This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json) Hash identifier: w4+5CDXIV75F5gF//e+IITI59oqYj03sOP6+oHGfCUg= Subject key identifier: 57:E6:39:CB:7E:9E:81:89:0C:B2:F8:62:20:E2:DA:D6:7C:00:5A:21 Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e Certificate serial: 019B48EFE76575DBDDE03C0B6A731BDA3F6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft Manifest number: 08A8 Signing time: Tue 23 Dec 2025 02:00:40 +0000 Manifest this update: Tue 23 Dec 2025 02:00:40 +0000 Manifest next update: Wed 24 Dec 2025 02:00:40 +0000 Files and hashes: 1: BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (hash: GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=) 2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: MfkZ7ZObIs4s5DIvPRVUzm2/SbqaMYHFYCBKjOuuEyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:e7:65:75:db:dd:e0:3c:0b:6a:73:1b:da:3f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e Validity Not Before: Dec 23 02:00:40 2025 GMT Not After : Dec 24 02:00:40 2025 GMT Subject: CN=57e639cb7e9e81890cb2f86220e2dad67c005a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:5d:c8:fd:84:13:b9:a4:f5:b5:62:95:f1: 6d:35:3e:74:10:53:8d:5d:ef:5e:4b:d1:72:48:2e: 1f:c1:53:f7:71:1e:7c:50:8d:a0:b5:47:1b:a3:4f: 88:6b:43:a9:46:b1:68:1d:4e:54:fb:d4:40:6d:96: 38:0f:14:01:43:fb:31:ce:cd:a9:4c:d0:89:4e:48: 56:b8:88:c8:44:c3:8f:d5:35:82:11:bc:e8:2e:3c: b1:b0:0f:fb:8e:7a:e0:b5:17:e9:5b:5d:ff:db:d1: ad:fe:0a:cd:8d:17:db:11:84:6d:dc:fd:15:16:05: fc:da:be:dc:52:21:2e:9a:dc:b5:ba:4e:99:ee:15: d2:b3:0c:c7:22:93:fd:a4:a6:d3:90:7d:c3:8e:c9: 4a:b6:4d:e1:96:f6:87:a7:ce:c9:b5:d2:00:4a:1a: ca:98:17:96:e6:c8:81:fd:30:bf:02:ba:77:aa:4f: 3e:34:cd:81:4c:e8:e0:43:5c:c5:38:19:da:66:6a: 77:43:27:f5:80:42:4d:d0:9b:bd:af:16:da:1e:ac: 95:9e:a4:a8:d7:4d:85:e0:a1:75:6c:2d:0d:ef:4e: d1:0d:e5:85:b1:84:27:5d:75:df:d5:0b:52:cc:30: 97:87:54:eb:cf:68:b6:d6:d8:4e:c2:ec:92:ce:45: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:39:CB:7E:9E:81:89:0C:B2:F8:62:20:E2:DA:D6:7C:00:5A:21 X509v3 Authority Key Identifier: keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:39:ff:9e:db:56:15:5e:dd:bd:14:a2:1c:96:0a:e8:2a:fe: c1:97:52:0f:ba:ac:b1:a7:c5:0c:db:ec:41:e7:78:eb:a2:42: 7d:5c:34:f5:b7:74:06:55:48:94:4a:10:20:54:68:17:5d:6b: c0:1f:ab:71:fe:b5:6f:12:6a:57:be:0e:1b:4c:e1:ec:4c:c0: de:12:0f:c8:85:20:fa:b5:fd:24:7b:fb:77:66:f7:c5:14:48: 06:1d:3f:3a:46:e0:2c:a5:38:54:e3:fd:00:87:4f:0d:db:4c: 08:3f:fa:be:5c:1e:e2:da:5f:7d:73:e9:e1:84:57:e1:54:79: 05:e5:b7:5f:40:d4:93:a5:70:ff:98:42:5f:fa:da:3f:f7:b6: f5:ae:04:3f:9c:c3:8d:f1:3e:e3:ce:78:d2:43:c9:50:e3:66: c5:e9:d1:89:36:68:c6:92:30:af:a4:01:af:df:2f:87:9b:87: e0:7b:e7:11:4f:8b:c4:cd:e9:f1:ec:c2:16:44:e4:b1:6b:b3: f2:6f:5a:16:02:33:5a:19:12:0b:81:1c:96:61:f4:b0:49:0e: fe:18:11:c7:91:09:e0:34:8b:6d:9b:53:e7:d9:87:3e:2a:7e: 1c:34:1f:39:35:1f:4e:91:2b:e9:54:fa:5c:4f:a8:ad:29:fe: f4:12:80:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI7+dlddvd4DwLanMb2j9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTQ2MmZlZjQ5NTI0OGZkYmQ5NzM0MjFmZGViZTIxNjI1 Y2RmMWUwHhcNMjUxMjIzMDIwMDQwWhcNMjUxMjI0MDIwMDQwWjAzMTEwLwYDVQQD Eyg1N2U2MzljYjdlOWU4MTg5MGNiMmY4NjIyMGUyZGFkNjdjMDA1YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+tdyP2EE7mk9bVilfFtNT50EFON Xe9eS9FySC4fwVP3cR58UI2gtUcbo0+Ia0OpRrFoHU5U+9RAbZY4DxQBQ/sxzs2p TNCJTkhWuIjIRMOP1TWCEbzoLjyxsA/7jnrgtRfpW13/29Gt/grNjRfbEYRt3P0V FgX82r7cUiEumty1uk6Z7hXSswzHIpP9pKbTkH3DjslKtk3hlvaHp87JtdIAShrK mBeW5siB/TC/Arp3qk8+NM2BTOjgQ1zFOBnaZmp3Qyf1gEJN0Ju9rxbaHqyVnqSo 102F4KF1bC0N707RDeWFsYQnXXXf1QtSzDCXh1Trz2i21thOwuySzkXf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfmOct+noGJDLL4YiDi2tZ8AFohMB8GA1UdIwQY MBaAFPyUYv70lSSP29lzQh/eviFiXN8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYmE4NjgtYWZkOS00MWU0LTk1YWIt Yjk3YmE4YjY3OWJhLzEvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYmE4NjgtYWZkOS00MWU0LTk1YWItYjk3YmE4YjY3OWJh LzEvX0pSaV92U1ZKSV9iMlhOQ0g5Ni1JV0pjM3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzn/nttW FV7dvRSiHJYK6Cr+wZdSD7qssafFDNvsQed466JCfVw09bd0BlVIlEoQIFRoF11r wB+rcf61bxJqV74OG0zh7EzA3hIPyIUg+rX9JHv7d2b3xRRIBh0/OkbgLKU4VOP9 AIdPDdtMCD/6vlwe4tpffXPp4YRX4VR5BeW3X0DUk6Vw/5hCX/raP/e29a4EP5zD jfE+48540kPJUONmxenRiTZoxpIwr6QBr98vh5uH4HvnEU+LxM3p8ezCFkTksWuz 8m9aFgIzWhkSC4EclmH0sEkO/hgRx5EJ4DSLbZtT59mHPip+HDQfOTUfTpEr6VT6 XE+orSn+9BKATw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:18 2025 by rpki-client