This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json) Hash identifier: au/xPp4pJa9XM6lM4NJsbsrUdbQ9mprgog3muALoUfI= Subject key identifier: 56:62:F5:58:F4:7D:B5:32:DB:B2:6D:1F:F3:D9:D5:63:A1:FF:E9:C0 Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Certificate serial: 019B337B157D2472CEC015AFBFFF9FBAE2FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:02 +0000 Manifest this update: Thu 18 Dec 2025 22:01:02 +0000 Manifest next update: Fri 19 Dec 2025 22:01:02 +0000 Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=) 2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: efRQM9Dl0MO0bs0qm7qdcLTo3CXO2zHOb5rihrsyvdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:15:7d:24:72:ce:c0:15:af:bf:ff:9f:ba:e2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f Validity Not Before: Dec 18 22:01:02 2025 GMT Not After : Dec 19 22:01:02 2025 GMT Subject: CN=5662f558f47db532dbb26d1ff3d9d563a1ffe9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:80:76:4c:a4:fd:70:fa:fa:54:2f:55:49: c7:1c:b0:8c:e0:ab:8e:7f:03:aa:a3:26:22:af:fa: fa:cd:37:29:58:0e:3d:b7:a7:8e:89:af:f8:cf:b3: b9:1a:28:60:ae:1e:61:75:3b:31:a5:6e:b1:01:4e: 89:94:5c:22:24:c7:54:22:21:fb:b2:79:fa:13:2e: 40:56:ac:da:7a:89:64:68:e8:23:f4:eb:68:c5:07: 0c:ea:b0:50:03:86:1e:82:1c:0f:f8:0a:af:04:21: d3:b3:31:b2:11:70:52:3a:3b:02:c5:a8:e2:f5:95: 51:8d:56:e7:e3:69:3e:77:bc:c1:17:72:f9:6c:b2: e8:33:0f:1e:8c:75:5e:b2:44:3f:ea:3b:cd:64:02: f4:a6:67:fb:9b:86:9d:d4:6d:90:c8:f8:b5:48:57: 86:c9:80:01:05:7a:2d:1c:f7:78:82:c7:23:fa:08: 99:5e:89:f3:a0:e6:a4:cb:21:28:5e:72:be:e1:ec: a2:a7:10:19:44:a5:b4:1f:62:8d:b5:d2:cc:38:ce: de:43:40:ef:b8:67:d4:a2:1b:ce:2c:f3:d5:87:8b: 7a:9a:c0:62:20:8d:30:ae:04:d6:83:fd:29:f0:f1: 60:3f:1a:03:de:31:cd:38:6d:d2:43:5a:81:cc:b6: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:F5:58:F4:7D:B5:32:DB:B2:6D:1F:F3:D9:D5:63:A1:FF:E9:C0 X509v3 Authority Key Identifier: keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fd:b1:a4:3e:d9:f7:8f:3a:b6:ca:3d:54:91:ef:a2:b2:66: da:de:0a:7b:88:aa:98:e5:95:5b:33:f7:e1:75:15:b0:b3:f9: c6:6c:1a:76:27:4f:96:3c:cd:4f:aa:ca:8f:27:e8:9f:2a:5b: f9:60:42:01:cf:dc:6e:9c:ba:ca:a2:48:3e:9e:05:0f:77:fd: d2:f3:e6:fb:a0:5e:bc:0c:12:dd:66:e8:ad:a6:99:f2:b3:f3: 0f:4a:f6:a4:fb:c0:28:59:61:da:19:40:33:77:87:a6:df:08: b5:f8:1a:b2:c4:3c:2a:ed:e5:e7:44:29:c8:18:83:7e:e4:cb: fd:21:af:fa:59:0f:3e:1e:0e:fa:b3:5a:48:14:01:85:76:23: 86:94:5c:b6:e3:2d:ed:d6:38:ef:df:04:19:cb:9b:72:e9:ed: 3e:59:c7:a5:ce:67:9a:ce:0b:d2:3f:a0:b7:7a:b8:82:12:dd: 6c:97:d7:3a:0b:91:b6:61:27:2d:a4:a8:b2:5e:6a:73:00:84: fc:b7:60:00:8c:dc:8c:b7:00:95:8d:5f:f0:87:9d:6a:2d:36: 4b:99:45:18:f4:c5:25:71:b5:51:e8:8c:06:9a:71:88:3d:9a: 9d:06:89:bd:86:3b:10:09:f4:5a:63:a6:e2:76:46:69:23:a0: 4d:09:49:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexV9JHLOwBWvv/+fuuL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi ODlkNWYwHhcNMjUxMjE4MjIwMTAyWhcNMjUxMjE5MjIwMTAyWjAzMTEwLwYDVQQD Eyg1NjYyZjU1OGY0N2RiNTMyZGJiMjZkMWZmM2Q5ZDU2M2ExZmZlOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleaAdkyk/XD6+lQvVUnHHLCM4KuO fwOqoyYir/r6zTcpWA49t6eOia/4z7O5Gihgrh5hdTsxpW6xAU6JlFwiJMdUIiH7 snn6Ey5AVqzaeolkaOgj9OtoxQcM6rBQA4YeghwP+AqvBCHTszGyEXBSOjsCxaji 9ZVRjVbn42k+d7zBF3L5bLLoMw8ejHVeskQ/6jvNZAL0pmf7m4ad1G2QyPi1SFeG yYABBXotHPd4gscj+giZXonzoOakyyEoXnK+4eyipxAZRKW0H2KNtdLMOM7eQ0Dv uGfUohvOLPPVh4t6msBiII0wrgTWg/0p8PFgPxoD3jHNOG3SQ1qBzLaGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZi9Vj0fbUy27JtH/PZ1WOh/+nAMB8GA1UdIwQY MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1 LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf2xpD7Z 9486tso9VJHvorJm2t4Ke4iqmOWVWzP34XUVsLP5xmwadidPljzNT6rKjyfonypb +WBCAc/cbpy6yqJIPp4FD3f90vPm+6BevAwS3WboraaZ8rPzD0r2pPvAKFlh2hlA M3eHpt8ItfgassQ8Ku3l50QpyBiDfuTL/SGv+lkPPh4O+rNaSBQBhXYjhpRctuMt 7dY4798EGcubcuntPlnHpc5nms4L0j+gt3q4ghLdbJfXOguRtmEnLaSosl5qcwCE /LdgAIzcjLcAlY1f8Iedai02S5lFGPTFJXG1UeiMBppxiD2anQaJvYY7EAn0WmOm 4nZGaSOgTQlJtw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:40:56 2025 by rpki-client