This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft File: jKRJngTEZs_ph5p6BXMt80AVwZM.mft (raw, json) Hash identifier: /pIPSRfQIpIg3YH8GGlA3rR8wjt8IYUhjx4fFpHKMSI= Subject key identifier: B6:C0:1D:ED:93:EA:B9:BF:A6:ED:C6:C0:20:31:5D:C7:5A:42:AB:D6 Authority key identifier: 8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93 Certificate issuer: /CN=8ca4499e04c466cfe9879a7a05732df34015c193 Certificate serial: 019B5AF6C39668029E3F1ECEF11CB9B1CCC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft Manifest number: 6A Signing time: Fri 26 Dec 2025 14:01:19 +0000 Manifest this update: Fri 26 Dec 2025 14:01:19 +0000 Manifest next update: Sat 27 Dec 2025 14:01:19 +0000 Files and hashes: 1: 2jKDawQ0pdKg9vwfKd1xkF7eDQc.roa (hash: X/kSQ9Iv95Or4GI5REjYDyad9owZKbuvRGjc/Ed+85U=) 2: jKRJngTEZs_ph5p6BXMt80AVwZM.crl (hash: 0kfUn/vNqtgDNaGi+huocjPLcuUaAl9J9bkuQcSjVHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:c3:96:68:02:9e:3f:1e:ce:f1:1c:b9:b1:cc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca4499e04c466cfe9879a7a05732df34015c193 Validity Not Before: Dec 26 14:01:19 2025 GMT Not After : Dec 27 14:01:19 2025 GMT Subject: CN=b6c01ded93eab9bfa6edc6c020315dc75a42abd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:db:7a:6b:a9:c7:85:af:9f:37:61:54:10: 76:1d:01:41:d6:2d:23:48:52:2c:e7:a5:d2:e4:8f: 9a:71:d3:f4:b9:4f:f6:17:27:1c:8d:3c:f2:91:30: 33:87:12:a6:71:5a:57:49:a1:0e:35:e7:a4:5f:5a: c9:c7:a3:b0:bc:04:7a:bb:c2:10:82:6a:1b:4e:45: 16:9e:b9:db:95:f5:30:4a:4c:92:79:66:bc:8d:c5: cb:1d:7a:de:4f:b8:a9:ba:d0:34:90:0d:f5:8a:d2: 43:2e:35:7f:e9:7b:37:50:44:78:ea:7b:2a:9b:44: bb:e7:6e:f4:79:8d:8b:bc:03:c6:71:1c:76:be:c9: e5:8d:34:c9:6d:32:ad:d6:00:48:42:81:44:57:44: 40:b3:62:3e:91:79:da:3e:06:49:cf:49:2d:fc:2f: ac:b1:23:5f:f1:80:e1:25:70:7c:0f:0e:c7:8f:ef: 4e:6e:0a:21:fb:2d:39:62:92:91:0f:e1:d2:09:87: 7a:95:be:39:3c:74:f5:cc:7d:60:a9:b0:b2:d2:81: 59:ff:83:aa:66:03:6a:b8:ed:d6:9e:d4:04:5a:4d: e2:f3:48:fc:4e:1c:e2:11:0b:b1:f5:6a:9b:70:71: 78:ec:ec:a4:9f:24:fa:52:ec:d8:e9:a5:00:bf:96: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C0:1D:ED:93:EA:B9:BF:A6:ED:C6:C0:20:31:5D:C7:5A:42:AB:D6 X509v3 Authority Key Identifier: keyid:8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:61:79:64:4b:97:fb:81:b2:a5:33:92:30:e2:13:e4:94: 07:eb:78:dc:0a:9c:b8:8b:5d:2d:78:68:89:f2:df:94:e8:30: