This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json) Hash identifier: uoH8ruEOJ3Z68QSnLHZ7GCS433xcd5PMU8sNKx2rlw4= Subject key identifier: C7:35:3D:2C:06:5C:94:E1:E4:BD:D9:47:11:14:45:BB:E6:37:27:41 Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c Certificate serial: 019B3BD98DFFD816CD260D86EB8BC3811358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft Manifest number: 14FE Signing time: Sat 20 Dec 2025 13:01:11 +0000 Manifest this update: Sat 20 Dec 2025 13:01:11 +0000 Manifest next update: Sun 21 Dec 2025 13:01:11 +0000 Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=) 2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=) 3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: Jn0Jcku9N5mYR8jzlbv7sTemz1KPSO9xXlCzLBOrpbU=) 4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:8d:ff:d8:16:cd:26:0d:86:eb:8b:c3:81:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c Validity Not Before: Dec 20 13:01:11 2025 GMT Not After : Dec 21 13:01:11 2025 GMT Subject: CN=c7353d2c065c94e1e4bdd947111445bbe6372741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:f0:42:cf:87:5c:93:11:d2:e2:06:ca:da: 43:e5:11:50:40:8a:8b:4a:2f:8e:63:5b:5c:6c:c5: 54:c1:f0:db:56:b1:13:f6:e4:62:b6:bf:0e:8c:ed: de:f2:34:aa:74:ea:8f:80:65:f7:12:8b:c2:e6:12: 89:53:08:40:fe:a9:fb:c6:bf:26:97:e5:13:97:b0: 37:f2:10:57:eb:95:42:88:7c:2a:13:33:a9:e7:61: e3:f2:38:5e:74:30:d6:ab:1f:9b:5e:9f:cd:7f:37: 7b:3c:f4:f7:f9:24:92:8a:eb:b6:e0:b8:25:93:76: 87:8f:17:df:ed:b7:a1:db:eb:4c:83:73:37:c7:0e: 3d:e1:68:e2:98:e9:a7:5d:05:5f:a1:3e:43:5f:74: d3:6f:89:63:f1:0c:c9:b3:19:cd:21:a8:e5:52:ff: c5:c8:69:20:38:07:b0:eb:1c:24:69:2a:54:ef:af: 59:c4:aa:41:42:43:2f:c7:ab:8e:f2:0c:99:6b:08: de:93:1d:9c:74:e6:7d:a7:67:d2:7e:06:17:85:14: 08:10:fb:b3:31:94:1e:e0:92:ce:e4:f9:12:1b:a5: cb:74:59:e5:a0:38:9c:20:83:f9:90:b9:be:d4:61: 8b:9d:be:3f:45:34:67:bd:9a:eb:c8:86:f9:f2:ad: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:3D:2C:06:5C:94:E1:E4:BD:D9:47:11:14:45:BB:E6:37:27:41 X509v3 Authority Key Identifier: keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b1:42:7a:d9:65:40:63:68:b9:13:37:62:8a:81:05:c8:3d: 5b:41:32:1c:a9:06:a3:61:32:62:7c:62:a0:84:12:61:80:ff: df:cd:95:77:3b:91:48:b5:4e:c8:01:7f:67:2f:b3:a7:3f:9e: 95:34:2a:93:7d:16:3f:6f:e5:a8:ab:7a:55:d7:72:81:30:52: 02:84:04:e1:b5:9d:6b:76:b2:90:b0:2f:ee:72:19:1f:47:5d: 90:cd:68:b7:32:34:3f:48:19:7f:9c:07:83:67:03:97:42:40: 8f:15:83:b3:11:58:26:71:ae:3e:9e:2a:39:5a:55:f3:ff:8e: a6:30:72:97:0f:5c:2a:d5:fa:f7:a8:92:ef:75:3f:73:6a:a4: 1a:59:1c:99:1c:ac:8b:8c:3c:41:c2:18:e2:40:c1:9d:3f:08: 63:e4:45:f7:80:2f:58:74:85:ce:ee:31:4e:32:fb:84:b1:97: f5:e2:cb:dd:3e:bb:22:22:6f:00:ec:8f:c1:1e:e0:06:62:60: e6:59:9f:16:96:22:6b:71:fe:c0:f3:11:32:99:b3:df:ab:14: 3d:26:ce:72:0f:e6:b4:1a:19:74:eb:b2:0e:89:bd:f8:03:c0: ef:dc:e7:b8:35:54:0b:d8:fe:a7:02:36:34:c9:dc:40:20:75: 56:a2:ae:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Y3/2BbNJg2G64vDgRNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj MDkzOWMwHhcNMjUxMjIwMTMwMTExWhcNMjUxMjIxMTMwMTExWjAzMTEwLwYDVQQD EyhjNzM1M2QyYzA2NWM5NGUxZTRiZGQ5NDcxMTE0NDViYmU2MzcyNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmerwQs+HXJMR0uIGytpD5RFQQIqL Si+OY1tcbMVUwfDbVrET9uRitr8OjO3e8jSqdOqPgGX3EovC5hKJUwhA/qn7xr8m l+UTl7A38hBX65VCiHwqEzOp52Hj8jhedDDWqx+bXp/Nfzd7PPT3+SSSiuu24Lgl k3aHjxff7beh2+tMg3M3xw494WjimOmnXQVfoT5DX3TTb4lj8QzJsxnNIajlUv/F yGkgOAew6xwkaSpU769ZxKpBQkMvx6uO8gyZawjekx2cdOZ9p2fSfgYXhRQIEPuz MZQe4JLO5PkSG6XLdFnloDicIIP5kLm+1GGLnb4/RTRnvZrryIb58q0+9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc1PSwGXJTh5L3ZRxEURbvmNydBMB8GA1UdIwQY MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt MWM5NGNiN2RmZWIzLzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbFCetll QGNouRM3YoqBBcg9W0EyHKkGo2EyYnxioIQSYYD/382VdzuRSLVOyAF/Zy+zpz+e lTQqk30WP2/lqKt6VddygTBSAoQE4bWda3aykLAv7nIZH0ddkM1otzI0P0gZf5wH g2cDl0JAjxWDsxFYJnGuPp4qOVpV8/+OpjBylw9cKtX696iS73U/c2qkGlkcmRys i4w8QcIY4kDBnT8IY+RF94AvWHSFzu4xTjL7hLGX9eLL3T67IiJvAOyPwR7gBmJg 5lmfFpYia3H+wPMRMpmz36sUPSbOcg/mtBoZdOuyDom9+APA79znuDVUC9j+pwI2 NMncQCB1VqKusQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:07 2025 by rpki-client