This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json) Hash identifier: HegR60bpei0jXh+6eskoeeKL9uce3G+bGesBVHcPNK4= Subject key identifier: AC:B1:72:06:F3:20:FC:6C:26:DB:C8:A5:A3:BC:A2:A4:D6:37:3D:5B Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Certificate serial: 019B4136E466F95072478333F8254E504BB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft Manifest number: 0AFB Signing time: Sun 21 Dec 2025 14:01:14 +0000 Manifest this update: Sun 21 Dec 2025 14:01:14 +0000 Manifest next update: Mon 22 Dec 2025 14:01:14 +0000 Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: oRhIslTBKFr07mSrmV6ldPnPkZ/6wbID7pfkfjmNK4I=) 2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:e4:66:f9:50:72:47:83:33:f8:25:4e:50:4b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Validity Not Before: Dec 21 14:01:14 2025 GMT Not After : Dec 22 14:01:14 2025 GMT Subject: CN=acb17206f320fc6c26dbc8a5a3bca2a4d6373d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:21:b1:98:e3:84:5d:63:30:ee:aa:6f:3f: c4:02:26:11:f2:1a:7e:3c:d1:2a:30:2f:6c:32:89: 83:d1:8f:ef:d6:56:86:e7:4a:f7:e9:40:e9:6d:d0: e2:55:46:b6:b2:22:39:2a:de:bd:dd:9a:e7:9a:31: 26:5f:f8:22:56:88:88:54:63:2c:cd:f3:4a:03:5c: 96:11:10:02:7a:6c:75:7b:ff:d3:0c:95:ae:53:32: 3d:b8:dc:4b:28:98:25:03:de:fd:71:b5:5e:e2:26: f5:d7:18:5a:fe:d5:70:47:b2:37:28:9c:04:b8:d2: 7d:07:23:f4:cc:0b:ca:50:94:44:54:a9:12:64:9e: fb:d2:bd:d2:bb:70:10:51:dd:ab:a1:9a:6e:4e:28: f7:c7:46:30:31:b3:11:2d:31:e6:d7:0c:77:4b:d8: 8f:46:06:63:e7:a6:11:3e:d9:aa:52:1d:c8:ce:b1: 1d:de:c6:24:01:23:24:32:ac:99:6c:05:5c:36:18: 5b:46:79:14:fd:b5:4f:17:db:1e:ec:5d:7d:0c:c8: a4:53:92:14:54:fd:2f:60:f3:a6:23:89:f8:d5:f6: 2a:19:69:84:07:3b:9e:f7:ef:c1:71:e6:48:2c:c7: 78:d3:17:33:4f:d8:42:28:9c:1d:4f:a8:a3:aa:39: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B1:72:06:F3:20:FC:6C:26:DB:C8:A5:A3:BC:A2:A4:D6:37:3D:5B X509v3 Authority Key Identifier: keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:03:18:5e:c7:dd:9a:d4:0b:d4:b5:a5:24:f4:2d:f3:a1:86: cd:41:f2:2a:a0:ed:5b:da:d7:e9:26:13:2a:5b:69:d9:67:a5: 15:ce:ca:a4:35:82:95:ff:44:47:9a:ab:0b:14:c1:eb:28:10: 61:f8:1b:a2:ab:42:81:47:1b:9f:0c:d7:38:b4:6e:54:f1:e9: b2:15:03:9b:a4:c0:e8:6b:96:75:ea:e3:30:8a:8f:b4:08:62: 5b:b6:fd:a0:97:f8:1c:e1:2f:24:e1:4c:d8:c4:0f:57:62:15: b2:f9:46:2e:2a:dc:61:c5:74:f6:37:e1:99:98:8e:2d:d7:30: a3:35:21:0a:16:aa:fa:09:1b:25:80:c1:a8:2b:f6:1f:44:ea: 34:94:e3:b5:8b:d8:00:8c:d1:ef:3d:ae:c0:10:29:fd:bf:06: ea:02:28:ad:5d:ca:3a:18:e9:2f:b9:2f:84:f0:98:41:ae:07: 41:e6:6b:56:9f:27:5c:29:8a:4c:d3:fd:eb:a9:8a:0e:bf:2b: e1:d7:c2:92:98:57:a9:b6:63:b1:e3:bb:16:fe:64:a2:85:83: 58:0d:6c:2c:6c:71:58:28:3f:a4:52:b5:60:17:20:34:13:4a: 35:4b:e6:1a:63:f3:2e:a0:cb:d2:d6:d6:c8:75:9b:23:06:1a: 63:7c:f7:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNuRm+VByR4Mz+CVOUEu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4 MjFiZDIwHhcNMjUxMjIxMTQwMTE0WhcNMjUxMjIyMTQwMTE0WjAzMTEwLwYDVQQD EyhhY2IxNzIwNmYzMjBmYzZjMjZkYmM4YTVhM2JjYTJhNGQ2MzczZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzwhsZjjhF1jMO6qbz/EAiYR8hp+ PNEqMC9sMomD0Y/v1laG50r36UDpbdDiVUa2siI5Kt693ZrnmjEmX/giVoiIVGMs zfNKA1yWERACemx1e//TDJWuUzI9uNxLKJglA979cbVe4ib11xha/tVwR7I3KJwE uNJ9ByP0zAvKUJREVKkSZJ770r3Su3AQUd2roZpuTij3x0YwMbMRLTHm1wx3S9iP RgZj56YRPtmqUh3IzrEd3sYkASMkMqyZbAVcNhhbRnkU/bVPF9se7F19DMikU5IU VP0vYPOmI4n41fYqGWmEBzue9+/BceZILMd40xczT9hCKJwdT6ijqjmsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyxcgbzIPxsJtvIpaO8oqTWNz1bMB8GA1UdIwQY MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2 LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQMYXsfd mtQL1LWlJPQt86GGzUHyKqDtW9rX6SYTKltp2WelFc7KpDWClf9ER5qrCxTB6ygQ YfgboqtCgUcbnwzXOLRuVPHpshUDm6TA6GuWderjMIqPtAhiW7b9oJf4HOEvJOFM 2MQPV2IVsvlGLircYcV09jfhmZiOLdcwozUhChaq+gkbJYDBqCv2H0TqNJTjtYvY AIzR7z2uwBAp/b8G6gIorV3KOhjpL7kvhPCYQa4HQeZrVp8nXCmKTNP966mKDr8r 4dfCkphXqbZjseO7Fv5kooWDWA1sLGxxWCg/pFK1YBcgNBNKNUvmGmPzLqDL0tbW yHWbIwYaY3z3uw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:08 2025 by rpki-client