This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json) Hash identifier: bSLLpukGtalEJZDaA6HxWOfsfUso9DbIknpFpGuu2KU= Subject key identifier: E6:A3:E4:BD:42:B3:F4:FE:BC:0F:80:12:02:67:CB:38:56:6E:81:16 Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Certificate serial: 019B269B0C326970B9E6DDB49FF7C32386AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 10:00:53 +0000 Manifest this update: Tue 16 Dec 2025 10:00:53 +0000 Manifest next update: Wed 17 Dec 2025 10:00:53 +0000 Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=) 2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: xZjAGX/HVTPU5Ub9Fa6coXOODS28d/ooV3uvHBoRDbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:0c:32:69:70:b9:e6:dd:b4:9f:f7:c3:23:86:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Validity Not Before: Dec 16 10:00:53 2025 GMT Not After : Dec 17 10:00:53 2025 GMT Subject: CN=e6a3e4bd42b3f4febc0f80120267cb38566e8116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:b8:40:77:f4:43:81:98:74:d7:36:40:43: 41:b6:ee:b7:76:e7:37:7d:cc:14:3a:34:2a:b9:78: ab:bb:79:aa:e5:b0:61:4c:b9:4d:8b:82:38:ce:58: 21:9f:af:4c:40:f1:b8:48:31:18:40:34:e1:2b:58: 48:57:f4:6b:29:28:59:b6:51:b2:eb:e7:20:3d:f1: 20:66:23:c5:92:65:3b:87:97:f2:2e:f0:d2:d4:99: f8:ae:b4:97:ff:4d:3b:5f:76:3d:cd:fb:38:5d:d2: 01:02:25:65:61:ca:79:ab:06:45:51:10:b6:b9:4c: a8:60:66:84:64:a8:1f:74:f5:00:5c:17:3a:36:eb: cb:48:87:90:4a:15:46:5f:5e:0d:b9:2e:9c:f3:d2: 4b:ca:50:e5:5e:8d:d1:a8:f5:c5:0c:c2:d4:1a:0e: 3f:4c:a6:d8:df:21:22:8f:70:de:9b:5e:b1:7c:e7: 1c:c6:52:7a:17:34:de:c0:89:ca:f5:3f:f1:c5:42: ba:ca:0b:15:9b:b7:c5:63:28:a8:2a:e1:8c:b8:56: 70:88:e2:e0:e6:9a:10:b8:b1:40:22:a7:ec:0f:a1: 79:5f:6b:a8:41:58:db:be:81:4d:d2:e4:4b:fd:48: 6c:b1:6e:a1:85:28:73:0f:49:ee:42:ab:93:f6:b6: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A3:E4:BD:42:B3:F4:FE:BC:0F:80:12:02:67:CB:38:56:6E:81:16 X509v3 Authority Key Identifier: keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d0:4b:16:84:63:f8:63:bb:71:87:9f:9e:f5:e9:8c:52:51: b1:fc:2b:c6:1d:26:f3:79:9b:a4:44:b0:e1:df:d6:7b:bf:37: 97:89:eb:0b:1e:cc:c8:dd:3a:43:6b:91:da:64:10:23:c4:8a: ac:56:b3:a6:6a:1a:38:ba:5f:4a:14:2c:a6:c2:67:b1:ba:72: f3:fe:b9:c7:4e:09:6e:70:bc:79:d1:f1:c6:92:ef:f2:b8:4f: 88:67:a9:a9:ed:a1:b1:a3:b0:79:c3:13:97:43:b8:a9:38:14: 87:57:de:8f:31:2b:7f:8b:01:07:69:00:a2:1b:32:ae:57:07: 6a:fa:b7:07:af:bb:9f:c6:7a:5b:2c:ce:60:2f:f2:8e:ea:7d: ed:67:4d:94:69:62:28:d7:25:de:c7:03:e7:f3:1f:a0:50:4b: 66:c9:5d:96:a6:94:64:51:b0:1a:50:62:4b:22:3b:cb:06:c3: 1a:5f:99:b8:42:94:32:77:71:d6:80:61:27:e9:4c:c4:6e:77: ba:bc:c6:cb:3f:ef:c3:18:e3:51:db:80:5e:9e:0f:84:3c:a6: fb:46:2d:7a:db:a3:44:fe:d7:0f:f2:c7:e0:8f:b9:b2:3d:ed: ef:e0:ad:26:6c:b3:01:00:49:38:2c:d5:ae:52:dc:7d:53:fb: 16:f8:0c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmwwyaXC55t20n/fDI4avMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi MWM3ZjMwHhcNMjUxMjE2MTAwMDUzWhcNMjUxMjE3MTAwMDUzWjAzMTEwLwYDVQQD EyhlNmEzZTRiZDQyYjNmNGZlYmMwZjgwMTIwMjY3Y2IzODU2NmU4MTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk164QHf0Q4GYdNc2QENBtu63duc3 fcwUOjQquXiru3mq5bBhTLlNi4I4zlghn69MQPG4SDEYQDThK1hIV/RrKShZtlGy 6+cgPfEgZiPFkmU7h5fyLvDS1Jn4rrSX/007X3Y9zfs4XdIBAiVlYcp5qwZFURC2 uUyoYGaEZKgfdPUAXBc6NuvLSIeQShVGX14NuS6c89JLylDlXo3RqPXFDMLUGg4/ TKbY3yEij3Dem16xfOccxlJ6FzTewInK9T/xxUK6ygsVm7fFYyioKuGMuFZwiOLg 5poQuLFAIqfsD6F5X2uoQVjbvoFN0uRL/UhssW6hhShzD0nuQquT9rZX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaj5L1Cs/T+vA+AEgJnyzhWboEWMB8GA1UdIwQY MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9BLFoRj +GO7cYefnvXpjFJRsfwrxh0m83mbpESw4d/We783l4nrCx7MyN06Q2uR2mQQI8SK rFazpmoaOLpfShQspsJnsbpy8/65x04JbnC8edHxxpLv8rhPiGepqe2hsaOwecMT l0O4qTgUh1fejzErf4sBB2kAohsyrlcHavq3B6+7n8Z6WyzOYC/yjup97WdNlGli KNcl3scD5/MfoFBLZsldlqaUZFGwGlBiSyI7ywbDGl+ZuEKUMndx1oBhJ+lMxG53 urzGyz/vwxjjUduAXp4PhDym+0YtetujRP7XD/LH4I+5sj3t7+CtJmyzAQBJOCzV rlLcfVP7FvgMJw== -----END CERTIFICATE-----Generated at Tue Dec 16 15:47:14 2025 by rpki-client