This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json) Hash identifier: Nc81UsK1GeEfbyE+rIHE8XH52yamjS2It+FUnRoOYmw= Subject key identifier: 6F:F8:F7:97:97:59:C6:9C:4E:83:2F:46:01:2F:E0:FA:3A:98:D0:E5 Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Certificate serial: 019B5A1A63076F3DA1B684E04F520F2BC5DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 10:00:37 +0000 Manifest this update: Fri 26 Dec 2025 10:00:37 +0000 Manifest next update: Sat 27 Dec 2025 10:00:37 +0000 Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=) 2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: OFoPXRUd4p9ntdha/xELR+wrEG1gzSQSPC0PmQMd2ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:63:07:6f:3d:a1:b6:84:e0:4f:52:0f:2b:c5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839 Validity Not Before: Dec 26 10:00:37 2025 GMT Not After : Dec 27 10:00:37 2025 GMT Subject: CN=6ff8f7979759c69c4e832f46012fe0fa3a98d0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:39:cb:a5:a2:64:a5:d3:81:ff:36:18:7b: e0:64:b7:af:3e:5f:2a:93:5f:d2:97:5f:16:8e:fc: 87:c2:ee:9b:62:d8:b7:ab:7e:88:47:ef:45:b3:93: b0:04:79:6b:5d:e0:38:ad:6a:de:23:14:7c:95:0f: 72:37:0b:01:d5:44:7f:6a:84:8d:d4:c1:61:d5:45: 7f:10:e9:71:40:bb:29:93:32:bb:8d:2a:4f:f6:02: bb:45:41:e6:e0:25:21:c1:52:fb:11:fb:11:13:93: 9d:ca:09:00:10:1d:95:c7:97:0f:fd:42:46:23:b2: 4c:f0:93:51:89:dd:83:4f:ae:09:24:9e:c7:f2:3c: 2b:b9:12:0d:a7:c3:42:ea:41:6a:b6:5a:4e:62:24: ce:9c:92:b8:b5:cb:16:a8:35:63:17:97:43:7b:05: c9:9e:42:99:4f:95:7a:56:82:14:64:f3:43:2b:ff: 90:21:dd:ae:73:90:f3:a1:28:98:e0:b7:0b:d0:37: bc:b8:44:0c:31:17:10:8b:7e:65:7b:2d:68:b2:3c: b0:cb:fc:ea:65:19:87:51:39:b3:e2:39:4b:47:ac: b2:22:4d:18:ca:35:0d:12:66:f6:48:fe:88:a8:32: 14:b3:ec:66:26:fa:0b:c5:e1:76:d0:a5:f4:a3:b0: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:F7:97:97:59:C6:9C:4E:83:2F:46:01:2F:E0:FA:3A:98:D0:E5 X509v3 Authority Key Identifier: keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:24:f0:d0:8e:c4:fa:71:21:ea:9a:d2:9c:48:56:ad:71:ea: eb:02:0c:54:f3:d8:2b:25:12:2b:cc:5f:e2:77:2d:d4:c2:09: 54:a5:77:9e:85:0e:43:6e:36:3b:c2:26:2b:a3:ec:b4:62:57: e0:7a:38:49:8d:3f:a5:0d:db:fa:65:50:4a:e3:bf:77:72:f1: cd:fd:49:5c:3d:60:93:30:46:2a:70:a5:61:5f:ae:eb:da:69: fe:cb:44:01:8a:d2:e4:6b:68:c5:84:dc:77:1c:31:60:c9:02: 33:b6:35:5f:c6:5b:92:3b:8a:30:e0:6c:ae:c5:07:83:34:33: 96:40:3e:f5:97:64:99:9e:6e:30:07:aa:13:17:2b:51:12:72: 8a:6e:1e:af:98:ac:5d:1e:41:02:37:24:8b:7a:6e:de:b8:68: c1:a1:2a:da:de:3c:3b:f2:58:87:b7:06:85:8c:fd:ff:ff:ae: 09:5d:f4:28:a4:7f:c5:19:5c:bc:52:33:24:94:22:44:dd:66: 70:02:cc:42:72:5a:c4:48:f7:bf:bb:11:fc:87:88:f9:a4:a3: eb:29:fd:16:95:af:52:84:af:a3:7d:60:7a:be:55:1b:8b:0d: 71:05:e4:13:4a:36:1c:33:82:90:13:09:4b:de:87:44:08:39: fb:4b:6a:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmMHbz2htoTgT1IPK8XeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2 Mzc4MzkwHhcNMjUxMjI2MTAwMDM3WhcNMjUxMjI3MTAwMDM3WjAzMTEwLwYDVQQD Eyg2ZmY4Zjc5Nzk3NTljNjljNGU4MzJmNDYwMTJmZTBmYTNhOThkMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX85y6WiZKXTgf82GHvgZLevPl8q k1/Sl18WjvyHwu6bYti3q36IR+9Fs5OwBHlrXeA4rWreIxR8lQ9yNwsB1UR/aoSN 1MFh1UV/EOlxQLspkzK7jSpP9gK7RUHm4CUhwVL7EfsRE5OdygkAEB2Vx5cP/UJG I7JM8JNRid2DT64JJJ7H8jwruRINp8NC6kFqtlpOYiTOnJK4tcsWqDVjF5dDewXJ nkKZT5V6VoIUZPNDK/+QId2uc5DzoSiY4LcL0De8uEQMMRcQi35ley1osjywy/zq ZRmHUTmz4jlLR6yyIk0YyjUNEmb2SP6IqDIUs+xmJvoLxeF20KX0o7CsBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/495eXWcacToMvRgEv4Po6mNDlMB8GA1UdIwQY MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3 LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyTw0I7E +nEh6prSnEhWrXHq6wIMVPPYKyUSK8xf4nct1MIJVKV3noUOQ242O8ImK6PstGJX 4Ho4SY0/pQ3b+mVQSuO/d3Lxzf1JXD1gkzBGKnClYV+u69pp/stEAYrS5GtoxYTc dxwxYMkCM7Y1X8ZbkjuKMOBsrsUHgzQzlkA+9ZdkmZ5uMAeqExcrURJyim4er5is XR5BAjcki3pu3rhowaEq2t48O/JYh7cGhYz9//+uCV30KKR/xRlcvFIzJJQiRN1m cALMQnJaxEj3v7sR/IeI+aSj6yn9FpWvUoSvo31ger5VG4sNcQXkE0o2HDOCkBMJ S96HRAg5+0tqjA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client