This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json) Hash identifier: ZqF0oY2cH8K2uOCXNHzxhgRtpntISDahg0dXgrYyjSQ= Subject key identifier: 1C:70:09:BB:34:83:0D:47:CE:D9:02:DB:30:08:C0:B5:95:CB:2F:7E Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2 Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2 Certificate serial: 019B5B65E3EE560267BDC899512C35232CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft Manifest number: 056C Signing time: Fri 26 Dec 2025 16:02:42 +0000 Manifest this update: Fri 26 Dec 2025 16:02:42 +0000 Manifest next update: Sat 27 Dec 2025 16:02:42 +0000 Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: VfyN2/SA3ZwATRLE0xVP7iFw2TNW0dXQIPSPRDGVsIo=) 2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=) 3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:e3:ee:56:02:67:bd:c8:99:51:2c:35:23:2c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2 Validity Not Before: Dec 26 16:02:42 2025 GMT Not After : Dec 27 16:02:42 2025 GMT Subject: CN=1c7009bb34830d47ced902db3008c0b595cb2f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2d:85:65:78:7c:c6:49:55:4a:29:fe:c1:2f: 5b:75:4c:2a:d6:bc:ec:c4:b5:05:1a:a5:7e:05:bf: 67:7f:df:a8:b4:ab:08:ef:19:e2:26:c1:96:0a:a3: 9e:e1:ec:36:41:ad:b6:ae:2c:8c:50:a4:e3:22:a9: f4:6d:c8:9b:a3:72:7e:ab:bb:88:43:27:9d:d4:dc: 18:9d:f4:e1:52:fd:bf:e5:73:43:68:6d:43:fd:ab: af:80:f9:fa:69:0d:ed:57:f8:99:a6:47:0d:54:95: 6b:23:ad:84:f5:c0:53:d0:52:2e:55:17:96:20:b8: c5:cf:65:7c:b7:96:fa:d1:b7:1f:36:b6:9e:85:15: da:78:05:5e:1f:64:39:48:32:77:b5:aa:73:ed:4f: a2:f7:7a:39:09:62:5f:1d:1b:be:7f:ba:32:b7:56: f6:55:75:46:68:01:5a:37:e5:82:4f:d4:86:83:f6: b1:89:7d:8f:d4:b8:39:4d:c5:cc:7f:04:a4:c2:b1: de:0d:90:37:2b:35:f0:f9:cc:e9:a5:47:19:c2:9c: a1:ba:3f:5f:2e:34:93:22:0d:d0:ce:aa:fb:c6:a6: 2f:79:41:c5:d0:eb:85:14:5e:ba:ec:fa:38:7a:db: 55:01:54:3d:5e:a5:89:e7:eb:18:01:4c:82:b9:b1: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:70:09:BB:34:83:0D:47:CE:D9:02:DB:30:08:C0:B5:95:CB:2F:7E X509v3 Authority Key Identifier: keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ca:bd:72:bd:d0:d4:b1:0c:0a:e8:44:82:e1:c3:ac:08:98: ca:2c:ff:2d:d1:56:57:09:cd:82:bb:4e:e8:0a:1d:05:5f:f9: c4:71:73:6a:c9:e3:35:4d:28:a9:ad:02:bc:4f:af:7b:a1:ab: 89:9b:73:02:84:0c:4a:ad:82:9e:87:36:a5:dc:23:89:a5:bb: 8e:7c:8e:57:6f:3b:73:24:87:f7:9a:a6:e2:51:68:6a:54:30: 25:80:1f:b8:0a:91:51:50:be:df:d1:9b:ad:8f:a6:49:1a:ef: cb:cc:cc:d4:cd:7e:79:ee:a2:8f:22:5b:be:57:25:47:3b:a3: aa:24:d5:6a:5f:ae:d9:09:85:6f:fb:2f:ba:ec:17:e6:fc:72: 54:44:cc:e6:be:34:be:24:e1:c3:df:0d:b9:42:79:ce:ae:aa: 7f:cc:54:95:c3:0e:d1:69:19:c0:ff:46:7d:93:cd:90:30:cd: b0:fa:7d:65:86:1c:93:4e:c2:63:7e:cd:62:50:44:79:64:9c: 47:fd:1c:84:9d:b4:ee:26:f7:1c:6c:a5:37:39:09:b3:ee:44: 22:6e:0e:54:46:60:87:e7:ac:16:d3:e8:1a:d0:75:93:11:0b: 76:42:b1:6b:19:d9:12:f1:4d:94:2b:f9:4c:19:e3:16:fb:28: 66:03:7f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZePuVgJnvciZUSw1Iyz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh ZDhkYTIwHhcNMjUxMjI2MTYwMjQyWhcNMjUxMjI3MTYwMjQyWjAzMTEwLwYDVQQD EygxYzcwMDliYjM0ODMwZDQ3Y2VkOTAyZGIzMDA4YzBiNTk1Y2IyZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S2FZXh8xklVSin+wS9bdUwq1rzs xLUFGqV+Bb9nf9+otKsI7xniJsGWCqOe4ew2Qa22riyMUKTjIqn0bcibo3J+q7uI Qyed1NwYnfThUv2/5XNDaG1D/auvgPn6aQ3tV/iZpkcNVJVrI62E9cBT0FIuVReW ILjFz2V8t5b60bcfNraehRXaeAVeH2Q5SDJ3tapz7U+i93o5CWJfHRu+f7oyt1b2 VXVGaAFaN+WCT9SGg/axiX2P1Lg5TcXMfwSkwrHeDZA3KzXw+czppUcZwpyhuj9f LjSTIg3Qzqr7xqYveUHF0OuFFF667Po4ettVAVQ9XqWJ5+sYAUyCubG9AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxwCbs0gw1HztkC2zAIwLWVyy9+MB8GA1UdIwQY MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsq9cr3Q 1LEMCuhEguHDrAiYyiz/LdFWVwnNgrtO6AodBV/5xHFzasnjNU0oqa0CvE+ve6Gr iZtzAoQMSq2Cnoc2pdwjiaW7jnyOV287cySH95qm4lFoalQwJYAfuAqRUVC+39Gb rY+mSRrvy8zM1M1+ee6ijyJbvlclRzujqiTVal+u2QmFb/svuuwX5vxyVETM5r40 viThw98NuUJ5zq6qf8xUlcMO0WkZwP9GfZPNkDDNsPp9ZYYck07CY37NYlBEeWSc R/0chJ207ib3HGylNzkJs+5EIm4OVEZgh+esFtPoGtB1kxELdkKxaxnZEvFNlCv5 TBnjFvsoZgN//w== -----END CERTIFICATE-----Generated at Fri Dec 26 22:48:06 2025 by rpki-client