This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json) Hash identifier: 0rlbGLc8i6DxfZ/lJomfUu1eWma6Hwe/2rwFTrLxGvc= Subject key identifier: DC:43:50:F1:DF:92:51:05:8C:56:8E:A2:52:F0:4E:FE:FE:43:4D:8A Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Certificate serial: 019B59AC84D5B1D741CE5998C5617D99F55C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft Manifest number: 14B0 Signing time: Fri 26 Dec 2025 08:00:36 +0000 Manifest this update: Fri 26 Dec 2025 08:00:36 +0000 Manifest next update: Sat 27 Dec 2025 08:00:36 +0000 Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=) 2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: ERra6+wPjAwT8fIi4Ad2hMSh5KhY8SBb2f4UUXIePJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:84:d5:b1:d7:41:ce:59:98:c5:61:7d:99:f5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Validity Not Before: Dec 26 08:00:36 2025 GMT Not After : Dec 27 08:00:36 2025 GMT Subject: CN=dc4350f1df9251058c568ea252f04efefe434d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:0d:e3:12:03:61:5f:fd:bf:4a:8b:0f:37: 7d:e9:ad:51:af:83:83:8e:4d:a1:ee:9e:8a:e9:20: 74:37:fa:68:f7:1a:d8:c6:cd:6f:f4:32:81:41:49: 57:60:e2:b5:78:09:99:5c:3b:4f:4e:20:7e:80:c0: 9a:b6:f8:da:53:99:9e:3d:e0:29:c5:2c:2f:45:03: d8:d8:76:56:a3:21:6c:33:1e:d1:fe:da:99:b4:a0: 45:95:8c:b4:d2:9f:0d:06:a6:af:06:a4:c7:02:79: 02:87:9c:14:62:1b:90:b2:1f:f6:3e:4d:25:06:c4: d9:d2:fb:2a:96:99:a3:ef:0e:b9:30:0b:09:c8:0a: 0a:87:fe:9d:ab:25:d3:4c:db:9c:32:02:67:4b:7c: 1f:c3:da:5e:51:9b:40:92:ba:56:b1:55:45:6e:da: 49:41:0e:f2:77:59:3e:60:04:f2:fd:69:f2:33:70: 13:25:4d:93:a6:03:ae:82:24:2c:0f:5c:6a:2b:6f: 7c:42:3c:c8:84:23:3c:9e:11:ac:2a:29:29:2b:94: 8d:df:23:80:d2:3d:c4:98:22:76:67:07:8e:76:22: 17:27:61:cc:54:43:9a:c1:e2:ae:ea:fa:b2:0a:af: 6a:7e:86:ca:21:1c:59:12:89:64:a6:82:77:5e:19: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:43:50:F1:DF:92:51:05:8C:56:8E:A2:52:F0:4E:FE:FE:43:4D:8A X509v3 Authority Key Identifier: keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:95:6b:cb:26:4f:c7:8d:a6:f2:62:9e:89:7a:30:ae:b0: bf:b8:bf:37:b5:a5:ab:b5:46:e0:4a:fc:32:d6:06:2d:2c:be: 21:3d:d3:92:86:2c:d7:aa:4d:75:d0:7a:9f:1d:de:8d:54:07: 23:58:65:ec:82:0c:4e:f2:0e:2e:6c:2a:e6:ca:38:fa:5d:0b: 87:c6:3e:1f:4b:f0:bf:9a:e0:9c:25:4f:44:c3:b0:31:29:eb: d1:5d:a1:1d:b7:03:bb:08:8a:69:7f:31:fb:b2:f4:eb:1b:ce: e6:1b:f7:5e:43:5f:b9:56:63:48:a4:f0:48:e8:3e:19:70:9f: fc:44:c8:e0:e6:a5:63:dd:9e:06:36:36:1c:ef:42:a0:5c:6c: a0:57:a4:c9:6e:6b:bf:fb:0e:e0:8f:8a:ca:e0:8e:dc:95:8e: 90:34:38:ce:4f:1f:4e:08:b4:74:02:3e:90:0c:f2:6d:2c:20: cf:75:b9:6c:2f:19:53:06:8e:54:b8:16:5d:5a:b5:9e:11:a9: 0b:d4:3c:5b:c0:85:a1:ec:75:d2:5b:4a:92:94:90:2c:21:af: 86:53:d1:36:6b:a6:52:f5:e9:0f:5d:1d:f7:82:76:5f:1c:31: 71:df:5d:e1:80:42:5f:89:ed:d1:d3:26:ce:b2:64:c4:b5:2b: 6b:96:8b:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrITVsddBzlmYxWF9mfVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx YzY5N2YwHhcNMjUxMjI2MDgwMDM2WhcNMjUxMjI3MDgwMDM2WjAzMTEwLwYDVQQD EyhkYzQzNTBmMWRmOTI1MTA1OGM1NjhlYTI1MmYwNGVmZWZlNDM0ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HEN4xIDYV/9v0qLDzd96a1Rr4OD jk2h7p6K6SB0N/po9xrYxs1v9DKBQUlXYOK1eAmZXDtPTiB+gMCatvjaU5mePeAp xSwvRQPY2HZWoyFsMx7R/tqZtKBFlYy00p8NBqavBqTHAnkCh5wUYhuQsh/2Pk0l BsTZ0vsqlpmj7w65MAsJyAoKh/6dqyXTTNucMgJnS3wfw9peUZtAkrpWsVVFbtpJ QQ7yd1k+YATy/WnyM3ATJU2TpgOugiQsD1xqK298QjzIhCM8nhGsKikpK5SN3yOA 0j3EmCJ2ZweOdiIXJ2HMVEOaweKu6vqyCq9qfobKIRxZEolkpoJ3XhkUBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxDUPHfklEFjFaOolLwTv7+Q02KMB8GA1UdIwQY MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/+Va8sm T8eNpvJinol6MK6wv7i/N7Wlq7VG4Er8MtYGLSy+IT3TkoYs16pNddB6nx3ejVQH I1hl7IIMTvIOLmwq5so4+l0Lh8Y+H0vwv5rgnCVPRMOwMSnr0V2hHbcDuwiKaX8x +7L06xvO5hv3XkNfuVZjSKTwSOg+GXCf/ETI4OalY92eBjY2HO9CoFxsoFekyW5r v/sO4I+KyuCO3JWOkDQ4zk8fTgi0dAI+kAzybSwgz3W5bC8ZUwaOVLgWXVq1nhGp C9Q8W8CFoex10ltKkpSQLCGvhlPRNmumUvXpD10d94J2Xxwxcd9d4YBCX4nt0dMm zrJkxLUra5aLhA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client