This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json) Hash identifier: 1kDvMTFbnpS1UCzY8C0bgsDANxrL4Zfy/0+RvU/OGZI= Subject key identifier: 36:A3:3F:3A:92:06:A9:15:DE:FE:20:C1:8A:61:73:6F:E3:BF:02:E6 Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b Certificate serial: 019AF16449F2AD3676EA2029C29F5C405C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft Manifest number: C6 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: YPhSd0x32AFCyPZ8IaYoX+6itnug/UXcOIdkvxnFYqY=) 2: yD4usZMSXbGkK2CBunEX74yn4QI.roa (hash: SizEhRkGwm4GTxXwCKgcYA/BLRuUEVBDL2+vReMYwzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:49:f2:ad:36:76:ea:20:29:c2:9f:5c:40:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=36a33f3a9206a915defe20c18a61736fe3bf02e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:82:2f:62:d3:cf:2f:da:89:de:0b:be:65: f2:1b:5f:8f:e6:c8:69:d3:f9:9b:44:03:81:cf:80: b1:19:68:93:57:1b:eb:3f:e1:27:e4:dc:40:47:9d: fa:5a:10:5b:fb:7f:97:a2:46:a0:3f:ab:8c:c3:64: 5c:4c:7b:bb:da:00:1e:35:f6:2b:40:a1:1c:8b:de: 5f:7e:87:18:86:36:d3:47:47:f9:fb:c1:ee:72:08: 49:d5:3e:61:7b:b2:d6:c7:c7:ed:cd:ff:3e:90:71: 72:ea:0b:ea:6d:cb:c6:54:b8:34:89:4d:37:d4:81: 3e:51:28:a0:ed:30:59:ff:71:96:70:24:37:cd:af: 83:78:12:54:97:e9:6a:1e:e5:2c:1a:60:fd:47:cd: 23:ec:19:a9:4e:4a:1a:61:af:46:95:e1:1c:70:08: bf:d9:d0:4d:c8:a5:1e:3f:46:e7:01:d1:f8:e4:a0: 50:51:88:d3:58:84:91:a4:21:63:30:0b:e9:52:78: 6b:fd:a4:57:c5:c6:3c:27:61:bd:e4:07:e2:f5:1c: d3:b9:e2:6d:a6:b1:0a:fe:a4:62:46:15:44:71:26: 69:69:21:c6:b9:2d:18:6b:15:0c:f1:3d:50:ba:9b: c7:d9:67:ad:5f:ac:6e:33:86:17:fe:e1:0a:9f:c2: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A3:3F:3A:92:06:A9:15:DE:FE:20:C1:8A:61:73:6F:E3:BF:02:E6 X509v3 Authority Key Identifier: keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:55:68:10:76:d6:3f:fc:db:f2:cf:61:55:5e:9e:1e:75:2d: 15:9e:42:bd:c2:8a:75:44:39:57:fa:7a:43:26:02:7f:f5:47: d5:96:10:56:b0:aa:cc:e9:09:ee:9e:23:bf:6d:b5:55:d6:d5: 69:df:dd:a8:27:23:54:7e:ef:d1:44:ea:44:e7:34:62:f4:45: 66:e4:bb:0e:8b:4b:96:ed:fe:35:7b:ca:28:3d:d1:e3:08:64: 0d:8a:1d:d1:36:2a:72:e7:42:29:ca:10:09:14:81:83:d7:91: e6:8e:b7:0b:3c:ad:c7:4d:39:8c:d8:bf:ab:ef:1f:69:bd:0c: 46:0c:d3:d0:74:cb:08:6a:63:61:b1:ea:c1:99:79:9d:6b:28: 44:18:50:fc:d6:5d:8b:e6:6d:a0:4d:85:0e:12:2a:10:73:a1: 95:90:4b:5a:63:ea:c6:5d:05:32:b0:ce:20:9a:b9:98:a8:59: 31:a8:d7:67:1b:9f:29:4c:9b:d0:74:3f:3b:a3:ea:d1:d1:e9: 30:a1:e2:23:33:f6:52:65:0e:be:9b:9c:2f:0b:27:95:7d:bf: 0b:a6:23:9c:6d:38:94:79:95:62:01:db:c4:87:48:b2:e0:cb: 9f:e0:d6:d4:79:0a:84:49:e1:78:c2:6e:36:88:13:86:48:9f: 29:f5:55:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEnyrTZ26iApwp9cQFxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5 ZmQ4NWIwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EygzNmEzM2YzYTkyMDZhOTE1ZGVmZTIwYzE4YTYxNzM2ZmUzYmYwMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2CL2LTzy/aid4LvmXyG1+P5shp 0/mbRAOBz4CxGWiTVxvrP+En5NxAR536WhBb+3+XokagP6uMw2RcTHu72gAeNfYr QKEci95ffocYhjbTR0f5+8HucghJ1T5he7LWx8ftzf8+kHFy6gvqbcvGVLg0iU03 1IE+USig7TBZ/3GWcCQ3za+DeBJUl+lqHuUsGmD9R80j7BmpTkoaYa9GleEccAi/ 2dBNyKUeP0bnAdH45KBQUYjTWISRpCFjMAvpUnhr/aRXxcY8J2G95Afi9RzTueJt prEK/qRiRhVEcSZpaSHGuS0YaxUM8T1QupvH2WetX6xuM4YX/uEKn8Lq3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDajPzqSBqkV3v4gwYphc2/jvwLmMB8GA1UdIwQY MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFVoEHbW P/zb8s9hVV6eHnUtFZ5CvcKKdUQ5V/p6QyYCf/VH1ZYQVrCqzOkJ7p4jv221VdbV ad/dqCcjVH7v0UTqROc0YvRFZuS7DotLlu3+NXvKKD3R4whkDYod0TYqcudCKcoQ CRSBg9eR5o63Czytx005jNi/q+8fab0MRgzT0HTLCGpjYbHqwZl5nWsoRBhQ/NZd i+ZtoE2FDhIqEHOhlZBLWmPqxl0FMrDOIJq5mKhZMajXZxufKUyb0HQ/O6Pq0dHp MKHiIzP2UmUOvpucLwsnlX2/C6YjnG04lHmVYgHbxIdIsuDLn+DW1HkKhEnheMJu NogThkifKfVVSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:49 2025 by rpki-client