This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json) Hash identifier: ui7kKXraYJZd4owiHQX0z8Oa/ZlASJETWe5xOwd2PF8= Subject key identifier: 42:3B:33:18:B2:92:DC:83:65:40:26:50:88:68:68:D4:C4:09:33:CD Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316 Certificate serial: 019B0935365D61C5F963FCEADE4058C8727A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft Manifest number: 1771 Signing time: Wed 10 Dec 2025 17:00:40 +0000 Manifest this update: Wed 10 Dec 2025 17:00:40 +0000 Manifest next update: Thu 11 Dec 2025 17:00:40 +0000 Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=) 2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=) 3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: mroa0UA7IwdB9gmBGC7oHBWhSfnUf7s8xImvlkddBuA=) 4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=) 5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=) 6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=) 7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=) 8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:35:36:5d:61:c5:f9:63:fc:ea:de:40:58:c8:72:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316 Validity Not Before: Dec 10 17:00:40 2025 GMT Not After : Dec 11 17:00:40 2025 GMT Subject: CN=423b3318b292dc8365402650886868d4c40933cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:aa:97:19:9c:cf:87:ae:4d:3a:0f:1b:a5: a7:02:18:26:79:c1:2e:69:f0:8e:bc:a4:81:5f:5b: 69:41:12:f0:87:2e:c2:32:84:66:15:56:ae:a3:47: 17:41:1d:cf:3f:0e:1e:9d:ac:3e:85:2d:4b:06:f6: 1b:2c:e6:d2:86:90:92:23:e2:cd:98:81:51:17:4a: f2:11:d1:a6:0d:10:d4:87:5e:74:07:ab:ae:0c:4e: 7f:59:d5:b4:29:8f:ab:8b:4d:e7:3c:2f:6f:73:6d: 98:a1:10:bb:b2:c3:27:d5:21:e7:96:a4:fc:f8:43: c1:2f:fb:9a:d4:10:d2:52:a5:03:89:84:7e:b7:f3: f1:bd:d1:89:dd:78:f6:19:d6:17:6a:21:0b:e3:71: f6:cf:a6:9a:e6:e0:d9:9a:7b:96:42:8f:01:37:ad: b4:9c:3e:9d:04:26:10:ca:ff:fd:ba:2a:c5:b3:42: 0f:75:14:12:66:d9:fa:12:87:a8:d3:fe:6c:14:ce: 1a:a1:8e:63:68:b0:ff:e6:fc:d4:12:17:c4:49:53: 4a:95:e4:65:30:46:60:6f:1e:8b:01:39:6b:e9:a2: f5:d5:88:07:27:a0:63:36:01:e4:b4:81:57:4d:6c: e3:6c:63:9e:5c:32:a0:91:88:2a:d7:c8:b4:cd:b3: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:33:18:B2:92:DC:83:65:40:26:50:88:68:68:D4:C4:09:33:CD X509v3 Authority Key Identifier: keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:48:90:fb:35:67:9a:3d:14:a1:97:4f:a0:69:48:09:e5:09: 66:cf:38:2a:0a:b6:3b:68:59:98:d7:c1:8e:53:c5:b4:82:36: 38:2f:f4:4e:fb:cc:a4:e1:5e:6f:38:ba:6a:00:f7:a1:c2:16: 9f:38:52:f1:c7:c9:c1:df:64:84:a4:8a:94:f0:61:12:b6:70: f4:e7:4b:c0:84:86:fe:c5:f5:10:40:9b:b5:b5:2d:9d:6b:72: e8:38:94:74:77:d4:5d:a2:2c:fb:d3:7b:d5:c5:6e:7b:42:06: 12:5a:31:db:56:15:3e:76:24:cd:67:cb:f6:92:a5:8c:d7:c3: 16:fa:e2:8a:e1:01:a2:43:9d:a8:c5:2f:78:bf:5c:50:5e:03: 81:be:db:8a:f2:eb:4c:df:25:07:d4:b1:9f:59:f0:c6:36:9a: 16:01:a9:ab:9d:2f:72:0f:38:c0:41:71:75:53:83:65:5b:4a: 5b:0d:4b:b3:f4:8e:10:f1:7b:82:f9:07:a9:e3:c4:cb:e1:06: 69:5c:35:aa:ce:08:6a:4c:1f:08:29:fe:08:17:36:69:06:0d: 7d:11:f0:ff:55:e2:c4:25:f0:ae:f6:ad:7f:18:87:f4:55:92: 5e:73:2c:a3:8b:9e:f8:ff:81:5d:0d:82:b6:95:e1:aa:b4:67: 6d:65:28:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJNTZdYcX5Y/zq3kBYyHJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw NGIzMTYwHhcNMjUxMjEwMTcwMDQwWhcNMjUxMjExMTcwMDQwWjAzMTEwLwYDVQQD Eyg0MjNiMzMxOGIyOTJkYzgzNjU0MDI2NTA4ODY4NjhkNGM0MDkzM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0laqlxmcz4euTToPG6WnAhgmecEu afCOvKSBX1tpQRLwhy7CMoRmFVauo0cXQR3PPw4enaw+hS1LBvYbLObShpCSI+LN mIFRF0ryEdGmDRDUh150B6uuDE5/WdW0KY+ri03nPC9vc22YoRC7ssMn1SHnlqT8 +EPBL/ua1BDSUqUDiYR+t/PxvdGJ3Xj2GdYXaiEL43H2z6aa5uDZmnuWQo8BN620 nD6dBCYQyv/9uirFs0IPdRQSZtn6Eoeo0/5sFM4aoY5jaLD/5vzUEhfESVNKleRl MEZgbx6LATlr6aL11YgHJ6BjNgHktIFXTWzjbGOeXDKgkYgq18i0zbNPOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI7MxiyktyDZUAmUIhoaNTECTPNMB8GA1UdIwQY MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1 LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREiQ+zVn mj0UoZdPoGlICeUJZs84Kgq2O2hZmNfBjlPFtII2OC/0TvvMpOFebzi6agD3ocIW nzhS8cfJwd9khKSKlPBhErZw9OdLwISG/sX1EECbtbUtnWty6DiUdHfUXaIs+9N7 1cVue0IGElox21YVPnYkzWfL9pKljNfDFvriiuEBokOdqMUveL9cUF4Dgb7bivLr TN8lB9Sxn1nwxjaaFgGpq50vcg84wEFxdVODZVtKWw1Ls/SOEPF7gvkHqePEy+EG aVw1qs4IakwfCCn+CBc2aQYNfRHw/1XixCXwrvatfxiH9FWSXnMso4ue+P+BXQ2C tpXhqrRnbWUo5A== -----END CERTIFICATE-----Generated at Thu Dec 11 00:19:49 2025 by rpki-client