This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json) Hash identifier: B9Z6bBzw2QOBZprXRL4Lu7o+4ZS5sXW7BP67mefAmS4= Subject key identifier: 8D:14:54:00:71:A2:3E:5B:F7:1B:35:0E:D0:74:4C:92:4E:97:52:E4 Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17 Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517 Certificate serial: 019AF209C80FB3F751CA1B59CF57B43B7640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:58 +0000 Manifest this update: Sat 06 Dec 2025 05:01:58 +0000 Manifest next update: Sun 07 Dec 2025 05:01:58 +0000 Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=) 2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: jufBwvynZ6A1lTk0cZJ4QOchytIf2hy0nbOaizYyZj0=) 3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c8:0f:b3:f7:51:ca:1b:59:cf:57:b4:3b:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517 Validity Not Before: Dec 6 05:01:58 2025 GMT Not After : Dec 7 05:01:58 2025 GMT Subject: CN=8d14540071a23e5bf71b350ed0744c924e9752e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:45:6b:3c:1d:99:2b:cc:13:65:48:c9:60: 13:f5:80:99:93:11:2b:ee:72:bd:1c:da:08:f2:5a: 65:01:a2:f6:ed:3b:9a:4c:79:08:4d:78:55:9c:f0: 3c:86:26:ac:85:ad:f4:b8:f5:52:92:16:e6:9e:f6: 65:f4:05:bc:05:1e:9a:1f:19:62:9e:d6:ff:98:f1: e2:fe:02:b2:e9:55:7c:4b:5c:c0:65:cd:c0:9e:28: 19:42:de:a6:83:10:8c:69:45:98:18:38:71:bc:72: 38:a7:c9:cf:02:cb:43:c2:92:90:dc:b3:06:9c:72: 72:9c:d3:9c:44:d9:91:c7:a3:21:6a:47:2c:d7:4c: 39:48:85:44:22:0a:8b:a4:94:e6:aa:e9:e6:0b:43: fd:d3:25:5c:2f:3b:2c:b8:9f:3f:82:29:95:ab:ff: a0:b8:14:4f:63:98:76:88:7f:a7:6a:87:98:8c:1c: 86:cd:7b:79:cc:06:d8:c2:f5:52:e2:12:07:e8:a3: cd:37:2c:5c:8e:5e:c2:08:e4:93:42:bd:9a:b3:de: be:1e:7e:da:64:71:96:74:1b:85:9e:c0:8d:3c:c3: 19:cd:86:25:8f:a0:76:87:d2:8a:44:f7:49:66:01: bf:c9:eb:08:8e:f5:de:30:78:c9:89:6a:1f:79:8f: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:14:54:00:71:A2:3E:5B:F7:1B:35:0E:D0:74:4C:92:4E:97:52:E4 X509v3 Authority Key Identifier: keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:30:7b:78:c6:39:dd:ea:eb:0e:db:b9:d1:a3:7b:2a:11:b8: e2:fc:66:5c:4c:4f:c6:f7:d7:74:29:4a:84:21:3d:64:06:e0: 18:65:41:fe:6f:89:06:45:d3:9e:b2:06:f8:fe:49:0b:bc:8b: e6:fb:6b:ee:f1:9c:0c:a8:d5:70:0e:b8:30:4f:8a:d9:90:32: 76:a0:22:35:ac:be:9e:10:d1:ee:f2:72:03:08:fd:65:21:c5: c5:37:fa:6e:21:0d:6a:38:fd:08:1f:e9:99:4c:0b:90:d7:ca: 78:a2:83:43:24:0b:35:3b:ba:65:53:c4:2b:db:eb:6f:ac:a5: 79:79:29:e6:5b:d9:f7:bc:1f:5e:40:fc:8f:ed:8f:6f:d5:64: 21:75:45:10:d4:99:e7:7b:43:d1:71:e4:ad:ca:b8:fd:bb:b7: 74:09:cf:6d:e6:dc:36:69:02:ac:47:cf:7a:b9:b9:7e:bd:18: 29:a2:28:11:c0:29:57:0a:ea:4b:94:2c:f4:3c:29:ba:7e:8c: f8:34:3a:0c:34:cd:2c:cc:9d:94:76:fb:e5:4c:c2:24:0b:e0: a2:e7:75:8a:d1:57:1c:43:2a:45:29:d1:e8:56:1f:1c:84:00: d3:4c:06:ed:84:b8:30:4d:14:aa:13:11:a0:27:ed:0c:71:90: 70:e9:7d:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcgPs/dRyhtZz1e0O3ZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGQ5Yjg0OWMwZGFmYWUzODZmNDcwMTIzYjA5MjYxYWUz NTU1MTcwHhcNMjUxMjA2MDUwMTU4WhcNMjUxMjA3MDUwMTU4WjAzMTEwLwYDVQQD Eyg4ZDE0NTQwMDcxYTIzZTViZjcxYjM1MGVkMDc0NGM5MjRlOTc1MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/JFazwdmSvME2VIyWAT9YCZkxEr 7nK9HNoI8lplAaL27TuaTHkITXhVnPA8hiasha30uPVSkhbmnvZl9AW8BR6aHxli ntb/mPHi/gKy6VV8S1zAZc3AnigZQt6mgxCMaUWYGDhxvHI4p8nPAstDwpKQ3LMG nHJynNOcRNmRx6Mhakcs10w5SIVEIgqLpJTmqunmC0P90yVcLzssuJ8/gimVq/+g uBRPY5h2iH+naoeYjByGzXt5zAbYwvVS4hIH6KPNNyxcjl7CCOSTQr2as96+Hn7a ZHGWdBuFnsCNPMMZzYYlj6B2h9KKRPdJZgG/yesIjvXeMHjJiWofeY8q+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0UVABxoj5b9xs1DtB0TJJOl1LkMB8GA1UdIwQY MBaAFCXdm4ScDa+uOG9HASOwkmGuNVUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUt N2ZmZDVjNTUwMzg1LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUtN2ZmZDVjNTUwMzg1 LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjB7eMY5 3errDtu50aN7KhG44vxmXExPxvfXdClKhCE9ZAbgGGVB/m+JBkXTnrIG+P5JC7yL 5vtr7vGcDKjVcA64ME+K2ZAydqAiNay+nhDR7vJyAwj9ZSHFxTf6biENajj9CB/p mUwLkNfKeKKDQyQLNTu6ZVPEK9vrb6yleXkp5lvZ97wfXkD8j+2Pb9VkIXVFENSZ 53tD0XHkrcq4/bu3dAnPbebcNmkCrEfPerm5fr0YKaIoEcApVwrqS5Qs9Dwpun6M +DQ6DDTNLMydlHb75UzCJAvgoud1itFXHEMqRSnR6FYfHIQA00wG7YS4ME0UqhMR oCftDHGQcOl9bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:21 2025 by rpki-client