This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json) Hash identifier: fl4PmVSx5D326bOeWggn+ZRztWor5EkxFwhMbicicCU= Subject key identifier: BA:AB:2C:4C:1B:76:7D:C3:AF:AE:7D:2E:B1:22:AF:5A:18:34:EA:94 Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56 Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956 Certificate serial: 019B5975F10610A0EFE561FD0934A74A02FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft Manifest number: 06B4 Signing time: Fri 26 Dec 2025 07:01:00 +0000 Manifest this update: Fri 26 Dec 2025 07:01:00 +0000 Manifest next update: Sat 27 Dec 2025 07:01:00 +0000 Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=) 2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: OBw0ek1VB3mc+mtbQZ3IWi3rRFBldYTCLhwOWvlZu/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f1:06:10:a0:ef:e5:61:fd:09:34:a7:4a:02:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956 Validity Not Before: Dec 26 07:01:00 2025 GMT Not After : Dec 27 07:01:00 2025 GMT Subject: CN=baab2c4c1b767dc3afae7d2eb122af5a1834ea94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:ba:80:8a:90:db:99:8a:54:01:75:ea:6b: 53:d1:ee:b4:f0:c3:1f:24:9c:4f:b8:c3:03:a3:3a: 01:b3:8c:77:42:ee:05:ea:91:d2:e9:6c:99:df:d8: 6c:c8:da:38:20:d7:23:9e:e6:d5:23:26:8a:6b:58: 17:38:51:41:ac:b7:ee:05:03:34:bf:db:99:72:d8: d4:f5:b4:76:75:fd:e2:99:d3:ad:b1:7c:fd:f8:bc: 07:80:cd:a4:9a:6b:fd:db:96:1d:af:5e:e2:73:0f: 8e:1a:cc:57:a0:59:b0:cb:c7:c3:2b:da:58:c4:98: 75:87:86:6b:a1:b2:77:6c:89:18:fd:93:a7:96:b9: 91:a1:d9:2d:7f:1b:59:1e:b2:e6:21:a9:6d:71:fd: 3b:7d:5f:b4:e5:dd:54:a8:a0:19:d2:ea:64:29:38: 06:70:80:1a:15:e3:03:68:49:29:7d:c3:e4:71:05: 1d:87:0f:79:98:74:92:80:97:bb:d2:4f:ee:9e:7c: ec:78:57:f5:69:e4:cb:a6:68:49:d6:0e:da:2e:aa: 2d:ac:72:43:7d:52:ba:57:90:cc:8d:00:4e:f0:5a: 1d:f7:6b:4f:8c:2f:b2:68:27:d0:85:d3:a1:76:5d: da:b1:4f:e2:59:4c:c0:a0:a2:3d:b1:4c:8c:18:a2: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AB:2C:4C:1B:76:7D:C3:AF:AE:7D:2E:B1:22:AF:5A:18:34:EA:94 X509v3 Authority Key Identifier: keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:72:91:70:fb:90:20:f8:b3:29:54:d7:49:57:44:81:46: 89:bc:8b:15:20:6b:fc:0c:db:30:8b:ab:fc:d7:bf:9d:08:8e: b5:d3:d0:e5:86:f6:a6:5c:74:6f:2a:99:0f:df:4e:b7:2e:f4: ae:d9:4f:b8:e0:94:b8:e2:04:8e:35:27:82:f3:eb:72:03:35: 9a:8b:fa:b8:cc:3e:4a:4a:58:03:8e:e1:c5:2e:db:80:02:ab: 16:8e:67:b8:1d:b7:8d:82:d2:2a:e1:c7:b9:bf:c1:9e:23:69: fb:5e:c2:39:64:df:31:00:3c:19:0b:65:96:d0:83:03:13:7a: f2:48:47:c3:8b:96:2e:9d:20:9c:6a:76:3e:2e:7e:0d:ab:d4: 01:c1:14:1b:ee:7c:b7:b5:65:a5:7e:58:1c:09:87:d1:82:6c: 0f:4e:21:d9:36:13:2b:ad:89:89:0c:7f:3a:5f:ab:2d:57:40: fe:40:2c:36:d8:b5:7f:7f:79:76:79:cb:4e:de:ba:b6:93:28: dc:1b:9c:e9:bb:d3:90:25:5a:81:f3:5b:de:fb:6d:43:19:7a: 70:74:32:17:50:c6:09:d9:03:51:1a:ed:0e:15:de:c5:08:c6: 9e:60:00:04:7e:19:fd:1a:5f:26:b6:93:b8:d4:e1:92:f6:35: d4:7f:4c:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfEGEKDv5WH9CTSnSgL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh M2Q5NTYwHhcNMjUxMjI2MDcwMTAwWhcNMjUxMjI3MDcwMTAwWjAzMTEwLwYDVQQD EyhiYWFiMmM0YzFiNzY3ZGMzYWZhZTdkMmViMTIyYWY1YTE4MzRlYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAu6gIqQ25mKVAF16mtT0e608MMf JJxPuMMDozoBs4x3Qu4F6pHS6WyZ39hsyNo4INcjnubVIyaKa1gXOFFBrLfuBQM0 v9uZctjU9bR2df3imdOtsXz9+LwHgM2kmmv925Ydr17icw+OGsxXoFmwy8fDK9pY xJh1h4ZrobJ3bIkY/ZOnlrmRodktfxtZHrLmIaltcf07fV+05d1UqKAZ0upkKTgG cIAaFeMDaEkpfcPkcQUdhw95mHSSgJe70k/unnzseFf1aeTLpmhJ1g7aLqotrHJD fVK6V5DMjQBO8Fod92tPjC+yaCfQhdOhdl3asU/iWUzAoKI9sUyMGKJv/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqrLEwbdn3Dr659LrEir1oYNOqUMB8GA1UdIwQY MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5 LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1lykXD7 kCD4sylU10lXRIFGibyLFSBr/AzbMIur/Ne/nQiOtdPQ5Yb2plx0byqZD99Oty70 rtlPuOCUuOIEjjUngvPrcgM1mov6uMw+SkpYA47hxS7bgAKrFo5nuB23jYLSKuHH ub/BniNp+17COWTfMQA8GQtlltCDAxN68khHw4uWLp0gnGp2Pi5+DavUAcEUG+58 t7VlpX5YHAmH0YJsD04h2TYTK62JiQx/Ol+rLVdA/kAsNti1f395dnnLTt66tpMo 3Buc6bvTkCVagfNb3vttQxl6cHQyF1DGCdkDURrtDhXexQjGnmAABH4Z/RpfJraT uNThkvY11H9Msg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:29 2025 by rpki-client