This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json) Hash identifier: JgKNrbuXwWNi0Ax5LbSvflPbBRxqL2EQUeWAtngWixI= Subject key identifier: 45:C5:36:37:74:C8:56:38:A8:EF:7F:A7:0B:BE:C4:BF:F1:F5:E7:A9 Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Certificate serial: 019AF3BFE232EDFC8C67EEB7D29004DFD5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft Manifest number: 1305 Signing time: Sat 06 Dec 2025 13:00:29 +0000 Manifest this update: Sat 06 Dec 2025 13:00:29 +0000 Manifest next update: Sun 07 Dec 2025 13:00:29 +0000 Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=) 2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: DNsOq/K3d+AfYiuRwHTnFcsFpJiXhx8hnqV5P4lLVuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e2:32:ed:fc:8c:67:ee:b7:d2:90:04:df:d5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Validity Not Before: Dec 6 13:00:29 2025 GMT Not After : Dec 7 13:00:29 2025 GMT Subject: CN=45c5363774c85638a8ef7fa70bbec4bff1f5e7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:01:6a:8f:60:f3:5c:93:b2:95:73:9e:e3: 04:dd:80:3e:24:21:e4:b3:f5:87:74:e5:8c:97:24: c3:5c:e2:66:1c:c1:eb:96:05:45:f8:5a:1e:51:e6: 94:24:ac:d1:07:03:38:be:a4:f2:d0:b1:08:b9:99: bc:00:bd:9e:1f:35:42:e6:3c:59:b8:38:3d:45:fc: cb:7c:bc:59:41:b3:a9:9c:04:fb:a2:7a:1c:cb:77: b7:b6:a1:bc:e5:29:39:f1:45:cd:c3:4d:8f:af:cd: 96:b8:8b:2e:7c:9f:1f:a6:09:c4:42:83:b7:ef:89: 45:7c:a4:5e:f7:72:2a:e1:24:d7:af:12:a9:f1:b0: 24:a8:c1:f5:29:06:6e:54:80:6b:14:e1:96:27:1a: 54:5e:f2:b9:3d:f4:99:f9:5d:c8:ff:ac:65:c9:2c: a6:75:cd:76:e1:58:78:b7:de:01:86:91:f8:c7:93: 95:cf:c6:e6:3d:24:cc:e7:b3:69:85:a9:d8:6f:fa: bd:7e:04:45:9c:d4:39:46:8f:d9:08:27:12:d0:f8: 77:32:09:cb:50:d5:32:75:3c:1c:1e:ed:1c:37:cf: de:d7:2a:6d:c4:4c:6c:47:55:d9:47:3c:bb:85:ca: 4a:73:48:3d:2d:2e:85:9f:3c:71:f6:ed:0a:6d:e3: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C5:36:37:74:C8:56:38:A8:EF:7F:A7:0B:BE:C4:BF:F1:F5:E7:A9 X509v3 Authority Key Identifier: keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:79:37:4d:01:7e:fe:4d:d3:b5:77:c1:35:a0:29:90:20: 29:87:c1:b9:fd:6d:a2:03:13:95:1b:6f:42:36:ba:97:69:c0: 14:a8:c2:4e:d8:bd:3c:c9:68:d5:3e:69:f5:ef:14:9d:7b:11: 37:9e:63:8f:5d:e8:c1:bf:bc:30:10:00:0e:4b:1b:20:4c:a2: f8:fd:81:b6:b9:f4:ba:b7:8d:44:2b:1f:a4:da:4e:a5:da:16: 2a:13:2b:5c:91:52:64:18:37:c4:ab:05:6d:44:ca:0d:60:9e: e6:1a:6b:35:ee:f3:c4:c5:06:d2:b2:d2:eb:db:81:8b:32:52: 86:47:d6:81:c9:eb:76:bd:66:a3:01:62:0f:ba:03:86:c1:fb: 8b:a1:12:f9:a0:61:43:a8:42:67:f8:07:95:ed:57:f0:09:8b: cf:51:53:a9:a2:7c:7e:7d:85:85:cd:7c:91:8d:dd:3c:cf:c6: 54:05:9c:bc:a2:ca:57:0e:38:27:fe:d6:78:dd:22:25:45:69: e6:bb:32:80:ec:8f:5f:c3:d0:13:64:4c:84:97:98:c0:8a:00: 2d:43:4d:66:ee:e7:ba:af:c3:51:59:64:e2:f8:ea:48:5b:3a: 94:2b:75:da:bc:f9:85:bb:98:d9:27:a7:55:22:d4:32:95:e7: 5c:da:ba:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+Iy7fyMZ+630pAE39WtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy ZTEyNjkwHhcNMjUxMjA2MTMwMDI5WhcNMjUxMjA3MTMwMDI5WjAzMTEwLwYDVQQD Eyg0NWM1MzYzNzc0Yzg1NjM4YThlZjdmYTcwYmJlYzRiZmYxZjVlN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIYBao9g81yTspVznuME3YA+JCHk s/WHdOWMlyTDXOJmHMHrlgVF+FoeUeaUJKzRBwM4vqTy0LEIuZm8AL2eHzVC5jxZ uDg9RfzLfLxZQbOpnAT7onocy3e3tqG85Sk58UXNw02Pr82WuIsufJ8fpgnEQoO3 74lFfKRe93Iq4STXrxKp8bAkqMH1KQZuVIBrFOGWJxpUXvK5PfSZ+V3I/6xlySym dc124Vh4t94BhpH4x5OVz8bmPSTM57NphanYb/q9fgRFnNQ5Ro/ZCCcS0Ph3MgnL UNUydTwcHu0cN8/e1yptxExsR1XZRzy7hcpKc0g9LS6Fnzxx9u0KbeM7vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXFNjd0yFY4qO9/pwu+xL/x9eepMB8GA1UdIwQY MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt OGYxODFkM2EzZThmLzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2x5N00B fv5N07V3wTWgKZAgKYfBuf1togMTlRtvQja6l2nAFKjCTti9PMlo1T5p9e8UnXsR N55jj13owb+8MBAADksbIEyi+P2Btrn0ureNRCsfpNpOpdoWKhMrXJFSZBg3xKsF bUTKDWCe5hprNe7zxMUG0rLS69uBizJShkfWgcnrdr1mowFiD7oDhsH7i6ES+aBh Q6hCZ/gHle1X8AmLz1FTqaJ8fn2Fhc18kY3dPM/GVAWcvKLKVw44J/7WeN0iJUVp 5rsygOyPX8PQE2RMhJeYwIoALUNNZu7nuq/DUVlk4vjqSFs6lCt12rz5hbuY2Sen VSLUMpXnXNq6eg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:10 2025 by rpki-client