This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json) Hash identifier: 8WD2LHNLhB1KCryPINmTqT4AcN2IbTHrLCayQrgeBSQ= Subject key identifier: E5:93:57:7A:A1:89:98:81:4D:D0:C5:93:8A:FD:0B:FB:AA:14:B4:A0 Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Certificate serial: 019B593EC51913DCBADC63AA63DF4C1BCF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft Manifest number: 0EF6 Signing time: Fri 26 Dec 2025 06:00:44 +0000 Manifest this update: Fri 26 Dec 2025 06:00:44 +0000 Manifest next update: Sat 27 Dec 2025 06:00:44 +0000 Files and hashes: 1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=) 2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: jJcgZDAgNdAnmM9HiDYLbTk91LCs3naupgtWkbbHPzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c5:19:13:dc:ba:dc:63:aa:63:df:4c:1b:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67 Validity Not Before: Dec 26 06:00:44 2025 GMT Not After : Dec 27 06:00:44 2025 GMT Subject: CN=e593577aa18998814dd0c5938afd0bfbaa14b4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:d8:6a:69:0b:77:9c:b6:7b:99:09:06:c6: 34:6c:7a:bf:30:65:6d:24:13:d3:08:50:e7:de:d2: 39:c8:ef:8b:ea:8a:92:7c:ae:98:42:e2:56:8c:51: 1d:31:9a:f0:74:9f:d9:1f:0b:69:53:59:58:01:5b: b9:09:74:58:fa:c7:d7:13:37:ca:7a:61:65:12:aa: 2b:70:99:c4:b8:06:a0:05:f5:d7:c1:52:f5:d6:5e: f3:81:de:c5:ca:49:33:1d:c2:f9:2f:d5:92:13:43: b3:74:7d:6f:e5:8d:45:84:7f:dd:17:09:df:2c:13: 9a:d1:e4:1d:24:ba:90:93:63:4a:b5:f6:a5:21:67: 8d:93:6f:55:12:ad:2a:de:63:79:e8:1f:79:ca:04: 53:30:8c:c5:1c:35:6a:bf:ef:87:bb:72:ba:84:72: c4:13:db:7e:84:36:f6:74:db:b3:7e:a9:5f:e7:7d: 3f:d6:f0:cf:38:2d:f9:6c:38:41:b9:f8:49:cd:9b: 1f:09:18:c7:7c:f5:9c:e8:ec:e9:2a:a9:19:cf:06: fe:af:8e:09:16:c4:b3:2c:03:21:af:ed:cc:b5:c5: d8:3e:cd:68:79:9b:be:cc:e7:84:f6:c7:03:1f:c1: fe:ec:b0:e7:88:dd:8d:c7:e3:0d:74:79:68:90:0e: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:57:7A:A1:89:98:81:4D:D0:C5:93:8A:FD:0B:FB:AA:14:B4:A0 X509v3 Authority Key Identifier: keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7e:e4:3a:84:3b:ba:35:91:a2:4a:1c:f6:37:f8:c7:00:c3: 88:71:3c:e1:26:38:0d:4d:ec:df:98:19:4b:00:71:62:fc:85: f5:9d:1d:5a:d2:91:a1:28:9c:24:8a:ed:c0:5f:a6:93:2f:e4: d8:7d:9d:e2:de:3e:47:e6:03:97:86:b6:d1:54:f7:6c:34:d0: 3b:42:ba:d6:44:21:03:a1:4c:c9:49:04:5a:10:97:00:80:47: 5c:77:b4:a7:61:a7:5d:6a:b7:12:01:bf:87:47:0f:fa:44:71: 77:33:1c:86:4e:34:23:7f:02:1d:0c:2a:34:4c:e4:5a:ea:e0: c2:28:56:ca:9b:ad:d1:b0:46:56:f7:2b:10:53:32:6f:91:b9: 49:09:6e:77:e9:d7:af:85:09:e9:8d:ca:2c:73:4d:5e:e7:1c: a1:ee:71:3a:19:a6:b3:22:78:3e:0c:2c:af:03:dc:9c:6a:23: 88:5e:05:d2:6c:90:b0:a6:f8:1c:96:5c:67:66:91:5f:a5:66: ee:c8:6f:82:42:07:84:ac:72:4a:70:ec:a3:c4:97:9f:b5:50: 67:83:ec:87:51:bd:ec:cd:23:09:fd:a8:0e:4b:09:07:11:ab: ab:7a:cd:eb:30:b8:8c:84:b4:a2:26:b7:bc:97:82:99:68:49: 15:7e:da:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsUZE9y63GOqY99MG8+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYmQ3NGM2ZDExZDYzY2E1ZGUzY2M2MzdjZTk2N2VlOTc2 MDRjNjcwHhcNMjUxMjI2MDYwMDQ0WhcNMjUxMjI3MDYwMDQ0WjAzMTEwLwYDVQQD EyhlNTkzNTc3YWExODk5ODgxNGRkMGM1OTM4YWZkMGJmYmFhMTRiNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQXYamkLd5y2e5kJBsY0bHq/MGVt JBPTCFDn3tI5yO+L6oqSfK6YQuJWjFEdMZrwdJ/ZHwtpU1lYAVu5CXRY+sfXEzfK emFlEqorcJnEuAagBfXXwVL11l7zgd7FykkzHcL5L9WSE0OzdH1v5Y1FhH/dFwnf LBOa0eQdJLqQk2NKtfalIWeNk29VEq0q3mN56B95ygRTMIzFHDVqv++Hu3K6hHLE E9t+hDb2dNuzfqlf530/1vDPOC35bDhBufhJzZsfCRjHfPWc6OzpKqkZzwb+r44J FsSzLAMhr+3MtcXYPs1oeZu+zOeE9scDH8H+7LDniN2Nx+MNdHlokA4UEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWTV3qhiZiBTdDFk4r9C/uqFLSgMB8GA1UdIwQY MBaAFIy9dMbRHWPKXePMY3zpZ+6XYExnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUt NmM4ZTVkMTkzNzdlLzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZDNmZmItMDlkYS00ZmFiLWIzOGUtNmM4ZTVkMTkzNzdl LzEvakwxMHh0RWRZOHBkNDh4amZPbG43cGRnVEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX7kOoQ7 ujWRokoc9jf4xwDDiHE84SY4DU3s35gZSwBxYvyF9Z0dWtKRoSicJIrtwF+mky/k 2H2d4t4+R+YDl4a20VT3bDTQO0K61kQhA6FMyUkEWhCXAIBHXHe0p2GnXWq3EgG/ h0cP+kRxdzMchk40I38CHQwqNEzkWurgwihWyput0bBGVvcrEFMyb5G5SQlud+nX r4UJ6Y3KLHNNXuccoe5xOhmmsyJ4PgwsrwPcnGojiF4F0myQsKb4HJZcZ2aRX6Vm 7shvgkIHhKxySnDso8SXn7VQZ4Psh1G97M0jCf2oDksJBxGrq3rN6zC4jIS0oia3 vJeCmWhJFX7akQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:23 2025 by rpki-client