This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json) Hash identifier: JgLSffbHgkF7xYq68O/FXcyxOe0ts9bCBnquY5n810Q= Subject key identifier: 06:13:93:0F:7F:10:F8:97:A0:DC:29:F5:FD:76:C0:B8:5E:35:D5:DE Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624 Certificate serial: 019B4ADF0301DEBEA19D6FF0CD926AE2EAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft Manifest number: 061E Signing time: Tue 23 Dec 2025 11:01:27 +0000 Manifest this update: Tue 23 Dec 2025 11:01:27 +0000 Manifest next update: Wed 24 Dec 2025 11:01:27 +0000 Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: 7Ap+vtCpLA8VV7v+0hpTQHtxN0VMliEwkLDiHZgtmyU=) 2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=) 3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:03:01:de:be:a1:9d:6f:f0:cd:92:6a:e2:ea:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624 Validity Not Before: Dec 23 11:01:27 2025 GMT Not After : Dec 24 11:01:27 2025 GMT Subject: CN=0613930f7f10f897a0dc29f5fd76c0b85e35d5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a6:da:0f:ba:f9:22:9b:bd:18:41:3f:03:21: eb:ce:02:2f:98:b6:be:5a:ba:c7:a3:9b:d2:f0:b7: ba:9c:98:47:49:9b:48:40:10:f8:61:ed:12:b7:61: 87:cd:f6:65:bb:c1:64:36:e3:5a:31:21:61:84:3c: ce:c3:c5:3e:6f:19:fb:ac:56:b9:71:03:21:53:a2: 19:46:b1:76:9c:0b:cf:29:00:fb:46:7c:92:c6:ef: bf:0f:4b:6d:a2:12:bb:bb:17:e1:03:15:ea:ab:02: 74:99:f9:8b:a2:25:e6:80:29:b3:9f:92:34:3a:3d: 4e:a5:43:97:cc:ac:ed:4b:ef:ac:d0:b1:a3:1b:48: 58:e5:76:e8:a2:7b:ac:41:f0:de:a5:f0:c2:39:70: 66:aa:84:e9:e5:7e:8a:bf:20:3e:49:3c:5e:3c:4c: c4:01:bd:85:85:49:ed:d3:ab:d5:99:fd:06:8a:43: 4d:81:72:f3:5f:5b:56:2f:b1:1c:60:41:1a:0c:7f: 4e:47:47:8c:95:61:3a:ea:28:59:cc:2d:d9:ef:ba: cc:92:84:cb:96:62:b8:64:96:f7:b5:ba:17:0a:58: ed:b4:2d:8f:1e:54:19:85:b0:ae:b0:ec:5a:9b:2b: fb:bf:7d:10:7b:11:31:7b:aa:e1:6b:26:9d:a2:d5: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:13:93:0F:7F:10:F8:97:A0:DC:29:F5:FD:76:C0:B8:5E:35:D5:DE X509v3 Authority Key Identifier: keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3f:00:a7:09:7a:5d:26:e7:cf:6a:33:4f:5d:82:7a:53:2e: 4d:a1:57:23:d4:b8:28:55:75:32:c2:fa:45:bc:d9:e9:47:79: 24:2a:f1:ce:8f:74:43:da:17:b4:19:15:fb:5e:20:7d:09:c7: 66:68:3a:13:a4:ca:5e:6b:63:c5:f2:2e:43:a5:93:4e:27:ba: ad:8e:f4:14:81:8d:7e:3b:1d:56:6e:9e:2d:78:09:49:f2:00: 5c:f1:2c:52:01:87:62:44:b9:d0:f9:08:fc:2e:5b:67:d4:c7: 2b:0c:72:ef:dd:54:4d:f9:87:aa:e7:79:f7:e5:d6:c7:4e:79: 7f:30:1a:af:75:d5:82:4f:df:c1:73:43:27:f8:7c:12:71:82: 6c:18:6a:e8:15:98:42:7d:24:98:14:8c:3f:9b:11:df:9f:d1: d9:1e:af:19:a0:27:b3:a6:0d:66:84:3d:b1:0b:7f:2c:d0:2f: b6:9d:79:16:ad:f1:f5:7b:3a:96:1c:07:f3:54:d7:63:02:e7: 98:59:7c:da:15:56:b9:09:6b:aa:8c:bf:1c:b9:d5:e9:6a:84: 97:b2:4d:b2:d2:64:e4:04:be:65:da:03:03:73:a9:d4:a5:18: 98:a1:da:5e:5e:5e:36:23:54:f2:c7:fc:dc:0d:b8:f5:e6:c4: 2e:54:81:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3wMB3r6hnW/wzZJq4urEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy MDc2MjQwHhcNMjUxMjIzMTEwMTI3WhcNMjUxMjI0MTEwMTI3WjAzMTEwLwYDVQQD EygwNjEzOTMwZjdmMTBmODk3YTBkYzI5ZjVmZDc2YzBiODVlMzVkNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qbaD7r5Ipu9GEE/AyHrzgIvmLa+ WrrHo5vS8Le6nJhHSZtIQBD4Ye0St2GHzfZlu8FkNuNaMSFhhDzOw8U+bxn7rFa5 cQMhU6IZRrF2nAvPKQD7RnySxu+/D0ttohK7uxfhAxXqqwJ0mfmLoiXmgCmzn5I0 Oj1OpUOXzKztS++s0LGjG0hY5XboonusQfDepfDCOXBmqoTp5X6KvyA+STxePEzE Ab2FhUnt06vVmf0GikNNgXLzX1tWL7EcYEEaDH9OR0eMlWE66ihZzC3Z77rMkoTL lmK4ZJb3tboXCljttC2PHlQZhbCusOxamyv7v30QexExe6rhayadotUwdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYTkw9/EPiXoNwp9f12wLheNdXeMB8GA1UdIwQY MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD8Apwl6 XSbnz2ozT12CelMuTaFXI9S4KFV1MsL6RbzZ6Ud5JCrxzo90Q9oXtBkV+14gfQnH Zmg6E6TKXmtjxfIuQ6WTTie6rY70FIGNfjsdVm6eLXgJSfIAXPEsUgGHYkS50PkI /C5bZ9THKwxy791UTfmHqud59+XWx055fzAar3XVgk/fwXNDJ/h8EnGCbBhq6BWY Qn0kmBSMP5sR35/R2R6vGaAns6YNZoQ9sQt/LNAvtp15Fq3x9Xs6lhwH81TXYwLn mFl82hVWuQlrqoy/HLnV6WqEl7JNstJk5AS+ZdoDA3Op1KUYmKHaXl5eNiNU8sf8 3A249ebELlSB7A== -----END CERTIFICATE-----Generated at Tue Dec 23 14:13:24 2025 by rpki-client