This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json) Hash identifier: 8dNad7BV6W9TZfJw4B/XzMyAAHVERw1ksTrLJX/C114= Subject key identifier: 48:96:3F:68:C0:68:C4:30:EE:B2:6A:70:FC:76:6D:D5:3B:52:DF:57 Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Certificate serial: 019B5A884E9566E6528FA7F530E1C4B9C21B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft Manifest number: 0678 Signing time: Fri 26 Dec 2025 12:00:40 +0000 Manifest this update: Fri 26 Dec 2025 12:00:40 +0000 Manifest next update: Sat 27 Dec 2025 12:00:40 +0000 Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=) 2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: JCUIgQ+8GX/M+ZU5CGybcTw+XIL+tSETssZx/ZpjHtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4e:95:66:e6:52:8f:a7:f5:30:e1:c4:b9:c2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Validity Not Before: Dec 26 12:00:40 2025 GMT Not After : Dec 27 12:00:40 2025 GMT Subject: CN=48963f68c068c430eeb26a70fc766dd53b52df57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:68:7a:c4:d6:62:e8:3e:7f:ba:2e:cf:fb: cb:be:a8:0c:e3:fe:b0:09:1f:a5:5e:90:a4:a8:41: 77:c2:4a:f5:88:5d:0e:2b:47:a4:17:2b:b6:90:59: 76:31:8b:ad:51:2f:90:a9:21:86:6b:82:c0:dc:0c: fa:a9:d5:51:ac:7f:32:b7:8f:c6:6a:fb:df:23:6f: 28:c5:f2:15:6a:5e:f5:50:6f:83:10:cd:ab:46:e5: 76:47:64:aa:b2:97:aa:0e:08:e5:ab:52:f5:10:2a: 14:cf:76:b7:8f:26:70:fa:1d:4f:03:07:ca:9e:58: 63:c2:3e:b2:87:ee:92:fc:e9:3d:ae:a2:1b:11:98: a9:df:fb:27:27:84:80:09:f1:3b:c2:5e:01:aa:9b: 10:ce:aa:67:0f:aa:02:96:63:a7:67:66:5a:37:ad: 92:4b:e7:9a:4d:47:37:52:08:94:ef:82:66:b4:27: 8b:d9:fb:a5:74:f3:35:2d:e5:25:43:3a:3b:88:ff: 10:e2:20:4a:8b:19:92:ba:f5:48:63:ae:8e:a7:b9: a9:1d:fd:85:67:96:b8:ef:3a:f4:1c:a4:33:79:8d: 43:ca:9a:45:36:4e:34:e2:2e:23:fc:17:34:e8:be: e0:26:2a:21:aa:eb:29:b4:b5:9d:ae:2c:6d:f2:db: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:3F:68:C0:68:C4:30:EE:B2:6A:70:FC:76:6D:D5:3B:52:DF:57 X509v3 Authority Key Identifier: keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:28:8f:e7:d6:9b:c5:8d:44:06:ef:98:07:82:d4:20:2b:d6: 0b:70:31:4e:53:2e:82:0d:01:2b:dd:8f:ab:54:61:79:80:09: 2f:49:98:a2:49:5b:99:1d:85:ae:54:61:33:e7:83:9e:83:97: 4d:28:71:61:eb:35:b8:26:13:b6:d7:f0:72:c4:7d:52:a8:7b: c1:cd:2f:fb:c6:d3:c7:ee:fd:d6:7b:70:95:e4:8f:dd:57:9b: 8f:84:77:b5:05:43:32:9b:18:a5:9d:a5:db:a0:ca:e6:91:45: eb:6f:14:97:69:31:9f:91:cd:c0:23:9f:4a:d7:4c:b7:50:2c: d9:50:cf:0d:a7:6a:bf:72:76:4b:b7:fd:27:ca:7c:4b:f3:e0: 3d:a6:d3:a6:f6:80:a2:53:7a:5b:4b:0a:71:3c:df:43:24:fa: 56:79:88:de:82:b9:2f:49:fd:10:18:e5:40:7d:07:38:29:e0: 0f:c2:8f:0f:01:30:fd:3d:70:36:2b:99:6f:14:89:e6:d7:62: 0a:8b:c8:13:02:1f:8c:27:98:89:8e:05:28:7a:cb:8b:db:61: 1e:8c:55:ae:2a:68:fc:46:4f:36:c4:5b:61:af:0e:9e:a0:e8: ac:cb:a4:55:1e:a2:49:d6:f8:f1:51:6c:4b:3a:45:00:1b:f8: 91:06:58:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE6VZuZSj6f1MOHEucIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0 YTM4MjcwHhcNMjUxMjI2MTIwMDQwWhcNMjUxMjI3MTIwMDQwWjAzMTEwLwYDVQQD Eyg0ODk2M2Y2OGMwNjhjNDMwZWViMjZhNzBmYzc2NmRkNTNiNTJkZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirFoesTWYug+f7ouz/vLvqgM4/6w CR+lXpCkqEF3wkr1iF0OK0ekFyu2kFl2MYutUS+QqSGGa4LA3Az6qdVRrH8yt4/G avvfI28oxfIVal71UG+DEM2rRuV2R2SqspeqDgjlq1L1ECoUz3a3jyZw+h1PAwfK nlhjwj6yh+6S/Ok9rqIbEZip3/snJ4SACfE7wl4BqpsQzqpnD6oClmOnZ2ZaN62S S+eaTUc3UgiU74JmtCeL2fuldPM1LeUlQzo7iP8Q4iBKixmSuvVIY66Op7mpHf2F Z5a47zr0HKQzeY1DyppFNk404i4j/Bc06L7gJiohqusptLWdrixt8tsVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiWP2jAaMQw7rJqcPx2bdU7Ut9XMB8GA1UdIwQY MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt ZDlhODA4ZWMxYWIxLzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCiP59ab xY1EBu+YB4LUICvWC3AxTlMugg0BK92Pq1RheYAJL0mYoklbmR2FrlRhM+eDnoOX TShxYes1uCYTttfwcsR9Uqh7wc0v+8bTx+791ntwleSP3Vebj4R3tQVDMpsYpZ2l 26DK5pFF628Ul2kxn5HNwCOfStdMt1As2VDPDadqv3J2S7f9J8p8S/PgPabTpvaA olN6W0sKcTzfQyT6VnmI3oK5L0n9EBjlQH0HOCngD8KPDwEw/T1wNiuZbxSJ5tdi CovIEwIfjCeYiY4FKHrLi9thHoxVripo/EZPNsRbYa8OnqDorMukVR6iSdb48VFs SzpFABv4kQZY8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client