This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json) Hash identifier: plyu3yZJvNzZ3GT1xxgarzI8KVjSqAKWwLkW0h0Z5AA= Subject key identifier: 45:8A:5E:69:C7:B3:D7:0E:5F:D4:28:A7:1C:76:65:7D:95:0E:BF:39 Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68 Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68 Certificate serial: 019B243F668B4511F07A3689CC52A4930D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft Manifest number: 0EC2 Signing time: Mon 15 Dec 2025 23:01:33 +0000 Manifest this update: Mon 15 Dec 2025 23:01:33 +0000 Manifest next update: Tue 16 Dec 2025 23:01:33 +0000 Files and hashes: 1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: 4L0E4dR5SwZvBm7CiqU9m+PGX57/0PfIl+CFaS/C2sQ=) 2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:66:8b:45:11:f0:7a:36:89:cc:52:a4:93:0d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68 Validity Not Before: Dec 15 23:01:33 2025 GMT Not After : Dec 16 23:01:33 2025 GMT Subject: CN=458a5e69c7b3d70e5fd428a71c76657d950ebf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:57:f4:13:a1:99:9c:a8:43:3e:cf:c3:9e: 56:95:1c:aa:27:9c:88:58:ee:91:fa:94:40:53:a2: c1:95:b2:af:16:08:a0:14:dc:93:38:b2:4f:15:3b: a9:51:2a:7e:18:97:55:ce:5d:e1:d9:62:de:be:f6: 1b:b0:f7:27:7a:27:38:e4:87:84:f7:d6:a8:39:5c: 3c:35:13:c8:2e:a9:95:1b:9c:f4:26:1e:7f:be:f9: 94:20:e6:a6:e5:59:48:d6:93:e6:e7:c6:c5:d8:3c: 99:a9:de:97:2f:86:bc:d3:b5:1f:eb:2e:b3:2c:91: 5a:60:ea:63:d8:3d:63:2f:4a:90:a8:bf:bd:5f:cf: 5d:28:a6:00:ca:32:a4:38:b3:89:ac:ba:c3:71:3b: d3:5d:c1:83:08:a9:c8:04:d9:dc:47:7f:f1:34:c9: bf:d7:51:12:e8:28:e3:c5:86:c1:f4:30:91:f0:d2: d1:fd:a4:d0:2c:26:c7:e5:b0:0b:c0:95:64:75:31: ad:c4:6c:54:bd:8d:72:13:81:27:f6:26:5a:4c:8e: 77:0f:6f:37:1c:39:ec:e1:42:2d:4e:14:5c:95:1c: be:48:b3:4c:e6:3a:bc:6b:6f:ba:36:95:b0:8e:7e: b3:3f:82:7e:26:8c:96:13:f7:18:9e:ea:c1:d7:8f: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:5E:69:C7:B3:D7:0E:5F:D4:28:A7:1C:76:65:7D:95:0E:BF:39 X509v3 Authority Key Identifier: keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:07:e3:91:e6:4a:3b:82:31:bd:0a:4a:6b:cc:0c:7c:5a:38: c5:7d:37:df:33:e8:7e:67:70:f7:ce:57:7b:c9:75:c2:08:de: dc:13:ca:e7:2b:fe:a6:f3:99:c2:bc:ba:84:07:f7:7a:e2:b2: 36:16:33:bb:3a:9c:cc:8d:43:03:dd:ce:ee:b4:62:06:40:5f: f7:69:87:24:d7:a9:bb:ac:e2:12:d3:04:04:a3:5c:65:6b:30: 72:b0:92:23:52:ba:ee:c4:39:f2:9e:e1:be:ea:cf:85:ed:0b: 2c:f9:de:45:14:09:6a:a1:a2:80:5c:99:23:69:7e:44:5d:6a: b1:6b:b7:64:c9:07:ed:f6:87:f0:70:84:1b:d7:06:b4:82:11: b7:5f:fe:72:b1:06:4a:0b:9a:ea:f3:ae:0a:da:ac:85:4e:82: 78:a0:c1:ae:1e:6a:61:09:01:ee:aa:39:ba:61:68:3d:c1:f9: 76:97:7b:55:16:b1:65:b7:41:59:f0:34:32:4c:94:d7:05:4a: 55:54:b4:49:bc:58:28:5c:77:a3:c1:9c:11:92:da:d8:e8:38: 58:45:fe:d6:d1:ff:4d:40:9a:58:2f:3c:e8:8c:67:43:8c:c1: fe:06:bc:57:34:52:53:f8:2b:59:63:b6:c0:2f:f7:de:26:eb: 9c:36:da:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskP2aLRRHwejaJzFKkkw1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MzQwMDc0MTRjZmYxNmNkY2YzYTNhYTIyYTk2Njc3Zjhi ZTJiNjgwHhcNMjUxMjE1MjMwMTMzWhcNMjUxMjE2MjMwMTMzWjAzMTEwLwYDVQQD Eyg0NThhNWU2OWM3YjNkNzBlNWZkNDI4YTcxYzc2NjU3ZDk1MGViZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvNX9BOhmZyoQz7Pw55WlRyqJ5yI WO6R+pRAU6LBlbKvFgigFNyTOLJPFTupUSp+GJdVzl3h2WLevvYbsPcneic45IeE 99aoOVw8NRPILqmVG5z0Jh5/vvmUIOam5VlI1pPm58bF2DyZqd6XL4a807Uf6y6z LJFaYOpj2D1jL0qQqL+9X89dKKYAyjKkOLOJrLrDcTvTXcGDCKnIBNncR3/xNMm/ 11ES6CjjxYbB9DCR8NLR/aTQLCbH5bALwJVkdTGtxGxUvY1yE4En9iZaTI53D283 HDns4UItThRclRy+SLNM5jq8a2+6NpWwjn6zP4J+JoyWE/cYnurB14+OMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWKXmnHs9cOX9Qopxx2ZX2VDr85MB8GA1UdIwQY MBaAFNY0AHQUz/Fs3POjqiKpZnf4vitoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2Yzgt ZGVjYjkyZDFhNTIzLzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kMDMwZWYtOTJjYi00Y2M1LTg2YzgtZGVjYjkyZDFhNTIz LzEvMWpRQWRCVFA4V3pjODZPcUlxbG1kX2ktSzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQfjkeZK O4IxvQpKa8wMfFo4xX033zPofmdw985Xe8l1wgje3BPK5yv+pvOZwry6hAf3euKy NhYzuzqczI1DA93O7rRiBkBf92mHJNepu6ziEtMEBKNcZWswcrCSI1K67sQ58p7h vurPhe0LLPneRRQJaqGigFyZI2l+RF1qsWu3ZMkH7faH8HCEG9cGtIIRt1/+crEG Sgua6vOuCtqshU6CeKDBrh5qYQkB7qo5umFoPcH5dpd7VRaxZbdBWfA0MkyU1wVK VVS0SbxYKFx3o8GcEZLa2Og4WEX+1tH/TUCaWC886IxnQ4zB/ga8VzRSU/grWWO2 wC/33ibrnDba0A== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:24 2025 by rpki-client