This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json) Hash identifier: CNhksXuNHyA6mOKC1M7jJItgqc720060C1TTNKs+X8A= Subject key identifier: 88:9F:6D:E3:48:D9:7B:40:BE:93:DC:0F:C6:EC:98:B0:93:1A:85:D0 Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Certificate serial: 019B119400692CA436B4D38D5BC8A7BE4FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft Manifest number: 0156 Signing time: Fri 12 Dec 2025 08:01:10 +0000 Manifest this update: Fri 12 Dec 2025 08:01:10 +0000 Manifest next update: Sat 13 Dec 2025 08:01:10 +0000 Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: 6zNIEDyo4Vxdi7BVx5bCwKOrQcVDQjUVTyJGn7gdOEw=) 2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:00:69:2c:a4:36:b4:d3:8d:5b:c8:a7:be:4f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a Validity Not Before: Dec 12 08:01:10 2025 GMT Not After : Dec 13 08:01:10 2025 GMT Subject: CN=889f6de348d97b40be93dc0fc6ec98b0931a85d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:22:28:41:d8:9e:ba:87:08:06:65:75:46: cd:34:f1:34:9f:9b:3c:94:b4:39:50:8a:b6:7a:5e: c0:35:1c:22:2f:5a:56:6d:d6:7e:cc:e5:a5:4f:8c: 7c:90:2d:2d:06:8b:7b:46:c2:0c:77:ce:d9:0f:36: e5:b6:59:5d:90:89:b3:02:64:00:60:df:6e:75:a8: 91:13:94:cb:81:c2:ea:4b:dd:18:e3:0a:e8:c1:30: 6d:43:f2:ca:c0:9b:69:30:51:76:7c:05:8d:38:d3: 5a:f8:48:90:ee:2c:c2:7b:f3:d2:be:19:26:71:e6: 02:cb:73:6b:c3:6f:40:d2:74:15:d2:53:94:78:54: 97:fc:c0:04:e5:d7:27:39:2d:31:11:e5:fc:26:5d: 92:e7:86:5c:1e:3b:97:fa:cc:d5:fe:29:3f:90:55: 43:bb:03:a5:71:8e:b7:78:5b:99:6c:66:68:9f:6b: c7:d0:ee:c9:27:63:28:30:f2:c4:18:e7:74:30:fd: 1d:e1:a8:14:31:f2:a3:20:28:da:a9:0e:4c:22:fa: 12:2f:5c:21:1a:66:d5:b2:17:fc:cf:01:cb:ee:d2: bd:49:59:a4:57:89:5b:b5:da:dc:32:49:e1:53:cc: 10:37:b4:8e:e7:11:d7:d4:57:38:bb:fc:3a:07:ae: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:6D:E3:48:D9:7B:40:BE:93:DC:0F:C6:EC:98:B0:93:1A:85:D0 X509v3 Authority Key Identifier: keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f3:22:e1:10:de:0b:80:bc:7e:35:23:25:d1:7d:04:70:00: 7f:9b:98:b4:9f:eb:01:9e:f6:4e:7f:94:08:23:77:07:99:20: 85:0f:57:bb:f4:55:62:a0:f2:80:57:35:af:4c:2f:9a:6d:2b: 96:7e:f7:3e:45:13:b2:6b:27:d8:51:b9:d3:a4:94:25:77:36: 78:ca:43:71:91:69:26:b6:e7:c8:ef:0e:36:3c:2b:72:00:e3: fa:00:32:d1:16:ab:03:3f:8a:d2:ce:44:88:06:cf:9e:86:c1: c6:e8:09:3d:f6:c7:0d:37:a2:73:98:71:4b:fb:69:43:35:7f: cd:73:05:83:2e:c7:e1:a7:9a:b7:40:f9:e0:56:19:2e:04:e1: 48:41:e7:b8:ad:29:15:3a:05:4a:5c:ee:9d:0b:1b:ae:ab:43: 2b:59:56:82:35:8b:2f:28:fa:36:77:c4:cf:af:57:cf:a1:d1: 65:9e:94:04:8d:5f:96:41:10:58:c9:f8:85:6a:e6:2d:c8:b0: c2:4e:ee:75:20:f5:b3:b0:72:ec:a5:d8:95:1b:85:57:70:e0: 06:b4:98:c8:ec:c9:8b:e5:2c:c1:24:22:3d:39:bb:ca:87:d9: 06:25:64:15:07:17:f4:22:be:12:81:fa:67:ea:18:9d:ab:23: 76:63:1b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlABpLKQ2tNONW8invk+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi MWQ5MGEwHhcNMjUxMjEyMDgwMTEwWhcNMjUxMjEzMDgwMTEwWjAzMTEwLwYDVQQD Eyg4ODlmNmRlMzQ4ZDk3YjQwYmU5M2RjMGZjNmVjOThiMDkzMWE4NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FIiKEHYnrqHCAZldUbNNPE0n5s8 lLQ5UIq2el7ANRwiL1pWbdZ+zOWlT4x8kC0tBot7RsIMd87ZDzbltlldkImzAmQA YN9udaiRE5TLgcLqS90Y4wrowTBtQ/LKwJtpMFF2fAWNONNa+EiQ7izCe/PSvhkm ceYCy3Nrw29A0nQV0lOUeFSX/MAE5dcnOS0xEeX8Jl2S54ZcHjuX+szV/ik/kFVD uwOlcY63eFuZbGZon2vH0O7JJ2MoMPLEGOd0MP0d4agUMfKjICjaqQ5MIvoSL1wh GmbVshf8zwHL7tK9SVmkV4lbtdrcMknhU8wQN7SO5xHX1Fc4u/w6B66WKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIifbeNI2XtAvpPcD8bsmLCTGoXQMB8GA1UdIwQY MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Mi4RDe C4C8fjUjJdF9BHAAf5uYtJ/rAZ72Tn+UCCN3B5kghQ9Xu/RVYqDygFc1r0wvmm0r ln73PkUTsmsn2FG506SUJXc2eMpDcZFpJrbnyO8ONjwrcgDj+gAy0RarAz+K0s5E iAbPnobBxugJPfbHDTeic5hxS/tpQzV/zXMFgy7H4aeat0D54FYZLgThSEHnuK0p FToFSlzunQsbrqtDK1lWgjWLLyj6NnfEz69Xz6HRZZ6UBI1flkEQWMn4hWrmLciw wk7udSD1s7By7KXYlRuFV3DgBrSYyOzJi+UswSQiPTm7yofZBiVkFQcX9CK+EoH6 Z+oYnasjdmMbow== -----END CERTIFICATE-----Generated at Fri Dec 12 13:37:43 2025 by rpki-client