This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft File: j1Gq0OQUir4_KouNQxjzS0VrZfE.mft (raw, json) Hash identifier: VTc1QKliwrhM6iBmzfhk8erVKWP+otwYgieLg8CudUM= Subject key identifier: 33:7D:EB:31:2E:21:38:11:E2:96:11:76:F5:49:53:7D:21:5F:22:7A Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019B5A1ADBE9E465B6CDDC107C6E5B951B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft Manifest number: 5F Signing time: Fri 26 Dec 2025 10:01:08 +0000 Manifest this update: Fri 26 Dec 2025 10:01:08 +0000 Manifest next update: Sat 27 Dec 2025 10:01:08 +0000 Files and hashes: 1: 6EQIFIIz4eVB1v8p21Y5Q01aDfY.roa (hash: /sMnLvdiABHbPxVn8864gLT5hAyS0Ct/uJsVDDKF+8Q=) 2: AX1eDcHjbt_-Dpwuu3lyA8AtxsI.roa (hash: OZ6QBv+zxDqSDgPNFre5KHlZb7+L1tiUGuy777egw9o=) 3: BVQLcuQ2z_bNWh8-bphHvzehfD8.roa (hash: 7yeAKow0/HvGyL5Krz9LW+Di5af53xxZoND+qyE9qtM=) 4: cHpfX0_t1J4Sr6t7l47Me39APq8.roa (hash: 3q7Dq5MsTjXzsun+uYmj2RIabdMqLzzUDrI1AmlzX50=) 5: j1Gq0OQUir4_KouNQxjzS0VrZfE.crl (hash: Rc4+aaPgglKHsnPnbyfmOVM2N5uUhDatItj5l2Nu588=) 6: sQoQACAf02a3Uyz7FUKHyPEeAfA.roa (hash: XhP1EIMCcccz67L2gI2c+RwNj3wfvxnqDJpYQj6utD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:db:e9:e4:65:b6:cd:dc:10:7c:6e:5b:95:1b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Dec 26 10:01:08 2025 GMT Not After : Dec 27 10:01:08 2025 GMT Subject: CN=337deb312e213811e2961176f549537d215f227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:55:ee:b7:eb:26:eb:54:7b:50:2d:81:a2: 40:5a:1d:15:cb:02:13:cd:83:a1:ec:c9:cf:e6:4b: 6a:b3:41:c4:c9:22:b9:f2:eb:59:51:ec:43:25:72: 37:23:7f:e6:fa:a2:2b:43:2b:bb:83:f8:86:14:eb: 6c:bd:96:f7:06:8c:08:07:21:49:d4:87:f6:8b:97: b0:34:75:25:27:54:26:62:6b:58:fb:e9:9a:50:b2: d0:b2:79:3b:16:7c:c2:56:b0:75:5d:61:9f:e1:80: f0:59:ed:5a:3e:7d:6d:b0:47:4e:01:c6:5a:37:a0: ff:b8:d7:a9:bf:35:ce:89:d7:61:79:96:fc:3b:2e: 21:75:4e:e3:27:3e:8f:6f:92:92:7b:9b:89:e3:0a: aa:80:a8:f7:1e:4f:07:74:0f:d8:09:36:05:41:ba: e4:c0:c0:eb:e0:d3:e3:21:76:5d:74:57:00:97:82: d6:bc:55:c3:1a:50:ac:7e:0f:ce:dc:02:3c:e6:31: 14:0c:d4:c5:36:2d:c4:88:93:c9:da:8d:f8:8d:76: e4:c8:86:19:fe:82:2d:7c:f8:04:74:e2:1e:c7:02: 19:0c:a0:a7:48:8a:fa:8a:c4:b3:ed:10:cd:a8:c2: bd:d2:f6:2a:23:ff:0e:8e:eb:a0:2f:b9:58:69:78: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7D:EB:31:2E:21:38:11:E2:96:11:76:F5:49:53:7D:21:5F:22:7A X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:20:82:ee:ea:b0:24:94:72:4a:c2:94:a7:29:f1:0d:4b:a6: 2c:1e:ec:6e:0f:7f:48:4a:c9:13:d3:b9:fd:9b:85:d0:f5:6a: a0:08:a3:a0:25:88:34:62:a2:6f:5a:9a:77:b3:40:46:65:98: e0:ab:98:9b:80:e2:d6:31:81:48:97:70:1a:3f:6b:45:d8:a6: dc:03:ee:cd:d1:fe:68:81:e5:5a:b2:16:68:db:30:d1:f3:b7: 25:9f:0e:67:6e:2b:fe:55:1b:09:43:8c:89:fc:61:6c:31:eb: 34:3a:60:a4:36:fc:f0:26:cc:cf:d0:34:9b:76:9d:63:62:8c: e9:a8:d2:0e:bf:f5:b7:80:2c:b9:9a:eb:71:20:23:71:2c:5a: a9:f8:ab:d5:1c:e0:c5:f5:05:d4:0b:85:d0:01:a4:14:87:03: 39:2f:52:86:09:bb:a2:82:4f:f7:03:60:62:6a:e1:a8:33:fe: eb:69:04:30:2c:9a:68:e5:57:ee:48:bc:81:8a:05:d9:94:7c: 00:6f:6b:7d:3c:bf:83:4e:11:3c:b4:1c:81:6d:c8:ec:88:4c: f3:8c:74:d0:de:83:a7:3c:1a:9f:47:a4:a1:42:9a:a6:6a:0d: 69:e7:51:09:e3:87:15:cf:e6:fd:bd:cc:d0:ce:0e:a2:9c:30: 1f:f3:73:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtvp5GW2zdwQfG5blRsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjUxMjI2MTAwMTA4WhcNMjUxMjI3MTAwMTA4WjAzMTEwLwYDVQQD EygzMzdkZWIzMTJlMjEzODExZTI5NjExNzZmNTQ5NTM3ZDIxNWYyMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/9V7rfrJutUe1AtgaJAWh0VywIT zYOh7MnP5ktqs0HEySK58utZUexDJXI3I3/m+qIrQyu7g/iGFOtsvZb3BowIByFJ 1If2i5ewNHUlJ1QmYmtY++maULLQsnk7FnzCVrB1XWGf4YDwWe1aPn1tsEdOAcZa N6D/uNepvzXOiddheZb8Oy4hdU7jJz6Pb5KSe5uJ4wqqgKj3Hk8HdA/YCTYFQbrk wMDr4NPjIXZddFcAl4LWvFXDGlCsfg/O3AI85jEUDNTFNi3EiJPJ2o34jXbkyIYZ /oItfPgEdOIexwIZDKCnSIr6isSz7RDNqMK90vYqI/8OjuugL7lYaXiStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN96zEuITgR4pYRdvVJU30hXyJ6MB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSCC7uqw JJRySsKUpynxDUumLB7sbg9/SErJE9O5/ZuF0PVqoAijoCWINGKib1qad7NARmWY 4KuYm4Di1jGBSJdwGj9rRdim3APuzdH+aIHlWrIWaNsw0fO3JZ8OZ24r/lUbCUOM ifxhbDHrNDpgpDb88CbMz9A0m3adY2KM6ajSDr/1t4AsuZrrcSAjcSxaqfir1Rzg xfUF1AuF0AGkFIcDOS9Shgm7ooJP9wNgYmrhqDP+62kEMCyaaOVX7ki8gYoF2ZR8 AG9rfTy/g04RPLQcgW3I7IhM84x00N6Dpzwan0ekoUKapmoNaedRCeOHFc/m/b3M 0M4OopwwH/Nz4A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:32 2025 by rpki-client