This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json) Hash identifier: H6vebDwVtYC7E3NA2vr8Sr+mMgPTKmwBgrW68Weq1yE= Subject key identifier: DC:FD:2C:53:AB:FD:30:93:18:5A:82:87:C0:9F:0C:9C:7B:7F:ED:F6 Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Certificate serial: 019AF23FEB52C526C95A77305528586DE015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=) 2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: 9W7vtu6sFqh6A0dY402W1GckFRgK/v+tsP8fQPYq9ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:eb:52:c5:26:c9:5a:77:30:55:28:58:6d:e0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=dcfd2c53abfd3093185a8287c09f0c9c7b7fedf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:e1:4d:2a:0a:24:3f:f9:e6:c8:e6:89:5b: b6:2e:d4:63:41:87:eb:9a:f5:52:ec:74:fe:ea:f9: 86:d5:d1:8f:4e:98:51:e0:be:d4:f8:19:73:9a:c1: 3c:5e:0d:37:b1:e6:ba:b9:04:52:23:b0:0f:84:b5: 19:97:42:94:3f:16:28:a1:5f:77:ad:28:66:9a:5b: aa:05:25:8b:3e:58:ba:4a:98:ff:3e:07:50:42:3e: f7:25:81:88:14:96:cf:ef:47:1b:6b:0f:56:13:c1: 4b:a4:a7:a1:16:d9:a3:ec:6f:d2:98:ec:4d:9b:ac: c0:66:be:fe:6f:94:4e:78:e9:d6:7d:a5:65:76:78: 6b:33:53:0b:a8:92:0f:da:ce:e2:42:0f:c4:62:37: d6:b5:3c:2f:37:87:6e:51:b3:94:14:8c:d2:a0:8c: a7:92:b3:08:d4:9e:fd:ee:5d:42:4b:ce:98:05:d6: 85:1f:1f:1b:60:0e:83:87:83:07:34:ff:9b:fa:96: 30:9f:8e:52:86:cb:18:c4:cd:fe:0a:d6:dd:2b:2f: 82:cd:40:08:ee:36:0d:66:d3:9a:ed:9b:a0:cc:12: 68:da:be:63:0e:e7:ad:8c:6a:67:dd:99:13:f4:33: b9:ae:41:56:42:8c:a3:e0:8c:5f:06:d9:a7:28:58: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:2C:53:AB:FD:30:93:18:5A:82:87:C0:9F:0C:9C:7B:7F:ED:F6 X509v3 Authority Key Identifier: keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:43:8e:bf:af:32:23:37:4d:1c:3f:53:ca:f7:60:3a:4b:aa: e3:57:c8:10:bd:59:92:19:27:d9:8b:7f:42:70:75:53:d1:0e: f8:4b:b3:7b:13:76:8a:f9:8e:f5:58:bd:e7:46:73:74:1d:c8: cc:bf:ea:e8:f4:76:c3:f5:79:67:d1:7e:30:c8:f7:c6:fa:1b: 08:ea:42:10:9d:d4:1c:6b:b4:9d:e3:1d:fa:6f:9c:0b:7d:a5: ae:44:9c:d2:c0:69:1c:09:82:8b:c5:26:27:3d:35:31:3c:47: 5f:9f:2b:a4:5d:36:81:0c:32:9c:3d:ef:bc:57:5d:e9:57:b2: 38:a5:1d:55:e2:a7:ae:55:7c:24:0a:78:d3:24:66:d5:4d:ca: dd:8d:00:1e:f0:9e:28:6e:24:7b:c3:60:7a:44:ef:81:0f:99: 9f:8b:28:3f:0d:dc:84:f3:52:57:f8:8f:ef:64:9d:d0:b0:63: 13:6f:f8:87:7b:19:6b:58:76:49:18:7f:8a:52:e9:cb:94:1e: 59:38:d5:2c:ee:6c:8f:b4:70:3a:17:ac:a0:43:04:3c:91:ce: 56:67:78:f3:3d:41:02:b8:bb:0e:ec:ae:36:65:4e:b0:8e:95: 97:55:d3:1f:bb:4b:1a:3b:8f:7c:20:0e:fb:2d:24:2d:9f:14: 2b:df:c3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+tSxSbJWncwVShYbeAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0 NmE0ZGQwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EyhkY2ZkMmM1M2FiZmQzMDkzMTg1YTgyODdjMDlmMGM5YzdiN2ZlZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosjhTSoKJD/55sjmiVu2LtRjQYfr mvVS7HT+6vmG1dGPTphR4L7U+BlzmsE8Xg03sea6uQRSI7APhLUZl0KUPxYooV93 rShmmluqBSWLPli6Spj/PgdQQj73JYGIFJbP70cbaw9WE8FLpKehFtmj7G/SmOxN m6zAZr7+b5ROeOnWfaVldnhrM1MLqJIP2s7iQg/EYjfWtTwvN4duUbOUFIzSoIyn krMI1J797l1CS86YBdaFHx8bYA6Dh4MHNP+b+pYwn45ShssYxM3+CtbdKy+CzUAI 7jYNZtOa7ZugzBJo2r5jDuetjGpn3ZkT9DO5rkFWQoyj4IxfBtmnKFjo0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz9LFOr/TCTGFqCh8CfDJx7f+32MB8GA1UdIwQY MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4 LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEOOv68y IzdNHD9TyvdgOkuq41fIEL1Zkhkn2Yt/QnB1U9EO+EuzexN2ivmO9Vi950ZzdB3I zL/q6PR2w/V5Z9F+MMj3xvobCOpCEJ3UHGu0neMd+m+cC32lrkSc0sBpHAmCi8Um Jz01MTxHX58rpF02gQwynD3vvFdd6VeyOKUdVeKnrlV8JAp40yRm1U3K3Y0AHvCe KG4ke8NgekTvgQ+Zn4soPw3chPNSV/iP72Sd0LBjE2/4h3sZa1h2SRh/ilLpy5Qe WTjVLO5sj7RwOhesoEMEPJHOVmd48z1BAri7DuyuNmVOsI6Vl1XTH7tLGjuPfCAO +y0kLZ8UK9/D6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:47 2025 by rpki-client