This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft File: JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json) Hash identifier: /ohO86yGTf0ZgM0ekbMGuCAyT/GEbz2D67/cNDaE4uM= Subject key identifier: 18:43:E4:D6:B8:42:F1:30:00:1B:55:E4:89:1C:30:A4:38:9D:D4:06 Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Certificate serial: 019B35A100BDD96A7DBC7C6C439D4E44BE17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft Manifest number: 13A7 Signing time: Fri 19 Dec 2025 08:01:42 +0000 Manifest this update: Fri 19 Dec 2025 08:01:42 +0000 Manifest next update: Sat 20 Dec 2025 08:01:42 +0000 Files and hashes: 1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=) 2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: fngJwma47nuz1q20A3/1xbUCBpbjNm+SYFPLt/NsN5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a1:00:bd:d9:6a:7d:bc:7c:6c:43:9d:4e:44:be:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Validity Not Before: Dec 19 08:01:42 2025 GMT Not After : Dec 20 08:01:42 2025 GMT Subject: CN=1843e4d6b842f130001b55e4891c30a4389dd406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:82:2c:0a:bb:44:85:c0:d8:b1:13:a0:c2: 52:0c:30:b5:54:fb:d0:b1:94:bc:75:f5:63:4b:7b: 27:73:8c:29:bb:b4:20:92:09:26:e3:f3:60:17:d2: 21:04:fc:f4:42:8a:5a:b9:94:e4:50:56:66:31:63: fa:d3:ca:19:c8:7e:82:60:16:5c:6f:8b:cc:e8:0c: c7:29:79:e6:1c:3c:75:69:6e:a4:ec:06:3b:29:b5: 99:59:a7:31:3b:89:42:a8:34:01:c1:f4:9b:5c:11: c2:85:1e:32:39:76:63:b5:8c:f7:5b:d1:8e:da:ce: 7f:d2:06:d1:39:b0:66:c6:e3:ae:44:e9:a0:63:ac: a2:50:7b:a3:98:1d:b4:56:89:c9:04:c7:59:13:af: 61:3c:43:c3:eb:c7:b4:34:f7:0d:f2:e6:62:f6:6a: 53:f7:2b:61:aa:50:45:aa:4e:2a:3c:2d:3e:1d:d1: 0a:0e:18:85:c0:5e:dc:6d:35:a3:8d:37:2a:6a:98: 70:93:12:f4:ba:0c:ff:b4:23:00:e9:a7:ce:48:8d: f4:db:79:a7:91:99:2d:b6:4a:50:6c:c1:ca:a9:7e: b7:40:56:ca:7a:a5:9f:04:27:38:9c:53:96:fc:c2: 9e:b0:82:40:b5:1a:e3:de:96:9d:eb:09:48:86:01: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:43:E4:D6:B8:42:F1:30:00:1B:55:E4:89:1C:30:A4:38:9D:D4:06 X509v3 Authority Key Identifier: keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5d:6e:e7:4a:e9:97:61:45:4a:57:79:bf:7c:0d:41:df:d1: 58:d6:d9:01:47:fa:cd:b6:d9:c0:3a:2d:c2:c6:34:c8:e0:07: 46:2a:3c:7e:d5:f4:41:57:23:0e:af:ec:4f:7a:0b:40:4b:d1: b5:c5:01:6b:7f:e9:99:35:f5:c4:1d:4b:5f:0b:9d:dc:4d:a4: 70:62:54:97:ec:bb:5c:ea:81:57:be:a9:16:a4:e8:dd:b3:28: 92:66:69:c8:c5:6f:57:53:d5:13:fc:47:bd:dc:34:4a:be:70: dc:89:d4:19:84:6e:f7:42:fb:d6:3d:bd:f0:6a:f0:45:ed:bc: 07:ec:df:99:a5:36:7a:5e:43:d4:13:76:ab:81:f2:86:2c:bc: 0c:f2:f9:84:32:51:34:62:10:dd:45:15:df:55:6e:93:0a:6e: b0:7e:a3:f4:12:a2:57:e8:79:7f:30:5a:7a:bd:d1:73:49:19: 95:07:94:85:2b:71:d9:30:ef:c6:31:fe:4e:8a:eb:ec:f7:a7: 69:23:f3:a5:db:d7:16:f2:4d:de:05:35:a9:88:65:6a:a7:91: 58:81:a0:1f:8f:b7:cf:12:25:b2:5c:7b:4b:97:23:0a:6a:f4: c4:5c:0f:56:f1:20:5d:48:9b:f1:ea:44:55:d2:23:ac:6a:f1: 0f:2f:e9:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oQC92Wp9vHxsQ51ORL4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDNkYjhiZWQzNTRiNDc4YzZkMTcwNGExZTNhZTZjOTI2 ZDU2NzIwHhcNMjUxMjE5MDgwMTQyWhcNMjUxMjIwMDgwMTQyWjAzMTEwLwYDVQQD EygxODQzZTRkNmI4NDJmMTMwMDAxYjU1ZTQ4OTFjMzBhNDM4OWRkNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvaCLAq7RIXA2LEToMJSDDC1VPvQ sZS8dfVjS3snc4wpu7Qgkgkm4/NgF9IhBPz0QopauZTkUFZmMWP608oZyH6CYBZc b4vM6AzHKXnmHDx1aW6k7AY7KbWZWacxO4lCqDQBwfSbXBHChR4yOXZjtYz3W9GO 2s5/0gbRObBmxuOuROmgY6yiUHujmB20VonJBMdZE69hPEPD68e0NPcN8uZi9mpT 9ythqlBFqk4qPC0+HdEKDhiFwF7cbTWjjTcqaphwkxL0ugz/tCMA6afOSI3023mn kZkttkpQbMHKqX63QFbKeqWfBCc4nFOW/MKesIJAtRrj3pad6wlIhgFGQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhD5Na4QvEwABtV5IkcMKQ4ndQGMB8GA1UdIwQY MBaAFCbT24vtNUtHjG0XBKHjrmySbVZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQt Y2U2YmI3MWE4ZGE2LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQtY2U2YmI3MWE4ZGE2 LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF1u50rp l2FFSld5v3wNQd/RWNbZAUf6zbbZwDotwsY0yOAHRio8ftX0QVcjDq/sT3oLQEvR tcUBa3/pmTX1xB1LXwud3E2kcGJUl+y7XOqBV76pFqTo3bMokmZpyMVvV1PVE/xH vdw0Sr5w3InUGYRu90L71j298GrwRe28B+zfmaU2el5D1BN2q4Hyhiy8DPL5hDJR NGIQ3UUV31VukwpusH6j9BKiV+h5fzBaer3Rc0kZlQeUhStx2TDvxjH+Torr7Pen aSPzpdvXFvJN3gU1qYhlaqeRWIGgH4+3zxIlslx7S5cjCmr0xFwPVvEgXUib8epE VdIjrGrxDy/pKw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:08:15 2025 by rpki-client