This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json) Hash identifier: qGzC+SgbM3ua1qNq62nOBZao+iu0/QX7n5ZR5NheNsY= Subject key identifier: 8E:16:00:0C:F6:33:DD:CC:CB:52:86:CD:2C:F1:02:DD:AF:01:C8:2B Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae Certificate serial: 019B33E938CC45FA112933A3C5B0FE0C913B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft Manifest number: 073F Signing time: Fri 19 Dec 2025 00:01:20 +0000 Manifest this update: Fri 19 Dec 2025 00:01:20 +0000 Manifest next update: Sat 20 Dec 2025 00:01:20 +0000 Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=) 2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: u/KHyQf+W6973P9qeAD/DM0rhJDNfxSGcDaxTZiP9/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:38:cc:45:fa:11:29:33:a3:c5:b0:fe:0c:91:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae Validity Not Before: Dec 19 00:01:20 2025 GMT Not After : Dec 20 00:01:20 2025 GMT Subject: CN=8e16000cf633ddcccb5286cd2cf102ddaf01c82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:c9:d0:52:7c:5e:53:4d:7c:f8:dd:15:80: 15:20:01:17:f6:7a:e4:62:42:f7:1e:6b:74:63:df: f2:4a:f8:fb:6c:df:ab:f8:3f:1b:29:18:bd:00:61: ac:46:ae:94:28:f9:af:ec:43:4a:53:af:a3:8f:af: 19:ab:fc:fd:f3:4e:c4:d2:25:c0:2b:c6:75:54:2b: de:51:c8:f7:f1:7a:6b:77:95:f9:68:84:fc:8d:8c: d3:cb:60:d0:6f:6c:27:54:43:3d:e8:21:c5:ff:04: 06:9b:cf:30:17:4f:2c:5d:f8:1b:2b:3e:57:f0:e6: 06:a9:5c:68:f0:45:a1:51:f8:c9:74:06:e9:d5:84: bc:f7:46:b8:7c:6b:d4:81:09:20:a1:58:51:a3:c9: 23:0d:58:3f:2c:2a:15:88:58:e4:82:fc:f2:96:3c: ff:4d:3f:7b:f7:7b:dc:81:f5:ec:53:3d:53:f5:c1: ba:28:c6:91:06:5d:d7:31:26:18:1f:b5:2c:fb:06: 79:cd:54:1d:e5:23:c8:45:f3:d2:b1:85:02:d3:70: 7f:9f:21:e0:11:aa:43:1f:07:51:8f:b8:9b:6d:3f: 92:88:1b:8c:fa:47:4e:89:da:28:d1:41:cd:8c:86: 8e:c8:67:f0:8f:9e:b7:5c:4a:11:00:52:db:05:e0: d6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:00:0C:F6:33:DD:CC:CB:52:86:CD:2C:F1:02:DD:AF:01:C8:2B X509v3 Authority Key Identifier: keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5c:1e:0e:3c:a9:0a:ac:df:c0:27:a8:fe:7d:0c:54:e9:51: c4:6b:a7:cf:8a:76:3a:30:d1:17:06:56:df:c2:94:72:9c:f4: f0:4e:de:03:05:1e:ce:2a:6d:e8:ca:6b:15:25:5b:47:fc:64: 91:f2:26:31:27:3d:82:6e:07:10:c1:27:8f:f3:e6:48:be:bc: 0d:58:52:f9:c3:f3:ab:fa:73:22:11:c5:c3:84:43:eb:01:9a: 70:c0:3c:e5:71:75:81:ea:be:97:bd:9a:b6:33:cd:2d:a3:af: d9:56:3d:89:53:70:b8:61:78:77:32:7d:06:59:a7:61:6f:ad: 79:8f:06:65:15:a4:a3:f8:b3:c9:ca:13:91:78:78:f7:df:41: d1:9b:5d:65:80:4b:f8:d2:4d:4c:8e:51:a6:5f:86:33:e5:85: 56:5e:8d:8d:fe:67:8d:3b:b5:24:cc:47:79:2a:32:5c:83:9b: 48:da:2b:56:ea:5e:4b:56:c6:29:a6:bc:ae:d4:50:cb:03:c1: 8a:d4:96:54:45:e7:c2:d5:4f:54:db:76:bc:f8:19:40:81:29: 8c:8d:a5:f6:b8:55:fc:7f:2d:f2:da:0d:84:32:99:48:d0:03: 55:ec:62:f8:45:39:d1:91:ec:e8:53:f6:ba:b7:49:98:ae:3b: 27:db:55:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6TjMRfoRKTOjxbD+DJE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Y2M5ZDUwMDdjMDA1ODk5MzI5YmNlZTM2NjMzMDhhMzdk NDBlYWUwHhcNMjUxMjE5MDAwMTIwWhcNMjUxMjIwMDAwMTIwWjAzMTEwLwYDVQQD Eyg4ZTE2MDAwY2Y2MzNkZGNjY2I1Mjg2Y2QyY2YxMDJkZGFmMDFjODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmbJ0FJ8XlNNfPjdFYAVIAEX9nrk YkL3Hmt0Y9/ySvj7bN+r+D8bKRi9AGGsRq6UKPmv7ENKU6+jj68Zq/z9807E0iXA K8Z1VCveUcj38Xprd5X5aIT8jYzTy2DQb2wnVEM96CHF/wQGm88wF08sXfgbKz5X 8OYGqVxo8EWhUfjJdAbp1YS890a4fGvUgQkgoVhRo8kjDVg/LCoViFjkgvzyljz/ TT9793vcgfXsUz1T9cG6KMaRBl3XMSYYH7Us+wZ5zVQd5SPIRfPSsYUC03B/nyHg EapDHwdRj7ibbT+SiBuM+kdOidoo0UHNjIaOyGfwj563XEoRAFLbBeDWOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4WAAz2M93My1KGzSzxAt2vAcgrMB8GA1UdIwQY MBaAFCbMnVAHwAWJkym87jZjMIo31A6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgt M2NiYTRiZTRjMjllLzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgtM2NiYTRiZTRjMjll LzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVweDjyp CqzfwCeo/n0MVOlRxGunz4p2OjDRFwZW38KUcpz08E7eAwUezipt6MprFSVbR/xk kfImMSc9gm4HEMEnj/PmSL68DVhS+cPzq/pzIhHFw4RD6wGacMA85XF1geq+l72a tjPNLaOv2VY9iVNwuGF4dzJ9BlmnYW+teY8GZRWko/izycoTkXh4999B0ZtdZYBL +NJNTI5Rpl+GM+WFVl6Njf5njTu1JMxHeSoyXIObSNorVupeS1bGKaa8rtRQywPB itSWVEXnwtVPVNt2vPgZQIEpjI2l9rhV/H8t8toNhDKZSNADVexi+EU50ZHs6FP2 urdJmK47J9tVsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:13:02 2025 by rpki-client