This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json) Hash identifier: KFP8K+vfkiI+mDKWbblzg9QsDg6O8oOvmu6M2I5Y1S0= Subject key identifier: 88:44:DF:7D:A3:37:89:40:38:35:8E:D5:67:26:E6:12:68:1E:A3:6C Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Certificate serial: 019B1E0608E3C2F02A54E889D04D05457EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft Manifest number: 0DA4 Signing time: Sun 14 Dec 2025 18:01:10 +0000 Manifest this update: Sun 14 Dec 2025 18:01:10 +0000 Manifest next update: Mon 15 Dec 2025 18:01:10 +0000 Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=) 2: f2uKIXD1jA4Z0v4z1RdATwz-xfg.roa (hash: 6x0kOLgd5nuPVwZ+RuAYmofGsQm+qa7W1kBXJD3t3zw=) 3: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: 86+Uxangk39pJqNvrHgUvw4+GV3pf868u84JsFmyo/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:08:e3:c2:f0:2a:54:e8:89:d0:4d:05:45:7e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Validity Not Before: Dec 14 18:01:10 2025 GMT Not After : Dec 15 18:01:10 2025 GMT Subject: CN=8844df7da337894038358ed56726e612681ea36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:6e:d0:e0:24:3a:26:6a:1e:6d:09:15:f4: 8e:bb:dd:00:e0:fc:43:88:da:60:5c:c1:42:94:e1: 1e:f9:de:be:34:00:bc:2c:4d:0b:57:86:47:11:c8: ba:39:77:33:82:c9:e5:0c:67:de:4c:84:6d:2d:34: 26:e5:ad:d3:30:d0:ce:3a:48:4b:02:ec:c9:01:9c: e6:06:a8:2e:be:96:64:4c:6e:37:28:a8:2d:26:0a: 83:7c:94:17:bc:12:57:90:5b:81:f2:73:9b:2d:a5: 53:c2:78:88:34:af:97:01:e6:81:d9:64:1e:c3:3b: cd:fd:a6:4f:cc:b3:ff:61:84:ba:e6:b8:bb:5f:a9: 2c:95:ed:9d:1a:a7:c1:47:5f:67:37:a0:37:0b:81: 5c:9d:d0:16:0d:25:eb:34:60:86:42:d5:1a:38:59: ac:f9:98:1c:b2:2e:5a:ab:51:4b:3d:cf:72:b1:4f: ae:66:81:b7:a9:90:e8:20:79:85:d0:6b:1f:87:d6: df:a8:b0:b1:d0:39:31:1d:b6:9c:e3:d6:6b:d0:78: 17:17:fc:43:5a:22:83:ac:66:60:3b:8d:db:b7:1f: 3f:a4:e9:ba:21:eb:37:c1:69:1a:5d:43:25:c8:69: 1b:ed:b0:67:f6:31:20:c8:69:85:64:0a:41:ae:6a: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:44:DF:7D:A3:37:89:40:38:35:8E:D5:67:26:E6:12:68:1E:A3:6C X509v3 Authority Key Identifier: keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:01:7d:87:84:3e:d9:96:db:c1:d9:67:0e:c5:88:a7:f3:f1: 17:41:c0:d5:43:b4:5a:13:2c:24:2d:06:a9:89:4e:63:bb:0d: bd:2d:60:de:d7:02:3f:f3:e7:f5:66:b6:e4:bc:a1:41:79:3d: cf:80:83:bf:95:64:dc:aa:c7:a8:e6:59:b8:70:03:5e:22:fb: 99:d9:d5:fb:17:1b:b0:c2:0a:51:89:58:69:16:d0:ef:e3:db: 66:5e:87:dc:bd:6f:6b:48:05:1a:f7:73:55:88:37:e9:6c:34: 46:16:fd:7c:19:90:9d:9e:7a:56:64:5d:bf:1d:2a:35:ce:5a: 53:3c:8f:07:08:f4:88:e1:60:19:59:b1:4b:04:31:f6:e1:5f: c4:61:0a:89:dc:61:e8:13:fd:0e:a4:df:c1:9f:20:fb:da:0a: 79:eb:b9:a2:46:bb:3a:f1:48:d8:4e:d4:2c:80:ed:52:c6:e1: 87:b3:f3:19:fa:c9:b1:72:b1:9b:23:da:85:48:4a:c6:d0:ce: 77:5f:94:31:46:79:d4:36:8f:14:0c:d0:26:22:76:53:86:f7: 19:e8:ec:c6:15:c2:9f:25:e1:55:40:9a:f9:3a:a8:17:f1:91: 9c:d4:7f:5d:2f:e3:57:3a:eb:b2:0e:e3:9d:a1:8e:98:5d:e9: 03:e4:73:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBgjjwvAqVOiJ0E0FRX7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3 NmUzNzUwHhcNMjUxMjE0MTgwMTEwWhcNMjUxMjE1MTgwMTEwWjAzMTEwLwYDVQQD Eyg4ODQ0ZGY3ZGEzMzc4OTQwMzgzNThlZDU2NzI2ZTYxMjY4MWVhMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcdu0OAkOiZqHm0JFfSOu90A4PxD iNpgXMFClOEe+d6+NAC8LE0LV4ZHEci6OXczgsnlDGfeTIRtLTQm5a3TMNDOOkhL AuzJAZzmBqguvpZkTG43KKgtJgqDfJQXvBJXkFuB8nObLaVTwniINK+XAeaB2WQe wzvN/aZPzLP/YYS65ri7X6ksle2dGqfBR19nN6A3C4FcndAWDSXrNGCGQtUaOFms +Zgcsi5aq1FLPc9ysU+uZoG3qZDoIHmF0Gsfh9bfqLCx0DkxHbac49Zr0HgXF/xD WiKDrGZgO43btx8/pOm6Ies3wWkaXUMlyGkb7bBn9jEgyGmFZApBrmpwCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhE332jN4lAODWO1Wcm5hJoHqNsMB8GA1UdIwQY MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt NmE4YzNiNjc2YjU3LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3 LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgF9h4Q+ 2ZbbwdlnDsWIp/PxF0HA1UO0WhMsJC0GqYlOY7sNvS1g3tcCP/Pn9Wa25LyhQXk9 z4CDv5Vk3KrHqOZZuHADXiL7mdnV+xcbsMIKUYlYaRbQ7+PbZl6H3L1va0gFGvdz VYg36Ww0Rhb9fBmQnZ56VmRdvx0qNc5aUzyPBwj0iOFgGVmxSwQx9uFfxGEKidxh 6BP9DqTfwZ8g+9oKeeu5oka7OvFI2E7ULIDtUsbhh7PzGfrJsXKxmyPahUhKxtDO d1+UMUZ51DaPFAzQJiJ2U4b3GejsxhXCnyXhVUCa+TqoF/GRnNR/XS/jVzrrsg7j naGOmF3pA+Rzcg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:38 2025 by rpki-client