This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json) Hash identifier: 88vivl9Y0KZa5tWmR+yZMCQEdAsaKvDx7QZJDFfQI1U= Subject key identifier: AA:D0:E4:89:AD:39:CE:31:16:82:1C:DD:02:CB:DD:6B:17:15:68:61 Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Certificate serial: 019B2174B6302EE40D9FF93B2497B381EDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 10:00:55 +0000 Manifest this update: Mon 15 Dec 2025 10:00:55 +0000 Manifest next update: Tue 16 Dec 2025 10:00:55 +0000 Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: P1WwUe9L2NFtFEsdY7FY8cezgT0T4RlAa5sC1fSyOpM=) 2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:b6:30:2e:e4:0d:9f:f9:3b:24:97:b3:81:ed:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0 Validity Not Before: Dec 15 10:00:55 2025 GMT Not After : Dec 16 10:00:55 2025 GMT Subject: CN=aad0e489ad39ce3116821cdd02cbdd6b17156861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:88:42:2c:7a:3d:af:a2:e6:c3:05:16:26: 11:fc:c5:45:74:29:95:70:ab:34:b8:2c:f6:13:b7: b8:fc:e7:66:4a:c3:19:c0:a8:ad:24:da:c3:03:cf: 3b:b9:69:b1:1f:f6:e4:43:d0:e6:ce:7e:be:37:34: cd:e9:85:59:48:a4:0b:61:56:8f:a9:28:0f:70:bf: ab:1f:82:5e:65:95:b8:d1:4f:e9:4d:78:8a:60:39: b5:1f:13:75:d6:dd:e3:25:56:eb:5e:3f:ec:22:99: 99:4e:f7:4e:a9:83:59:74:76:22:e7:41:2f:03:e0: f0:0f:8e:94:5a:af:17:d4:be:3e:a2:07:b1:99:37: 94:d0:67:13:7a:23:86:47:8b:8f:f6:e8:c9:66:3d: 89:b3:ba:35:62:b5:9c:a9:a2:cd:c4:cf:7b:54:c8: f9:0a:d1:fc:e3:7c:ba:55:08:62:03:63:f2:15:29: 0f:17:b6:56:34:86:24:43:ce:0d:6f:97:d3:58:c6: db:68:5d:73:95:04:22:48:ce:da:70:bb:30:44:42: 12:3c:b8:b1:b8:2a:92:f4:01:4b:98:9e:70:ee:b9: 89:61:b0:d3:94:5f:81:f6:a5:31:c9:59:ab:0d:86: 23:0f:94:f1:75:41:35:0a:c7:81:e9:8c:fe:a5:36: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:E4:89:AD:39:CE:31:16:82:1C:DD:02:CB:DD:6B:17:15:68:61 X509v3 Authority Key Identifier: keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:5d:48:01:77:17:db:16:38:fd:ea:2b:98:f0:aa:8e:1c: 7d:53:4d:27:3a:76:1f:16:2e:b7:56:35:34:54:36:23:cf:2e: 94:4c:4c:5c:c2:b6:92:4d:49:6a:56:21:83:5f:31:01:5f:96: 5a:5c:20:c3:c6:68:5f:9e:a0:0c:6c:47:f5:b9:e7:45:d8:26: a8:48:9e:e3:3b:59:41:ab:59:d4:71:db:5a:eb:63:6a:ea:c0: b4:9a:e1:f5:da:f0:06:1f:3f:24:6b:c7:f1:c5:7c:b7:a6:dd: 7b:65:59:f8:59:68:27:fb:d9:a8:10:90:9f:f3:80:61:b3:42: 4c:d1:58:dc:10:54:d0:d8:ed:d4:5d:78:d6:7c:4b:ef:44:6a: c0:c1:11:52:07:13:94:89:44:11:cd:7a:c9:0e:16:d6:88:50: 6d:ac:90:37:98:19:7c:4a:85:d7:81:05:38:f7:05:9c:ba:f5: 2b:85:8a:9e:c7:7c:b0:b9:6a:d8:63:d3:8b:b2:35:3a:bb:5b: 1f:b7:2a:41:e9:43:45:33:e9:7e:f2:96:d8:34:13:5b:8e:88: db:cf:84:ea:bb:a7:89:de:9d:a5:b0:0f:36:d3:db:a9:77:42: 8d:e2:16:42:c0:9d:14:12:63:20:81:fe:85:7e:58:2d:16:c0: fe:18:28:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdLYwLuQNn/k7JJezge3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmNiMzVjM2Y1NmIyNzk4ZmY2MWJkNGQ5YTVjZWQwZWUw MzlmYjAwHhcNMjUxMjE1MTAwMDU1WhcNMjUxMjE2MTAwMDU1WjAzMTEwLwYDVQQD EyhhYWQwZTQ4OWFkMzljZTMxMTY4MjFjZGQwMmNiZGQ2YjE3MTU2ODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWIQix6Pa+i5sMFFiYR/MVFdCmV cKs0uCz2E7e4/OdmSsMZwKitJNrDA887uWmxH/bkQ9Dmzn6+NzTN6YVZSKQLYVaP qSgPcL+rH4JeZZW40U/pTXiKYDm1HxN11t3jJVbrXj/sIpmZTvdOqYNZdHYi50Ev A+DwD46UWq8X1L4+ogexmTeU0GcTeiOGR4uP9ujJZj2Js7o1YrWcqaLNxM97VMj5 CtH843y6VQhiA2PyFSkPF7ZWNIYkQ84Nb5fTWMbbaF1zlQQiSM7acLswREISPLix uCqS9AFLmJ5w7rmJYbDTlF+B9qUxyVmrDYYjD5TxdUE1CseB6Yz+pTa7kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrQ5ImtOc4xFoIc3QLL3WsXFWhhMB8GA1UdIwQY MBaAFCUss1w/VrJ5j/Yb1NmlztDuA5+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMt NTZjNmExMDMxZGJiLzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83N2M2ZmMtOGE5OS00MmY0LWFjMjMtNTZjNmExMDMxZGJi LzEvSlN5elhEOVdzbm1QOWh2VTJhWE8wTzREbjdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey1dSAF3 F9sWOP3qK5jwqo4cfVNNJzp2HxYut1Y1NFQ2I88ulExMXMK2kk1JalYhg18xAV+W Wlwgw8ZoX56gDGxH9bnnRdgmqEie4ztZQatZ1HHbWutjaurAtJrh9drwBh8/JGvH 8cV8t6bde2VZ+FloJ/vZqBCQn/OAYbNCTNFY3BBU0Njt1F141nxL70RqwMERUgcT lIlEEc16yQ4W1ohQbayQN5gZfEqF14EFOPcFnLr1K4WKnsd8sLlq2GPTi7I1Ortb H7cqQelDRTPpfvKW2DQTW46I28+E6runid6dpbAPNtPbqXdCjeIWQsCdFBJjIIH+ hX5YLRbA/hgo8Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:53 2025 by rpki-client