This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json) Hash identifier: Jkpd7KJUUSz5q8r1yzUaE9BMbkVLTuorIFKotHjeNyw= Subject key identifier: 70:A2:55:27:E6:DF:F1:05:23:D8:B5:2D:BF:3A:02:A9:0E:58:60:91 Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Certificate serial: 019B337AE64DFF1488B707BA4DB4877AF5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft Manifest number: 1637 Signing time: Thu 18 Dec 2025 22:00:50 +0000 Manifest this update: Thu 18 Dec 2025 22:00:50 +0000 Manifest next update: Fri 19 Dec 2025 22:00:50 +0000 Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: GG7TUOVgJdsfw8ASWs9ZphvPH3rBLuAssCD6jipxt4k=) 2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e6:4d:ff:14:88:b7:07:ba:4d:b4:87:7a:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8 Validity Not Before: Dec 18 22:00:50 2025 GMT Not After : Dec 19 22:00:50 2025 GMT Subject: CN=70a25527e6dff10523d8b52dbf3a02a90e586091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:a2:1a:dc:e9:bb:e8:8e:f0:3c:c7:b0:21: 90:42:f4:bd:af:e5:b0:17:4b:c9:ca:af:9d:5f:4b: f1:20:60:7c:d5:b6:08:34:fa:47:7a:4d:83:ab:48: 72:36:39:6b:ae:f6:7e:a6:aa:3b:ba:b7:24:88:47: 3a:2b:a7:8c:24:2d:b0:b9:53:78:8e:56:1c:c5:44: ec:bd:e1:d1:41:4a:c5:78:e9:c0:81:0b:5c:3e:3a: 10:1f:6d:66:5a:69:06:c5:a9:1e:b8:bf:67:76:2e: 9d:44:d6:f0:ca:d0:ff:36:9f:34:5c:9e:b2:99:f9: a0:f7:3e:92:fd:13:6e:a4:ec:c7:3d:bc:da:be:5b: 98:bd:c5:5c:bc:6d:72:29:56:ce:96:ad:2f:a5:60: 09:7b:51:4f:f5:69:ef:40:58:20:68:97:85:12:a8: f4:36:40:a9:15:b4:6a:24:68:f7:1f:b4:ad:6b:a2: ab:8f:bf:79:f4:13:34:22:a7:f8:0e:40:8f:38:02: 84:d9:75:de:13:48:dd:92:cb:46:88:e2:ef:1a:8a: b4:11:da:90:2f:cb:ff:6b:a7:30:5f:ff:8a:89:a9: 1d:7d:50:a6:b8:9e:b2:6b:fb:ab:f7:3e:ae:7d:c6: ed:44:68:ba:29:15:ad:69:43:85:9d:5c:72:99:86: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A2:55:27:E6:DF:F1:05:23:D8:B5:2D:BF:3A:02:A9:0E:58:60:91 X509v3 Authority Key Identifier: keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0a:c3:21:49:ea:0a:d4:a7:fd:2e:db:df:6a:c5:b9:cc:8c: 45:ad:7e:01:cf:61:61:67:cb:12:b3:64:39:a9:7d:bf:8a:aa: 6f:6e:0c:7b:7c:9b:94:7e:46:d2:c7:04:80:4d:83:6e:75:83: 85:f7:64:99:7d:6c:c5:a5:93:b4:79:6e:89:05:9a:e4:58:b0: 85:62:f9:b0:61:96:b2:cd:9d:f9:d3:00:21:8d:5d:4f:52:33: 31:f8:f8:96:44:41:f4:aa:ee:65:2c:d5:7f:00:03:6a:51:21: f7:9f:f3:ef:08:fd:58:57:6d:63:dc:00:56:e2:1a:12:0b:73: 3c:21:00:de:56:02:5c:66:12:3f:f3:af:6a:cf:56:de:41:b1: 00:99:c4:ef:df:b0:87:b3:94:d9:63:fe:78:a0:89:00:ea:96: 37:48:0c:2c:eb:c9:86:ae:66:00:30:37:4b:21:bb:d7:0f:d5: f1:ce:45:2f:ce:74:c4:b6:75:43:fb:1d:66:9a:da:86:bf:16: 36:dd:ad:e3:1d:a3:2c:05:0b:73:ea:10:67:c6:ad:c7:07:1b: 3a:1f:20:b8:31:0a:e0:e6:e5:88:b2:e7:88:3f:8b:a4:01:89: 00:6c:da:1f:63:b3:26:f7:d3:6f:41:43:ca:33:0c:ed:70:84: 39:d5:0e:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeuZN/xSItwe6TbSHevXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4 YWQwYTgwHhcNMjUxMjE4MjIwMDUwWhcNMjUxMjE5MjIwMDUwWjAzMTEwLwYDVQQD Eyg3MGEyNTUyN2U2ZGZmMTA1MjNkOGI1MmRiZjNhMDJhOTBlNTg2MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KWiGtzpu+iO8DzHsCGQQvS9r+Ww F0vJyq+dX0vxIGB81bYINPpHek2Dq0hyNjlrrvZ+pqo7urckiEc6K6eMJC2wuVN4 jlYcxUTsveHRQUrFeOnAgQtcPjoQH21mWmkGxakeuL9ndi6dRNbwytD/Np80XJ6y mfmg9z6S/RNupOzHPbzavluYvcVcvG1yKVbOlq0vpWAJe1FP9WnvQFggaJeFEqj0 NkCpFbRqJGj3H7Sta6Krj7959BM0Iqf4DkCPOAKE2XXeE0jdkstGiOLvGoq0EdqQ L8v/a6cwX/+KiakdfVCmuJ6ya/ur9z6ufcbtRGi6KRWtaUOFnVxymYYTvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCiVSfm3/EFI9i1Lb86AqkOWGCRMB8GA1UdIwQY MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQrDIUnq CtSn/S7b32rFucyMRa1+Ac9hYWfLErNkOal9v4qqb24Me3yblH5G0scEgE2DbnWD hfdkmX1sxaWTtHluiQWa5FiwhWL5sGGWss2d+dMAIY1dT1IzMfj4lkRB9KruZSzV fwADalEh95/z7wj9WFdtY9wAVuIaEgtzPCEA3lYCXGYSP/Ovas9W3kGxAJnE79+w h7OU2WP+eKCJAOqWN0gMLOvJhq5mADA3SyG71w/V8c5FL850xLZ1Q/sdZprahr8W Nt2t4x2jLAULc+oQZ8atxwcbOh8guDEK4ObliLLniD+LpAGJAGzaH2OzJvfTb0FD yjMM7XCEOdUOzw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:17 2025 by rpki-client