This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json) Hash identifier: HSNHCJW16fmtYhPLlYp7dUMDernj5wm1i+F0N2xZ7Xw= Subject key identifier: BB:CB:28:01:9A:73:47:71:6C:75:5D:0F:0D:3E:84:B9:E0:1C:90:D9 Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Certificate serial: 019B19BB04EF0BE2A6B7C21ACDB83367248B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft Manifest number: 0E48 Signing time: Sat 13 Dec 2025 22:00:45 +0000 Manifest this update: Sat 13 Dec 2025 22:00:45 +0000 Manifest next update: Sun 14 Dec 2025 22:00:45 +0000 Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=) 2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: uM1hAe6YdzypRytCU9eUsfPMWHIJg7MlzOqBTf2Gg/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:04:ef:0b:e2:a6:b7:c2:1a:cd:b8:33:67:24:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Validity Not Before: Dec 13 22:00:45 2025 GMT Not After : Dec 14 22:00:45 2025 GMT Subject: CN=bbcb28019a7347716c755d0f0d3e84b9e01c90d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:cf:a5:f2:2a:81:b5:32:40:7d:90:4e:dd: b4:f1:ae:97:c8:bb:5d:c9:d7:6d:51:aa:18:db:c9: 2f:ef:26:4f:71:ee:76:96:12:7e:aa:06:4c:93:4f: 1c:9c:51:56:71:6d:4f:ff:2d:c6:7c:b7:32:04:db: f2:dd:3b:ba:e5:b6:0c:db:54:04:c4:31:41:a0:5c: ee:a6:1b:1f:1e:76:c6:6a:c5:44:04:ad:cf:55:2c: a6:2a:2f:f7:53:b4:43:38:e9:ab:a5:16:ed:4e:9e: ef:ff:eb:d3:75:58:b3:3a:e8:3e:14:2d:f6:b5:02: 19:f6:e1:96:2d:9b:c9:0d:07:a3:ae:4f:1f:54:ac: d0:c2:9f:bb:7f:0d:cd:27:84:76:ab:47:5e:32:71: 12:b4:c3:ce:76:a0:f6:c1:95:70:1c:c4:0a:0d:50: c6:ad:f3:5e:c0:31:4f:df:2c:eb:88:6b:22:8a:a1: c3:bc:d5:b2:42:9b:24:9c:f1:3f:48:64:19:51:8f: ac:64:d8:41:72:99:ce:46:51:d8:38:7a:d9:36:e9: 03:bd:f4:80:2a:b3:1d:80:df:54:f7:05:cd:53:8b: fd:83:70:44:a8:ff:5f:46:37:82:b8:97:f7:50:de: 15:2d:5f:6f:b4:1d:a4:6e:2c:92:6b:f3:75:a8:b1: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:28:01:9A:73:47:71:6C:75:5D:0F:0D:3E:84:B9:E0:1C:90:D9 X509v3 Authority Key Identifier: keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:16:e3:e5:ac:c3:50:28:d4:21:6f:67:81:75:26:ee:b4:1a: b0:5d:54:d8:f6:84:32:8e:5c:dd:e4:a5:a9:9a:70:52:82:fa: 1b:90:15:52:9c:d1:e1:98:e5:66:0c:db:08:bf:56:9d:82:7e: e6:c8:79:22:63:ce:1f:33:c3:db:ea:20:02:24:59:96:c4:e6: 0a:7a:dd:cb:06:60:ca:30:80:19:b0:27:28:fa:10:fe:0d:c8: f1:e7:ea:e0:83:1a:e2:5f:f9:4a:47:fc:fd:50:a7:96:b0:33: b2:58:d5:86:38:a2:58:35:f6:0c:e0:00:27:60:74:c8:9d:ae: 65:c6:03:02:3e:4d:8c:a1:61:cb:7c:f8:7e:4f:de:a1:98:1a: 11:b9:e7:9d:90:d9:4d:91:2f:b6:4f:2e:81:dd:dd:85:05:dd: a8:d8:87:29:d0:32:89:06:21:fe:51:1c:4d:f7:55:64:f1:46: 81:10:4f:de:3a:d2:f3:a2:31:82:63:86:ec:df:77:cc:db:79: 1c:13:c5:e0:6d:90:52:b6:f7:1d:06:26:b6:b3:77:6c:13:ba: 4c:4d:8e:f7:71:8e:c4:7c:a7:69:46:fb:79:0a:c9:20:d6:93: 7e:a4:3a:81:bf:82:cb:60:e3:84:35:30:cb:ae:1c:81:a7:a7: 0a:5f:ea:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuwTvC+Kmt8IazbgzZySLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy YTQwODIwHhcNMjUxMjEzMjIwMDQ1WhcNMjUxMjE0MjIwMDQ1WjAzMTEwLwYDVQQD EyhiYmNiMjgwMTlhNzM0NzcxNmM3NTVkMGYwZDNlODRiOWUwMWM5MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ/PpfIqgbUyQH2QTt208a6XyLtd yddtUaoY28kv7yZPce52lhJ+qgZMk08cnFFWcW1P/y3GfLcyBNvy3Tu65bYM21QE xDFBoFzuphsfHnbGasVEBK3PVSymKi/3U7RDOOmrpRbtTp7v/+vTdVizOug+FC32 tQIZ9uGWLZvJDQejrk8fVKzQwp+7fw3NJ4R2q0deMnEStMPOdqD2wZVwHMQKDVDG rfNewDFP3yzriGsiiqHDvNWyQpsknPE/SGQZUY+sZNhBcpnORlHYOHrZNukDvfSA KrMdgN9U9wXNU4v9g3BEqP9fRjeCuJf3UN4VLV9vtB2kbiySa/N1qLF6TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvLKAGac0dxbHVdDw0+hLngHJDZMB8GA1UdIwQY MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRbj5azD UCjUIW9ngXUm7rQasF1U2PaEMo5c3eSlqZpwUoL6G5AVUpzR4ZjlZgzbCL9WnYJ+ 5sh5ImPOHzPD2+ogAiRZlsTmCnrdywZgyjCAGbAnKPoQ/g3I8efq4IMa4l/5Skf8 /VCnlrAzsljVhjiiWDX2DOAAJ2B0yJ2uZcYDAj5NjKFhy3z4fk/eoZgaEbnnnZDZ TZEvtk8ugd3dhQXdqNiHKdAyiQYh/lEcTfdVZPFGgRBP3jrS86IxgmOG7N93zNt5 HBPF4G2QUrb3HQYmtrN3bBO6TE2O93GOxHynaUb7eQrJINaTfqQ6gb+Cy2DjhDUw y64cgaenCl/qGg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:02 2025 by rpki-client