This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json) Hash identifier: sk/D2jeiYrZgMkAxTFT9qOG0pBDfpNco+brHoq3nt7k= Subject key identifier: 8E:F8:6B:1B:F4:28:E5:58:AE:91:FF:7D:E7:0B:CC:66:A7:C2:8A:D9 Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7 Certificate serial: 019B1E7461595F37AA7E7C2BA3B213418780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft Manifest number: 170B Signing time: Sun 14 Dec 2025 20:01:42 +0000 Manifest this update: Sun 14 Dec 2025 20:01:42 +0000 Manifest next update: Mon 15 Dec 2025 20:01:42 +0000 Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=) 2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: QeMw7BfJCCIl0XHNTvPX7LVNscKhBijvCQysfC31FGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:61:59:5f:37:aa:7e:7c:2b:a3:b2:13:41:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7 Validity Not Before: Dec 14 20:01:42 2025 GMT Not After : Dec 15 20:01:42 2025 GMT Subject: CN=8ef86b1bf428e558ae91ff7de70bcc66a7c28ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:b8:4c:2e:a4:81:36:d9:46:2e:16:83:23: 96:67:75:4d:f7:12:6f:6a:e8:d2:00:65:80:b8:a7: d4:9c:c3:d4:b0:c8:f2:61:11:d5:1f:18:6e:9f:ed: c4:30:e2:17:f2:d0:f3:12:21:9a:fa:2f:20:7b:f6: 04:bd:7a:b2:27:7f:dc:e0:56:0d:81:c3:ba:5a:0f: 18:79:4c:62:da:c9:de:1e:22:ce:16:f9:00:57:7d: 93:4c:d0:67:29:79:a8:a7:95:03:ab:38:37:f8:2d: d3:4a:8f:49:99:f7:1b:06:af:fc:95:91:da:7a:7c: 19:4b:ae:11:2a:59:13:7d:83:4b:d4:a6:77:98:4d: b9:27:31:74:2e:ec:d0:16:58:cc:ee:3e:ac:11:18: 4f:97:93:d0:8e:e7:ee:6b:17:a3:b8:f1:ee:e3:d3: 21:f1:58:5c:34:70:d8:84:05:8e:cc:fe:a9:41:9a: 1e:81:11:65:54:78:93:17:df:b2:59:39:84:e2:d4: d1:aa:de:01:bd:a5:66:20:e9:f6:b9:18:fe:3d:ce: cd:cc:e6:09:a9:b4:f1:c5:44:01:d1:8f:9d:9f:22: 3d:96:16:16:6c:26:9f:6b:61:27:2a:5b:56:3c:ae: 03:6d:9f:92:58:16:2a:26:e0:db:b0:7f:0e:d1:ea: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:6B:1B:F4:28:E5:58:AE:91:FF:7D:E7:0B:CC:66:A7:C2:8A:D9 X509v3 Authority Key Identifier: keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:36:db:f0:a7:4d:28:4e:a8:c9:82:90:3b:fc:09:15:38:e8: ab:b6:1f:1e:86:4c:90:5d:ea:6d:aa:18:86:88:36:82:69:4f: 4d:7b:b6:12:03:26:b6:82:37:a3:c4:83:0c:6f:ad:ca:a0:29: f4:a9:97:cd:76:82:eb:5b:55:ea:0a:40:6a:56:93:7d:26:2b: dd:84:c1:2e:f8:ad:96:1f:4e:da:ae:19:04:a6:8a:ed:d3:10: df:86:93:96:96:8a:c8:41:7d:bf:14:dd:fa:d2:9d:56:9d:6f: ab:f4:72:fb:69:68:a3:76:2a:8a:56:2e:3f:9d:1e:24:17:e4: e8:85:22:0c:f5:19:4b:cb:dc:b3:9c:a2:38:48:25:a7:60:54: 5f:ba:0d:da:ba:19:b5:c8:9d:a8:fb:c7:e2:39:87:81:eb:6a: 6b:b0:a8:28:07:a6:ea:f1:02:cb:68:59:08:dc:26:ee:a1:a6: 5b:01:13:f2:7d:fd:4d:da:66:ef:b5:40:e4:a5:2f:08:d9:ab: cc:d2:0a:f7:25:50:c0:8f:6c:c5:45:0d:3f:5c:95:a9:5b:d7: 6c:d8:6a:93:1d:de:2f:31:58:61:ae:dd:ed:b2:1b:1f:1e:12: fe:dc:2a:4e:fa:4e:3b:0e:e5:3d:08:21:d9:99:9a:8e:5e:c2: 35:0e:b1:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedGFZXzeqfnwro7ITQYeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl ZWMyZTcwHhcNMjUxMjE0MjAwMTQyWhcNMjUxMjE1MjAwMTQyWjAzMTEwLwYDVQQD Eyg4ZWY4NmIxYmY0MjhlNTU4YWU5MWZmN2RlNzBiY2M2NmE3YzI4YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bu4TC6kgTbZRi4WgyOWZ3VN9xJv aujSAGWAuKfUnMPUsMjyYRHVHxhun+3EMOIX8tDzEiGa+i8ge/YEvXqyJ3/c4FYN gcO6Wg8YeUxi2sneHiLOFvkAV32TTNBnKXmop5UDqzg3+C3TSo9JmfcbBq/8lZHa enwZS64RKlkTfYNL1KZ3mE25JzF0LuzQFljM7j6sERhPl5PQjufuaxejuPHu49Mh 8VhcNHDYhAWOzP6pQZoegRFlVHiTF9+yWTmE4tTRqt4BvaVmIOn2uRj+Pc7NzOYJ qbTxxUQB0Y+dnyI9lhYWbCafa2EnKltWPK4DbZ+SWBYqJuDbsH8O0eodWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI74axv0KOVYrpH/fecLzGanworZMB8GA1UdIwQY MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2 LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDbb8KdN KE6oyYKQO/wJFTjoq7YfHoZMkF3qbaoYhog2gmlPTXu2EgMmtoI3o8SDDG+tyqAp 9KmXzXaC61tV6gpAalaTfSYr3YTBLvitlh9O2q4ZBKaK7dMQ34aTlpaKyEF9vxTd +tKdVp1vq/Ry+2loo3YqilYuP50eJBfk6IUiDPUZS8vcs5yiOEglp2BUX7oN2roZ tcidqPvH4jmHgetqa7CoKAem6vECy2hZCNwm7qGmWwET8n39Tdpm77VA5KUvCNmr zNIK9yVQwI9sxUUNP1yVqVvXbNhqkx3eLzFYYa7d7bIbHx4S/twqTvpOOw7lPQgh 2Zmajl7CNQ6xRg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:48 2025 by rpki-client