This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json) Hash identifier: QYvacXCN+82/bNyT2j2ZY9AGFMPgOijSDd2jm6a8uxg= Subject key identifier: 8D:DE:C5:8F:B1:28:36:A3:28:18:C0:55:58:75:B6:46:D3:15:5A:8C Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876 Certificate serial: 019B18DF8D240266E0237CF1C7E4FA1199A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft Manifest number: 0A90 Signing time: Sat 13 Dec 2025 18:01:02 +0000 Manifest this update: Sat 13 Dec 2025 18:01:02 +0000 Manifest next update: Sun 14 Dec 2025 18:01:02 +0000 Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: msIneG19FKvCNghDoCqaP/tKFDOjlrfAl0owRevaTTo=) 2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=) 3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:8d:24:02:66:e0:23:7c:f1:c7:e4:fa:11:99:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457027e3a087b65f968b535e415f67432695876 Validity Not Before: Dec 13 18:01:02 2025 GMT Not After : Dec 14 18:01:02 2025 GMT Subject: CN=8ddec58fb12836a32818c0555875b646d3155a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:f3:9f:96:07:39:0e:3c:87:d4:1a:09:c0: 9d:38:3b:f1:f3:1b:32:18:29:ba:ed:f6:f5:bf:22: 3b:cd:54:2f:5a:da:d0:ef:34:39:27:40:95:65:db: 7b:0f:42:8d:a9:8a:e4:0b:a4:3c:e3:40:7a:94:20: b0:c1:8a:d3:b1:ed:0a:0a:f9:7c:40:3e:29:d2:fc: 84:ad:7b:64:6b:c6:ec:c6:dc:2f:97:1d:89:62:d5: 12:23:46:1d:8b:7d:0e:08:3f:76:50:95:43:46:62: a5:14:cb:9a:43:31:ea:ed:53:c0:76:1e:aa:64:97: d1:73:b5:e5:98:bb:26:76:bc:57:cb:4f:bf:82:ba: 94:74:b6:d6:20:c3:8a:a4:95:d8:45:dc:11:45:9e: c6:f4:87:e3:bf:c9:e6:01:2f:b0:5c:b8:ef:d1:22: 25:f1:95:b9:f1:46:da:0e:97:69:17:d2:aa:c3:44: af:81:35:70:a2:fe:09:cd:18:9a:83:33:36:62:e6: df:90:fd:de:62:5a:d3:04:18:9f:27:cc:2b:a4:b4: dd:b0:4a:8a:99:db:c6:e4:b3:88:2f:60:36:17:25: dd:05:97:08:bf:d6:60:88:3b:3f:d6:9b:99:ed:68: 10:b0:04:c0:18:75:39:6d:d0:fe:cc:e2:69:c8:0d: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DE:C5:8F:B1:28:36:A3:28:18:C0:55:58:75:B6:46:D3:15:5A:8C X509v3 Authority Key Identifier: keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2c:96:76:39:16:c9:65:56:96:7c:2d:59:ae:4f:09:4d:df: 6f:31:fc:13:0e:c0:4d:24:48:b0:b7:a5:3a:11:f9:d0:42:f8: 72:1c:a4:0b:01:94:ac:7d:00:bc:da:93:a7:2f:1c:97:58:db: 86:e1:4e:c6:15:38:6e:64:ef:30:25:1a:a5:22:96:d3:55:bd: e0:23:99:52:08:28:53:90:f4:7c:25:97:9e:32:1f:ca:7e:f7: a1:b4:47:2f:b1:d0:10:9e:0a:33:cf:ac:25:6f:b0:30:26:2f: 9f:ea:76:4b:fd:a0:da:11:95:2b:0a:5d:8d:f3:7e:cb:20:0e: 7e:2b:de:28:90:7d:3e:83:f1:06:c1:af:27:90:f7:05:c9:6d: d9:7d:99:86:06:48:bb:22:a9:64:01:a6:74:02:18:98:27:b6: fa:ae:a9:a2:73:06:fa:87:e5:19:40:1c:a5:8b:ce:6f:53:eb: 11:bd:0a:e8:e7:be:2b:4c:c6:7a:74:f4:80:2a:2e:76:76:86: 62:21:40:36:12:85:d6:69:30:1b:a4:e2:82:4a:81:77:22:63: c4:a5:0f:28:a9:47:2f:5c:41:33:2a:56:bb:c4:4f:99:2f:36: d6:03:50:4a:f3:48:3f:d5:2a:5c:66:c9:99:72:2a:18:9c:bc: c1:1a:12:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY340kAmbgI3zxx+T6EZmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2 OTU4NzYwHhcNMjUxMjEzMTgwMTAyWhcNMjUxMjE0MTgwMTAyWjAzMTEwLwYDVQQD Eyg4ZGRlYzU4ZmIxMjgzNmEzMjgxOGMwNTU1ODc1YjY0NmQzMTU1YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukXzn5YHOQ48h9QaCcCdODvx8xsy GCm67fb1vyI7zVQvWtrQ7zQ5J0CVZdt7D0KNqYrkC6Q840B6lCCwwYrTse0KCvl8 QD4p0vyErXtka8bsxtwvlx2JYtUSI0Ydi30OCD92UJVDRmKlFMuaQzHq7VPAdh6q ZJfRc7XlmLsmdrxXy0+/grqUdLbWIMOKpJXYRdwRRZ7G9Ifjv8nmAS+wXLjv0SIl 8ZW58UbaDpdpF9Kqw0SvgTVwov4JzRiagzM2YubfkP3eYlrTBBifJ8wrpLTdsEqK mdvG5LOIL2A2FyXdBZcIv9ZgiDs/1puZ7WgQsATAGHU5bdD+zOJpyA0bNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3exY+xKDajKBjAVVh1tkbTFVqMMB8GA1UdIwQY MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3 LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCyWdjkW yWVWlnwtWa5PCU3fbzH8Ew7ATSRIsLelOhH50EL4chykCwGUrH0AvNqTpy8cl1jb huFOxhU4bmTvMCUapSKW01W94COZUggoU5D0fCWXnjIfyn73obRHL7HQEJ4KM8+s JW+wMCYvn+p2S/2g2hGVKwpdjfN+yyAOfiveKJB9PoPxBsGvJ5D3Bclt2X2ZhgZI uyKpZAGmdAIYmCe2+q6ponMG+oflGUAcpYvOb1PrEb0K6Oe+K0zGenT0gCoudnaG YiFANhKF1mkwG6TigkqBdyJjxKUPKKlHL1xBMypWu8RPmS821gNQSvNIP9UqXGbJ mXIqGJy8wRoSqw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:07:46 2025 by rpki-client