This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json) Hash identifier: ChiQTuSLCdtNfKOXulLVjg/ckcIZQCePTnePszdLBUk= Subject key identifier: D4:B9:42:2B:DC:B8:C8:49:48:9A:3C:CB:98:9C:02:16:1A:D0:67:3D Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Certificate serial: 019B08C7454AE1BD414AAF965D5A5B38387B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 15:00:35 +0000 Manifest this update: Wed 10 Dec 2025 15:00:35 +0000 Manifest next update: Thu 11 Dec 2025 15:00:35 +0000 Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=) 2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: ppt8KkFf2rzyde7tJwjcVvlk9qWPIhSydphpunuLHVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:45:4a:e1:bd:41:4a:af:96:5d:5a:5b:38:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Validity Not Before: Dec 10 15:00:35 2025 GMT Not After : Dec 11 15:00:35 2025 GMT Subject: CN=d4b9422bdcb8c849489a3ccb989c02161ad0673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e1:95:38:cb:9f:5d:ed:a0:18:b9:db:ad:65: 2b:03:84:11:0a:bd:ca:06:e5:3e:1e:2e:65:bf:17: 59:c1:e5:e4:52:05:74:20:f4:2f:db:1b:e3:d2:aa: c3:e1:fe:a9:bd:7e:0e:d6:a4:08:97:2e:26:5a:31: 3e:bf:59:e0:6d:b1:9f:f3:3c:fe:0c:5f:e3:87:6a: 90:cb:e1:57:47:a3:20:56:dc:74:a4:16:5a:29:53: f3:84:5a:30:62:d2:46:d9:69:2c:e2:f1:16:55:d3: 5b:7d:0e:41:e8:ec:38:46:76:3e:1f:50:eb:28:6d: 28:5e:eb:de:6c:5b:54:d0:ee:0f:d0:0e:46:5a:e7: b3:ce:bb:82:38:1b:e9:da:be:f2:25:f1:21:fe:ba: e7:51:81:8d:91:d5:82:f4:82:68:4c:d9:51:52:bc: e2:96:84:93:69:4f:a6:49:0f:97:39:ef:7d:b5:5c: 54:40:fb:7c:92:b9:57:4e:3d:fb:d2:7c:2a:26:b0: 96:3e:22:a5:84:24:13:d7:3a:b5:32:15:bc:f5:19: 3e:ea:f9:1a:09:b7:2f:9b:5f:15:9d:be:23:b3:7a: 4f:5c:c5:67:6e:cd:2c:24:46:c1:fe:89:f4:0d:13: 39:06:c0:92:09:59:1b:98:aa:42:1e:61:d6:b3:e5: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:42:2B:DC:B8:C8:49:48:9A:3C:CB:98:9C:02:16:1A:D0:67:3D X509v3 Authority Key Identifier: keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7a:17:ed:1d:5f:dd:cf:33:0f:33:cd:07:06:1e:85:3e:92: 47:28:56:bb:44:6c:8c:cb:27:ae:0f:73:f9:3a:c0:96:f1:a5: 49:6f:e6:ad:1d:c3:f7:e7:3f:b2:20:44:b4:a7:c8:d0:5a:10: 9b:8d:b2:e5:20:c0:bc:d6:e2:62:6a:db:80:24:a6:07:9d:aa: e8:37:2c:55:89:11:cc:75:eb:91:6c:6e:45:00:60:74:92:3d: 34:37:34:60:2a:96:ec:84:02:ae:90:56:a6:19:85:6f:96:c3: 4d:3b:b8:aa:b5:3f:60:3d:8a:d3:7b:e2:38:70:a5:26:71:38: 60:83:0a:d1:0b:03:a8:29:ec:d2:88:52:eb:84:61:dc:fc:f0: 13:09:e5:5f:51:77:c4:ca:10:fc:f3:51:ad:d2:81:28:c1:76: 47:49:7a:4e:3d:7e:6d:2e:e5:9d:cd:28:88:0f:28:79:d4:25: 48:9b:e4:4c:39:b3:16:2f:93:35:e9:b0:5a:08:59:8b:91:f7: 80:2b:23:06:8e:59:0d:8c:d8:1d:39:ab:9c:ce:0e:90:17:b0: c8:95:70:98:cd:bf:48:50:79:17:4f:4c:98:7d:74:46:c2:5a: 7e:57:f1:0a:5b:cf:8d:36:f9:f4:8b:c1:11:65:92:af:37:2e: 44:a4:b0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx0VK4b1BSq+WXVpbODh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx MmM3OGEwHhcNMjUxMjEwMTUwMDM1WhcNMjUxMjExMTUwMDM1WjAzMTEwLwYDVQQD EyhkNGI5NDIyYmRjYjhjODQ5NDg5YTNjY2I5ODljMDIxNjFhZDA2NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eGVOMufXe2gGLnbrWUrA4QRCr3K BuU+Hi5lvxdZweXkUgV0IPQv2xvj0qrD4f6pvX4O1qQIly4mWjE+v1ngbbGf8zz+ DF/jh2qQy+FXR6MgVtx0pBZaKVPzhFowYtJG2Wks4vEWVdNbfQ5B6Ow4RnY+H1Dr KG0oXuvebFtU0O4P0A5GWuezzruCOBvp2r7yJfEh/rrnUYGNkdWC9IJoTNlRUrzi loSTaU+mSQ+XOe99tVxUQPt8krlXTj370nwqJrCWPiKlhCQT1zq1MhW89Rk+6vka Cbcvm18Vnb4js3pPXMVnbs0sJEbB/on0DRM5BsCSCVkbmKpCHmHWs+VfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS5QivcuMhJSJo8y5icAhYa0Gc9MB8GA1UdIwQY MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4 LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXoX7R1f 3c8zDzPNBwYehT6SRyhWu0RsjMsnrg9z+TrAlvGlSW/mrR3D9+c/siBEtKfI0FoQ m42y5SDAvNbiYmrbgCSmB52q6DcsVYkRzHXrkWxuRQBgdJI9NDc0YCqW7IQCrpBW phmFb5bDTTu4qrU/YD2K03viOHClJnE4YIMK0QsDqCns0ohS64Rh3PzwEwnlX1F3 xMoQ/PNRrdKBKMF2R0l6Tj1+bS7lnc0oiA8oedQlSJvkTDmzFi+TNemwWghZi5H3 gCsjBo5ZDYzYHTmrnM4OkBewyJVwmM2/SFB5F09MmH10RsJaflfxClvPjTb59IvB EWWSrzcuRKSwBQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:46:06 2025 by rpki-client