This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json) Hash identifier: HQKFav0+d3z760BJUexViy8qR0zkhDgSMvjFbgXbn4g= Subject key identifier: EF:78:D6:E5:B5:3B:02:41:69:F3:EB:07:9E:E7:25:AE:10:F6:EF:D2 Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Certificate serial: 019AF1647CFCFABFD8556F734B74245C7EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft Manifest number: 06D4 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=) 2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: dE4+umaZgPW8n17yk410WUmAdJRf/Su+A7Pxgxv3xIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7c:fc:fa:bf:d8:55:6f:73:4b:74:24:5c:7e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=ef78d6e5b53b024169f3eb079ee725ae10f6efd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:a5:0d:27:19:4f:c5:25:02:3e:99:4c:1b: ad:3d:c6:0d:ec:74:94:39:24:85:41:a4:24:4c:75: a4:31:cf:65:78:e9:73:f1:ed:cd:5b:95:6c:74:fd: 85:f7:56:2f:f7:74:90:78:dc:37:7a:f6:3d:6f:94: ad:59:b9:40:bf:a5:0f:5f:d4:4b:e7:b6:62:c1:d3: 6a:aa:21:37:96:50:4c:74:af:64:28:76:17:d5:c8: c2:46:d9:15:08:ea:95:29:db:f3:d5:bf:b5:7f:34: b5:e7:5f:73:dd:0d:71:79:87:d1:a8:fe:dc:04:92: 0d:79:62:2c:1b:ad:7b:ff:b9:51:b3:59:11:50:89: fa:da:d4:70:23:df:5c:68:36:f0:63:44:63:8a:8d: c4:b8:a5:aa:86:23:e8:b8:35:9d:9c:e8:b6:d5:92: 0c:0e:b7:d0:19:33:b0:dd:d3:00:fe:33:03:a3:b5: 94:ce:9d:28:31:a2:57:0e:b7:64:2f:e4:8b:ff:33: 9b:73:25:f0:4b:06:d5:be:39:91:6a:8b:24:e0:99: 29:4c:74:c8:e8:7c:46:d2:1d:56:42:b3:4e:fa:b7: eb:db:33:01:28:4e:c0:bc:26:61:c3:6a:94:4c:ba: 62:12:c4:4b:71:75:31:b9:c9:c4:4d:88:42:fa:11: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:78:D6:E5:B5:3B:02:41:69:F3:EB:07:9E:E7:25:AE:10:F6:EF:D2 X509v3 Authority Key Identifier: keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:b0:67:71:70:7c:c1:ef:f0:7e:37:01:c9:e9:3f:12:8f:0e: 05:9e:30:2a:c7:4d:7f:d9:6b:71:c2:bb:ca:7b:9b:6f:b9:de: e6:1c:1e:80:3a:35:87:b2:be:87:bb:8f:c0:a6:72:f8:7d:ed: 3c:96:3a:cc:d8:ca:c2:1d:7e:dd:33:49:29:84:dd:41:e6:59: 8b:a1:58:11:e4:52:c1:9d:e7:18:35:f7:8a:85:ea:45:de:f9: 3d:7a:db:3e:01:1f:fb:dd:42:72:f4:5e:93:33:d1:eb:eb:09: 37:c0:36:9b:7e:0e:57:b2:fc:30:ff:08:3b:60:57:b8:22:6c: 45:71:8a:7b:c6:9c:b2:fc:76:5c:aa:3b:09:c6:2b:55:86:b8: 97:c4:55:16:d3:ad:7d:ec:cf:5a:48:39:44:43:b9:9e:1e:26: 85:41:ce:d1:03:83:fd:7a:ab:13:69:e9:7c:6c:28:b1:fa:15: 39:e9:0a:30:4e:3f:f6:b0:8d:a9:a5:3f:0e:0c:51:60:00:00: 25:a5:c6:31:8c:b8:e8:1b:f2:b7:de:c7:4e:bf:37:5f:48:8e: ed:d4:75:ec:3c:0d:b8:9a:cd:78:cf:1a:d0:31:eb:2e:a5:a3: d4:7a:14:d2:01:14:30:e9:a6:6c:5b:72:d0:c9:b9:12:dc:d1: a1:44:5b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHz8+r/YVW9zS3QkXH7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTI4MmE1NzZmZDYyYTBhMjQxNjZiNWVjMWYxMjRlNDI1 OGRiNDkwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EyhlZjc4ZDZlNWI1M2IwMjQxNjlmM2ViMDc5ZWU3MjVhZTEwZjZlZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmlDScZT8UlAj6ZTButPcYN7HSU OSSFQaQkTHWkMc9leOlz8e3NW5VsdP2F91Yv93SQeNw3evY9b5StWblAv6UPX9RL 57ZiwdNqqiE3llBMdK9kKHYX1cjCRtkVCOqVKdvz1b+1fzS1519z3Q1xeYfRqP7c BJINeWIsG617/7lRs1kRUIn62tRwI99caDbwY0Rjio3EuKWqhiPouDWdnOi21ZIM DrfQGTOw3dMA/jMDo7WUzp0oMaJXDrdkL+SL/zObcyXwSwbVvjmRaosk4JkpTHTI 6HxG0h1WQrNO+rfr2zMBKE7AvCZhw2qUTLpiEsRLcXUxucnETYhC+hH5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO941uW1OwJBafPrB57nJa4Q9u/SMB8GA1UdIwQY MBaAFPySgqV2/WKgokFmtewfEk5CWNtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjIt NWNlOTgzMmU3NDk1LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjk5NzUtYWZmZC00ZjhlLWE5ZjItNWNlOTgzMmU3NDk1 LzEvX0pLQ3BYYjlZcUNpUVdhMTdCOFNUa0pZMjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07BncXB8 we/wfjcByek/Eo8OBZ4wKsdNf9lrccK7ynubb7ne5hwegDo1h7K+h7uPwKZy+H3t PJY6zNjKwh1+3TNJKYTdQeZZi6FYEeRSwZ3nGDX3ioXqRd75PXrbPgEf+91CcvRe kzPR6+sJN8A2m34OV7L8MP8IO2BXuCJsRXGKe8acsvx2XKo7CcYrVYa4l8RVFtOt fezPWkg5REO5nh4mhUHO0QOD/XqrE2npfGwosfoVOekKME4/9rCNqaU/DgxRYAAA JaXGMYy46Bvyt97HTr83X0iO7dR17DwNuJrNeM8a0DHrLqWj1HoU0gEUMOmmbFty 0Mm5EtzRoURbHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:52 2025 by rpki-client