This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json) Hash identifier: mXwaOWvD/5Tzz2xO7Qt6DmA6wvHFBNBV8+c23FHUqH8= Subject key identifier: BA:AA:AB:71:AB:27:5A:B7:35:60:BE:66:28:B5:1A:F8:F8:CD:41:49 Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Certificate serial: 019AF57772E8DA67DC45AE5F130533ED6324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:00:37 +0000 Manifest this update: Sat 06 Dec 2025 21:00:37 +0000 Manifest next update: Sun 07 Dec 2025 21:00:37 +0000 Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=) 2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: bYqe7hqq69MA5tWv2UdgGlBUnJJl7bQ8a/B9uY9vz/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:72:e8:da:67:dc:45:ae:5f:13:05:33:ed:63:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a Validity Not Before: Dec 6 21:00:37 2025 GMT Not After : Dec 7 21:00:37 2025 GMT Subject: CN=baaaab71ab275ab73560be6628b51af8f8cd4149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:dd:78:c9:fe:bb:0b:89:6d:ad:75:b9:a7: bd:90:b0:dc:f9:d5:55:6c:89:de:ad:d1:6d:49:13: 25:31:d9:19:7b:fb:fd:cb:93:76:f4:7d:8f:fa:bf: 4a:bd:7c:f4:37:84:99:1d:c9:4e:a3:7d:a7:de:f7: db:f4:4b:fb:43:20:51:7a:68:6e:3b:f5:60:19:f9: 8a:cc:0f:9a:4c:1c:9b:9d:71:75:74:64:40:e0:48: 5c:72:84:00:ae:b7:6d:bf:b3:9e:1a:84:87:f8:c6: 2d:36:14:0a:f3:74:c7:07:ee:13:bb:f5:31:9b:89: b8:c6:b4:6c:9f:ce:e7:67:72:d0:68:5d:1d:58:bf: eb:f2:f4:d1:12:9e:f5:2a:66:16:87:cb:ef:c8:77: 70:07:a4:d3:a9:08:61:b2:85:42:67:c9:d9:80:d7: 54:4f:7e:61:62:c8:77:f2:9b:52:57:da:47:d6:b5: 4b:79:d4:20:b9:09:6a:b2:c4:cf:8f:f3:ca:bb:4f: f7:dc:d4:40:9a:ab:a8:bd:5b:21:d1:93:b0:ee:66: 78:2a:eb:65:ac:ce:e9:3f:e5:f1:d9:18:b1:65:b6: dd:80:eb:7d:7c:36:a7:e1:99:78:63:af:26:6c:11: 06:ab:ac:10:7b:ab:c6:e8:21:46:1b:c4:58:1d:c2: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:AB:71:AB:27:5A:B7:35:60:BE:66:28:B5:1A:F8:F8:CD:41:49 X509v3 Authority Key Identifier: keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:e7:39:1e:1a:d0:e6:e2:e1:c4:b7:f5:0f:47:2c:1f:ff: 8e:8f:af:d4:8b:48:f1:0d:e4:5f:91:3f:18:1d:08:cd:8c:55: a3:58:af:a0:ec:6f:c0:9d:73:c8:9b:b9:7d:53:dc:c0:b0:19: c5:ad:b2:73:38:fd:36:b5:0a:4b:39:b8:f8:ac:d4:ac:e0:70: 9e:84:fb:70:61:a0:b3:c7:aa:1e:75:a2:11:69:04:5c:45:3a: a6:bf:f1:d6:58:a5:e0:5f:62:77:17:a6:9d:a7:62:57:38:e3: 1d:92:60:81:32:e2:1b:61:e7:16:65:f6:2e:62:55:ac:f9:3f: 64:00:f6:f1:1b:1b:da:82:90:e9:e6:65:0f:e6:38:bb:fc:f6: 11:a9:80:dd:08:ef:05:a1:3e:12:46:a4:69:46:d3:a7:e2:19: 10:e7:11:df:db:a7:7e:cf:d9:a0:5b:a0:8a:e4:20:f7:1c:c4: 54:ed:b2:01:d7:00:67:c9:19:fb:d3:76:f3:fe:01:22:92:f4: 3f:50:2f:6e:7c:34:05:fb:27:78:fe:d5:bd:33:6b:7c:bf:48: ef:c7:2a:71:d1:8c:26:ca:92:76:ee:32:fc:2f:66:47:1d:e8: 8a:d6:b8:1f:e6:dc:c1:a0:a4:ce:32:41:67:3d:65:91:f2:06: 9a:a6:34:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3Lo2mfcRa5fEwUz7WMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx MmM3OGEwHhcNMjUxMjA2MjEwMDM3WhcNMjUxMjA3MjEwMDM3WjAzMTEwLwYDVQQD EyhiYWFhYWI3MWFiMjc1YWI3MzU2MGJlNjYyOGI1MWFmOGY4Y2Q0MTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtibdeMn+uwuJba11uae9kLDc+dVV bInerdFtSRMlMdkZe/v9y5N29H2P+r9KvXz0N4SZHclOo32n3vfb9Ev7QyBRemhu O/VgGfmKzA+aTBybnXF1dGRA4EhccoQArrdtv7OeGoSH+MYtNhQK83THB+4Tu/Ux m4m4xrRsn87nZ3LQaF0dWL/r8vTREp71KmYWh8vvyHdwB6TTqQhhsoVCZ8nZgNdU T35hYsh38ptSV9pH1rVLedQguQlqssTPj/PKu0/33NRAmquovVsh0ZOw7mZ4Kutl rM7pP+Xx2RixZbbdgOt9fDan4Zl4Y68mbBEGq6wQe6vG6CFGG8RYHcLFJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqqq3GrJ1q3NWC+Zii1Gvj4zUFJMB8GA1UdIwQY MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4 LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDLnOR4a 0Obi4cS39Q9HLB//jo+v1ItI8Q3kX5E/GB0IzYxVo1ivoOxvwJ1zyJu5fVPcwLAZ xa2yczj9NrUKSzm4+KzUrOBwnoT7cGGgs8eqHnWiEWkEXEU6pr/x1lil4F9idxem nadiVzjjHZJggTLiG2HnFmX2LmJVrPk/ZAD28Rsb2oKQ6eZlD+Y4u/z2EamA3Qjv BaE+EkakaUbTp+IZEOcR39unfs/ZoFugiuQg9xzEVO2yAdcAZ8kZ+9N28/4BIpL0 P1Avbnw0BfsneP7VvTNrfL9I78cqcdGMJsqSdu4y/C9mRx3oita4H+bcwaCkzjJB Zz1lkfIGmqY0tQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:47 2025 by rpki-client