This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json) Hash identifier: Pjk8a4fMF+77AcbXRjw98mlcxb9tKpAMbLibKEFq8zg= Subject key identifier: 15:88:AF:03:54:28:BE:40:C9:95:09:1E:CE:F3:A9:57:D6:F9:F4:8D Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689 Certificate serial: 019B30E87696368D8149604A0D1AFDDD3346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft Manifest number: 1004 Signing time: Thu 18 Dec 2025 10:01:39 +0000 Manifest this update: Thu 18 Dec 2025 10:01:39 +0000 Manifest next update: Fri 19 Dec 2025 10:01:39 +0000 Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=) 2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: cII3ecNmcDBieYzNQp+n4ItIq/xCNVBNH9hH1ip/eeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:76:96:36:8d:81:49:60:4a:0d:1a:fd:dd:33:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689 Validity Not Before: Dec 18 10:01:39 2025 GMT Not After : Dec 19 10:01:39 2025 GMT Subject: CN=1588af035428be40c995091ecef3a957d6f9f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:14:e3:17:59:94:10:40:1f:a1:e5:2f:11: 35:5a:37:f3:62:0c:7d:57:2a:33:cf:f1:00:3f:8b: d8:41:39:59:6b:fd:f8:b6:8a:8a:41:5d:10:27:90: e1:46:db:bf:c6:54:b2:86:85:c3:de:fa:02:31:75: ec:c7:97:0c:10:8a:8f:4b:ca:35:38:a9:21:c1:91: a1:d1:69:be:1f:c0:d9:b2:f0:c8:93:fc:eb:84:ab: 67:4a:19:2f:9b:37:ca:64:2e:ce:1c:1d:a4:99:8a: e2:d8:14:2f:0b:e8:70:f2:d8:1a:c6:6a:6c:db:ce: 67:bb:a7:e2:8d:d9:b4:b0:ea:50:a6:44:e7:ea:c7: 84:23:38:9e:63:a5:32:5d:5f:cc:ce:dc:56:1a:19: 3d:13:45:6e:d3:96:95:25:9a:fd:c8:d6:6e:71:7a: 20:ef:85:a2:bd:11:e7:48:22:96:86:23:7c:df:c7: cd:2a:7f:a5:9b:54:15:59:85:a6:31:d7:97:b0:8e: ea:ae:69:99:5e:1b:77:94:25:19:aa:fc:8b:92:34: 24:f4:b5:da:a5:81:a7:c9:b8:67:17:9c:3f:78:2f: 33:92:a5:57:86:34:d5:49:6c:8f:5f:65:b4:67:da: 21:d9:02:d3:77:07:59:15:8d:eb:02:cb:37:a8:e0: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:88:AF:03:54:28:BE:40:C9:95:09:1E:CE:F3:A9:57:D6:F9:F4:8D X509v3 Authority Key Identifier: keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e0:4f:6a:60:92:13:1b:6b:3b:84:6a:e4:66:58:bd:4e:92: e2:50:5f:3c:ed:86:81:a5:af:0d:48:61:94:85:ce:be:b3:33: ab:9c:82:45:3b:66:67:c0:ab:3e:07:ff:2c:ef:04:5d:42:30: 44:b5:dd:ba:49:d2:c6:be:0d:1b:a2:99:c2:4d:12:07:89:bc: 3e:e4:76:a2:54:7f:9a:2b:5d:9e:db:7e:d6:b2:74:68:7a:ac: bc:d4:d5:a0:09:b4:b3:96:5f:97:66:2e:9f:e2:bb:2d:7b:10: 21:af:92:b7:59:64:da:68:56:81:19:ae:5b:2d:22:96:fc:4f: a2:21:4e:71:ec:fb:87:57:ae:e7:45:bd:ae:18:e4:d7:b1:c7: c7:b3:90:01:f6:7a:1b:3e:6c:96:6e:fb:8a:01:df:a9:c0:5a: 45:25:66:bf:9a:7f:97:50:4b:5e:dc:f5:d1:f9:a6:5a:f8:68: 29:3c:14:9b:f1:9b:d2:10:cd:ff:94:ea:2d:be:cf:12:b0:a4: 3e:31:0e:ee:d7:e1:51:cb:0b:3f:f2:90:3a:9e:c3:ce:2e:03: a5:c6:4f:cf:47:86:70:89:b7:42:b3:30:f6:ed:07:dc:ef:6b: 5c:54:9d:2d:ab:0f:f0:b9:ad:05:4f:69:d7:8c:6a:61:00:05: 13:5d:39:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6HaWNo2BSWBKDRr93TNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw NDQ2ODkwHhcNMjUxMjE4MTAwMTM5WhcNMjUxMjE5MTAwMTM5WjAzMTEwLwYDVQQD EygxNTg4YWYwMzU0MjhiZTQwYzk5NTA5MWVjZWYzYTk1N2Q2ZjlmNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2MU4xdZlBBAH6HlLxE1WjfzYgx9 Vyozz/EAP4vYQTlZa/34toqKQV0QJ5DhRtu/xlSyhoXD3voCMXXsx5cMEIqPS8o1 OKkhwZGh0Wm+H8DZsvDIk/zrhKtnShkvmzfKZC7OHB2kmYri2BQvC+hw8tgaxmps 285nu6fijdm0sOpQpkTn6seEIzieY6UyXV/MztxWGhk9E0Vu05aVJZr9yNZucXog 74WivRHnSCKWhiN838fNKn+lm1QVWYWmMdeXsI7qrmmZXht3lCUZqvyLkjQk9LXa pYGnybhnF5w/eC8zkqVXhjTVSWyPX2W0Z9oh2QLTdwdZFY3rAss3qODxzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWIrwNUKL5AyZUJHs7zqVfW+fSNMB8GA1UdIwQY MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeBPamCS ExtrO4Rq5GZYvU6S4lBfPO2GgaWvDUhhlIXOvrMzq5yCRTtmZ8CrPgf/LO8EXUIw RLXduknSxr4NG6KZwk0SB4m8PuR2olR/mitdntt+1rJ0aHqsvNTVoAm0s5Zfl2Yu n+K7LXsQIa+St1lk2mhWgRmuWy0ilvxPoiFOcez7h1eu50W9rhjk17HHx7OQAfZ6 Gz5slm77igHfqcBaRSVmv5p/l1BLXtz10fmmWvhoKTwUm/Gb0hDN/5TqLb7PErCk PjEO7tfhUcsLP/KQOp7Dzi4DpcZPz0eGcIm3QrMw9u0H3O9rXFSdLasP8LmtBU9p 14xqYQAFE105dg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:53:05 2025 by rpki-client