This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json) Hash identifier: l/PKjwMf65qdDkmWBcajmXOqhG5hXZ6bPDJppSk8sao= Subject key identifier: B3:ED:B4:69:7C:D9:BB:7E:72:D5:65:89:E4:50:EA:85:78:DB:AE:FC Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Certificate serial: 019B2F67714B849888E5AD98C753F0CFB762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft Manifest number: 033E Signing time: Thu 18 Dec 2025 03:01:06 +0000 Manifest this update: Thu 18 Dec 2025 03:01:06 +0000 Manifest next update: Fri 19 Dec 2025 03:01:06 +0000 Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: QNfnAyqpSqvyFbFsJyidQYCMpMX2IY1IWvEfiPAWSEo=) 2: tI3vS8bXRpYk2uJT942ZTBiVKdc.roa (hash: m8AWxg57zCEgWp5C3CXYTmTH0M1td7C0p+1vWuP3iI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:71:4b:84:98:88:e5:ad:98:c7:53:f0:cf:b7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Validity Not Before: Dec 18 03:01:06 2025 GMT Not After : Dec 19 03:01:06 2025 GMT Subject: CN=b3edb4697cd9bb7e72d56589e450ea8578dbaefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:de:16:d0:77:e7:dc:d1:cf:b2:72:aa:5b: 6a:f3:5b:d0:6e:4a:e4:1b:5b:bb:1f:24:08:43:26: d5:e2:46:46:61:7c:6a:94:4f:b5:77:5f:87:b4:ce: b5:5c:c6:6b:4c:b3:d6:1d:b9:c7:95:bc:2f:9c:5c: 9d:65:1d:ac:a4:6f:85:82:5d:76:c7:85:ee:9f:6f: 6b:6c:49:b5:c6:8b:f9:8b:88:c4:bb:ff:90:7c:5d: 46:e0:a6:b5:82:60:18:de:fa:37:31:55:96:5f:ea: 5f:a1:98:8b:fd:54:f3:5d:8e:52:c3:11:a7:66:67: c7:ba:e3:c8:b1:82:99:97:c2:ea:9a:72:4d:64:01: 31:1a:11:ec:e1:e1:f0:c8:92:8f:32:42:51:9b:11: 59:ec:ea:6c:63:1e:bf:8c:c3:0c:c9:9b:49:26:f2: d3:eb:23:16:d3:55:f0:b4:e2:2d:f5:60:64:e3:26: b0:65:75:a4:14:55:d3:62:e0:67:69:86:b8:d1:12: 08:b5:46:00:f9:d3:0e:d2:72:b8:bf:c5:fc:a8:48: 2d:28:6f:c3:41:0a:76:0b:13:2e:cd:6c:36:b3:00: 59:89:0b:21:74:ad:e2:99:0d:26:97:c2:67:cc:04: 6c:f6:b6:7b:c5:bc:b7:d1:90:23:d2:c6:91:fc:7c: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:ED:B4:69:7C:D9:BB:7E:72:D5:65:89:E4:50:EA:85:78:DB:AE:FC X509v3 Authority Key Identifier: keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:88:aa:1c:ce:fd:f0:08:c9:d3:5e:98:89:4e:35:2f:8a: 91:c0:df:83:0f:31:65:d6:74:8d:79:65:06:fd:80:33:28:0a: 0a:69:b6:99:22:2b:67:3d:1e:1d:65:7c:06:d4:c0:5a:68:2a: 74:bd:28:02:a4:78:37:62:8b:bd:9f:8c:15:94:06:36:5d:d8: 49:22:5b:b8:2b:3c:be:fd:0c:d6:79:fd:0d:37:a4:60:9a:a2: 34:c3:e3:11:48:0f:a7:58:ce:54:9f:96:0c:b8:6d:ad:37:84: f5:d8:f5:58:1f:86:00:e0:43:16:d1:2f:47:c9:01:cc:05:27: 1b:dc:7b:8d:0d:2a:82:b1:eb:32:92:fa:3f:f0:70:bc:53:70: 6c:b9:cb:c6:2f:71:65:14:42:07:01:fd:8b:e6:dd:d2:59:43: 5c:b5:6b:51:9f:76:f6:6d:90:b5:16:66:e4:13:8f:8e:d3:81: 4e:ab:2c:6a:74:b3:56:9a:3c:e9:7e:c7:8b:16:d1:2a:95:d2: a4:33:40:13:4d:78:8d:0b:59:fb:43:d1:29:21:b4:29:04:65: e1:0f:d5:53:4d:33:fd:ce:6f:39:2c:2c:43:cf:36:04:15:0e: 7f:fe:05:dc:23:75:f1:81:94:8d:e4:2a:6a:56:54:1b:9b:68: ae:67:44:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3FLhJiI5a2Yx1Pwz7diMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi YmM5NmQwHhcNMjUxMjE4MDMwMTA2WhcNMjUxMjE5MDMwMTA2WjAzMTEwLwYDVQQD EyhiM2VkYjQ2OTdjZDliYjdlNzJkNTY1ODllNDUwZWE4NTc4ZGJhZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW7eFtB359zRz7Jyqltq81vQbkrk G1u7HyQIQybV4kZGYXxqlE+1d1+HtM61XMZrTLPWHbnHlbwvnFydZR2spG+Fgl12 x4Xun29rbEm1xov5i4jEu/+QfF1G4Ka1gmAY3vo3MVWWX+pfoZiL/VTzXY5SwxGn ZmfHuuPIsYKZl8LqmnJNZAExGhHs4eHwyJKPMkJRmxFZ7OpsYx6/jMMMyZtJJvLT 6yMW01XwtOIt9WBk4yawZXWkFFXTYuBnaYa40RIItUYA+dMO0nK4v8X8qEgtKG/D QQp2CxMuzWw2swBZiQshdK3imQ0ml8JnzARs9rZ7xby30ZAj0saR/Hw8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPttGl82bt+ctVlieRQ6oV42678MB8GA1UdIwQY MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0 LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz+IqhzO /fAIydNemIlONS+KkcDfgw8xZdZ0jXllBv2AMygKCmm2mSIrZz0eHWV8BtTAWmgq dL0oAqR4N2KLvZ+MFZQGNl3YSSJbuCs8vv0M1nn9DTekYJqiNMPjEUgPp1jOVJ+W DLhtrTeE9dj1WB+GAOBDFtEvR8kBzAUnG9x7jQ0qgrHrMpL6P/BwvFNwbLnLxi9x ZRRCBwH9i+bd0llDXLVrUZ929m2QtRZm5BOPjtOBTqssanSzVpo86X7HixbRKpXS pDNAE014jQtZ+0PRKSG0KQRl4Q/VU00z/c5vOSwsQ882BBUOf/4F3CN18YGUjeQq alZUG5tormdEhw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:07 2025 by rpki-client