This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json) Hash identifier: YNJ6wyrtsuCmmPn9lgR5YhX16NI1eBafSmvD/5Rhfnk= Subject key identifier: 45:7F:BB:09:E8:78:BA:66:66:B4:D6:DE:1F:AC:20:D3:56:32:C1:DA Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae Certificate serial: 019AF19BBC3682CCE78CF820ABB8190E176D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 03:01:46 +0000 Manifest this update: Sat 06 Dec 2025 03:01:46 +0000 Manifest next update: Sun 07 Dec 2025 03:01:46 +0000 Files and hashes: 1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: 16pje38eLTmxlhDwSBWrX28XkcVRsTODllB2NJXuHsc=) 2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:bc:36:82:cc:e7:8c:f8:20:ab:b8:19:0e:17:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae Validity Not Before: Dec 6 03:01:46 2025 GMT Not After : Dec 7 03:01:46 2025 GMT Subject: CN=457fbb09e878ba6666b4d6de1fac20d35632c1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:49:c7:5a:bb:02:b4:b2:26:b0:22:3f:ea: ad:be:94:fa:e1:78:5c:99:43:32:dd:8f:76:35:2b: ac:6f:0a:89:cc:ae:27:2e:dd:8b:c4:3c:e0:6b:14: 32:44:79:38:82:e4:39:04:7a:cb:fd:73:d1:91:89: 7e:a9:9b:ee:8e:ec:27:29:36:ae:c7:96:dc:b4:ff: ad:aa:25:79:13:8a:da:9c:66:a5:ce:fd:bf:99:47: 3a:1b:f2:c3:f2:c7:91:dd:be:a0:5a:10:4a:f9:41: 0a:81:01:73:d5:bb:e0:8c:6c:5d:d7:c3:12:a2:97: d9:6d:50:5e:e7:34:4d:1c:8c:b6:d6:c6:8d:f9:94: 64:44:7c:6f:c6:04:a5:69:23:36:97:40:7a:c6:f2: bd:31:40:de:e0:fa:a7:68:89:b9:81:74:f1:ab:27: ff:19:3d:09:ea:eb:8d:0c:78:99:56:fb:fd:ab:40: 60:c7:89:1b:0b:e3:4d:22:ea:c4:c2:16:b2:db:bc: 19:95:e3:d3:a5:e9:18:c2:e6:95:83:7a:ce:b9:8f: 07:bd:bf:16:e2:d2:5a:a9:2f:86:07:99:ab:d0:02: 5c:a1:d2:07:10:8d:42:8c:5b:58:8b:f3:4d:69:7c: fc:bb:f0:23:78:c6:80:c7:89:94:f0:14:19:af:08: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:BB:09:E8:78:BA:66:66:B4:D6:DE:1F:AC:20:D3:56:32:C1:DA X509v3 Authority Key Identifier: keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:41:a7:5e:87:c4:9f:b1:b6:e1:ae:4c:17:ce:3d:f4:d9:25: 69:85:e3:6a:5c:92:58:bd:b5:fa:b5:be:44:0a:08:cd:2a:0c: b7:cc:3c:8c:72:b5:c9:d7:5a:a2:c9:28:60:39:a0:e9:b6:5c: 9a:98:9c:66:ed:6f:65:bf:68:d1:09:db:0f:83:ba:c3:97:ac: 99:dc:c6:ac:14:6b:6a:3b:bd:fd:a0:ab:bb:8d:ba:b8:ef:59: 04:4e:a4:8d:4d:96:9f:54:65:ae:51:8b:c7:7a:79:a1:05:8a: 77:72:bf:e8:88:1e:e0:ce:2d:39:02:80:5f:03:6f:b2:a0:c4: 84:2f:10:28:e1:fd:fc:16:fb:0b:70:49:49:9e:c8:58:c2:21: 14:e8:18:42:bd:89:b3:56:6c:95:27:31:16:5e:79:9a:f2:05: f4:18:cc:3e:cd:de:de:8c:7c:f0:6a:43:b0:18:31:ab:4e:96: c3:72:f3:e4:fd:87:78:2a:27:c1:b0:31:bc:fa:3d:04:7f:b6: 25:30:e9:a1:58:f0:00:92:6b:1c:5b:75:87:11:f8:ac:78:f4: 47:a0:a8:d4:b4:06:30:d1:ad:ca:05:d7:bd:ee:38:85:2d:9c: 59:98:20:f4:36:a6:a6:d8:cd:76:ba:25:08:1a:93:b3:f4:08: 2e:79:22:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7w2gsznjPggq7gZDhdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Y2NhNjJhMzU4ODFjYWU4ZDJjNTgxMmFjNThjYTA3MTA4 ZDcwYWUwHhcNMjUxMjA2MDMwMTQ2WhcNMjUxMjA3MDMwMTQ2WjAzMTEwLwYDVQQD Eyg0NTdmYmIwOWU4NzhiYTY2NjZiNGQ2ZGUxZmFjMjBkMzU2MzJjMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApypJx1q7ArSyJrAiP+qtvpT64Xhc mUMy3Y92NSusbwqJzK4nLt2LxDzgaxQyRHk4guQ5BHrL/XPRkYl+qZvujuwnKTau x5bctP+tqiV5E4ranGalzv2/mUc6G/LD8seR3b6gWhBK+UEKgQFz1bvgjGxd18MS opfZbVBe5zRNHIy21saN+ZRkRHxvxgSlaSM2l0B6xvK9MUDe4PqnaIm5gXTxqyf/ GT0J6uuNDHiZVvv9q0Bgx4kbC+NNIurEwhay27wZlePTpekYwuaVg3rOuY8Hvb8W 4tJaqS+GB5mr0AJcodIHEI1CjFtYi/NNaXz8u/AjeMaAx4mU8BQZrwjIlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV/uwnoeLpmZrTW3h+sINNWMsHaMB8GA1UdIwQY MBaAFCbMpio1iByujSxYEqxYygcQjXCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEt YmI3YmI1YmYwMGIxLzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEtYmI3YmI1YmYwMGIx LzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUGnXofE n7G24a5MF8499NklaYXjalySWL21+rW+RAoIzSoMt8w8jHK1yddaoskoYDmg6bZc mpicZu1vZb9o0QnbD4O6w5esmdzGrBRraju9/aCru426uO9ZBE6kjU2Wn1RlrlGL x3p5oQWKd3K/6Ige4M4tOQKAXwNvsqDEhC8QKOH9/Bb7C3BJSZ7IWMIhFOgYQr2J s1ZslScxFl55mvIF9BjMPs3e3ox88GpDsBgxq06Ww3Lz5P2HeConwbAxvPo9BH+2 JTDpoVjwAJJrHFt1hxH4rHj0R6Co1LQGMNGtygXXve44hS2cWZgg9DamptjNdrol CBqTs/QILnki0g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:37 2025 by rpki-client