This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json) Hash identifier: OG2LFzpftKan5Da16yRM86oMVuKv09sJWTMcSdMLyg8= Subject key identifier: 7F:D9:53:5C:13:25:33:15:54:FE:53:0A:7D:6B:94:CA:40:15:AA:C4 Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53 Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53 Certificate serial: 019B5A51C040159EFAF7F5DE34D5092EE92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft Manifest number: 08F2 Signing time: Fri 26 Dec 2025 11:01:05 +0000 Manifest this update: Fri 26 Dec 2025 11:01:05 +0000 Manifest next update: Sat 27 Dec 2025 11:01:05 +0000 Files and hashes: 1: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: e0pR2qIFEodeCcQNaz+pvyBvm5qyuni4zOjQsQaU4Vw=) 2: X5HOJfJgZ9gpdrkuyaZ8bcQBeU8.roa (hash: 8gUQn4rNjhTT1oopDBGy8vh7Nj8nuTOrGV1MdMp4VZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c0:40:15:9e:fa:f7:f5:de:34:d5:09:2e:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53 Validity Not Before: Dec 26 11:01:05 2025 GMT Not After : Dec 27 11:01:05 2025 GMT Subject: CN=7fd9535c1325331554fe530a7d6b94ca4015aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:38:f4:e3:5c:48:6c:20:71:c4:39:56:64: 5f:97:a8:62:36:4b:8a:e4:14:d7:8e:ce:eb:4b:29: c0:8b:f2:fd:0c:93:da:90:b2:e1:ce:2c:20:dd:5a: 9c:db:34:a5:16:ae:fe:2a:39:14:b8:95:1e:c8:32: 46:8e:0f:62:37:e2:0e:2c:92:ee:21:ad:8d:a7:9a: 1a:60:57:73:3d:6d:a9:03:5e:0b:a8:7c:2c:71:6a: db:60:5c:b3:61:fd:06:e9:cf:68:7d:89:c0:35:b3: e8:a4:8e:ed:19:cc:f0:df:4c:bb:36:1a:a1:77:d4: b4:cc:db:59:11:32:6f:b1:30:4f:f1:1f:b9:c5:d6: 14:1f:70:40:6c:66:e5:ed:14:d1:7e:e2:39:42:59: f4:45:16:e5:4d:ab:c9:5e:6e:ff:28:1c:de:6c:8b: 07:cf:95:1d:88:cc:60:c2:02:05:86:8b:6e:ff:91: 75:be:5a:1a:3f:9d:fe:f0:f6:b3:b4:36:28:10:4e: 22:e9:81:72:6d:ee:9d:0f:0a:02:82:97:a8:c8:b5: 04:47:59:b5:39:05:54:ad:64:4b:6a:1d:7d:1b:cd: b3:1f:b8:c0:af:05:be:3d:b4:f8:7f:3f:c6:e5:45: 62:6a:a4:f1:57:a8:0a:88:c4:ef:ff:be:00:4e:58: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D9:53:5C:13:25:33:15:54:FE:53:0A:7D:6B:94:CA:40:15:AA:C4 X509v3 Authority Key Identifier: keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:72:89:e1:be:2d:3d:71:94:18:b0:98:be:3c:25:5f:93:cf: 62:71:60:67:89:58:cc:05:78:6a:06:cc:8a:98:bf:1e:d2:4e: 69:ab:04:6e:b9:3d:f4:9b:f7:86:60:28:6d:a3:56:88:66:34: b9:d3:60:6b:8f:51:e6:80:28:6f:86:a3:b1:db:ec:8d:e5:03: c4:f0:3b:ac:ac:c5:75:57:6e:11:1b:76:d6:19:72:73:57:66: 8e:d3:cc:a8:d0:f3:12:55:6e:92:dc:f5:e1:62:be:a4:7d:aa: c6:6d:45:3d:5b:38:02:ea:77:c2:87:1d:63:6b:9c:e8:67:f8: fe:a5:8d:a4:db:05:3f:54:4d:7b:62:0f:24:4b:17:e4:61:c9: a5:76:50:97:b1:a3:66:28:03:55:5b:af:80:2c:37:83:84:83: d2:6a:42:b3:94:9c:3d:71:3c:41:5c:1f:ad:7e:cf:e2:ba:99: d9:8b:be:cf:ad:b8:bf:c9:d3:a3:8d:4e:99:fa:3b:04:d6:c3: 27:e5:56:1e:3f:87:92:fd:17:dc:de:3b:4b:15:bb:8f:a3:b8: fd:40:19:7b:0e:4e:2f:6b:fa:89:af:f0:33:24:56:6a:14:cd: 69:4c:d5:1e:00:9a:be:5b:f5:10:a0:94:8f:9e:ba:5b:e4:86: 86:04:2b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcBAFZ769/XeNNUJLukqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OTQ2OTY4ZjJmN2RkOTUwZWE0OWI4NzczN2RmMWY2YWVi ZGJiNTMwHhcNMjUxMjI2MTEwMTA1WhcNMjUxMjI3MTEwMTA1WjAzMTEwLwYDVQQD Eyg3ZmQ5NTM1YzEzMjUzMzE1NTRmZTUzMGE3ZDZiOTRjYTQwMTVhYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ849ONcSGwgccQ5VmRfl6hiNkuK 5BTXjs7rSynAi/L9DJPakLLhziwg3Vqc2zSlFq7+KjkUuJUeyDJGjg9iN+IOLJLu Ia2Np5oaYFdzPW2pA14LqHwscWrbYFyzYf0G6c9ofYnANbPopI7tGczw30y7Nhqh d9S0zNtZETJvsTBP8R+5xdYUH3BAbGbl7RTRfuI5Qln0RRblTavJXm7/KBzebIsH z5UdiMxgwgIFhotu/5F1vloaP53+8PaztDYoEE4i6YFybe6dDwoCgpeoyLUER1m1 OQVUrWRLah19G82zH7jArwW+PbT4fz/G5UViaqTxV6gKiMTv/74ATlgpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/ZU1wTJTMVVP5TCn1rlMpAFarEMB8GA1UdIwQY MBaAFESUaWjy992VDqSbh3N98fauvbtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYt OGYwZjRkNmI4OTM5LzEvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lODFlOWEtNzRkOS00Y2E0LTlmNDYtOGYwZjRkNmI4OTM5 LzEvUkpScGFQTDMzWlVPcEp1SGMzM3g5cTY5dTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3KJ4b4t PXGUGLCYvjwlX5PPYnFgZ4lYzAV4agbMipi/HtJOaasEbrk99Jv3hmAobaNWiGY0 udNga49R5oAob4ajsdvsjeUDxPA7rKzFdVduERt21hlyc1dmjtPMqNDzElVuktz1 4WK+pH2qxm1FPVs4Aup3wocdY2uc6Gf4/qWNpNsFP1RNe2IPJEsX5GHJpXZQl7Gj ZigDVVuvgCw3g4SD0mpCs5ScPXE8QVwfrX7P4rqZ2Yu+z624v8nTo41Omfo7BNbD J+VWHj+Hkv0X3N47SxW7j6O4/UAZew5OL2v6ia/wMyRWahTNaUzVHgCavlv1EKCU j566W+SGhgQr5g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:24 2025 by rpki-client