This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json) Hash identifier: A27TsCLq6oA/In2MbmU2+NZSHPP+EjDs+T7ysCIG2MI= Subject key identifier: 9A:F2:F3:15:26:5E:88:D2:0B:E4:2F:AF:7E:A0:A3:B3:DD:B3:5B:C9 Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Certificate serial: 019B59AC9760D6B4304DE58B11022B5DE36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft Manifest number: 04E5 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=) 2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: 53uE5BrK3cILnVhN3+zFsQ0btvNa/FcJHaS8ec77FzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:97:60:d6:b4:30:4d:e5:8b:11:02:2b:5d:e3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=9af2f315265e88d20be42faf7ea0a3b3ddb35bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:31:4d:6e:a8:57:fc:5d:9d:6f:2c:d1:12: 32:90:93:6c:cf:34:a7:b8:53:bb:65:7d:18:5a:db: a3:a2:eb:67:2d:82:02:1c:c4:5b:9b:1f:b3:c5:e8: 49:f4:7a:c6:cc:2e:d4:f5:10:9c:e8:66:23:c6:35: f7:c1:01:39:93:1b:fc:fc:b8:04:da:ae:d1:7f:98: 8e:54:f7:fa:bd:cc:4d:2b:12:e5:0f:d8:96:99:75: 02:9b:3d:d8:09:47:30:4b:1b:05:65:27:a2:e6:f3: 8b:d5:b9:1c:03:ad:f3:92:34:29:f7:b2:9f:08:14: 9a:58:6c:3b:95:59:20:e3:31:ed:e7:15:9b:7d:28: be:c3:43:09:f5:17:26:b7:48:ea:34:52:a7:22:d2: a8:c8:9e:49:48:a1:5a:e7:55:e4:26:8f:b4:e5:18: 52:49:e3:e6:c6:f2:cf:24:52:10:0f:a7:5a:51:e0: 02:24:68:05:7d:2f:b5:9c:8d:12:68:2b:03:bd:2a: 45:03:5d:92:e7:91:63:73:7b:c7:e3:4d:a4:78:d3: 76:90:c2:6b:32:ae:1b:84:98:29:b9:f3:5a:56:14: 24:02:7f:86:29:b9:6d:f5:24:13:2d:44:f9:db:cf: 89:52:3b:c4:30:2b:33:de:8c:e5:0e:f6:fb:f3:85: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:F3:15:26:5E:88:D2:0B:E4:2F:AF:7E:A0:A3:B3:DD:B3:5B:C9 X509v3 Authority Key Identifier: keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:35:bb:85:9f:2d:68:02:dd:61:d9:30:75:0e:05:d8:5e: 0c:64:7d:e8:63:f2:47:96:fc:81:57:b9:cd:a0:29:9c:f4:90: fe:0a:39:90:10:27:75:0a:90:90:1c:fe:3b:55:b6:66:4f:e9: a3:71:4a:af:ca:d5:e5:17:59:94:3c:d3:ac:ae:9a:10:8f:92: 5a:73:2d:a9:b1:32:b6:5a:74:73:3c:38:0a:39:17:73:fd:57: 3e:76:b1:37:d7:5e:21:12:a9:03:f2:0c:b4:73:e3:f0:60:24: c5:2c:0d:c5:be:a9:6e:1d:76:86:81:a0:b2:59:da:d0:06:c9: c5:c3:70:39:42:a1:fd:54:65:2e:46:5c:8e:74:cd:63:92:be: 87:2d:9d:ab:12:81:b6:80:b4:ca:97:dd:6f:f7:94:37:7d:07: f3:a5:50:9f:dc:a0:1f:fc:88:31:68:b6:9c:d9:5f:7d:b0:86: f7:46:05:53:72:38:4f:b5:18:e9:cd:e5:62:ec:be:96:40:36: 68:de:2e:a2:3c:00:a3:ef:ff:3f:0c:e7:3b:f0:51:85:a9:93: 9a:fa:7b:74:e6:4d:ac:2e:4c:39:fa:0f:d5:51:4a:41:6e:a8: 21:74:17:ca:c8:62:80:f6:7f:97:4c:d5:f2:8a:fb:51:6d:c6: 51:13:45:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJdg1rQwTeWLEQIrXeNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzUyNmJiMzFiOWUzMGM0OTA0NWY0MzY4YzYwMmVlOThi ZWMwMWEwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD Eyg5YWYyZjMxNTI2NWU4OGQyMGJlNDJmYWY3ZWEwYTNiM2RkYjM1YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxYxTW6oV/xdnW8s0RIykJNszzSn uFO7ZX0YWtujoutnLYICHMRbmx+zxehJ9HrGzC7U9RCc6GYjxjX3wQE5kxv8/LgE 2q7Rf5iOVPf6vcxNKxLlD9iWmXUCmz3YCUcwSxsFZSei5vOL1bkcA63zkjQp97Kf CBSaWGw7lVkg4zHt5xWbfSi+w0MJ9Rcmt0jqNFKnItKoyJ5JSKFa51XkJo+05RhS SePmxvLPJFIQD6daUeACJGgFfS+1nI0SaCsDvSpFA12S55Fjc3vH402keNN2kMJr Mq4bhJgpufNaVhQkAn+GKblt9SQTLUT528+JUjvEMCsz3ozlDvb784X0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJry8xUmXojSC+Qvr36go7Pds1vJMB8GA1UdIwQY MBaAFI01JrsxueMMSQRfQ2jGAu6YvsAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAt NzI1M2RhMzUxMGVlLzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYTRiMjEtZmRhMy00YzhhLWFlZTAtNzI1M2RhMzUxMGVl LzEvalRVbXV6RzU0d3hKQkY5RGFNWUM3cGktd0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5k1u4Wf LWgC3WHZMHUOBdheDGR96GPyR5b8gVe5zaApnPSQ/go5kBAndQqQkBz+O1W2Zk/p o3FKr8rV5RdZlDzTrK6aEI+SWnMtqbEytlp0czw4CjkXc/1XPnaxN9deIRKpA/IM tHPj8GAkxSwNxb6pbh12hoGgslna0AbJxcNwOUKh/VRlLkZcjnTNY5K+hy2dqxKB toC0ypfdb/eUN30H86VQn9ygH/yIMWi2nNlffbCG90YFU3I4T7UY6c3lYuy+lkA2 aN4uojwAo+//PwznO/BRhamTmvp7dOZNrC5MOfoP1VFKQW6oIXQXyshigPZ/l0zV 8or7UW3GURNFYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:48 2025 by rpki-client