c8:3e:ee:8e:5f:85:68: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:58:21:3A:86:16:D6:77:C5:27:C3:9E:C5:EB:99:3D:C3:B4:DA:EF X509v3 Authority Key Identifier: keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:a3:87:52:1e:8d:60:23:e0:2e:40:d5:30:25:23:a3:67: a0:58:35:7c:d7:e3:db:67:04:14:5d:61:d7:bf:65:5c:08:c7: 88:e2:d4:3d:4f:3b:a7:6a:ad:3e:40:d2:40:3e:a0:d3:66:9b: 9b:e1:f3:25:57:3b:69:d6:87:e4:46:90:ef:e8:47:3a:8b:de: c7:00:f1:7b:93:0f:18:0d:d9:ee:32:79:40:46:eb:82:c1:79: 71:fb:cc:d1:39:56:08:e5:48:bf:4a:7f:01:74:8f:e9:ae:51: 07:c8:a6:43:27:3a:23:21:b4:84:a1:53:85:de:bd:ea:42:ed: 65:3c:84:77:56:20:c1:e3:fc:b5:c1:d1:09:55:1e:75:41:03: cf:73:b4:f1:30:35:ce:81:bc:23:dd:57:28:a7:7c:95:35:be: ff:0d:a7:ff:c2:61:3b:e0:82:78:fa:ba:cb:b5:c8:ae:0d:cb: f7:b1:38:3c:3e:05:75:60:a6:22:39:a9:cc:f6:db:99:a0:66: 88:0e:a7:a6:32:64:f7:4d:75:96:06:65:18:92:0a:21:6c:dc: 02:00:ff:d2:4c:8f:62:48:dd:43:a9:96:db:67:a6:a5:0e:8c: 8b:1c:c9:19:4b:b5:3c:82:b5:2f:03:5c:99:8a:c2:ba:0f:d6: a2:aa:e8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9o0Dda0StkklwAykKFASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk OWRhNWYwHhcNMjUxMjI2MTQwMTA1WhcNMjUxMjI3MTQwMTA1WjAzMTEwLwYDVQQD EygzOTU4MjEzYTg2MTZkNjc3YzUyN2MzOWVjNWViOTkzZGMzYjRkYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4UmSKBJ/ZtBdTq6YnWDNTBazRQ5 CYvcFVirPh6y1utLu4cLz7QkH5zNIFdcrnud7qqocprHn/YV4sfqOVMLegub7Z82 LaKfN6LII8Vu+IQNqL3GPua9C0QBxA0/95t/iYaCZ4ms9LHpKTSKQLh3ChMjVZ+6 aRCEPvK1+hYTpXMaG66CyvGt/kGOW2xLItRloOhvxbkdKwEbzvrzYhiPd6uCk2Rn Kx5VHNkyTR+lrC7UVB5clTBLSETMEXTDuLdN/F/g9hDkqLnqBeOmW1SHnnY++Oxl Fc+QpSS9crjiJ4ZxDykVPH/5izOm770GyCOBkhpM7ZvzQ8g+7o5fhWgBRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlYITqGFtZ3xSfDnsXrmT3DtNrvMB8GA1UdIwQY MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB6jh1Ie jWAj4C5A1TAlI6NnoFg1fNfj22cEFF1h179lXAjHiOLUPU87p2qtPkDSQD6g02ab m+HzJVc7adaH5EaQ7+hHOovexwDxe5MPGA3Z7jJ5QEbrgsF5cfvM0TlWCOVIv0p/ AXSP6a5RB8imQyc6IyG0hKFThd696kLtZTyEd1YgweP8tcHRCVUedUEDz3O08TA1 zoG8I91XKKd8lTW+/w2n/8JhO+CCePq6y7XIrg3L97E4PD4FdWCmIjmpzPbbmaBm iA6npjJk9011lgZlGJIKIWzcAgD/0kyPYkjdQ6mW22empQ6MixzJGUu1PIK1LwNc mYrCug/WoqroxA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client