This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft File: Jjw1B3YMW4KVGjB875MrCk02s2M.mft (raw, json) Hash identifier: UifTTKUXjK7Yh1WM5Cl4MFr8lrrRJnKzxEztrxAKp2M= Subject key identifier: D0:81:54:9C:16:32:7B:D8:89:54:B3:EB:C4:BA:C6:CB:22:24:03:71 Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 Certificate issuer: /CN=263c3507760c5b82951a307cef932b0a4d36b363 Certificate serial: 019B330D4DAD423DECD9DB34FC5B9186252F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft Manifest number: 11F3 Signing time: Thu 18 Dec 2025 20:01:08 +0000 Manifest this update: Thu 18 Dec 2025 20:01:08 +0000 Manifest next update: Fri 19 Dec 2025 20:01:08 +0000 Files and hashes: 1: Jjw1B3YMW4KVGjB875MrCk02s2M.crl (hash: u3Rexq83lHl+7LKSn5Yk6P15KLj/FMCc9ptNu9eklAI=) 2: w_RZsVQnV5c6Jlesd2-orRCXsVU.roa (hash: wXbhIxP+hDaVa5GS4+mSO9iYIDEjwaRB2ZNKaMWBSnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:4d:ad:42:3d:ec:d9:db:34:fc:5b:91:86:25:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363 Validity Not Before: Dec 18 20:01:08 2025 GMT Not After : Dec 19 20:01:08 2025 GMT Subject: CN=d081549c16327bd88954b3ebc4bac6cb22240371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:b1:b2:bf:f1:da:bf:1b:09:9d:f5:27:63: eb:34:61:3a:31:f0:7b:ea:28:00:12:44:a0:15:c8: f4:5a:60:03:1c:17:bc:21:46:b8:b3:63:1d:93:db: 2a:70:4d:a2:e0:4d:1e:51:74:b9:c4:4a:d8:45:5f: a5:6d:e5:15:80:cd:e5:78:cc:aa:a7:61:b8:ba:aa: bd:99:0e:bc:40:b9:af:6b:6b:82:77:ec:51:1a:8b: 61:88:d9:9a:d2:cd:ec:bd:07:6c:d4:26:23:d4:5f: ca:85:ed:54:cd:48:be:16:74:e5:c5:cc:99:6b:ef: d4:7f:ae:34:bc:05:b2:6c:87:5b:01:68:b1:42:0c: 09:1d:5f:a2:8a:b2:94:34:29:46:f1:5c:24:0e:b5: 2f:ca:7d:9e:a5:c2:da:0f:fc:c4:c4:c8:2a:ac:2c: 0c:a3:13:74:23:9d:16:00:05:24:19:7b:5d:ea:9d: b3:7c:bc:eb:d7:ed:25:37:0e:5b:f5:7b:96:3d:90: df:f6:0a:7f:72:e2:f0:00:f3:86:91:69:4a:30:11: aa:c9:22:6b:09:cc:b3:0b:8d:a6:f9:6a:d1:fd:82: 97:f9:53:e4:8f:18:60:81:ec:d9:53:79:c6:11:57: c1:64:1a:4e:12:c1:2a:6e:88:d4:7c:d8:0e:39:16: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:81:54:9C:16:32:7B:D8:89:54:B3:EB:C4:BA:C6:CB:22:24:03:71 X509v3 Authority Key Identifier: keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8b:c9:1b:b7:38:f5:e8:4a:88:c0:11:ef:5f:d3:86:50:05: 05:96:b2:30:0d:9c:6f:05:f0:94:57:b3:7e:d0:28:e3:a9:da: d0:79:c5:72:08:7a:7d:5a:31:20:19:3c:2b:56:81:44:8c:9a: 66:3d:64:47:c3:1d:d2:15:9a:37:64:c1:0f:53:fe:89:de:e1: 4f:31:2b:c3:6c:51:9d:6e:b1:13:da:bf:b5:9d:2d:dd:18:94: aa:4e:b7:f0:93:79:14:41:99:c6:71:93:16:90:55:75:53:fa: a9:44:e2:88:da:49:17:56:56:fc:7f:98:40:56:6a:fe:ee:39: 49:a5:3e:a8:59:42:cb:e4:1f:a6:a7:78:aa:9d:64:f1:4d:44: 12:7d:54:fb:1c:35:e4:27:0e:52:c4:a7:12:63:21:ef:58:79: 44:e0:52:a1:86:16:3f:f0:87:fa:d5:97:8f:af:f9:b9:f8:b5: b5:5d:fc:d0:34:fb:c8:d6:10:35:44:6a:83:69:ce:a4:9e:79: 02:86:e2:98:51:bb:48:c4:c5:8a:a4:4d:19:4a:e9:40:c2:67: c5:09:ac:c7:e1:cf:de:35:f5:a8:64:55:81:4d:4b:1c:a4:61: fc:8c:28:b0:87:2c:47:17:ba:dc:82:93:53:04:7f:f6:a4:2a: 6d:96:c6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDU2tQj3s2ds0/FuRhiUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2M2MzNTA3NzYwYzViODI5NTFhMzA3Y2VmOTMyYjBhNGQz NmIzNjMwHhcNMjUxMjE4MjAwMTA4WhcNMjUxMjE5MjAwMTA4WjAzMTEwLwYDVQQD EyhkMDgxNTQ5YzE2MzI3YmQ4ODk1NGIzZWJjNGJhYzZjYjIyMjQwMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2+xsr/x2r8bCZ31J2PrNGE6MfB7 6igAEkSgFcj0WmADHBe8IUa4s2Mdk9sqcE2i4E0eUXS5xErYRV+lbeUVgM3leMyq p2G4uqq9mQ68QLmva2uCd+xRGothiNma0s3svQds1CYj1F/Khe1UzUi+FnTlxcyZ a+/Uf640vAWybIdbAWixQgwJHV+iirKUNClG8VwkDrUvyn2epcLaD/zExMgqrCwM oxN0I50WAAUkGXtd6p2zfLzr1+0lNw5b9XuWPZDf9gp/cuLwAPOGkWlKMBGqySJr CcyzC42m+WrR/YKX+VPkjxhggezZU3nGEVfBZBpOEsEqbojUfNgOORab+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCBVJwWMnvYiVSz68S6xssiJANxMB8GA1UdIwQY MBaAFCY8NQd2DFuClRowfO+TKwpNNrNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUt OTBiNGYyZDRjNTU2LzEvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wMWU2MTMtOWJiNi00NGQwLThlNzUtOTBiNGYyZDRjNTU2 LzEvSmp3MUIzWU1XNEtWR2pCODc1TXJDazAyczJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4vJG7c4 9ehKiMAR71/ThlAFBZayMA2cbwXwlFezftAo46na0HnFcgh6fVoxIBk8K1aBRIya Zj1kR8Md0hWaN2TBD1P+id7hTzErw2xRnW6xE9q/tZ0t3RiUqk638JN5FEGZxnGT FpBVdVP6qUTiiNpJF1ZW/H+YQFZq/u45SaU+qFlCy+Qfpqd4qp1k8U1EEn1U+xw1 5CcOUsSnEmMh71h5ROBSoYYWP/CH+tWXj6/5ufi1tV380DT7yNYQNURqg2nOpJ55 AobimFG7SMTFiqRNGUrpQMJnxQmsx+HP3jX1qGRVgU1LHKRh/IwosIcsRxe63IKT UwR/9qQqbZbGQA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:56:05 2025 by rpki-client