This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json) Hash identifier: NXsboC/K/frCaEYDRFXdlJdoAhGdFBpajyy/IIdQfMs= Subject key identifier: B4:B8:4D:5C:0C:B3:43:04:DF:94:80:3F:6A:5C:8A:59:28:47:8B:B1 Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Certificate serial: 019B08909BB66452F5343997CA5313020F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 14:00:53 +0000 Manifest this update: Wed 10 Dec 2025 14:00:53 +0000 Manifest next update: Thu 11 Dec 2025 14:00:53 +0000 Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=) 2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: Zayv2bP/IR1fwIkN07y4gICgoVcgvnLVM1SYyl9rtYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:9b:b6:64:52:f5:34:39:97:ca:53:13:02:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Validity Not Before: Dec 10 14:00:53 2025 GMT Not After : Dec 11 14:00:53 2025 GMT Subject: CN=b4b84d5c0cb34304df94803f6a5c8a5928478bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:90:d2:01:83:aa:64:8f:82:2f:67:14:2a: 34:7a:29:94:65:d9:81:ae:7a:66:9d:6e:da:0d:05: 51:f8:83:2d:d5:44:f4:d9:4c:ca:c4:f8:86:82:a4: 23:4e:2a:b8:e5:91:40:c8:4c:7d:e7:e1:e5:db:8d: 61:f6:90:7f:42:dd:46:4d:95:50:41:e0:d6:6d:e5: 51:19:0a:a9:86:0c:31:45:cb:6c:2a:f2:82:57:64: 6c:5a:2f:31:90:65:f4:da:c9:81:be:e3:a1:7c:23: 76:96:b9:69:80:39:a8:bd:ec:bc:26:be:37:2b:2e: 90:b9:7b:f6:a3:0c:e9:28:5f:52:f8:a8:43:3f:19: c9:ce:65:ed:c6:24:95:7c:38:11:04:64:71:90:1a: 30:4e:1d:ab:40:a5:7e:03:c5:f1:d5:d4:26:59:d8: 01:49:68:b6:a1:ed:a8:18:dc:93:bc:e5:ea:3e:bc: b4:e8:35:54:9f:de:f0:38:30:3e:f7:7d:7e:74:fc: 0d:ec:06:a8:1c:e0:75:98:ba:16:e4:ba:62:0a:7c: 5f:15:89:21:ab:a9:88:ae:e9:cf:0c:d0:fd:d1:6a: 00:40:d8:79:cc:b2:ad:da:c2:07:8e:53:19:ad:57: 15:8d:02:95:4e:2c:7b:d0:51:07:bf:9e:0d:b6:13: 11:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B8:4D:5C:0C:B3:43:04:DF:94:80:3F:6A:5C:8A:59:28:47:8B:B1 X509v3 Authority Key Identifier: keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:72:9e:31:39:ff:7c:43:3a:e5:80:c0:d5:91:d6:a8:c6:eb: 90:0f:10:38:cd:5f:29:85:2a:f5:f8:80:36:fb:9a:20:99:93: f8:62:e7:28:90:02:01:0e:cf:9e:18:c9:2a:b6:3b:b5:bb:00: e1:54:da:4b:3d:62:8a:96:44:d5:aa:f3:d8:84:3e:bd:a6:eb: f1:63:22:52:b3:e1:ab:11:b5:26:31:b6:4e:6d:4b:de:41:05: 21:f3:d9:1d:32:a5:1e:85:2e:b7:d1:ae:ff:e3:8a:6a:03:a9: 97:d5:f3:b9:a9:0d:4f:e9:e6:46:1a:aa:81:9f:07:2e:6c:15: f7:bd:30:63:ed:ac:3d:db:17:cd:72:74:2a:03:82:c4:15:11: 85:ad:5d:20:67:85:c4:ee:19:69:69:ba:79:6e:6a:98:fb:54: 44:6a:15:f4:dc:cb:fe:26:d1:84:14:57:e9:c8:49:96:7e:98: 8c:15:19:0d:cb:73:0b:65:55:7f:17:8f:7c:18:f7:e6:f8:11: 24:44:e0:ee:da:56:15:fe:85:dc:10:e2:96:39:1c:98:38:04: fa:b0:0b:f1:9d:51:1c:e5:be:6d:b7:9c:41:33:fe:2d:55:6c: df:83:0c:e9:67:c1:9e:fa:e5:01:94:d0:67:c7:47:7f:b5:e5: 3e:fd:be:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkJu2ZFL1NDmXylMTAg9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2U1OTRiYjI2ZTljMDhlNmZjNDczNmNhYTVkM2MyMDA4 NTRkZWEwHhcNMjUxMjEwMTQwMDUzWhcNMjUxMjExMTQwMDUzWjAzMTEwLwYDVQQD EyhiNGI4NGQ1YzBjYjM0MzA0ZGY5NDgwM2Y2YTVjOGE1OTI4NDc4YmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszGQ0gGDqmSPgi9nFCo0eimUZdmB rnpmnW7aDQVR+IMt1UT02UzKxPiGgqQjTiq45ZFAyEx95+Hl241h9pB/Qt1GTZVQ QeDWbeVRGQqphgwxRctsKvKCV2RsWi8xkGX02smBvuOhfCN2lrlpgDmovey8Jr43 Ky6QuXv2owzpKF9S+KhDPxnJzmXtxiSVfDgRBGRxkBowTh2rQKV+A8Xx1dQmWdgB SWi2oe2oGNyTvOXqPry06DVUn97wODA+931+dPwN7AaoHOB1mLoW5LpiCnxfFYkh q6mIrunPDND90WoAQNh5zLKt2sIHjlMZrVcVjQKVTix70FEHv54NthMRYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS4TVwMs0ME35SAP2pcilkoR4uxMB8GA1UdIwQY MBaAFI0+WUuybpwI5vxHNsql08IAhU3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQt ZTdkZWU5YTdjYWQ1LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQtZTdkZWU5YTdjYWQ1 LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnKeMTn/ fEM65YDA1ZHWqMbrkA8QOM1fKYUq9fiANvuaIJmT+GLnKJACAQ7PnhjJKrY7tbsA 4VTaSz1iipZE1arz2IQ+vabr8WMiUrPhqxG1JjG2Tm1L3kEFIfPZHTKlHoUut9Gu /+OKagOpl9XzuakNT+nmRhqqgZ8HLmwV970wY+2sPdsXzXJ0KgOCxBURha1dIGeF xO4ZaWm6eW5qmPtURGoV9NzL/ibRhBRX6chJln6YjBUZDctzC2VVfxePfBj35vgR JETg7tpWFf6F3BDiljkcmDgE+rAL8Z1RHOW+bbecQTP+LVVs34MM6WfBnvrlAZTQ Z8dHf7XlPv2+2w== -----END CERTIFICATE-----Generated at Wed Dec 10 18:03:50 2025 by rpki-client