This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json) Hash identifier: nSn7MoafKpaTagmHCkf4dwo2nqPqXnCeQQsI8d5kLcA= Subject key identifier: DC:0B:49:5D:CE:05:90:A4:7A:70:BD:28:B5:7E:B9:0A:42:18:CE:25 Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf Certificate serial: 019AF465A41EA3DD3DCFF0DF0C30D3EABEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft Manifest number: 1389 Signing time: Sat 06 Dec 2025 16:01:33 +0000 Manifest this update: Sat 06 Dec 2025 16:01:33 +0000 Manifest next update: Sun 07 Dec 2025 16:01:33 +0000 Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=) 2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: 4Os0YiLqWGx5tAqXzzQH1FMFQCZHs48/UEv3E5zRjnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a4:1e:a3:dd:3d:cf:f0:df:0c:30:d3:ea:be:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf Validity Not Before: Dec 6 16:01:33 2025 GMT Not After : Dec 7 16:01:33 2025 GMT Subject: CN=dc0b495dce0590a47a70bd28b57eb90a4218ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:cc:09:ab:db:ac:2d:8e:b9:15:90:05:9a: 01:ae:91:05:12:42:3e:0c:14:a0:4a:02:f4:d8:59: f9:4e:e8:35:02:70:85:22:23:e8:ce:c0:c8:9b:73: 6b:34:f7:e6:b8:61:b4:30:15:cc:86:49:d1:a8:5f: 45:29:1d:7a:ae:c1:4b:c3:ed:ce:85:35:cb:fd:75: 46:1a:f0:23:9b:6d:22:79:76:ba:62:f6:fc:d4:18: 07:63:b3:c7:f7:a1:6a:f8:7b:23:0a:59:13:9a:b9: 7f:ba:dd:bb:6a:c6:3a:66:ab:08:33:44:76:b3:6a: 49:14:aa:fc:80:17:5d:c8:60:00:84:46:17:30:b3: d5:0c:d7:a0:68:d5:ea:d6:2f:48:79:e8:5c:89:c7: fb:82:1a:9f:70:c9:94:cc:2e:77:64:37:4b:2d:31: 6e:72:e1:aa:44:73:09:3d:50:fa:f2:b4:92:d4:61: 6b:11:7d:b2:db:6f:7c:2c:a4:9f:91:e7:a7:16:8a: 33:33:2d:8f:da:97:26:5b:88:98:c3:af:b9:52:49: 0d:3a:79:b4:a6:93:8f:59:9f:d3:e7:17:7f:0f:d3: 68:df:0a:13:0d:72:26:e7:91:94:1c:bc:b6:1b:79: f4:62:d3:40:7d:25:3a:b9:7c:05:7a:ee:90:37:24: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:49:5D:CE:05:90:A4:7A:70:BD:28:B5:7E:B9:0A:42:18:CE:25 X509v3 Authority Key Identifier: keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:34:fe:99:cf:8e:10:8f:ab:dc:f8:cf:92:bb:2a:51:b1: 91:0d:ba:4f:98:13:eb:bc:d3:3e:15:61:02:2a:9c:ff:53:05: 0b:d3:df:dd:15:0a:2a:99:a2:ef:76:2a:3c:55:e7:47:20:4b: be:93:44:c2:29:cc:86:10:49:ee:c8:5c:33:5a:02:42:1a:9c: 83:10:cf:06:4d:71:b4:12:ef:55:c8:35:40:7f:55:e7:24:cf: 6c:00:75:aa:84:9d:7d:8b:d9:9e:bf:26:57:b8:68:52:0b:51: 56:bd:30:fb:40:33:7d:9e:24:3a:a4:5f:27:77:5b:9e:9f:4c: 0a:0e:16:fc:00:af:f4:dd:bb:84:62:48:cd:2e:b9:9a:86:c2: c7:06:fd:7a:8d:06:46:c7:e7:ff:06:f3:b8:03:65:75:f9:ce: 3f:7a:ab:63:6c:44:b2:36:fe:e8:57:6a:65:5a:b3:3a:74:da: 8d:b4:34:5e:b1:e3:4b:10:b2:00:3d:1a:d9:99:67:2f:1a:ee: a5:81:84:74:85:19:e4:f6:e5:c2:75:70:75:22:6b:e8:87:ac: 6b:99:86:29:14:fd:7d:da:89:0f:ea:3a:4f:61:00:41:a1:31: a7:19:74:f6:4d:7d:56:1a:da:da:c5:5f:79:f3:f7:86:ce:b1: c0:b1:7d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaQeo909z/DfDDDT6r7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk NzBmY2YwHhcNMjUxMjA2MTYwMTMzWhcNMjUxMjA3MTYwMTMzWjAzMTEwLwYDVQQD EyhkYzBiNDk1ZGNlMDU5MGE0N2E3MGJkMjhiNTdlYjkwYTQyMThjZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RPMCavbrC2OuRWQBZoBrpEFEkI+ DBSgSgL02Fn5Tug1AnCFIiPozsDIm3NrNPfmuGG0MBXMhknRqF9FKR16rsFLw+3O hTXL/XVGGvAjm20ieXa6Yvb81BgHY7PH96Fq+HsjClkTmrl/ut27asY6ZqsIM0R2 s2pJFKr8gBddyGAAhEYXMLPVDNegaNXq1i9Ieehcicf7ghqfcMmUzC53ZDdLLTFu cuGqRHMJPVD68rSS1GFrEX2y2298LKSfkeenFoozMy2P2pcmW4iYw6+5UkkNOnm0 ppOPWZ/T5xd/D9No3woTDXIm55GUHLy2G3n0YtNAfSU6uXwFeu6QNyTH0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwLSV3OBZCkenC9KLV+uQpCGM4lMB8GA1UdIwQY MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It MGFlNjk2YmQzNjhhLzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw40/pnP jhCPq9z4z5K7KlGxkQ26T5gT67zTPhVhAiqc/1MFC9Pf3RUKKpmi73YqPFXnRyBL vpNEwinMhhBJ7shcM1oCQhqcgxDPBk1xtBLvVcg1QH9V5yTPbAB1qoSdfYvZnr8m V7hoUgtRVr0w+0AzfZ4kOqRfJ3dbnp9MCg4W/ACv9N27hGJIzS65mobCxwb9eo0G Rsfn/wbzuANldfnOP3qrY2xEsjb+6FdqZVqzOnTajbQ0XrHjSxCyAD0a2ZlnLxru pYGEdIUZ5PblwnVwdSJr6Iesa5mGKRT9fdqJD+o6T2EAQaExpxl09k19Vhra2sVf efP3hs6xwLF9jA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:15:57 2025 by rpki-client