This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json) Hash identifier: HweJ62xNdRT9CW+ji3WGSlhExubYfHHiQes9OilsAGA= Subject key identifier: 8D:06:53:25:71:5A:0F:7D:D7:33:A2:92:30:10:8E:A4:CB:92:0E:AB Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Certificate serial: 019B35693FFBC9B44510202E4952258E5B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft Manifest number: 13A2 Signing time: Fri 19 Dec 2025 07:00:48 +0000 Manifest this update: Fri 19 Dec 2025 07:00:48 +0000 Manifest next update: Sat 20 Dec 2025 07:00:48 +0000 Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: SDeTCZ2bvgFu3ZUQOn1WfyV5a4fbEAPR5lVnKHOI5eg=) 2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:3f:fb:c9:b4:45:10:20:2e:49:52:25:8e:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Validity Not Before: Dec 19 07:00:48 2025 GMT Not After : Dec 20 07:00:48 2025 GMT Subject: CN=8d065325715a0f7dd733a29230108ea4cb920eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:d4:90:b4:7c:d7:e6:65:02:b0:88:53:8b: a1:33:8f:26:eb:0a:db:b9:ff:7e:ee:2f:52:1a:76: 17:91:97:1f:71:ae:85:c1:2a:20:92:2e:7e:b3:b1: 69:b4:0f:cc:cd:d2:2d:ba:2a:3b:b7:47:41:67:dc: 5b:88:5b:49:13:0d:a5:fb:7b:4c:d2:9d:93:b4:e8: bd:0c:38:69:21:75:25:49:b2:f5:54:0c:f6:6f:c1: de:ad:6d:b5:05:67:f5:04:77:3b:56:d9:af:e4:ae: 1a:99:65:3b:57:25:37:48:e3:d5:49:89:a5:59:25: 9b:41:6e:f2:5b:70:2b:8d:de:45:81:d1:24:d8:a2: 05:b6:92:9d:4a:a9:0a:b8:be:b2:ba:ba:88:30:4a: ee:6c:f4:50:4f:e9:2c:5a:55:31:7b:52:c1:51:6e: 14:30:8d:40:86:8e:63:81:85:d1:d2:ca:06:cb:59: 3a:d6:fc:59:bb:a3:37:b9:97:e7:e3:f5:a6:cc:bb: 45:76:70:6c:b0:5f:d6:d0:32:3e:f9:c2:5c:1e:ae: fd:a4:1b:3c:9b:46:e9:6e:b9:24:1c:87:66:a6:bc: a6:c8:37:b7:7e:24:62:45:ce:18:6b:ea:46:ea:cb: 3e:8a:b6:01:e9:e4:e0:ae:66:9e:22:1b:c4:44:60: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:06:53:25:71:5A:0F:7D:D7:33:A2:92:30:10:8E:A4:CB:92:0E:AB X509v3 Authority Key Identifier: keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2f:6d:df:de:49:1b:b0:e0:8c:3a:f9:79:22:e1:8e:72:4e: 97:2d:99:69:4a:49:d4:1f:ce:d2:d4:ba:20:25:5a:3c:94:03: 82:4a:15:7a:3e:0e:bf:cf:ea:ef:bf:41:b3:20:1a:43:c9:b7: a6:0c:c1:09:d3:35:45:85:3c:f4:0b:64:5f:79:ba:ea:6a:83: a8:f2:55:9b:75:6f:68:bb:ff:05:f7:c0:90:02:16:0e:97:45: 80:ff:a7:bd:67:12:ff:73:c3:1a:f3:29:f9:7e:cc:49:6c:2f: 8b:3b:15:d8:03:20:d0:cf:36:09:99:4f:2f:fa:95:06:9d:10: 50:13:18:7d:2b:b8:d7:bb:8a:4e:b7:91:7f:bf:91:95:a8:b1: a2:52:e8:f4:64:85:45:92:9f:ca:00:db:a2:69:a3:a9:14:ce: 82:5f:e4:66:93:4e:96:f5:d5:10:20:f2:93:a4:1d:1a:69:4c: 1a:53:77:c9:6d:08:fb:dd:6e:39:18:82:d4:1c:a4:d3:43:4e: a0:8a:61:ec:d2:29:b0:62:88:9a:7a:f6:a2:93:f7:57:98:a8: bd:48:15:d5:d7:48:8a:8d:85:4d:e1:fe:13:fa:d8:a9:26:19: 4e:09:0b:7f:d1:99:11:85:66:07:9e:98:9f:b5:4d:8b:ce:75: 43:f5:40:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aT/7ybRFECAuSVIljltaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWE1MWJlYTFiNTcwZmZhNzJkOWM1MmQxYTUxOGMyNGJj NzhjMDIwHhcNMjUxMjE5MDcwMDQ4WhcNMjUxMjIwMDcwMDQ4WjAzMTEwLwYDVQQD Eyg4ZDA2NTMyNTcxNWEwZjdkZDczM2EyOTIzMDEwOGVhNGNiOTIwZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNbUkLR81+ZlArCIU4uhM48m6wrb uf9+7i9SGnYXkZcfca6FwSogki5+s7FptA/MzdItuio7t0dBZ9xbiFtJEw2l+3tM 0p2TtOi9DDhpIXUlSbL1VAz2b8HerW21BWf1BHc7Vtmv5K4amWU7VyU3SOPVSYml WSWbQW7yW3Arjd5FgdEk2KIFtpKdSqkKuL6yurqIMErubPRQT+ksWlUxe1LBUW4U MI1Aho5jgYXR0soGy1k61vxZu6M3uZfn4/WmzLtFdnBssF/W0DI++cJcHq79pBs8 m0bpbrkkHIdmprymyDe3fiRiRc4Ya+pG6ss+irYB6eTgrmaeIhvERGBaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0GUyVxWg991zOikjAQjqTLkg6rMB8GA1UdIwQY MBaAFKyaUb6htXD/py2cUtGlGMJLx4wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgt YWI1NjMwMjExZjdhLzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgtYWI1NjMwMjExZjdh LzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi9t395J G7DgjDr5eSLhjnJOly2ZaUpJ1B/O0tS6ICVaPJQDgkoVej4Ov8/q779BsyAaQ8m3 pgzBCdM1RYU89AtkX3m66mqDqPJVm3VvaLv/BffAkAIWDpdFgP+nvWcS/3PDGvMp +X7MSWwvizsV2AMg0M82CZlPL/qVBp0QUBMYfSu417uKTreRf7+RlaixolLo9GSF RZKfygDbommjqRTOgl/kZpNOlvXVECDyk6QdGmlMGlN3yW0I+91uORiC1Byk00NO oIph7NIpsGKImnr2opP3V5iovUgV1ddIio2FTeH+E/rYqSYZTgkLf9GZEYVmB56Y n7VNi851Q/VA7A== -----END CERTIFICATE-----Generated at Fri Dec 19 09:52:19 2025 by rpki-client