This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json) Hash identifier: bE5Fz0NiE2JoAQ0iA+4VSbhIKt/EM0MLRogt8WIwzJc= Subject key identifier: D6:5D:52:C6:D5:3A:22:9B:B8:10:AB:84:6C:06:5A:F2:9C:17:2F:26 Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Certificate serial: 019B15DE7F788C80B276894BD1ECAAA76041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 04:01:01 +0000 Manifest this update: Sat 13 Dec 2025 04:01:01 +0000 Manifest next update: Sun 14 Dec 2025 04:01:01 +0000 Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: r3wU1U1+YZARnvsDP5DRii/p4WjhYR1PBxfwOajl77Y=) 2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=) 3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:de:7f:78:8c:80:b2:76:89:4b:d1:ec:aa:a7:60:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Validity Not Before: Dec 13 04:01:01 2025 GMT Not After : Dec 14 04:01:01 2025 GMT Subject: CN=d65d52c6d53a229bb810ab846c065af29c172f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:53:eb:1d:ae:87:14:70:94:82:4c:c0:3c: 19:e3:a8:08:27:10:3b:17:07:6f:f7:69:e7:cb:7d: c9:43:aa:a2:46:f4:29:d4:c2:9b:31:4a:b8:d7:f4: bc:6c:d6:21:1e:2a:94:df:01:20:2c:cf:e4:51:f6: b2:6a:fd:73:6a:5a:86:ce:9d:d1:31:69:8a:f8:0b: 59:8e:a4:b5:b6:75:2a:ff:49:0f:65:84:ad:d2:9d: cc:c8:b8:19:27:2c:74:a1:72:9d:4f:7b:b1:68:16: 6c:79:6c:ff:b2:fc:5c:3a:d1:b4:5c:1a:e6:e4:8a: da:35:56:e0:9c:22:32:3d:85:9c:c8:60:ca:73:ef: e2:b3:5c:b7:c1:16:b1:ea:e0:c9:e7:1a:cd:e4:f7: ce:69:36:4d:b2:22:fe:09:41:09:e3:74:cd:48:46: 66:7b:57:38:5a:02:07:e5:82:b1:9f:44:6c:f8:b3: 3f:81:a7:9c:67:88:b6:6e:97:37:fd:8d:b5:72:3b: fe:45:95:60:54:a9:1b:e7:b2:2e:b8:bb:53:77:6d: 6e:63:5f:3e:8b:6a:96:bf:9e:df:6d:db:61:9c:67: 05:6c:55:82:73:3d:3b:05:15:73:76:11:10:bf:32: a2:25:8b:91:1d:e4:0a:5a:e4:54:03:c8:ec:de:cf: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:52:C6:D5:3A:22:9B:B8:10:AB:84:6C:06:5A:F2:9C:17:2F:26 X509v3 Authority Key Identifier: keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:11:44:e0:f8:b6:f5:4d:40:0a:8a:ef:4a:19:07:b9:5c:05: 93:74:e2:bc:82:6a:00:1f:46:53:e3:9e:25:5f:8a:3c:d4:10: af:3c:41:d6:f5:da:35:f3:11:e4:b9:13:af:32:cc:8e:56:15: cd:55:13:90:3e:ee:de:a7:b3:1b:ee:d2:37:f7:f0:89:e2:fe: ba:32:36:b0:8f:5d:49:13:68:40:d7:a3:f9:63:04:54:3e:dd: d4:e6:b4:ed:df:22:01:b2:c6:0d:f8:66:4c:04:8e:88:20:d4: 34:1d:c3:84:80:4a:88:5b:d3:62:62:42:23:46:27:6a:97:6b: c3:d1:89:bd:9f:22:d3:67:61:68:d2:2c:bd:f6:15:1a:27:5c: 33:c0:f8:55:1a:e1:75:ad:b7:cc:91:cd:65:3f:fd:b8:be:78: 84:97:b4:ec:34:e8:74:ba:a6:c8:ab:50:85:da:86:6d:92:d2: 71:a3:c7:3b:0d:29:fb:3e:b4:95:1d:08:bf:a6:bd:2c:dd:b2: 27:78:6c:03:30:7d:cf:bf:af:a6:73:ef:a1:7f:0a:f9:d7:82: 4a:92:4a:29:43:fd:6c:69:de:c5:e3:a1:1c:fd:47:87:fe:a5: 85:42:6a:46:3e:ad:a3:f2:99:41:7b:25:3c:ce:5b:ab:27:9c: 0c:e0:f1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsV3n94jICydolL0eyqp2BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3 YmYyMzIwHhcNMjUxMjEzMDQwMTAxWhcNMjUxMjE0MDQwMTAxWjAzMTEwLwYDVQQD EyhkNjVkNTJjNmQ1M2EyMjliYjgxMGFiODQ2YzA2NWFmMjljMTcyZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H9T6x2uhxRwlIJMwDwZ46gIJxA7 Fwdv92nny33JQ6qiRvQp1MKbMUq41/S8bNYhHiqU3wEgLM/kUfayav1zalqGzp3R MWmK+AtZjqS1tnUq/0kPZYSt0p3MyLgZJyx0oXKdT3uxaBZseWz/svxcOtG0XBrm 5IraNVbgnCIyPYWcyGDKc+/is1y3wRax6uDJ5xrN5PfOaTZNsiL+CUEJ43TNSEZm e1c4WgIH5YKxn0Rs+LM/gaecZ4i2bpc3/Y21cjv+RZVgVKkb57IuuLtTd21uY18+ i2qWv57fbdthnGcFbFWCcz07BRVzdhEQvzKiJYuRHeQKWuRUA8js3s92wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZdUsbVOiKbuBCrhGwGWvKcFy8mMB8GA1UdIwQY MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct N2YyMDEyMTJkODgzLzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhFE4Pi2 9U1ACorvShkHuVwFk3TivIJqAB9GU+OeJV+KPNQQrzxB1vXaNfMR5LkTrzLMjlYV zVUTkD7u3qezG+7SN/fwieL+ujI2sI9dSRNoQNej+WMEVD7d1Oa07d8iAbLGDfhm TASOiCDUNB3DhIBKiFvTYmJCI0Ynapdrw9GJvZ8i02dhaNIsvfYVGidcM8D4VRrh da23zJHNZT/9uL54hJe07DTodLqmyKtQhdqGbZLScaPHOw0p+z60lR0Iv6a9LN2y J3hsAzB9z7+vpnPvoX8K+deCSpJKKUP9bGnexeOhHP1Hh/6lhUJqRj6to/KZQXsl PM5bqyecDODx4g== -----END CERTIFICATE-----Generated at Sat Dec 13 13:19:50 2025 by rpki-client