This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json) Hash identifier: Y/U4+31/qINL4yhweGnXAtAmSpSkCsYDERM6jqY+7AA= Subject key identifier: F2:97:25:E2:A3:18:CE:88:0F:A7:5F:51:C0:E8:BE:33:2C:AF:44:0B Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Certificate serial: 019B0F6E87374F8E9459F10AFABBBB1F62BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft Manifest number: 0BEF Signing time: Thu 11 Dec 2025 22:01:00 +0000 Manifest this update: Thu 11 Dec 2025 22:01:00 +0000 Manifest next update: Fri 12 Dec 2025 22:01:00 +0000 Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=) 2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=) 3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: CqSqs9gND+lPJDNpAoTAY2II2KomjeqWWeS9s2cnia4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:87:37:4f:8e:94:59:f1:0a:fa:bb:bb:1f:62:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Validity Not Before: Dec 11 22:01:00 2025 GMT Not After : Dec 12 22:01:00 2025 GMT Subject: CN=f29725e2a318ce880fa75f51c0e8be332caf440b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:9b:43:01:4a:0b:bd:a5:e2:59:71:a0:17: ce:3b:b9:f0:89:00:65:9d:e8:0d:9c:05:8a:e9:18: 24:63:4e:9c:11:71:69:3a:8a:f4:80:91:b7:92:6d: 55:56:9c:69:f2:66:9a:ec:e7:bc:c0:02:e1:0e:4d: e6:46:67:82:8d:35:c0:e9:2f:5b:f3:7a:20:7b:ce: 9d:16:51:af:2d:81:c4:7c:77:c5:2c:88:bf:3b:e2: cd:13:07:49:9d:72:ce:01:93:41:90:0d:84:6e:53: 17:a7:9a:95:b3:79:e4:7b:6d:9d:bc:d0:e5:c6:3a: bd:3c:7c:5f:6c:c3:f2:62:5c:4e:e6:7e:a4:a9:73: cb:5f:c1:54:db:83:68:67:0d:3e:3c:0c:6d:43:b6: 43:1c:c5:2b:97:91:0e:14:80:13:a7:3d:85:eb:01: 16:61:e2:7d:28:d2:23:90:81:89:18:dc:43:52:0a: f4:8b:34:5a:72:35:47:7d:14:41:b1:8d:4e:53:c1: d6:66:65:fa:89:77:24:c2:97:4f:74:0f:d6:43:8b: e6:ec:0a:6f:cd:b1:00:9e:55:b9:61:82:a5:05:60: fc:71:33:b9:b8:e8:47:99:5b:55:b8:a2:b8:b9:e7: fd:56:33:83:01:78:d9:da:fb:15:4f:f6:f7:ed:0a: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:25:E2:A3:18:CE:88:0F:A7:5F:51:C0:E8:BE:33:2C:AF:44:0B X509v3 Authority Key Identifier: keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0c:0a:f2:42:bd:4c:bc:61:4c:ce:83:cc:9f:e6:d9:1d:1e: ef:34:25:43:2d:ca:e7:1f:dd:a6:67:ca:1d:6a:63:9b:5d:60: ff:a6:09:8a:77:13:7d:65:18:6c:15:7c:b8:bb:d3:6c:ea:6c: eb:ec:67:84:13:71:5f:8f:04:d6:66:21:95:7b:6d:29:ba:0e: 78:31:20:1c:0c:2a:01:63:f1:7e:35:1c:0a:43:ef:2f:83:f0: c3:dd:ed:2d:94:bb:d8:14:f8:dd:fb:02:74:8c:e0:b0:83:5f: e5:a6:0e:50:c9:07:b8:67:1a:85:e7:a9:0e:9e:42:a2:c4:27: 89:2f:7e:52:5c:df:6f:ca:86:3c:1b:bd:2f:83:4b:30:29:4e: 2f:24:53:17:5f:8c:b8:d9:2e:42:fb:1d:de:32:22:d2:00:a2: 53:51:0c:89:99:0c:aa:21:23:6b:e1:8f:85:9f:17:36:5a:b3: 30:cc:1c:3a:05:d5:de:78:e3:4f:db:ea:65:1f:ed:ef:9a:5e: 3c:48:08:ff:90:7a:50:af:b4:cf:9b:1d:b1:d1:1f:72:86:08: 92:0e:ab:f8:36:e9:87:c8:c1:ac:aa:7e:d1:00:77:e0:3b:61: 21:79:ad:93:1e:c7:0f:cf:bb:2c:34:f4:e4:cf:25:09:7e:07: 5b:98:a5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPboc3T46UWfEK+ru7H2K/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYThhNGQ0MmEwMTk2ZGY3Y2MwZTE0ZjU5N2NmNTY2MGQ2 M2MwOWYwHhcNMjUxMjExMjIwMTAwWhcNMjUxMjEyMjIwMTAwWjAzMTEwLwYDVQQD EyhmMjk3MjVlMmEzMThjZTg4MGZhNzVmNTFjMGU4YmUzMzJjYWY0NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2bQwFKC72l4llxoBfOO7nwiQBl negNnAWK6RgkY06cEXFpOor0gJG3km1VVpxp8maa7Oe8wALhDk3mRmeCjTXA6S9b 83oge86dFlGvLYHEfHfFLIi/O+LNEwdJnXLOAZNBkA2EblMXp5qVs3nke22dvNDl xjq9PHxfbMPyYlxO5n6kqXPLX8FU24NoZw0+PAxtQ7ZDHMUrl5EOFIATpz2F6wEW YeJ9KNIjkIGJGNxDUgr0izRacjVHfRRBsY1OU8HWZmX6iXckwpdPdA/WQ4vm7Apv zbEAnlW5YYKlBWD8cTO5uOhHmVtVuKK4uef9VjODAXjZ2vsVT/b37QrdhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKXJeKjGM6ID6dfUcDovjMsr0QLMB8GA1UdIwQY MBaAFIyopNQqAZbffMDhT1l89WYNY8CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMt MTAwNGMxZTUwZGZlLzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMtMTAwNGMxZTUwZGZl LzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggwK8kK9 TLxhTM6DzJ/m2R0e7zQlQy3K5x/dpmfKHWpjm11g/6YJincTfWUYbBV8uLvTbOps 6+xnhBNxX48E1mYhlXttKboOeDEgHAwqAWPxfjUcCkPvL4Pww93tLZS72BT43fsC dIzgsINf5aYOUMkHuGcaheepDp5CosQniS9+Ulzfb8qGPBu9L4NLMClOLyRTF1+M uNkuQvsd3jIi0gCiU1EMiZkMqiEja+GPhZ8XNlqzMMwcOgXV3njjT9vqZR/t75pe PEgI/5B6UK+0z5sdsdEfcoYIkg6r+Dbph8jBrKp+0QB34DthIXmtkx7HD8+7LDT0 5M8lCX4HW5ilMA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:24 2025 by rpki-client