This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json) Hash identifier: UtOxEZWVnYV1j1q/0W5Uh5s6uexAtNRTiAhqOWO8zc4= Subject key identifier: D5:B0:6C:38:B6:B9:83:9C:38:7E:64:62:76:F3:88:26:AA:E6:5B:5A Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2 Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2 Certificate serial: 019B3C7F735EF397827DDD955B2A4054688E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft Manifest number: 055C Signing time: Sat 20 Dec 2025 16:02:24 +0000 Manifest this update: Sat 20 Dec 2025 16:02:24 +0000 Manifest next update: Sun 21 Dec 2025 16:02:24 +0000 Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: df0HXFYVjN/xQCN918pmJB0wRD0B5Q3wTupXzINE8Nw=) 2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=) 3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:73:5e:f3:97:82:7d:dd:95:5b:2a:40:54:68:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2 Validity Not Before: Dec 20 16:02:24 2025 GMT Not After : Dec 21 16:02:24 2025 GMT Subject: CN=d5b06c38b6b9839c387e646276f38826aae65b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:dc:21:f8:35:16:e8:af:03:74:25:a3:78: c7:a5:22:39:a8:ba:64:6d:f9:69:79:94:23:0b:4a: 34:71:5b:1f:2f:90:21:27:9a:e6:38:a3:d7:b5:82: db:d3:7b:c2:39:69:b3:93:98:02:bd:6b:ca:4d:04: 54:55:46:e0:04:15:13:3b:3a:b7:26:45:85:a6:87: 01:4f:8e:c0:f0:a0:12:4b:47:bf:39:87:01:dd:37: 80:71:11:bd:36:d9:a6:89:d2:b1:05:65:eb:7f:ba: bd:ff:94:51:ee:91:cc:54:a9:e0:aa:89:25:6c:90: 8a:d1:c7:d7:49:2c:6e:af:72:8e:10:28:65:e8:a2: 55:3c:51:f6:79:dd:41:20:e8:34:6c:3c:3b:1c:7c: 9c:cf:03:9b:c3:4e:f0:7a:5e:ae:88:28:f9:26:54: ea:14:4b:1d:61:b8:2b:91:c5:8f:25:35:2a:3d:4a: 34:1f:f2:42:a3:aa:c7:4a:85:e3:41:a5:4a:7f:a1: 07:9c:2c:a8:99:d1:cb:86:74:96:bd:82:34:d5:6f: 9c:e8:51:c5:0e:9c:1e:d9:db:ad:49:a2:66:38:0e: bb:2b:86:02:31:21:ad:5f:43:4b:06:c6:c7:5b:37: 7a:7d:2a:4d:e3:40:f5:08:e4:80:24:3d:bc:a3:06: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:6C:38:B6:B9:83:9C:38:7E:64:62:76:F3:88:26:AA:E6:5B:5A X509v3 Authority Key Identifier: keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:54:2f:f1:b4:64:1d:02:b7:04:ee:be:46:27:82:70:e9:7c: 44:33:83:e7:6c:d6:ad:be:70:4c:6c:e6:c0:98:93:42:3a:f2: ca:f9:75:23:f2:f3:5f:40:2e:6a:ae:e1:0e:db:58:33:44:dd: a2:10:f9:c0:33:f6:5c:77:a4:df:f7:a8:43:45:c9:97:7d:82: fa:18:26:aa:95:17:ef:ad:a1:0d:81:7f:46:cf:a8:04:3d:0e: c0:70:85:9f:a8:66:64:71:1f:15:ff:24:8d:1c:9b:51:4b:89: 9a:3c:9d:95:e9:05:d9:21:fe:43:80:39:8c:68:e6:7a:df:73: 8f:87:17:42:bd:a1:3a:cb:04:c0:0d:b2:15:03:5d:5f:a6:ef: 36:91:8a:6a:b6:56:04:75:bb:c8:3f:c6:ef:a4:89:6a:b9:f8: 82:73:00:96:f0:38:dc:14:80:9b:f9:7e:bb:b0:2a:41:7f:a0: 24:6e:00:f8:da:6a:fd:35:0e:36:ed:b6:60:26:f7:14:55:39: c0:84:09:da:82:01:16:d9:35:b4:e2:e9:64:f3:06:04:03:93: e0:0c:f3:fa:71:76:ed:40:5a:21:1b:40:b0:5a:4c:ea:06:e7: 7d:a6:c6:c5:21:a5:d1:67:0e:96:ac:14:e8:5c:da:53:d5:49: 5e:31:b4:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3Ne85eCfd2VWypAVGiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh ZDhkYTIwHhcNMjUxMjIwMTYwMjI0WhcNMjUxMjIxMTYwMjI0WjAzMTEwLwYDVQQD EyhkNWIwNmMzOGI2Yjk4MzljMzg3ZTY0NjI3NmYzODgyNmFhZTY1YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVjcIfg1FuivA3Qlo3jHpSI5qLpk bflpeZQjC0o0cVsfL5AhJ5rmOKPXtYLb03vCOWmzk5gCvWvKTQRUVUbgBBUTOzq3 JkWFpocBT47A8KASS0e/OYcB3TeAcRG9NtmmidKxBWXrf7q9/5RR7pHMVKngqokl bJCK0cfXSSxur3KOEChl6KJVPFH2ed1BIOg0bDw7HHyczwObw07wel6uiCj5JlTq FEsdYbgrkcWPJTUqPUo0H/JCo6rHSoXjQaVKf6EHnCyomdHLhnSWvYI01W+c6FHF Dpwe2dutSaJmOA67K4YCMSGtX0NLBsbHWzd6fSpN40D1COSAJD28owb0VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWwbDi2uYOcOH5kYnbziCaq5ltaMB8GA1UdIwQY MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlQv8bRk HQK3BO6+RieCcOl8RDOD52zWrb5wTGzmwJiTQjryyvl1I/LzX0Auaq7hDttYM0Td ohD5wDP2XHek3/eoQ0XJl32C+hgmqpUX762hDYF/Rs+oBD0OwHCFn6hmZHEfFf8k jRybUUuJmjydlekF2SH+Q4A5jGjmet9zj4cXQr2hOssEwA2yFQNdX6bvNpGKarZW BHW7yD/G76SJarn4gnMAlvA43BSAm/l+u7AqQX+gJG4A+Npq/TUONu22YCb3FFU5 wIQJ2oIBFtk1tOLpZPMGBAOT4Azz+nF27UBaIRtAsFpM6gbnfabGxSGl0WcOlqwU 6FzaU9VJXjG0Nw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:48:34 2025 by rpki-client