This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json) Hash identifier: PVHpeePvQ5/0nQpTkd1O8ZoXUNKoL8/qkkKzMJHekdY= Subject key identifier: 68:D7:8E:7F:74:89:D8:D2:E3:19:5E:81:52:CA:AE:E7:0A:E5:90:58 Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Certificate serial: 019AF2091667AB1833A400FB1306E9CFC9D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft Manifest number: 0281 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=) 2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: UhT3LaNerS6Z0IgS69xbgkVPHz1aoMQp1W247UubafQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:67:ab:18:33:a4:00:fb:13:06:e9:cf:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=68d78e7f7489d8d2e3195e8152caaee70ae59058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:cf:0b:1d:65:9f:63:15:41:f7:a1:ca:5a: c4:3b:05:d6:b8:13:f2:dc:c7:fd:47:52:cd:21:95: cc:05:52:1b:8a:c1:13:fd:b0:4c:8a:de:8b:f9:c4: 7b:f2:da:f3:2b:6e:34:e3:5e:c9:58:7b:76:ed:27: 0b:7f:dc:86:9c:c5:c6:79:b7:05:d3:64:80:80:cb: 4a:36:f3:80:ff:c4:21:65:c3:72:70:5b:ed:82:a5: bf:fc:7a:ff:75:cf:fc:85:4e:b5:4f:1d:45:b6:4f: 6c:71:51:65:49:0b:4b:8b:c0:48:b1:dc:ff:67:ce: 38:da:82:ef:97:2f:81:9a:f8:54:9e:51:44:95:d8: 4c:a4:7b:cb:14:19:38:ab:a2:24:7f:a2:42:d1:06: ea:09:df:02:ce:dc:2f:88:d7:01:f8:06:96:c9:c2: f2:48:70:de:71:82:cc:ef:39:aa:fa:e1:11:cb:62: 7e:39:fc:46:c3:99:a8:7e:fb:50:c4:d3:c4:64:e1: 90:eb:f8:d7:62:e9:8c:33:e7:f9:ba:a8:ed:a1:b9: 32:b0:d9:b6:da:43:0d:08:47:57:5d:80:29:a5:ed: 8c:71:e7:fb:ee:c4:e8:4b:59:22:e5:34:2f:0f:d7: d1:53:3a:ac:33:77:ff:6e:30:fd:3b:e2:4a:7d:1f: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:8E:7F:74:89:D8:D2:E3:19:5E:81:52:CA:AE:E7:0A:E5:90:58 X509v3 Authority Key Identifier: keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d0:6e:b8:11:3e:7c:07:f5:eb:a1:8a:94:74:16:13:92:22: 4f:b1:c8:fb:d4:64:3f:dd:ea:1a:2c:3b:6a:11:d4:1a:d9:03: 3f:c9:86:06:02:3b:09:5d:4b:5b:80:68:38:17:bf:5a:5b:60: c1:24:47:90:fb:66:79:71:af:b2:d3:8b:c9:30:f0:37:75:05: c4:ad:71:16:b6:96:ea:79:7c:ea:c3:1a:17:91:46:5e:0f:5b: e9:45:d6:c0:9f:ef:fb:9e:cb:25:9f:6e:14:0e:36:19:9b:a1: 89:27:e9:f4:db:ab:91:36:53:31:98:e7:d7:28:24:1c:f5:77: 83:61:08:31:63:78:0d:3b:69:8a:59:48:f9:62:48:b8:3d:23: f9:97:fc:27:f4:b7:37:49:a6:7a:d9:43:03:ad:23:8c:d9:48: c7:2b:c7:b7:02:cc:01:16:9d:9f:b6:04:1b:38:ba:1c:de:ff: 5c:3d:5e:1d:a3:51:71:fb:58:bb:8b:27:a8:64:37:fb:67:13: 6a:c5:d9:5d:13:d9:aa:0b:65:ec:08:80:35:92:f6:73:08:c0: 7f:77:f0:a0:91:45:14:11:f5:65:20:8c:09:0b:20:ef:66:d1: 2a:f8:20:62:9e:6f:0e:4c:d7:6c:4e:47:a0:90:b3:af:40:18: a7:c3:5a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRZnqxgzpAD7Ewbpz8nQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzBlNzcyNDVjMjE1YTcwYmU0ZWY1N2QwM2JkMWQ4ZDRk YjU4OTgwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD Eyg2OGQ3OGU3Zjc0ODlkOGQyZTMxOTVlODE1MmNhYWVlNzBhZTU5MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYLPCx1ln2MVQfehylrEOwXWuBPy 3Mf9R1LNIZXMBVIbisET/bBMit6L+cR78trzK240417JWHt27ScLf9yGnMXGebcF 02SAgMtKNvOA/8QhZcNycFvtgqW//Hr/dc/8hU61Tx1Ftk9scVFlSQtLi8BIsdz/ Z8442oLvly+BmvhUnlFEldhMpHvLFBk4q6Ikf6JC0QbqCd8CztwviNcB+AaWycLy SHDecYLM7zmq+uERy2J+OfxGw5mofvtQxNPEZOGQ6/jXYumMM+f5uqjtobkysNm2 2kMNCEdXXYAppe2Mcef77sToS1ki5TQvD9fRUzqsM3f/bjD9O+JKfR+hlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjXjn90idjS4xlegVLKrucK5ZBYMB8GA1UdIwQY MBaAFI0w53JFwhWnC+TvV9A70djU21iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWIt NWYzY2Y5ZjNiNjE5LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82MDY4MjctYjcxMC00Y2VkLWI4MWItNWYzY2Y5ZjNiNjE5 LzEvalREbmNrWENGYWNMNU85WDBEdlIyTlRiV0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtBuuBE+ fAf166GKlHQWE5IiT7HI+9RkP93qGiw7ahHUGtkDP8mGBgI7CV1LW4BoOBe/Wltg wSRHkPtmeXGvstOLyTDwN3UFxK1xFraW6nl86sMaF5FGXg9b6UXWwJ/v+57LJZ9u FA42GZuhiSfp9NurkTZTMZjn1ygkHPV3g2EIMWN4DTtpillI+WJIuD0j+Zf8J/S3 N0mmetlDA60jjNlIxyvHtwLMARadn7YEGzi6HN7/XD1eHaNRcftYu4snqGQ3+2cT asXZXRPZqgtl7AiANZL2cwjAf3fwoJFFFBH1ZSCMCQsg72bRKvggYp5vDkzXbE5H oJCzr0AYp8NaqA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:16 2025 by rpki-client