This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json) Hash identifier: 7eD42aJqBa3+0Que0Lo8Pt1Mfb1bLcyViE9uKogrexg= Subject key identifier: F5:09:E1:44:CC:78:5A:ED:C8:17:67:28:22:45:59:9A:25:80:C1:1C Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Certificate serial: 019B2776FABFDF32C23F3596FB090BCE4725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 14:01:07 +0000 Manifest this update: Tue 16 Dec 2025 14:01:07 +0000 Manifest next update: Wed 17 Dec 2025 14:01:07 +0000 Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=) 2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: hqmrsZ4D3/Zp99064MPXS8g7XhaqfTPxTXf9m0g78lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:fa:bf:df:32:c2:3f:35:96:fb:09:0b:ce:47:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Validity Not Before: Dec 16 14:01:07 2025 GMT Not After : Dec 17 14:01:07 2025 GMT Subject: CN=f509e144cc785aedc81767282245599a2580c11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:c2:ee:34:f1:47:b7:01:43:3e:af:dd:17: 66:b0:4c:18:50:88:27:9d:9e:04:ea:d8:a2:81:b5: 97:db:a0:8c:f8:4a:e3:8d:d1:74:6f:2c:79:0d:48: 79:88:db:fd:05:bd:11:1c:88:5a:e8:30:32:3e:7a: e1:9d:a6:1a:b9:47:81:52:37:9d:ac:78:67:04:0f: fd:27:7c:d4:b9:5b:c0:41:4c:41:55:70:0d:5f:3f: e9:73:dd:64:fa:89:57:9d:cc:64:91:57:1d:d4:09: 4b:16:5d:d7:05:b0:8a:9b:4f:a5:75:ea:88:f6:12: eb:c8:1d:f0:8a:9c:da:68:2b:e9:c3:65:d5:03:7f: 46:d0:44:09:80:81:28:fe:ee:0f:20:0b:3a:75:2f: 12:53:61:5f:d1:e2:01:08:56:5e:e6:90:03:6c:60: 5c:65:c1:58:28:8f:ec:2e:33:44:79:15:23:a8:71: 5d:76:b5:d3:34:89:c9:ee:c3:b3:2c:77:b0:5e:88: 2f:f9:7f:71:d6:28:f6:69:37:03:66:d6:81:6f:d2: 41:6d:c4:00:8f:09:be:a2:eb:8d:73:80:23:ed:31: 9e:1d:2a:30:fa:24:b8:18:d7:95:c0:52:fe:22:db: 1e:50:b7:28:4a:84:43:b6:fb:f6:1d:8c:0f:06:95: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:E1:44:CC:78:5A:ED:C8:17:67:28:22:45:59:9A:25:80:C1:1C X509v3 Authority Key Identifier: keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ce:f0:bf:db:99:03:9f:1c:6b:8b:81:df:f1:15:d7:b0:8d: f1:21:02:5d:d1:11:36:10:10:39:74:cd:33:45:61:a5:2e:89: 24:b7:c8:c1:85:86:51:57:8f:6e:cb:7b:16:e7:c2:60:85:65: 24:93:8c:36:c6:58:e6:d5:d7:b0:51:02:81:fb:a0:19:73:f0: 54:87:62:7a:7c:aa:d6:a5:43:8a:b4:7f:72:a5:66:7c:e5:93: 1a:f9:a6:b2:bd:f4:da:e7:20:33:0c:d6:d2:9b:89:29:01:a2: ce:e0:b8:cd:02:09:c5:cd:5d:20:e6:99:fb:0d:21:64:1a:27: dd:42:70:9c:5a:83:05:ea:e7:88:91:be:be:e3:da:d8:39:6a: 5a:91:10:fc:f3:82:a6:6d:36:ed:70:d3:f3:90:cf:39:af:8b: 08:fd:83:e3:15:3f:ed:c1:3d:99:ea:c9:fc:75:99:dc:59:de: 8a:4d:5b:b1:7d:e6:57:da:be:80:fe:57:18:8d:cf:dd:23:17: 88:6d:65:93:da:46:ac:0d:fd:c3:8a:f4:a6:ff:ce:39:df:06: d6:0d:fa:5c:6d:b6:ff:cd:21:18:f8:0b:d8:7d:35:1f:57:70: 63:73:dc:7c:aa:e6:21:21:e5:9f:8d:cf:26:28:74:4c:00:c7: f0:a2:5e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndvq/3zLCPzWW+wkLzkclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2U1OTRiYjI2ZTljMDhlNmZjNDczNmNhYTVkM2MyMDA4 NTRkZWEwHhcNMjUxMjE2MTQwMTA3WhcNMjUxMjE3MTQwMTA3WjAzMTEwLwYDVQQD EyhmNTA5ZTE0NGNjNzg1YWVkYzgxNzY3MjgyMjQ1NTk5YTI1ODBjMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksPC7jTxR7cBQz6v3RdmsEwYUIgn nZ4E6tiigbWX26CM+ErjjdF0byx5DUh5iNv9Bb0RHIha6DAyPnrhnaYauUeBUjed rHhnBA/9J3zUuVvAQUxBVXANXz/pc91k+olXncxkkVcd1AlLFl3XBbCKm0+ldeqI 9hLryB3wipzaaCvpw2XVA39G0EQJgIEo/u4PIAs6dS8SU2Ff0eIBCFZe5pADbGBc ZcFYKI/sLjNEeRUjqHFddrXTNInJ7sOzLHewXogv+X9x1ij2aTcDZtaBb9JBbcQA jwm+ouuNc4Aj7TGeHSow+iS4GNeVwFL+ItseULcoSoRDtvv2HYwPBpXq2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUJ4UTMeFrtyBdnKCJFWZolgMEcMB8GA1UdIwQY MBaAFI0+WUuybpwI5vxHNsql08IAhU3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQt ZTdkZWU5YTdjYWQ1LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQtZTdkZWU5YTdjYWQ1 LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM7wv9uZ A58ca4uB3/EV17CN8SECXdERNhAQOXTNM0VhpS6JJLfIwYWGUVePbst7FufCYIVl JJOMNsZY5tXXsFECgfugGXPwVIdienyq1qVDirR/cqVmfOWTGvmmsr302ucgMwzW 0puJKQGizuC4zQIJxc1dIOaZ+w0hZBon3UJwnFqDBerniJG+vuPa2DlqWpEQ/POC pm027XDT85DPOa+LCP2D4xU/7cE9merJ/HWZ3Fneik1bsX3mV9q+gP5XGI3P3SMX iG1lk9pGrA39w4r0pv/OOd8G1g36XG22/80hGPgL2H01H1dwY3PcfKrmISHln43P Jih0TADH8KJekw== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:07 2025 by rpki-client