This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json) Hash identifier: rpnAQ2uRXI6AOtJH58Zv38rwOMhX4bmLSvtMWCASMi4= Subject key identifier: DE:48:FF:64:49:05:18:A8:A4:91:BD:EC:DB:08:86:91:3B:12:34:B3 Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7 Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7 Certificate serial: 019B2E1DB5267935C6123995699FBB95D9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft Manifest number: 15DC Signing time: Wed 17 Dec 2025 21:00:57 +0000 Manifest this update: Wed 17 Dec 2025 21:00:57 +0000 Manifest next update: Thu 18 Dec 2025 21:00:57 +0000 Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=) 2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: NX/HwLcIC9XZL037OlVgGB39MdrRo+tEZya4jXyhHtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:b5:26:79:35:c6:12:39:95:69:9f:bb:95:d9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7 Validity Not Before: Dec 17 21:00:57 2025 GMT Not After : Dec 18 21:00:57 2025 GMT Subject: CN=de48ff64490518a8a491bdecdb0886913b1234b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:26:20:80:ab:1d:7b:0d:79:06:22:54:eb: e1:31:36:16:1a:28:1d:2b:6c:ca:d3:39:81:d1:b5: 97:ac:64:6f:fd:8a:49:26:14:8b:7f:a2:37:cd:8f: c2:06:ec:1a:35:48:a7:97:00:cb:6f:ea:33:c2:0e: ff:d2:b8:55:46:70:23:77:33:9d:04:28:78:71:a6: 62:3c:18:f4:5b:42:65:4b:df:5d:bf:1c:18:7c:49: 24:ee:f7:4c:8a:f1:d5:ac:a1:4b:06:10:9c:d6:b3: e9:9c:a8:5b:72:b6:93:79:44:bf:9e:8a:d8:f5:46: 5c:02:3d:41:5f:40:06:c1:e4:9c:ed:52:7f:e0:37: 5a:0d:25:32:bb:da:f1:7a:a4:21:4b:d5:94:ee:19: 7f:8a:f8:10:00:85:60:d7:be:79:5a:b7:38:17:83: 3c:4c:36:c7:cc:42:01:20:2d:20:06:6c:c0:aa:2f: b1:b6:a8:6a:a0:d9:0a:be:12:aa:b0:74:83:5b:63: b7:a9:7a:50:01:99:31:e2:71:d7:bf:f6:19:0e:89: 00:18:0d:3b:e6:93:f8:c4:54:76:03:2a:14:17:87: d3:ca:63:bb:48:ee:f6:c8:92:3d:f0:b1:cd:34:4c: d5:b6:dd:f6:93:67:48:f5:c9:a9:e4:cb:b4:9d:fe: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:48:FF:64:49:05:18:A8:A4:91:BD:EC:DB:08:86:91:3B:12:34:B3 X509v3 Authority Key Identifier: keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:68:4b:63:f3:4c:2b:31:c1:79:d4:c3:5c:b9:b2:af:e4:4e: de:d8:28:1a:29:60:b9:ec:a2:33:bb:5a:3e:5c:21:5a:98:f3: 3f:33:d1:19:5c:a4:c5:7b:54:df:85:9d:0c:9e:90:fe:04:be: 9f:14:3d:15:a7:97:61:fc:94:fa:7c:52:c8:1a:21:4e:47:0c: f4:c3:69:d7:0c:4f:09:e6:2d:27:54:56:55:dd:09:12:e3:ad: b9:e8:01:af:18:2f:12:c4:6d:f4:0d:4c:d4:5f:04:e5:0e:60: 7b:ec:1c:f0:98:bc:ca:4a:91:a3:a4:1f:0f:f3:74:a3:a1:65: c1:5f:c5:43:8b:fe:34:81:35:12:2d:15:43:91:2c:7b:62:c6: 1b:c8:ba:2f:04:fa:c0:b6:72:97:2d:6e:26:d5:72:79:34:c2: 10:c6:b2:24:a3:5a:13:60:8c:8e:3f:eb:d9:4d:10:1a:b9:98: 5e:18:7f:ff:e3:39:fc:9c:54:c9:67:bc:fd:8d:56:82:ea:43: 98:52:74:47:23:93:db:e0:34:a5:1b:70:fc:d8:2f:bb:1e:ed: 82:7b:e9:d2:3c:53:99:b0:93:fd:3e:64:b0:2c:b3:27:08:01: 41:6f:6a:ff:b5:68:d5:e3:f3:c4:e2:43:cc:f3:85:f1:50:42: dd:29:45:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHbUmeTXGEjmVaZ+7ldntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTJmODg5MjZlMGJkODQwMWM3M2NlZGI3N2U5OWM5NGRj YzUyZDcwHhcNMjUxMjE3MjEwMDU3WhcNMjUxMjE4MjEwMDU3WjAzMTEwLwYDVQQD EyhkZTQ4ZmY2NDQ5MDUxOGE4YTQ5MWJkZWNkYjA4ODY5MTNiMTIzNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFAmIICrHXsNeQYiVOvhMTYWGigd K2zK0zmB0bWXrGRv/YpJJhSLf6I3zY/CBuwaNUinlwDLb+ozwg7/0rhVRnAjdzOd BCh4caZiPBj0W0JlS99dvxwYfEkk7vdMivHVrKFLBhCc1rPpnKhbcraTeUS/norY 9UZcAj1BX0AGweSc7VJ/4DdaDSUyu9rxeqQhS9WU7hl/ivgQAIVg1755Wrc4F4M8 TDbHzEIBIC0gBmzAqi+xtqhqoNkKvhKqsHSDW2O3qXpQAZkx4nHXv/YZDokAGA07 5pP4xFR2AyoUF4fTymO7SO72yJI98LHNNEzVtt32k2dI9cmp5Mu0nf7o0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5I/2RJBRiopJG97NsIhpE7EjSzMB8GA1UdIwQY MBaAFI+i+Ikm4L2EAcc87bd+mclNzFLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMt ZDBlZGVjOTcyOGU1LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMtZDBlZGVjOTcyOGU1 LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWhLY/NM KzHBedTDXLmyr+RO3tgoGilgueyiM7taPlwhWpjzPzPRGVykxXtU34WdDJ6Q/gS+ nxQ9FaeXYfyU+nxSyBohTkcM9MNp1wxPCeYtJ1RWVd0JEuOtuegBrxgvEsRt9A1M 1F8E5Q5ge+wc8Ji8ykqRo6QfD/N0o6FlwV/FQ4v+NIE1Ei0VQ5Ese2LGG8i6LwT6 wLZyly1uJtVyeTTCEMayJKNaE2CMjj/r2U0QGrmYXhh//+M5/JxUyWe8/Y1WgupD mFJ0RyOT2+A0pRtw/Ngvux7tgnvp0jxTmbCT/T5ksCyzJwgBQW9q/7Vo1ePzxOJD zPOF8VBC3SlFRA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:03 2025 by rpki-client