This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json) Hash identifier: tWq1M8KVWgBi0VB3ybTu3DFJT4d9+DqJ6CR+lkwfYV0= Subject key identifier: 49:C0:63:C8:AB:F4:54:FB:4C:07:C7:72:7D:05:E2:7A:31:F7:84:00 Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Certificate serial: 019AF12E115955260C9CA4F7D6E871E17703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=) 2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=) 3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: qM9nrEejiHxJRazMC4EqVFHm1e+Kxee3nPQG+lXa77U=) 4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=) 5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=) 6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:11:59:55:26:0c:9c:a4:f7:d6:e8:71:e1:77:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=49c063c8abf454fb4c07c7727d05e27a31f78400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:ea:fc:7f:16:d6:d5:db:c0:7d:2d:91:8d: 75:ed:d1:2f:21:f9:50:b4:a2:66:a7:69:be:40:72: 34:99:fc:82:39:d9:01:5c:3b:b3:5b:3a:4a:25:38: c6:bc:50:3f:0f:c7:d0:e4:ec:cb:05:f9:4f:27:f9: 17:2d:66:52:4d:0c:ef:f3:5b:0d:10:71:44:c3:1f: a4:ea:30:cc:26:71:76:d2:0c:c5:f0:77:f6:3c:50: 72:4d:cc:0b:fc:f0:df:be:61:a9:5a:e3:17:7c:fa: 45:31:4d:b7:94:46:c1:15:80:3c:ea:3d:65:bd:77: ec:e5:80:6e:dd:50:ae:98:41:6a:f3:52:89:13:76: dd:95:1f:c4:df:35:8b:da:2b:00:4a:3b:3c:27:98: 8e:ca:05:96:58:1a:5a:16:16:5c:7c:ba:2d:1a:17: ca:eb:4d:6e:47:3a:92:01:24:5d:1e:6a:63:1d:b8: ae:a9:82:4f:ee:fc:56:bc:72:33:73:55:3b:02:9b: fc:83:bc:10:fc:6f:b4:00:90:fe:3c:6b:58:30:0f: d3:93:80:bb:44:84:52:a9:08:b0:8c:9b:5c:b5:0f: f6:e2:62:99:5b:fa:c1:75:5a:c9:05:46:5d:04:1a: d8:5a:02:2a:dc:ae:9d:e7:2c:3d:73:d9:25:4b:7f: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:63:C8:AB:F4:54:FB:4C:07:C7:72:7D:05:E2:7A:31:F7:84:00 X509v3 Authority Key Identifier: keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b5:dc:93:bd:65:8e:65:5d:5a:73:38:50:5e:e7:42:75:91: 5b:c0:c1:c5:54:ac:ef:2f:3b:9c:67:aa:43:00:6b:b3:65:c0: 3e:c6:f6:31:87:6b:3b:04:b0:2f:c5:d1:cb:4b:06:31:98:39: 63:d9:89:68:75:94:d6:d7:cb:35:7e:ed:92:ca:43:fd:a7:d2: a2:dc:6f:bf:01:63:c8:40:a1:cd:7c:ce:c5:1c:8f:60:f4:37: c3:cc:3d:e6:6a:70:10:ba:50:b2:f3:d9:84:88:93:33:03:33: 5c:eb:6f:a2:ba:d5:1f:ff:55:fc:cb:8e:89:e8:fd:f5:58:9f: fb:34:8e:7b:f9:61:aa:65:ed:53:16:02:bb:86:38:97:d0:59: fa:b0:65:b5:72:b8:ba:e8:b8:aa:3a:1e:3e:f0:f3:11:06:47: 59:00:a8:cf:35:9f:ca:43:26:dc:14:b5:96:5d:af:83:d9:4a: 80:f6:80:20:c3:89:a2:07:6f:05:1d:37:2e:78:ec:3a:aa:3f: 8f:9c:f1:72:04:83:14:ec:f1:a8:ac:38:cc:df:2d:83:40:6b: e9:f9:c1:8b:6b:ed:7f:f4:98:b7:ae:2b:68:4b:c4:04:11:d4: c2:3e:c9:bf:ff:7d:63:69:06:a1:6f:38:53:97:2e:45:9c:1d: ad:59:3b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhFZVSYMnKT31uhx4XcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2 Y2I3NGQwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD Eyg0OWMwNjNjOGFiZjQ1NGZiNGMwN2M3NzI3ZDA1ZTI3YTMxZjc4NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0bq/H8W1tXbwH0tkY117dEvIflQ tKJmp2m+QHI0mfyCOdkBXDuzWzpKJTjGvFA/D8fQ5OzLBflPJ/kXLWZSTQzv81sN EHFEwx+k6jDMJnF20gzF8Hf2PFByTcwL/PDfvmGpWuMXfPpFMU23lEbBFYA86j1l vXfs5YBu3VCumEFq81KJE3bdlR/E3zWL2isASjs8J5iOygWWWBpaFhZcfLotGhfK 601uRzqSASRdHmpjHbiuqYJP7vxWvHIzc1U7Apv8g7wQ/G+0AJD+PGtYMA/Tk4C7 RIRSqQiwjJtctQ/24mKZW/rBdVrJBUZdBBrYWgIq3K6d5yw9c9klS3+hbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnAY8ir9FT7TAfHcn0F4nox94QAMB8GA1UdIwQY MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt MDEzN2IxZjc1ZDAyLzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLXck71l jmVdWnM4UF7nQnWRW8DBxVSs7y87nGeqQwBrs2XAPsb2MYdrOwSwL8XRy0sGMZg5 Y9mJaHWU1tfLNX7tkspD/afSotxvvwFjyEChzXzOxRyPYPQ3w8w95mpwELpQsvPZ hIiTMwMzXOtvorrVH/9V/MuOiej99Vif+zSOe/lhqmXtUxYCu4Y4l9BZ+rBltXK4 uui4qjoePvDzEQZHWQCozzWfykMm3BS1ll2vg9lKgPaAIMOJogdvBR03LnjsOqo/ j5zxcgSDFOzxqKw4zN8tg0Br6fnBi2vtf/SYt64raEvEBBHUwj7Jv/99Y2kGoW84 U5cuRZwdrVk78A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:40 2025 by rpki-client