This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json) Hash identifier: QgXTrtcP2XsEc+4gfkfjrgWHGJar5d7BrvHwA3opgno= Subject key identifier: 7A:D6:87:D2:B1:02:CD:69:01:40:BF:59:8D:96:A0:3F:81:C4:62:50 Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00 Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200 Certificate serial: 019B34FBB7C64E5B26CD3A9AE3A9411D62E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft Manifest number: 0D5C Signing time: Fri 19 Dec 2025 05:01:10 +0000 Manifest this update: Fri 19 Dec 2025 05:01:10 +0000 Manifest next update: Sat 20 Dec 2025 05:01:10 +0000 Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=) 2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=) 3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: 2bq/86mYsT4vT5HVdWSzmhCmfdKb9RdfKcZSVEUdPJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:b7:c6:4e:5b:26:cd:3a:9a:e3:a9:41:1d:62:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200 Validity Not Before: Dec 19 05:01:10 2025 GMT Not After : Dec 20 05:01:10 2025 GMT Subject: CN=7ad687d2b102cd690140bf598d96a03f81c46250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:eb:b0:1e:14:a4:25:70:ba:d7:09:6e:1a: cd:6d:81:77:a9:34:04:87:5a:05:d3:73:cf:37:d9: 4a:4b:6f:62:f1:e6:5e:fa:a5:d7:6c:29:f2:c5:fb: 1d:dc:c0:f8:dc:ad:94:ea:a3:5c:2c:e2:04:9e:57: 7f:a2:f6:82:d1:29:45:63:f8:87:fe:43:ce:b2:c3: e2:9e:fd:f8:97:66:a6:12:0f:8f:2e:f4:5f:bc:66: 70:31:2d:e4:5f:85:d5:49:20:14:bb:22:80:16:5b: 97:0e:e6:ca:24:3d:12:ce:4e:62:60:b0:d0:88:3b: 40:1c:36:75:f7:98:e3:a7:25:34:3b:ad:20:d9:fc: c6:94:62:f5:d8:c3:c0:47:9b:c2:93:d0:2e:1a:0b: cb:c3:c9:41:e8:c6:d6:2e:d3:ce:0a:e7:17:8d:ac: 24:f8:c8:b1:c3:f5:d6:6f:c3:60:80:da:f5:34:64: b0:2f:48:39:9a:c5:63:96:0f:19:71:36:1b:53:a0: 90:26:74:ce:37:84:00:88:19:c6:b0:3b:b0:40:97: 04:a7:ac:1e:5f:78:ce:c6:25:8b:e1:23:8b:8b:59: f9:62:1a:d5:21:75:4c:0c:ba:35:53:8b:e3:4f:50: f6:8c:09:2a:44:0c:30:e5:c6:c0:48:aa:af:d1:0f: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:87:D2:B1:02:CD:69:01:40:BF:59:8D:96:A0:3F:81:C4:62:50 X509v3 Authority Key Identifier: keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:ee:d3:9e:01:cb:07:ee:94:ad:47:83:64:dc:a8:98:f8: cc:7c:70:75:e0:a2:72:f7:79:41:59:e9:f1:58:c5:1b:10:4d: 6c:70:3f:3e:aa:93:94:17:9e:0c:f9:f5:5a:fc:80:17:ad:da: cd:29:59:18:f7:a4:79:14:e3:c0:e8:b1:14:26:01:aa:2d:c8: 59:47:2c:c7:13:27:4e:c2:9c:23:09:65:01:5a:1b:42:c7:32: cf:6f:c8:70:76:a6:ff:35:7f:dc:27:44:40:7c:5c:c5:1e:45: e5:0d:72:0e:ba:90:3e:02:1e:e2:f7:f2:ff:06:99:b9:95:a9: b7:86:d6:b0:6a:a2:61:ad:25:f3:0e:2b:34:94:98:87:f0:c6: 98:80:4d:46:84:0c:14:d0:5e:58:9d:e2:f0:fb:51:2e:71:f1: 32:57:ce:51:ed:0f:0a:4f:6d:6a:e2:22:fb:d8:0e:c0:17:a9: e0:68:29:f3:da:4b:7e:5e:fe:1d:52:53:c3:d8:7a:22:17:08: ec:f3:08:01:d7:19:cf:5e:e8:d2:72:3b:ff:7c:75:05:fa:1d: 78:57:c6:b6:5d:10:52:0b:df:6a:bd:37:cd:3c:04:68:6f:e1: fb:bc:f8:d5:71:ad:ed:d4:c7:16:b1:6a:c5:04:92:e8:2d:75: a5:75:9d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+7fGTlsmzTqa46lBHWLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZTczNTEyOWY3NzdhMjViZjg0NzI3MjA2YmY5NzhkOWEx ZGIyMDAwHhcNMjUxMjE5MDUwMTEwWhcNMjUxMjIwMDUwMTEwWjAzMTEwLwYDVQQD Eyg3YWQ2ODdkMmIxMDJjZDY5MDE0MGJmNTk4ZDk2YTAzZjgxYzQ2MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktbrsB4UpCVwutcJbhrNbYF3qTQE h1oF03PPN9lKS29i8eZe+qXXbCnyxfsd3MD43K2U6qNcLOIEnld/ovaC0SlFY/iH /kPOssPinv34l2amEg+PLvRfvGZwMS3kX4XVSSAUuyKAFluXDubKJD0Szk5iYLDQ iDtAHDZ195jjpyU0O60g2fzGlGL12MPAR5vCk9AuGgvLw8lB6MbWLtPOCucXjawk +Mixw/XWb8NggNr1NGSwL0g5msVjlg8ZcTYbU6CQJnTON4QAiBnGsDuwQJcEp6we X3jOxiWL4SOLi1n5YhrVIXVMDLo1U4vjT1D2jAkqRAww5cbASKqv0Q+ilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrWh9KxAs1pAUC/WY2WoD+BxGJQMB8GA1UdIwQY MBaAFIznNRKfd3olv4Rycga/l42aHbIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYt Zjc4YzIyMDY1NzVhLzEvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYtZjc4YzIyMDY1NzVh LzEvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbXu054B ywfulK1Hg2TcqJj4zHxwdeCicvd5QVnp8VjFGxBNbHA/PqqTlBeeDPn1WvyAF63a zSlZGPekeRTjwOixFCYBqi3IWUcsxxMnTsKcIwllAVobQscyz2/IcHam/zV/3CdE QHxcxR5F5Q1yDrqQPgIe4vfy/waZuZWpt4bWsGqiYa0l8w4rNJSYh/DGmIBNRoQM FNBeWJ3i8PtRLnHxMlfOUe0PCk9tauIi+9gOwBep4Ggp89pLfl7+HVJTw9h6IhcI 7PMIAdcZz17o0nI7/3x1BfodeFfGtl0QUgvfar03zTwEaG/h+7z41XGt7dTHFrFq xQSS6C11pXWdPA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:08:52 2025 by rpki-client