This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json) Hash identifier: /s+kb6rwzvdohrltsxpMNI7Xb6k+phmTrv7VInUChCg= Subject key identifier: D1:C2:D7:71:C4:33:9E:F5:43:F2:29:B8:37:9A:77:D0:8C:DC:7F:DC Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Certificate serial: 019AF163DCAF92AA0C9C00007FA9585E002B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft Manifest number: 0AE4 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=) 2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: oDZgWzte1M4NYdo3rNgbM0t74qk8CgiT4kC5dBqpC5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dc:af:92:aa:0c:9c:00:00:7f:a9:58:5e:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=d1c2d771c4339ef543f229b8379a77d08cdc7fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:b6:ec:c8:06:58:86:8b:db:77:f3:ce:65: 0e:f5:ea:78:56:a0:f6:64:6e:23:28:68:42:71:80: 08:20:8b:94:c6:c1:b1:9f:09:47:05:0a:5e:bc:48: d3:5c:4c:0c:9a:15:95:63:fd:2e:0c:32:09:79:d9: 86:cb:ea:9b:8a:7d:1c:5a:82:93:2f:00:cc:6d:17: 9b:b3:b1:7b:bd:f9:d1:52:26:2d:e4:92:69:a9:63: dd:62:04:ca:65:17:aa:05:4b:8b:84:ad:2d:05:30: 31:1c:ee:af:f9:ad:c1:70:6f:80:b6:8f:62:08:4d: 49:14:65:b2:cb:b8:eb:b7:1b:70:5d:0e:47:17:e5: 61:53:ca:ff:8e:b9:2b:46:8d:52:e3:06:1b:fb:b8: a6:19:b4:f5:70:23:5f:ad:38:6e:60:46:ec:8a:13: 95:9d:ec:3c:b4:98:03:61:89:28:80:5f:22:fe:26: ce:00:05:14:4e:44:45:43:1c:7c:18:51:e0:39:59: dd:08:08:b9:cf:de:b4:67:35:64:80:69:32:e1:2a: ef:a9:82:b9:2c:d6:93:ff:23:68:79:18:55:cb:d8: 0b:f1:88:ad:6b:a8:15:09:c0:12:01:10:e1:f3:5a: c0:c6:e6:b0:e1:7a:d6:f6:5e:79:1c:e5:d9:d7:18: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C2:D7:71:C4:33:9E:F5:43:F2:29:B8:37:9A:77:D0:8C:DC:7F:DC X509v3 Authority Key Identifier: keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ae:44:2d:11:f7:3a:c9:2e:b2:2d:f1:9f:51:2c:b2:3c:5b: 80:d5:cb:71:0e:f9:d8:72:1f:ff:8f:15:8f:be:8e:69:df:ea: d5:7a:f7:4d:03:3f:9c:e3:5e:79:19:04:ec:f0:8a:49:27:74: 19:0c:d0:73:f0:05:3a:ad:54:aa:e2:47:cc:27:09:13:29:3d: 22:ba:92:9c:5e:a9:cf:f5:23:4e:5c:3e:bf:a7:b2:4d:d8:a9: 45:22:45:45:ac:0d:7d:8a:82:b9:cf:27:4f:13:87:5a:b4:40: cd:4b:a8:6d:13:ac:f1:d8:d4:7c:ec:7f:3f:a3:fd:a6:44:f4: 03:16:80:f6:a8:36:a4:ef:e8:ea:63:cc:50:60:0e:8e:ed:51: 55:95:4e:65:86:5e:ef:92:6c:86:34:83:cc:05:ef:01:77:49: cc:9b:73:3d:cf:a1:9e:ba:c4:aa:be:66:dc:ab:a2:3c:af:24: 90:54:7f:72:6e:94:03:94:f7:eb:04:aa:e2:a8:86:95:82:92: d0:d6:9f:5d:9f:9d:2c:34:63:90:f9:3a:0d:da:2d:54:82:1f: 13:9b:49:90:8d:cb:60:ef:36:1f:50:d4:7f:9c:4e:62:f2:39: 76:f5:56:ef:e2:06:91:22:7f:e8:f5:f6:fc:ed:97:e5:cf:18: 3e:ce:77:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9yvkqoMnAAAf6lYXgArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy YWIwYWIwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhkMWMyZDc3MWM0MzM5ZWY1NDNmMjI5YjgzNzlhNzdkMDhjZGM3ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApza27MgGWIaL23fzzmUO9ep4VqD2 ZG4jKGhCcYAIIIuUxsGxnwlHBQpevEjTXEwMmhWVY/0uDDIJedmGy+qbin0cWoKT LwDMbRebs7F7vfnRUiYt5JJpqWPdYgTKZReqBUuLhK0tBTAxHO6v+a3BcG+Ato9i CE1JFGWyy7jrtxtwXQ5HF+VhU8r/jrkrRo1S4wYb+7imGbT1cCNfrThuYEbsihOV new8tJgDYYkogF8i/ibOAAUUTkRFQxx8GFHgOVndCAi5z960ZzVkgGky4SrvqYK5 LNaT/yNoeRhVy9gL8Yita6gVCcASARDh81rAxuaw4XrW9l55HOXZ1xjgQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHC13HEM571Q/IpuDead9CM3H/cMB8GA1UdIwQY MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK5ELRH3 Oskusi3xn1EssjxbgNXLcQ752HIf/48Vj76Oad/q1Xr3TQM/nONeeRkE7PCKSSd0 GQzQc/AFOq1UquJHzCcJEyk9IrqSnF6pz/UjTlw+v6eyTdipRSJFRawNfYqCuc8n TxOHWrRAzUuobROs8djUfOx/P6P9pkT0AxaA9qg2pO/o6mPMUGAOju1RVZVOZYZe 75JshjSDzAXvAXdJzJtzPc+hnrrEqr5m3KuiPK8kkFR/cm6UA5T36wSq4qiGlYKS 0NafXZ+dLDRjkPk6DdotVIIfE5tJkI3LYO82H1DUf5xOYvI5dvVW7+IGkSJ/6PX2 /O2X5c8YPs53Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:38 2025 by rpki-client