This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json) Hash identifier: ZsmumkTlyh1lOWi4on6fDcS9WapfLtf6He0LEtqU+x8= Subject key identifier: BF:A5:D0:A9:81:EF:59:6A:B8:B1:19:F2:C2:6C:6F:D0:6E:1A:13:D3 Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Certificate serial: 019B353227A056145B52532CF95312E56C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 06:00:37 +0000 Manifest this update: Fri 19 Dec 2025 06:00:37 +0000 Manifest next update: Sat 20 Dec 2025 06:00:37 +0000 Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=) 2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: E54oH6FPkelaOHAeKL/f2PiTFsu6m7JfN3CrAQmcLQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:27:a0:56:14:5b:52:53:2c:f9:53:12:e5:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Validity Not Before: Dec 19 06:00:37 2025 GMT Not After : Dec 20 06:00:37 2025 GMT Subject: CN=bfa5d0a981ef596ab8b119f2c26c6fd06e1a13d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:01:de:48:55:28:a0:ca:29:a9:73:11:40: 0f:aa:99:e9:de:19:62:f5:1f:e8:6f:7f:59:1d:bd: bb:40:dd:5b:fb:87:b7:97:fa:ca:6b:2f:46:44:b1: 11:df:90:78:b8:80:d9:3a:19:53:b3:33:f9:37:dc: 30:29:ff:03:31:b9:9b:00:7e:0d:8f:51:51:f8:47: 61:0f:1b:1f:16:08:87:90:b8:46:dc:49:b9:72:35: 9a:a1:04:64:0b:dd:44:ed:f8:fa:b9:34:7a:f7:49: d1:87:83:81:68:32:d5:fe:27:91:80:a3:bc:bb:f4: c3:c4:67:17:17:45:67:8f:2d:6c:18:c9:78:b4:3b: 75:c0:26:7d:e1:6b:63:11:d7:a8:c3:54:91:9e:54: 1c:7d:a8:18:6b:33:78:8c:6b:2a:c4:f5:3d:2d:e1: 4e:8a:0a:44:0b:bd:24:66:cc:66:4c:af:bb:75:3b: dd:0e:66:78:28:a4:1f:d2:1f:e6:e4:82:f7:19:1f: 87:09:ea:95:1a:70:56:c7:82:68:f4:cf:1b:67:34: b2:70:6e:1c:9e:a5:75:e0:0c:b4:b2:5b:bb:b3:1b: 59:99:25:f5:13:b7:62:66:6a:84:c9:64:ef:5e:8c: 6d:22:d9:6b:67:55:a2:8c:42:9b:d5:94:a3:7c:ea: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:D0:A9:81:EF:59:6A:B8:B1:19:F2:C2:6C:6F:D0:6E:1A:13:D3 X509v3 Authority Key Identifier: keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d1:ac:03:11:b7:26:5c:b6:28:18:bc:48:ff:ca:85:9a:95: e3:ef:e0:44:0c:c8:b3:a6:a7:ad:f7:f3:e2:0f:77:59:43:25: 1f:9f:2c:0c:2c:11:c6:5e:88:6f:46:0f:3a:36:72:56:34:74: a3:14:5e:54:8a:8c:e2:b6:f2:b3:59:71:b9:05:b4:70:6e:61: cd:1c:50:49:d5:b7:28:c2:43:27:56:ea:30:53:d4:b3:f1:b8: 2b:2d:4c:83:d2:8d:95:0e:24:a6:7a:0a:1f:34:41:2a:24:eb: 75:ec:f5:87:e8:7f:28:30:36:50:1f:98:c8:ae:c7:25:b3:54: 75:fb:2f:61:90:fa:04:02:83:c1:96:7c:c3:6c:eb:fc:9b:a5: 72:f7:31:fd:ab:fc:0f:6f:1c:e3:a2:7e:f6:89:8a:ba:71:2b: 4b:d9:4f:bc:a6:4c:2b:eb:fd:d6:5c:2e:2e:3a:1d:ea:7f:e7: ef:24:39:ac:f0:5c:fa:55:65:8b:c6:65:b8:dd:e7:c2:ec:b6: df:1e:50:d9:78:13:fa:ff:50:14:bd:4d:ce:71:51:7c:68:d2: 85:1d:16:2d:01:57:b6:5a:34:e5:71:f9:13:41:7d:c6:ae:bd: e8:89:35:7f:02:20:07:40:a2:45:f6:29:f5:69:32:db:dd:b8: 6d:28:07:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MiegVhRbUlMs+VMS5WyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx MmM3OGEwHhcNMjUxMjE5MDYwMDM3WhcNMjUxMjIwMDYwMDM3WjAzMTEwLwYDVQQD EyhiZmE1ZDBhOTgxZWY1OTZhYjhiMTE5ZjJjMjZjNmZkMDZlMWExM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn0B3khVKKDKKalzEUAPqpnp3hli 9R/ob39ZHb27QN1b+4e3l/rKay9GRLER35B4uIDZOhlTszP5N9wwKf8DMbmbAH4N j1FR+EdhDxsfFgiHkLhG3Em5cjWaoQRkC91E7fj6uTR690nRh4OBaDLV/ieRgKO8 u/TDxGcXF0Vnjy1sGMl4tDt1wCZ94WtjEdeow1SRnlQcfagYazN4jGsqxPU9LeFO igpEC70kZsxmTK+7dTvdDmZ4KKQf0h/m5IL3GR+HCeqVGnBWx4Jo9M8bZzSycG4c nqV14Ay0slu7sxtZmSX1E7diZmqEyWTvXoxtItlrZ1WijEKb1ZSjfOr2KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+l0KmB71lquLEZ8sJsb9BuGhPTMB8GA1UdIwQY MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4 LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9GsAxG3 Jly2KBi8SP/KhZqV4+/gRAzIs6anrffz4g93WUMlH58sDCwRxl6Ib0YPOjZyVjR0 oxReVIqM4rbys1lxuQW0cG5hzRxQSdW3KMJDJ1bqMFPUs/G4Ky1Mg9KNlQ4kpnoK HzRBKiTrdez1h+h/KDA2UB+YyK7HJbNUdfsvYZD6BAKDwZZ8w2zr/Julcvcx/av8 D28c46J+9omKunErS9lPvKZMK+v91lwuLjod6n/n7yQ5rPBc+lVli8ZluN3nwuy2 3x5Q2XgT+v9QFL1NznFRfGjShR0WLQFXtlo05XH5E0F9xq696Ik1fwIgB0CiRfYp 9Wky2924bSgHPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:18 2025 by rpki-client