This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json) Hash identifier: MDfZx/pAFYDg8zqcRHHDAMvM5MgRYRRYsKEkUMLDFvU= Subject key identifier: 81:C0:D7:73:80:0D:C5:03:1F:0E:65:19:3D:95:B2:CB:D7:88:43:78 Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Certificate serial: 019B2FD592266E4B8F61ACB013FDF22493D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft Manifest number: 02A1 Signing time: Thu 18 Dec 2025 05:01:24 +0000 Manifest this update: Thu 18 Dec 2025 05:01:24 +0000 Manifest next update: Fri 19 Dec 2025 05:01:24 +0000 Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=) 2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: miInLUDaVg8Q3g262OZQEoYTFOR5D27Pz4bNuaoSjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:92:26:6e:4b:8f:61:ac:b0:13:fd:f2:24:93:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Validity Not Before: Dec 18 05:01:24 2025 GMT Not After : Dec 19 05:01:24 2025 GMT Subject: CN=81c0d773800dc5031f0e65193d95b2cbd7884378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:af:31:13:48:3a:79:fd:23:be:c8:1e:05: 13:37:b7:9d:ea:c1:6f:c2:32:21:3c:01:32:8e:d3: 88:ec:de:b1:be:2f:1e:09:66:48:cb:fa:29:13:7e: 53:6f:ad:00:45:2e:62:3d:54:20:fc:c6:5f:16:b6: 48:b6:49:c1:e5:a8:cf:45:f5:37:19:60:44:13:fb: 46:d7:42:2e:4a:13:82:bb:91:ed:a2:e4:96:e7:54: 7d:56:00:a0:55:1a:89:c5:c4:ab:5d:63:a3:c6:8e: 47:c9:3e:9e:0b:84:ef:5a:c1:f4:11:27:a2:97:14: dd:85:2e:cf:95:1c:3e:4d:76:88:dd:67:98:17:17: 38:24:9c:f5:dd:0d:53:78:20:0a:0f:02:8b:ef:60: a0:38:ad:c2:24:b5:06:1e:28:9e:a9:07:bc:4b:f4: 41:79:87:50:18:ab:e8:8e:52:91:ee:ab:5c:b7:a7: 3f:37:f2:e5:67:1e:c8:38:d2:0e:89:0e:cc:53:bf: 98:a1:ec:f6:c7:c8:ea:5b:8d:af:10:fd:0d:a8:83: cb:74:52:71:ca:eb:f2:d2:fb:b1:2a:9f:ba:6e:8f: 9a:53:36:63:5c:8c:d0:81:02:c9:a0:ae:52:a5:38: 01:da:97:df:28:04:ff:43:99:d4:ed:ea:d7:74:19: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:D7:73:80:0D:C5:03:1F:0E:65:19:3D:95:B2:CB:D7:88:43:78 X509v3 Authority Key Identifier: keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6f:d9:61:48:7c:e9:4c:7b:93:8f:cb:af:b7:5f:4f:25:05: b4:d4:76:d2:b9:7c:74:0c:ee:5a:3c:64:7b:90:df:5a:57:dd: 42:3b:a6:8d:c6:ad:ff:25:b6:5e:11:08:b1:76:f2:7e:c7:7c: 89:a6:f7:e7:af:d8:4f:10:ae:9e:d9:10:16:5a:99:72:02:b7: 15:a2:25:e2:b8:f3:67:2f:ef:09:f3:91:6c:bd:ad:f3:d3:32: e1:2c:3e:ce:c0:ee:84:c6:26:60:5b:13:d5:b0:8e:bf:ea:6c: e7:65:33:8e:99:0a:75:69:af:52:0c:60:f2:78:58:90:45:69: 6d:f3:98:dc:e5:4c:c9:da:b9:6a:4e:a7:3f:8f:a3:ce:9a:37: 1e:71:19:67:0b:2f:8d:f2:53:32:ee:d5:12:22:db:a8:37:1e: c2:b7:42:ce:3d:3b:32:47:40:ae:6b:9f:07:2e:75:f6:13:65: 6f:5a:1b:3b:7d:dd:ac:c0:be:b6:97:72:44:6e:5e:40:93:1d: 26:d0:2f:23:01:d1:49:3f:22:a3:a3:54:98:b7:a2:e5:f5:2e: 6d:5d:0d:9a:29:c3:0d:d8:b6:c8:6a:54:be:4b:c6:94:87:33: 05:83:81:ff:d4:cd:cf:92:92:19:b6:ef:8b:37:6a:f8:46:c2: fb:4e:c5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ZImbkuPYaywE/3yJJPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk YjU4OTgwHhcNMjUxMjE4MDUwMTI0WhcNMjUxMjE5MDUwMTI0WjAzMTEwLwYDVQQD Eyg4MWMwZDc3MzgwMGRjNTAzMWYwZTY1MTkzZDk1YjJjYmQ3ODg0Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCivMRNIOnn9I77IHgUTN7ed6sFv wjIhPAEyjtOI7N6xvi8eCWZIy/opE35Tb60ARS5iPVQg/MZfFrZItknB5ajPRfU3 GWBEE/tG10IuShOCu5HtouSW51R9VgCgVRqJxcSrXWOjxo5HyT6eC4TvWsH0ESei lxTdhS7PlRw+TXaI3WeYFxc4JJz13Q1TeCAKDwKL72CgOK3CJLUGHiieqQe8S/RB eYdQGKvojlKR7qtct6c/N/LlZx7IONIOiQ7MU7+Yoez2x8jqW42vEP0NqIPLdFJx yuvy0vuxKp+6bo+aUzZjXIzQgQLJoK5SpTgB2pffKAT/Q5nU7erXdBmYzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHA13OADcUDHw5lGT2VssvXiEN4MB8GA1UdIwQY MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt NWYzY2Y5ZjNiNjE5LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5 LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW/ZYUh8 6Ux7k4/Lr7dfTyUFtNR20rl8dAzuWjxke5DfWlfdQjumjcat/yW2XhEIsXbyfsd8 iab356/YTxCuntkQFlqZcgK3FaIl4rjzZy/vCfORbL2t89My4Sw+zsDuhMYmYFsT 1bCOv+ps52UzjpkKdWmvUgxg8nhYkEVpbfOY3OVMydq5ak6nP4+jzpo3HnEZZwsv jfJTMu7VEiLbqDcewrdCzj07MkdArmufBy519hNlb1obO33drMC+tpdyRG5eQJMd JtAvIwHRST8io6NUmLei5fUubV0NminDDdi2yGpUvkvGlIczBYOB/9TNz5KSGbbv izdq+EbC+07FlQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:31 2025 by rpki-client