This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json) Hash identifier: L9cikKEMYcBZd8PGJ1fUKGOBDL5fvZTlfVJgNozGIRk= Subject key identifier: FB:5D:61:10:EF:8C:E1:06:FB:DA:3C:B7:1B:06:2E:0F:74:6D:F7:48 Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Certificate serial: 019B5A882B71DEF0A99FBC75931DB38AE8E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft Manifest number: 100B Signing time: Fri 26 Dec 2025 12:00:31 +0000 Manifest this update: Fri 26 Dec 2025 12:00:31 +0000 Manifest next update: Sat 27 Dec 2025 12:00:31 +0000 Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=) 2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: qOZdAa9IdhqaGNHU24uFWHnsVO2qFbl+kUvrqyns5z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:2b:71:de:f0:a9:9f:bc:75:93:1d:b3:8a:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Validity Not Before: Dec 26 12:00:31 2025 GMT Not After : Dec 27 12:00:31 2025 GMT Subject: CN=fb5d6110ef8ce106fbda3cb71b062e0f746df748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:7c:85:13:36:23:21:c4:7c:e6:54:b6:5d: 81:c8:7a:e8:58:99:03:4a:be:6a:fe:2b:a5:14:73: 3f:e1:36:ba:54:75:d9:c3:08:9d:9f:90:2f:01:ad: b0:6d:c4:7d:b8:e9:4f:ff:80:10:81:e9:80:51:c4: f6:3f:c1:7b:8b:ed:98:a4:63:36:ee:ff:4c:54:29: ea:44:da:0b:49:52:1f:db:60:e6:40:d8:4c:06:44: 8e:7c:28:e3:9d:62:41:4e:8c:d6:cf:c0:a2:18:08: 31:0b:77:57:98:3d:0d:27:de:9d:0c:e9:13:8a:4b: d6:47:18:e1:a9:67:02:2d:5d:f2:5a:59:ee:a2:54: 7d:c8:a0:d6:a3:2a:c2:e7:e0:ed:c7:43:b1:10:39: b0:9b:2b:18:3e:f1:39:f8:e9:57:69:6a:ac:e5:50: d1:4f:08:bd:84:94:2c:00:2c:ff:d3:cc:77:6f:c2: 25:9d:ce:ef:ab:76:fe:0b:59:f7:61:68:8a:c6:cb: a9:50:21:60:74:80:b2:47:c4:56:b2:2e:68:8d:42: 55:e0:ce:b0:40:9e:fc:29:52:66:5e:71:7b:22:21: 2f:4a:e0:67:55:db:e6:46:be:dc:08:23:78:0f:50: 28:30:9f:83:a1:25:9f:6f:80:c5:9b:6e:26:7d:13: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:61:10:EF:8C:E1:06:FB:DA:3C:B7:1B:06:2E:0F:74:6D:F7:48 X509v3 Authority Key Identifier: keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:28:38:18:1a:3b:20:ab:95:7d:04:31:bc:4f:85:77:97:b0: 64:e2:e1:77:fa:60:a4:05:0d:df:b2:3a:94:fc:c0:ed:08:36: 63:41:5b:d2:93:52:ca:d3:f8:cf:26:05:5e:2a:77:4a:c4:df: 12:29:6f:81:d7:7e:63:e3:2a:88:fe:f7:8b:5f:5f:9f:9b:64: 22:cd:6e:e6:ae:68:2b:20:6a:5c:30:ca:57:cd:6a:dc:86:50: 84:6d:d1:ba:b3:7c:ab:73:51:4a:c2:31:0a:81:be:3d:89:ba: 2f:9e:0c:6a:2c:00:8c:a4:fc:f3:d1:f7:be:46:82:46:7a:09: 98:21:a6:9e:e8:a0:c6:ac:56:d9:0f:0d:d8:5a:82:e9:bf:55: 9f:a5:71:76:9a:14:3a:4e:42:6d:f0:4d:e6:b3:37:a5:de:39: 1e:85:b3:3a:c2:99:f3:49:9b:6a:a3:e9:77:9b:0b:00:25:07: e8:74:ed:b6:a2:84:e6:f8:f9:95:a4:be:64:b3:f5:ce:e3:d4: 4e:b0:a0:b6:e2:6e:b2:f6:9a:95:8d:b9:d8:1c:3e:a2:f4:3b: d9:6d:c9:47:53:d5:37:a1:8d:c9:cc:05:a8:1b:70:55:e0:95: 2c:16:d8:15:4d:02:3e:48:dc:d1:e3:86:1c:0e:68:66:38:4c: 2c:96:aa:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiCtx3vCpn7x1kx2ziujgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm ZGZmZjgwHhcNMjUxMjI2MTIwMDMxWhcNMjUxMjI3MTIwMDMxWjAzMTEwLwYDVQQD EyhmYjVkNjExMGVmOGNlMTA2ZmJkYTNjYjcxYjA2MmUwZjc0NmRmNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Z8hRM2IyHEfOZUtl2ByHroWJkD Sr5q/iulFHM/4Ta6VHXZwwidn5AvAa2wbcR9uOlP/4AQgemAUcT2P8F7i+2YpGM2 7v9MVCnqRNoLSVIf22DmQNhMBkSOfCjjnWJBTozWz8CiGAgxC3dXmD0NJ96dDOkT ikvWRxjhqWcCLV3yWlnuolR9yKDWoyrC5+Dtx0OxEDmwmysYPvE5+OlXaWqs5VDR Twi9hJQsACz/08x3b8Ilnc7vq3b+C1n3YWiKxsupUCFgdICyR8RWsi5ojUJV4M6w QJ78KVJmXnF7IiEvSuBnVdvmRr7cCCN4D1AoMJ+DoSWfb4DFm24mfRPgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtdYRDvjOEG+9o8txsGLg90bfdIMB8GA1UdIwQY MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5 LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSg4GBo7 IKuVfQQxvE+Fd5ewZOLhd/pgpAUN37I6lPzA7Qg2Y0Fb0pNSytP4zyYFXip3SsTf Eilvgdd+Y+MqiP73i19fn5tkIs1u5q5oKyBqXDDKV81q3IZQhG3RurN8q3NRSsIx CoG+PYm6L54MaiwAjKT889H3vkaCRnoJmCGmnuigxqxW2Q8N2FqC6b9Vn6VxdpoU Ok5CbfBN5rM3pd45HoWzOsKZ80mbaqPpd5sLACUH6HTttqKE5vj5laS+ZLP1zuPU TrCgtuJusvaalY252Bw+ovQ72W3JR1PVN6GNycwFqBtwVeCVLBbYFU0CPkjc0eOG HA5oZjhMLJaqSw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client