b0:35:5c:a7:97:49:cb:55:29:26:de:a7:14:5f:ee:f7:c4:1a: e7:25:63:ae:c7:1a:1e:2c:74:4b:69:ac:5d:f6:85:f7:b3:66: 03:fc:f6:30:63:14:82:97:99:49:84:f4:05:08:db:a0:67:ec: 18:f2:c4:7a:c6:55:b5:68:bb:c1:66:f3:49:fe:54:2c:83:e6: 9d:c6:26:4f:9e:49:a8:a0:4c:19:a0:0c:66:4a:bb:e3:66:d4: 5a:29:5e:da:ae:80:44:07:cf:b7:6c:ee:bc:be:c8:14:da:af: f5:b6:27:72:b8:a4:a0:12:46:87:c3:13:6d:ac:95:ce:b9:87: 62:0d:f5:e7:be:1d:ec:52:b5:a9:f9:ff:85:41:3a:f3:85:b3: 74:3c:4b:00:fd:76:75:68:65:98:dd:5e:01:61:65:18:34:c6: 58:e4:6d:1d:9d:22:96:79:da:53:e0:ad:1c:3c:22:ab:a3:2f: 1b:4b:68:1d:d0:76:03:55:ad:e1:62:3d:15:e2:70:41:ee:05: 51:c7:0a:3b:5e:ed:42:b4:26:e0:cc:b0:70:e5:1d:a7:61:cf: 51:cc:3e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9sOWaAKePx7O8Ry5sczEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYTQ0OTllMDRjNDY2Y2ZlOTg3OWE3YTA1NzMyZGYzNDAx NWMxOTMwHhcNMjUxMjI2MTQwMTE5WhcNMjUxMjI3MTQwMTE5WjAzMTEwLwYDVQQD EyhiNmMwMWRlZDkzZWFiOWJmYTZlZGM2YzAyMDMxNWRjNzVhNDJhYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0/bemupx4WvnzdhVBB2HQFB1i0j SFIs56XS5I+acdP0uU/2FyccjTzykTAzhxKmcVpXSaEONeekX1rJx6OwvAR6u8IQ gmobTkUWnrnblfUwSkySeWa8jcXLHXreT7iputA0kA31itJDLjV/6Xs3UER46nsq m0S75270eY2LvAPGcRx2vsnljTTJbTKt1gBIQoFEV0RAs2I+kXnaPgZJz0kt/C+s sSNf8YDhJXB8Dw7Hj+9Obgoh+y05YpKRD+HSCYd6lb45PHT1zH1gqbCy0oFZ/4Oq ZgNquO3WntQEWk3i80j8ThziEQux9WqbcHF47OyknyT6UuzY6aUAv5bPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbAHe2T6rm/pu3GwCAxXcdaQqvWMB8GA1UdIwQY MBaAFIykSZ4ExGbP6YeaegVzLfNAFcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktSSm5nVEVac19waDVwNkJYTXQ4MEFWd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82NWQ0MmUtODMyYi00ZWJhLTk4ZDgt NjUyOTI3MGI4YmM1LzEvaktSSm5nVEVac19waDVwNkJYTXQ4MEFWd1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82NWQ0MmUtODMyYi00ZWJhLTk4ZDgtNjUyOTI3MGI4YmM1 LzEvaktSSm5nVEVac19waDVwNkJYTXQ4MEFWd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJJheWRL l/uBsqUzkjDiE+SUB+t43AqcuItdLXhoifLflOgwsDVcp5dJy1UpJt6nFF/u98Qa 5yVjrscaHix0S2msXfaF97NmA/z2MGMUgpeZSYT0BQjboGfsGPLEesZVtWi7wWbz Sf5ULIPmncYmT55JqKBMGaAMZkq742bUWile2q6ARAfPt2zuvL7IFNqv9bYncrik oBJGh8MTbayVzrmHYg31574d7FK1qfn/hUE684WzdDxLAP12dWhlmN1eAWFlGDTG WORtHZ0ilnnaU+CtHDwiq6MvG0toHdB2A1Wt4WI9FeJwQe4FUccKO17tQrQm4Myw cOUdp2HPUcw+eg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:24 2025 by rpki-client