This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json) Hash identifier: x3ttmXFTuMlKur/O4Ivintfq08fhrvXSvdaFjfTkUyo= Subject key identifier: F6:31:40:73:12:A6:F3:3D:9E:51:57:04:BB:D8:33:35:59:58:0A:1C Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b Certificate serial: 019B0E5BAC364F5801B40516510C414CE1A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft Manifest number: D5 Signing time: Thu 11 Dec 2025 17:00:47 +0000 Manifest this update: Thu 11 Dec 2025 17:00:47 +0000 Manifest next update: Fri 12 Dec 2025 17:00:47 +0000 Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: 5ClkO3XFXoMWJk/vXH92L1kj9TpxQkDWO2lCCx0+EYg=) 2: yD4usZMSXbGkK2CBunEX74yn4QI.roa (hash: SizEhRkGwm4GTxXwCKgcYA/BLRuUEVBDL2+vReMYwzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:ac:36:4f:58:01:b4:05:16:51:0c:41:4c:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b Validity Not Before: Dec 11 17:00:47 2025 GMT Not After : Dec 12 17:00:47 2025 GMT Subject: CN=f631407312a6f33d9e515704bbd8333559580a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:73:ce:92:df:ab:43:87:b8:ab:c8:5a:1e: 7d:4c:79:24:ef:32:6c:0c:d8:34:d0:11:9f:06:35: 0c:d6:b7:e1:f7:eb:20:2a:a0:2c:d3:14:ca:39:d5: 4c:ad:dc:77:96:ac:0a:66:ad:cc:3c:c7:6e:1f:c1: ac:33:c2:39:8a:4b:f0:7e:eb:4d:8c:4b:6e:8a:a1: 46:48:ee:6f:69:21:69:06:2c:7e:96:69:e7:0f:38: 08:3e:2a:47:ca:8d:ce:c6:0d:0f:b0:ed:6f:38:96: f9:8b:f6:0e:2e:c4:a9:34:27:8a:89:bf:88:37:8d: a2:02:76:61:48:92:e3:ee:42:16:a9:1f:f0:3d:05: 67:38:cc:0e:d7:05:0e:02:08:e3:ce:78:eb:b4:d3: a0:e4:68:c6:c7:c9:74:43:6c:e4:4d:81:e8:f2:2a: 69:da:05:6a:e3:72:80:a4:5a:f7:83:76:5d:a8:e6: 9d:eb:1a:7f:05:2b:d6:06:2a:22:8f:a6:db:28:11: 10:0e:0f:a0:9b:99:dc:a1:a3:b9:90:f8:b9:00:a9: 27:d0:ae:c6:da:fd:2f:32:3e:34:f7:6e:dd:2d:9f: 39:d9:2f:d7:33:5f:6e:e2:bc:72:2a:bc:3f:b2:cb: 59:e1:08:94:f4:c4:0c:62:26:1a:33:fb:1e:a2:98: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:31:40:73:12:A6:F3:3D:9E:51:57:04:BB:D8:33:35:59:58:0A:1C X509v3 Authority Key Identifier: keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ea:1e:1d:23:0b:fd:e4:76:3a:88:42:cd:b6:fa:00:06:11: e1:98:69:9d:3c:1c:fc:09:ec:fb:55:94:6e:ce:fd:63:b3:0a: 83:62:71:e9:1b:6b:1a:58:f1:c1:de:5e:16:e7:e9:aa:df:f3: aa:10:6f:ec:36:62:0d:33:14:f7:26:f6:68:79:06:7d:29:04: 4b:a8:85:92:38:d9:f8:40:d6:07:42:80:58:c3:4a:72:3f:8d: c2:4d:0c:cb:cf:39:41:7a:8c:b6:57:55:45:4c:a0:51:cb:8e: 2a:b6:10:39:bd:b7:13:22:0a:90:e2:37:71:15:e5:30:0c:0a: 16:20:41:f7:4a:0b:5e:34:bd:7f:7d:8a:80:03:38:40:28:a5: d6:27:18:1c:09:9a:42:8e:6b:89:c6:cd:26:2a:e1:84:c5:b6: f6:70:13:aa:d3:de:e8:e3:c8:f3:64:ed:63:0a:56:ca:f2:b3: 54:38:5d:13:ce:94:16:2c:3e:b4:40:14:11:ad:2d:27:86:83: 3c:ec:7c:7e:71:83:82:db:67:2e:e3:0b:79:c6:c9:87:19:2f: fc:1c:88:94:d0:12:ee:de:4f:f3:fd:c6:df:44:76:41:b5:93: fe:6d:12:08:dd:73:d8:ea:d9:52:fc:3e:73:2b:84:50:c4:3b: 3a:63:57:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW6w2T1gBtAUWUQxBTOGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5 ZmQ4NWIwHhcNMjUxMjExMTcwMDQ3WhcNMjUxMjEyMTcwMDQ3WjAzMTEwLwYDVQQD EyhmNjMxNDA3MzEyYTZmMzNkOWU1MTU3MDRiYmQ4MzMzNTU5NTgwYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z1zzpLfq0OHuKvIWh59THkk7zJs DNg00BGfBjUM1rfh9+sgKqAs0xTKOdVMrdx3lqwKZq3MPMduH8GsM8I5ikvwfutN jEtuiqFGSO5vaSFpBix+lmnnDzgIPipHyo3Oxg0PsO1vOJb5i/YOLsSpNCeKib+I N42iAnZhSJLj7kIWqR/wPQVnOMwO1wUOAgjjznjrtNOg5GjGx8l0Q2zkTYHo8ipp 2gVq43KApFr3g3ZdqOad6xp/BSvWBioij6bbKBEQDg+gm5ncoaO5kPi5AKkn0K7G 2v0vMj40927dLZ852S/XM19u4rxyKrw/sstZ4QiU9MQMYiYaM/seophULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYxQHMSpvM9nlFXBLvYMzVZWAocMB8GA1UdIwQY MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuoeHSML /eR2OohCzbb6AAYR4ZhpnTwc/Ans+1WUbs79Y7MKg2Jx6RtrGljxwd5eFufpqt/z qhBv7DZiDTMU9yb2aHkGfSkES6iFkjjZ+EDWB0KAWMNKcj+Nwk0My885QXqMtldV RUygUcuOKrYQOb23EyIKkOI3cRXlMAwKFiBB90oLXjS9f32KgAM4QCil1icYHAma Qo5ricbNJirhhMW29nATqtPe6OPI82TtYwpWyvKzVDhdE86UFiw+tEAUEa0tJ4aD POx8fnGDgttnLuMLecbJhxkv/ByIlNAS7t5P8/3G30R2QbWT/m0SCN1z2OrZUvw+ cyuEUMQ7OmNXzw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:29:27 2025 by rpki-client