This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json) Hash identifier: XOaYFsLt6nrFR5ezYbt+BTCQ7QRJeVVX42+axjif12Y= Subject key identifier: 59:4A:FF:FB:4D:CA:73:66:BD:E3:A9:4F:92:94:28:9E:BC:51:44:02 Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Certificate serial: 019B33B1A0618CB2344B56F04036EF16D69E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft Manifest number: 10FE Signing time: Thu 18 Dec 2025 23:00:37 +0000 Manifest this update: Thu 18 Dec 2025 23:00:37 +0000 Manifest next update: Fri 19 Dec 2025 23:00:37 +0000 Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: 5lhsjW7JpCqfte4iKw6IEPUm3+nx+BkfdStkyo/qNtg=) 2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a0:61:8c:b2:34:4b:56:f0:40:36:ef:16:d6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25 Validity Not Before: Dec 18 23:00:37 2025 GMT Not After : Dec 19 23:00:37 2025 GMT Subject: CN=594afffb4dca7366bde3a94f9294289ebc514402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:e6:08:47:f9:99:1d:c6:d7:03:be:bc:92: 0e:9e:0c:84:13:46:c0:f0:c4:56:44:c2:1d:09:c2: 41:a3:39:82:5d:58:65:80:fa:ca:be:76:ae:20:28: 0e:01:70:7f:02:d2:53:db:d0:a7:34:89:83:0e:d6: d2:d7:e0:fa:7c:c6:9b:1e:36:59:f0:61:c3:a1:c5: 43:8e:e4:4f:eb:5d:a7:ad:b3:85:16:c8:e2:2c:c8: c4:e4:32:4f:c9:8c:53:fc:58:48:ed:b0:7b:95:f8: 1e:6d:bf:4c:96:c1:6c:ff:1c:d8:8a:b4:a6:18:77: ca:4c:16:e6:60:f4:49:4b:1a:2f:c7:8e:d9:92:23: d9:4f:60:0f:f8:7b:02:2f:2f:94:27:42:1e:cc:97: 2a:99:50:56:31:36:f4:82:f8:8b:2f:8a:cf:77:7a: 5f:ec:e9:8a:99:97:27:31:8f:f9:ea:de:be:9d:7d: f3:2c:bb:d4:ef:cc:dd:1d:ca:86:e2:30:01:84:e3: 6a:32:bc:b9:cf:72:26:21:77:7f:1b:b1:9c:96:34: 2f:49:11:bf:81:8c:1f:6e:f4:47:18:d9:ee:1c:32: bb:10:23:36:44:0b:ac:ac:57:a0:44:0f:61:a0:3e: 56:b5:67:89:43:01:69:e6:c6:7a:df:0a:fc:b2:8a: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4A:FF:FB:4D:CA:73:66:BD:E3:A9:4F:92:94:28:9E:BC:51:44:02 X509v3 Authority Key Identifier: keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:10:85:0b:8f:73:37:0d:7b:7c:ab:14:ea:11:4b:12:ac:8d: ea:e6:59:f6:2a:44:e0:5c:16:65:70:24:39:18:ae:79:12:4a: 9a:c3:b3:9a:58:da:1f:13:25:f7:15:c0:29:f5:6e:3c:30:53: ae:ea:1b:2d:d5:6c:c1:71:92:54:c0:cc:b8:b3:12:34:13:11: 39:ab:10:75:61:1d:1c:39:2d:9b:07:c3:1c:c3:24:7b:1e:69: 8d:32:b0:22:e2:3b:e6:68:ad:d0:c1:cd:a1:02:10:6c:4e:2d: 12:44:16:02:38:99:94:03:06:32:29:40:9e:a3:c5:70:d3:1f: e1:6e:dd:89:e0:9a:be:8d:51:67:9a:a3:7c:4e:9f:3c:16:f8: 67:e8:77:3c:24:37:37:46:2e:fa:fa:da:14:6b:df:14:3d:a7: 74:65:82:71:f9:bc:03:33:cc:31:42:8c:82:b3:0a:3c:36:0d: b9:cf:37:a9:f8:a5:ed:54:73:cd:56:7a:aa:44:ea:a0:6e:8b: 04:ca:b2:e8:79:52:e4:d5:e5:ad:65:4c:05:15:b7:9f:cc:95: 8f:d1:c7:4c:60:86:48:26:56:21:b7:1a:5a:6f:23:3d:f7:19: 18:22:4b:3b:d1:ad:f6:65:70:70:8e:42:9c:07:71:b5:32:7c: 9a:ff:f5:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsaBhjLI0S1bwQDbvFtaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWI5MzlhM2FjOTdkYWRhMDgyNTE2MWYzYTBlODUwMzNh ODJkMjUwHhcNMjUxMjE4MjMwMDM3WhcNMjUxMjE5MjMwMDM3WjAzMTEwLwYDVQQD Eyg1OTRhZmZmYjRkY2E3MzY2YmRlM2E5NGY5Mjk0Mjg5ZWJjNTE0NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3fmCEf5mR3G1wO+vJIOngyEE0bA 8MRWRMIdCcJBozmCXVhlgPrKvnauICgOAXB/AtJT29CnNImDDtbS1+D6fMabHjZZ 8GHDocVDjuRP612nrbOFFsjiLMjE5DJPyYxT/FhI7bB7lfgebb9MlsFs/xzYirSm GHfKTBbmYPRJSxovx47ZkiPZT2AP+HsCLy+UJ0IezJcqmVBWMTb0gviLL4rPd3pf 7OmKmZcnMY/56t6+nX3zLLvU78zdHcqG4jABhONqMry5z3ImIXd/G7GcljQvSRG/ gYwfbvRHGNnuHDK7ECM2RAusrFegRA9hoD5WtWeJQwFp5sZ63wr8sopWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlK//tNynNmveOpT5KUKJ68UUQCMB8GA1UdIwQY MBaAFKybk5o6yX2toIJRYfOg6FAzqC0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYt Mzg1NzIzMmY0NTZjLzEvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xYWEyYWEtYmZiZi00NDI4LWEzZGYtMzg1NzIzMmY0NTZj LzEvckp1VG1qckpmYTJnZ2xGaDg2RG9VRE9vTFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBCFC49z Nw17fKsU6hFLEqyN6uZZ9ipE4FwWZXAkORiueRJKmsOzmljaHxMl9xXAKfVuPDBT ruobLdVswXGSVMDMuLMSNBMROasQdWEdHDktmwfDHMMkex5pjTKwIuI75mit0MHN oQIQbE4tEkQWAjiZlAMGMilAnqPFcNMf4W7dieCavo1RZ5qjfE6fPBb4Z+h3PCQ3 N0Yu+vraFGvfFD2ndGWCcfm8AzPMMUKMgrMKPDYNuc83qfil7VRzzVZ6qkTqoG6L BMqy6HlS5NXlrWVMBRW3n8yVj9HHTGCGSCZWIbcaWm8jPfcZGCJLO9Gt9mVwcI5C nAdxtTJ8mv/1wQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:29:25 2025 by rpki-client