This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json) Hash identifier: kDs7hc2dUYZT+IGMI4hJkKY+LcxKTxJrCIu+vrL5L6U= Subject key identifier: 2F:1B:ED:6A:4F:2D:E5:FD:BA:07:14:D7:9A:65:FF:C5:BD:60:C4:4D Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575 Certificate serial: 019AF0517E0D67699CADDFD7D7A9FB2800FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft Manifest number: 0121 Signing time: Fri 05 Dec 2025 21:01:03 +0000 Manifest this update: Fri 05 Dec 2025 21:01:03 +0000 Manifest next update: Sat 06 Dec 2025 21:01:03 +0000 Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: BCBAmm9wYZ/urSjXJP4nvNNgPaQREJB7Ed5zNkOXDLU=) 2: Q22mPslur8WPngA2rLljsndPcGU.roa (hash: o/1rl6NTC00BQMt8kFlnIsok6oHP3+Vsj+2hKoZrxAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:7e:0d:67:69:9c:ad:df:d7:d7:a9:fb:28:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7c2562038f081d18d85269407131c984003e575 Validity Not Before: Dec 5 21:01:03 2025 GMT Not After : Dec 6 21:01:03 2025 GMT Subject: CN=2f1bed6a4f2de5fdba0714d79a65ffc5bd60c44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:38:32:8c:88:26:ff:26:5f:a9:16:89:c9: 7a:0c:2d:d3:2e:18:58:b7:12:61:e9:64:67:ca:4a: 0d:7e:ce:95:1c:9a:4a:98:57:c3:3e:64:7d:80:2f: a1:5b:64:49:07:42:01:b9:80:2c:6b:f3:c7:e9:89: 4d:39:fe:86:a9:ba:fe:61:f8:e9:59:31:e5:ec:ae: 2b:1e:47:b0:f2:f8:86:50:22:81:9a:93:9f:eb:35: ef:80:01:8c:d9:75:9d:43:8b:8f:83:5e:ce:2e:3c: f1:10:a4:04:15:03:7b:02:a1:54:7a:64:e2:d3:d5: b5:f5:6c:4c:44:ff:3a:95:fd:9a:8c:91:4e:eb:ad: 48:7a:2d:43:39:51:6d:0f:b5:cb:3e:4b:ab:a0:33: f2:a6:4d:af:45:24:11:05:f9:2f:8c:4b:32:75:74: 89:a0:cd:21:e2:ed:5f:55:65:38:fb:4b:05:4b:b9: d1:a6:98:73:1b:0d:70:8e:40:1d:0c:03:95:ac:9a: 69:92:53:5b:d8:69:16:1f:9b:e3:db:e8:24:4b:da: a6:68:8f:0b:44:3f:e7:28:a6:d1:48:0a:21:47:27: 0e:2b:a7:51:dc:a7:ff:16:ff:9e:90:29:95:84:ad: 3e:1b:df:41:cd:9c:55:ca:98:c0:3b:cf:e8:35:27: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1B:ED:6A:4F:2D:E5:FD:BA:07:14:D7:9A:65:FF:C5:BD:60:C4:4D X509v3 Authority Key Identifier: keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:45:8c:fe:c9:5a:7a:8e:45:aa:23:f9:bf:04:15:54:85:a7: b0:9c:cd:f4:f7:bf:b0:90:e2:a2:39:e4:66:ae:e3:65:ae:e9: cd:19:94:29:ea:f7:ce:63:8c:32:fd:bf:fb:8e:2b:e3:38:7a: bf:d1:24:5d:a8:fa:4a:4b:57:18:52:fa:90:27:a8:04:6c:6a: c5:fb:91:96:09:da:76:90:01:43:c2:b2:ac:b7:c8:36:25:1d: 7a:f4:40:87:00:49:91:16:fd:7c:6a:68:4a:88:e3:d9:2d:eb: 41:af:57:36:a8:2f:11:43:c8:78:71:47:47:13:8e:b3:21:12: 7c:a1:a1:14:57:89:08:6c:1a:ff:84:cf:cf:db:e2:2f:35:d1: 75:50:c5:8a:51:06:fa:f9:b8:c6:04:4f:78:77:a7:0e:45:7b: 1e:7c:b0:6b:2f:7a:4d:62:52:33:d2:3c:74:35:1f:5c:6e:cd: ce:7e:cc:a0:31:ab:fe:7e:ad:68:05:d2:3f:4d:0c:55:5f:42: 68:69:69:47:78:2e:c3:1c:c6:39:d3:ea:a6:4e:f4:3d:7c:30: a6:9e:6a:fc:d2:f6:27:0e:45:8e:44:e7:86:fa:1f:23:55:9a: 6b:fb:cf:82:62:de:52:b8:27:5c:03:5e:b6:d7:20:fe:b7:ba: 2e:93:8e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUX4NZ2mcrd/X16n7KAD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YzI1NjIwMzhmMDgxZDE4ZDg1MjY5NDA3MTMxYzk4NDAw M2U1NzUwHhcNMjUxMjA1MjEwMTAzWhcNMjUxMjA2MjEwMTAzWjAzMTEwLwYDVQQD EygyZjFiZWQ2YTRmMmRlNWZkYmEwNzE0ZDc5YTY1ZmZjNWJkNjBjNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopU4MoyIJv8mX6kWicl6DC3TLhhY txJh6WRnykoNfs6VHJpKmFfDPmR9gC+hW2RJB0IBuYAsa/PH6YlNOf6Gqbr+Yfjp WTHl7K4rHkew8viGUCKBmpOf6zXvgAGM2XWdQ4uPg17OLjzxEKQEFQN7AqFUemTi 09W19WxMRP86lf2ajJFO661Iei1DOVFtD7XLPkuroDPypk2vRSQRBfkvjEsydXSJ oM0h4u1fVWU4+0sFS7nRpphzGw1wjkAdDAOVrJppklNb2GkWH5vj2+gkS9qmaI8L RD/nKKbRSAohRycOK6dR3Kf/Fv+ekCmVhK0+G99BzZxVypjAO8/oNScs0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8b7WpPLeX9ugcU15pl/8W9YMRNMB8GA1UdIwQY MBaAFPfCViA48IHRjYUmlAcTHJhAA+V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDIt YWQwOTRiMzE0ZTBmLzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDItYWQwOTRiMzE0ZTBm LzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0WM/sla eo5FqiP5vwQVVIWnsJzN9Pe/sJDiojnkZq7jZa7pzRmUKer3zmOMMv2/+44r4zh6 v9EkXaj6SktXGFL6kCeoBGxqxfuRlgnadpABQ8KyrLfINiUdevRAhwBJkRb9fGpo Sojj2S3rQa9XNqgvEUPIeHFHRxOOsyESfKGhFFeJCGwa/4TPz9viLzXRdVDFilEG +vm4xgRPeHenDkV7Hnyway96TWJSM9I8dDUfXG7Nzn7MoDGr/n6taAXSP00MVV9C aGlpR3guwxzGOdPqpk70PXwwpp5q/NL2Jw5FjkTnhvofI1Waa/vPgmLeUrgnXANe ttcg/re6LpOOPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:06 2025 by rpki-client