This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json) Hash identifier: ATuXNvpYhXapHG7HNoOeD21cGa6msFWAD9N9zqxf/3c= Subject key identifier: 6C:8E:FD:C5:22:BF:6C:B3:7B:F0:4F:7B:0E:D9:A4:F4:D0:9C:CC:8A Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Certificate serial: 019B24E39BB02D7D52B5AE1CC387AC7B178A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft Manifest number: 0FA6 Signing time: Tue 16 Dec 2025 02:00:54 +0000 Manifest this update: Tue 16 Dec 2025 02:00:54 +0000 Manifest next update: Wed 17 Dec 2025 02:00:54 +0000 Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: 7g+4M+vPNYoX0ghD70AE3TVJFBn9aY419Eo6/YH7U+k=) 2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:9b:b0:2d:7d:52:b5:ae:1c:c3:87:ac:7b:17:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Validity Not Before: Dec 16 02:00:54 2025 GMT Not After : Dec 17 02:00:54 2025 GMT Subject: CN=6c8efdc522bf6cb37bf04f7b0ed9a4f4d09ccc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:23:e4:7b:9d:a0:e7:c2:de:cf:93:34:dd: b6:b0:8c:10:c6:80:ab:68:40:a1:cf:be:13:0b:f2: 04:9a:33:e4:af:b8:c2:24:51:00:6b:5b:29:4e:19: 2e:17:96:8a:a8:04:1a:84:52:40:f8:ba:0a:22:a9: be:7e:21:54:2b:98:17:6a:a0:b6:de:b7:27:02:a7: e8:0e:47:c6:98:64:ac:ba:80:fd:84:60:93:1c:e9: d7:80:83:bc:74:0e:1d:af:a2:cd:bf:13:9b:4a:c4: 08:38:3d:27:89:a4:bf:26:ff:6e:12:0c:e9:79:a8: 13:19:bd:a3:ad:36:05:bf:cc:4f:c3:50:b7:c0:56: 29:6b:6a:97:e1:cc:20:1a:d3:56:89:de:4e:58:fd: 6b:dc:b8:ee:8a:27:44:f6:8a:91:26:4a:16:46:e6: 1d:5c:48:c7:08:fc:de:46:dc:a1:e6:0c:82:3f:69: cc:f6:a6:47:8d:0f:29:d2:6f:05:77:53:d1:60:ef: 67:69:9c:cf:e9:ca:77:c5:95:8a:c5:07:fd:15:fd: 42:de:e8:85:ff:6d:d0:9c:6c:45:3d:f9:21:25:83: cc:9d:fd:dc:52:d1:d9:9a:db:9e:46:ee:ec:01:85: 1f:92:31:f5:69:a7:0e:ee:bd:65:a5:77:55:23:6d: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8E:FD:C5:22:BF:6C:B3:7B:F0:4F:7B:0E:D9:A4:F4:D0:9C:CC:8A X509v3 Authority Key Identifier: keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:39:3b:5b:42:9f:fe:56:a7:0b:c1:04:06:e9:ad:a4:8d:dd: a3:a5:60:f7:f7:47:6d:47:49:25:a5:4a:57:86:02:af:58:55: b3:be:35:c9:33:63:69:e5:a4:37:10:e2:d4:d4:00:97:dd:42: 09:54:dc:11:45:93:c2:51:d5:2e:1c:19:84:9d:91:3f:de:2f: 60:a2:df:52:dc:33:a9:3d:4b:b0:86:4e:9e:c5:46:e8:84:d0: 95:0f:2b:0a:38:17:de:73:ca:e6:2a:08:a9:e3:05:b5:16:0e: 79:53:8b:1f:75:86:c6:db:b9:77:42:3c:cd:26:47:1d:92:78: 4c:03:e0:58:fb:f3:30:c1:94:cc:51:60:9e:b9:1f:21:18:22: 23:be:59:cc:7c:60:27:4e:06:db:df:56:13:15:bd:cf:44:7b: 6c:ec:54:7d:6c:a6:d5:84:4d:bf:36:d1:17:85:88:2a:2d:c9: 2b:16:63:14:24:c2:4b:80:55:88:3e:84:a1:67:0b:38:51:32: 76:1c:01:33:63:07:25:81:c0:d3:58:a6:18:ed:19:7f:02:1b: f9:05:4a:24:3c:67:26:cf:b4:3f:02:83:9e:ed:37:1b:12:b0: 3b:2f:85:e3:d3:ae:f8:11:9f:0c:8a:b2:7d:d4:85:a7:3c:22: a8:41:2c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk45uwLX1Sta4cw4esexeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OWI4YTM3NDg0NDBjOWQ1YzJjNTA4YmQwM2I0NmQ3Mjcz ZWVlNTYwHhcNMjUxMjE2MDIwMDU0WhcNMjUxMjE3MDIwMDU0WjAzMTEwLwYDVQQD Eyg2YzhlZmRjNTIyYmY2Y2IzN2JmMDRmN2IwZWQ5YTRmNGQwOWNjYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AQj5HudoOfC3s+TNN22sIwQxoCr aEChz74TC/IEmjPkr7jCJFEAa1spThkuF5aKqAQahFJA+LoKIqm+fiFUK5gXaqC2 3rcnAqfoDkfGmGSsuoD9hGCTHOnXgIO8dA4dr6LNvxObSsQIOD0niaS/Jv9uEgzp eagTGb2jrTYFv8xPw1C3wFYpa2qX4cwgGtNWid5OWP1r3LjuiidE9oqRJkoWRuYd XEjHCPzeRtyh5gyCP2nM9qZHjQ8p0m8Fd1PRYO9naZzP6cp3xZWKxQf9Ff1C3uiF /23QnGxFPfkhJYPMnf3cUtHZmtueRu7sAYUfkjH1aacO7r1lpXdVI20UjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyO/cUiv2yze/BPew7ZpPTQnMyKMB8GA1UdIwQY MBaAFCabijdIRAydXCxQi9A7RtcnPu5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2Qt Zjg3YmMxNzNkMmFhLzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2QtZjg3YmMxNzNkMmFh LzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDk7W0Kf /lanC8EEBumtpI3do6Vg9/dHbUdJJaVKV4YCr1hVs741yTNjaeWkNxDi1NQAl91C CVTcEUWTwlHVLhwZhJ2RP94vYKLfUtwzqT1LsIZOnsVG6ITQlQ8rCjgX3nPK5ioI qeMFtRYOeVOLH3WGxtu5d0I8zSZHHZJ4TAPgWPvzMMGUzFFgnrkfIRgiI75ZzHxg J04G299WExW9z0R7bOxUfWym1YRNvzbRF4WIKi3JKxZjFCTCS4BViD6EoWcLOFEy dhwBM2MHJYHA01imGO0ZfwIb+QVKJDxnJs+0PwKDnu03GxKwOy+F49Ou+BGfDIqy fdSFpzwiqEEshA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:12:38 2025 by rpki-client