This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json) Hash identifier: 2esuz1r1VJxQ5yBdG7ThVOPJZNLH4GzU3fhUcVtYF0s= Subject key identifier: DF:E2:B8:DA:18:68:6A:2F:82:D1:CE:30:DC:7F:A9:78:08:C1:C1:B0 Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Certificate serial: 019B3532D4773B17525074C6481E0992CCEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft Manifest number: 1717 Signing time: Fri 19 Dec 2025 06:01:21 +0000 Manifest this update: Fri 19 Dec 2025 06:01:21 +0000 Manifest next update: Sat 20 Dec 2025 06:01:21 +0000 Files and hashes: 1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: +73LE1cPf81pIRcBS1X9gRxgTuHt6jMlP2BkdI0qjWA=) 2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:d4:77:3b:17:52:50:74:c6:48:1e:09:92:cc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Validity Not Before: Dec 19 06:01:21 2025 GMT Not After : Dec 20 06:01:21 2025 GMT Subject: CN=dfe2b8da18686a2f82d1ce30dc7fa97808c1c1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:d7:7d:37:44:73:86:6a:ac:b9:fa:66:ac: 50:8d:0d:6f:d7:84:37:29:07:63:92:6d:57:98:20: 8f:c5:46:b1:a7:47:57:9a:fd:3f:a5:9f:cd:65:db: 0b:b9:23:a7:58:46:cd:c0:65:ff:62:95:fa:76:35: 7b:56:fa:05:18:59:d5:6c:56:0d:fd:6d:c4:ef:d2: 5f:76:e0:eb:5c:13:45:a4:f4:f3:32:d8:82:e3:df: 2d:11:75:08:68:15:b7:52:99:cc:a6:36:55:29:29: aa:79:5b:01:90:73:8a:96:d2:4c:a0:5d:69:85:93: ed:9d:0d:b9:8b:42:63:c1:b0:62:5b:01:0f:a7:25: f9:e4:ca:e3:02:c7:3d:81:57:e0:9b:3b:f6:df:50: 1a:b9:9a:b8:8c:1a:bc:57:98:b8:b5:06:de:90:5f: 12:ad:68:f5:b2:4c:0a:b5:97:43:30:d6:7c:c3:b5: 7d:7f:b5:7a:13:5a:22:6d:e5:11:9f:dc:41:72:b4: 7b:8f:db:cb:39:86:86:35:87:cd:d5:2e:a8:21:72: 0c:b9:42:0a:5c:87:9f:81:cb:91:1f:14:c3:ab:19: 2f:4b:10:03:c2:c4:a7:99:c1:a5:fb:1b:ee:0b:2b: 20:3f:cc:5f:58:1a:a5:26:22:82:d2:35:5f:b7:64: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:B8:DA:18:68:6A:2F:82:D1:CE:30:DC:7F:A9:78:08:C1:C1:B0 X509v3 Authority Key Identifier: keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:17:40:3e:3f:ad:98:e7:f8:9f:ab:2f:c6:b8:32:0d:22:0f: d5:d1:80:32:c8:d1:f4:21:cf:d7:2c:58:66:40:92:c2:c7:9e: 6a:03:9a:83:18:72:b7:ee:2e:94:cd:ca:fb:28:ef:93:3c:33: 0d:0f:db:e5:48:9b:88:30:ce:70:c3:1b:77:60:97:6d:47:65: b7:90:43:bc:61:64:af:92:f1:fe:47:56:98:c3:a4:dc:2b:22: 5f:de:31:3c:92:50:50:0c:27:a5:d8:99:8a:2e:67:80:c8:97: 8c:34:1b:c3:37:4c:41:aa:d2:8d:4d:f9:57:9a:06:58:e5:22: 7d:c4:88:f1:c2:ca:84:e3:92:8f:49:85:63:14:8a:91:18:21: 3d:32:6f:22:f5:2f:4f:8c:20:0f:ea:a8:bb:60:13:71:af:e1: 6a:2b:2a:67:08:05:e6:22:63:63:73:ba:32:bd:82:de:0a:17: c8:33:a8:01:92:94:c0:ec:95:45:a0:e1:71:ee:b3:fa:62:09: 01:50:c0:3f:2d:1e:00:b5:d7:bb:fe:77:cb:0b:a6:84:34:91: 68:6f:94:5e:70:39:4f:ad:15:4d:d6:4c:3c:76:77:fd:35:d4: c0:78:08:15:61:0c:f5:24:de:43:87:4d:7e:05:24:e9:d2:12: 1f:39:72:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtR3OxdSUHTGSB4JkszuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1 OWYwZTYwHhcNMjUxMjE5MDYwMTIxWhcNMjUxMjIwMDYwMTIxWjAzMTEwLwYDVQQD EyhkZmUyYjhkYTE4Njg2YTJmODJkMWNlMzBkYzdmYTk3ODA4YzFjMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bjXfTdEc4ZqrLn6ZqxQjQ1v14Q3 KQdjkm1XmCCPxUaxp0dXmv0/pZ/NZdsLuSOnWEbNwGX/YpX6djV7VvoFGFnVbFYN /W3E79JfduDrXBNFpPTzMtiC498tEXUIaBW3UpnMpjZVKSmqeVsBkHOKltJMoF1p hZPtnQ25i0JjwbBiWwEPpyX55MrjAsc9gVfgmzv231AauZq4jBq8V5i4tQbekF8S rWj1skwKtZdDMNZ8w7V9f7V6E1oibeURn9xBcrR7j9vLOYaGNYfN1S6oIXIMuUIK XIefgcuRHxTDqxkvSxADwsSnmcGl+xvuCysgP8xfWBqlJiKC0jVft2Q3GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/iuNoYaGovgtHOMNx/qXgIwcGwMB8GA1UdIwQY MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt YWNmMDkzMjI2YjA3LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3 LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBdAPj+t mOf4n6svxrgyDSIP1dGAMsjR9CHP1yxYZkCSwseeagOagxhyt+4ulM3K+yjvkzwz DQ/b5UibiDDOcMMbd2CXbUdlt5BDvGFkr5Lx/kdWmMOk3CsiX94xPJJQUAwnpdiZ ii5ngMiXjDQbwzdMQarSjU35V5oGWOUifcSI8cLKhOOSj0mFYxSKkRghPTJvIvUv T4wgD+qou2ATca/haisqZwgF5iJjY3O6Mr2C3goXyDOoAZKUwOyVRaDhce6z+mIJ AVDAPy0eALXXu/53ywumhDSRaG+UXnA5T60VTdZMPHZ3/TXUwHgIFWEM9STeQ4dN fgUk6dISHzlyMA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:31 2025 by rpki-client