This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json) Hash identifier: lchle/so80dOUEze6FiShLj0+PEgdU2rv9NrVxvmfE4= Subject key identifier: 06:5E:27:7D:37:A7:B6:85:EA:72:20:BD:F3:9D:F3:B2:4E:11:DA:18 Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6 Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6 Certificate serial: 019B31C37479C9B077DF9F22D5CB8BE860D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 14:00:51 +0000 Manifest this update: Thu 18 Dec 2025 14:00:51 +0000 Manifest next update: Fri 19 Dec 2025 14:00:51 +0000 Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: vpBD+D6ovIO5OmWRoe6/SwUiK9x30ZDJTqNtvdG1BfE=) 2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=) 3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:74:79:c9:b0:77:df:9f:22:d5:cb:8b:e8:60:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6 Validity Not Before: Dec 18 14:00:51 2025 GMT Not After : Dec 19 14:00:51 2025 GMT Subject: CN=065e277d37a7b685ea7220bdf39df3b24e11da18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:46:71:f1:e6:c1:cf:c9:fc:b0:1b:ee:8d: c5:97:79:36:02:d4:37:d6:b9:97:f2:3a:10:0c:56: 1b:c4:52:01:1b:e6:e7:6d:45:9d:01:04:cf:1b:55: 3f:55:fa:c6:fa:d1:eb:a1:b8:b9:dc:bf:07:46:e0: a0:46:81:d5:9a:54:5a:6f:f3:38:55:04:10:b0:b0: e2:50:30:75:5c:a8:88:f8:a9:e6:5c:29:32:f4:35: bf:cf:58:ea:50:b2:f9:f8:a4:b3:53:b3:b1:60:5a: ce:b3:b0:12:2b:47:e7:bd:3b:57:65:c3:78:27:09: 22:cd:f1:59:84:b3:77:d5:ef:0a:41:7c:e8:bd:64: ac:5a:3d:5e:85:8f:df:05:55:62:b4:89:ff:b9:13: 7d:94:cf:30:ec:4c:06:c9:7b:92:12:ae:ca:e0:ca: aa:44:a9:b8:33:e9:e2:15:a0:be:aa:29:4f:b3:fc: f8:39:31:88:4b:b6:10:d7:98:e1:71:0a:fb:8f:ba: d2:ca:b9:18:f4:3d:1e:73:8d:e2:7a:29:a9:97:df: 83:b1:71:96:25:d5:fe:ea:5e:77:03:95:b9:04:78: 90:8d:13:ff:3d:e7:9a:48:b8:00:ea:87:b2:06:db: 36:24:4f:bb:b0:c6:20:4f:e1:7d:a0:0c:cb:fb:70: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:27:7D:37:A7:B6:85:EA:72:20:BD:F3:9D:F3:B2:4E:11:DA:18 X509v3 Authority Key Identifier: keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b6:d7:f3:42:91:59:7e:70:73:16:54:24:98:0e:91:00:ec: 77:23:81:2c:b5:0e:d5:26:7c:14:f5:df:b3:76:0d:6e:cc:36: 0f:2e:3e:2f:8a:24:b0:c5:17:6b:89:30:ac:fa:4b:83:40:01: 51:37:04:f7:88:5c:31:d0:3e:68:9f:31:e7:66:8a:53:39:43: 15:a3:3c:8c:e4:2a:41:e4:8c:1c:e9:e6:9d:d7:92:34:25:7a: 3f:91:95:38:93:66:0f:54:45:94:0d:b4:70:66:d4:8d:e0:f2: 35:06:c6:34:56:4d:1f:eb:aa:0a:7d:c8:17:5f:a1:30:19:dc: 64:ab:8f:c3:31:4f:32:9b:cb:c6:19:a4:68:48:df:f4:9f:e7: c0:5a:aa:40:67:19:9f:f9:d2:45:27:17:7b:8a:60:1a:0c:4e: 38:6d:a5:a2:bc:6d:0c:19:ca:a3:3a:cb:f5:21:0f:cc:4b:51: 07:c9:15:c6:ae:97:9b:38:75:85:e3:f9:6d:69:a7:b5:be:96: a6:b4:b5:d7:0c:34:cd:13:57:28:ec:b6:ba:bf:0f:29:1f:2b: 6f:f1:db:c7:d0:34:f6:44:2c:a0:35:82:0d:6f:09:5d:90:7e: 85:b7:26:67:e3:d2:e1:77:85:49:28:ed:57:88:69:66:36:4a: 5b:d7:49:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw3R5ybB3358i1cuL6GDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj NDlhZTYwHhcNMjUxMjE4MTQwMDUxWhcNMjUxMjE5MTQwMDUxWjAzMTEwLwYDVQQD EygwNjVlMjc3ZDM3YTdiNjg1ZWE3MjIwYmRmMzlkZjNiMjRlMTFkYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3VGcfHmwc/J/LAb7o3Fl3k2AtQ3 1rmX8joQDFYbxFIBG+bnbUWdAQTPG1U/VfrG+tHrobi53L8HRuCgRoHVmlRab/M4 VQQQsLDiUDB1XKiI+KnmXCky9DW/z1jqULL5+KSzU7OxYFrOs7ASK0fnvTtXZcN4 JwkizfFZhLN31e8KQXzovWSsWj1ehY/fBVVitIn/uRN9lM8w7EwGyXuSEq7K4Mqq RKm4M+niFaC+qilPs/z4OTGIS7YQ15jhcQr7j7rSyrkY9D0ec43ieimpl9+DsXGW JdX+6l53A5W5BHiQjRP/PeeaSLgA6oeyBts2JE+7sMYgT+F9oAzL+3B2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZeJ303p7aF6nIgvfOd87JOEdoYMB8GA1UdIwQY MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbbX80KR WX5wcxZUJJgOkQDsdyOBLLUO1SZ8FPXfs3YNbsw2Dy4+L4oksMUXa4kwrPpLg0AB UTcE94hcMdA+aJ8x52aKUzlDFaM8jOQqQeSMHOnmndeSNCV6P5GVOJNmD1RFlA20 cGbUjeDyNQbGNFZNH+uqCn3IF1+hMBncZKuPwzFPMpvLxhmkaEjf9J/nwFqqQGcZ n/nSRScXe4pgGgxOOG2lorxtDBnKozrL9SEPzEtRB8kVxq6Xmzh1heP5bWmntb6W prS11ww0zRNXKOy2ur8PKR8rb/Hbx9A09kQsoDWCDW8JXZB+hbcmZ+PS4XeFSSjt V4hpZjZKW9dJ7A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:05 2025 by rpki-client