This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json) Hash identifier: Wb70KTl2MY8AEtDb5WoW6G3wdGeOAtG8ZKEFCcSla40= Subject key identifier: F8:E6:0F:1F:74:95:1C:09:0F:70:69:69:DA:D0:CE:43:CD:13:A1:1A Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e Certificate serial: 019AF19A9300F0049788BEFC56F4FF35986C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=) 2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=) 3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: JBpMkPfMP0Ol3rrn48ncKzXMY8ok0eMA68Y011NvG0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:93:00:f0:04:97:88:be:fc:56:f4:ff:35:98:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=f8e60f1f74951c090f706969dad0ce43cd13a11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:86:c9:22:05:89:7b:0f:4e:48:c3:51:a2: 94:bc:c5:0a:0f:2f:23:d0:c8:28:24:f8:c8:ec:34: da:c3:bd:e2:96:b1:63:ad:88:4e:ef:15:4d:fe:28: 6c:46:69:c5:70:7c:6b:ac:9c:5a:64:70:52:c5:d6: 23:30:73:5d:8d:8c:98:96:19:cd:fd:ba:b7:5b:41: 45:c4:f0:19:6f:52:22:25:d2:84:64:aa:cc:58:49: 19:a8:59:31:9d:2a:cd:82:18:6c:ce:d6:22:6a:01: 5c:53:80:c1:53:66:bb:0b:d8:ab:75:59:ea:a8:82: c2:33:04:57:81:76:af:29:92:85:12:23:d4:08:67: 88:27:d3:e8:16:28:79:fb:30:a8:ff:9c:31:91:54: 33:01:23:7d:84:01:c3:e3:bb:cd:b2:d4:4b:5d:70: 79:93:db:b0:b9:f9:bc:9b:e0:f1:a8:81:b7:d9:6b: 7e:db:b1:f4:0a:b8:7a:6a:5f:7e:c7:b6:d7:89:88: b6:25:2d:f9:06:95:c3:65:6c:fb:d8:e9:3d:03:eb: c9:93:c5:06:0a:30:07:51:84:ea:cf:67:4a:f0:12: 9d:9a:59:e4:bc:75:8f:2c:28:4f:07:df:73:f8:5b: 05:86:93:36:f1:55:ff:c8:fc:0e:9c:53:cb:a5:56: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E6:0F:1F:74:95:1C:09:0F:70:69:69:DA:D0:CE:43:CD:13:A1:1A X509v3 Authority Key Identifier: keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:88:e8:e2:90:02:d4:b8:e9:54:d4:cf:36:62:5f:7f:48:1d: aa:bb:22:2e:74:9e:4e:f8:19:0c:94:ff:d9:e6:b4:12:34:e2: 4d:a2:f1:06:ff:b2:0a:dd:b1:51:33:7a:df:60:73:4b:43:55: 47:2b:50:13:4a:d3:b8:b8:53:db:49:53:1b:a3:5d:01:03:27: 47:30:47:e1:dd:22:3c:28:57:91:ab:7e:85:d0:7e:6b:d5:1d: 21:ad:d2:71:95:bd:0e:0f:2b:05:7c:83:47:36:6f:a8:09:8e: 86:ab:18:c6:25:08:26:41:76:ee:36:d6:f2:84:2c:a8:76:ee: ca:c1:a9:13:91:6a:6e:63:63:d6:51:3b:a0:71:39:d3:c2:44: f9:e9:0a:db:58:e7:d9:8a:a9:c7:40:1d:db:c1:a3:32:a9:69: fd:5f:15:cf:d9:aa:f8:c8:15:c5:e0:75:5d:8e:75:d9:ad:0b: 9c:44:e0:ea:ca:6a:91:a1:63:e7:09:fb:6b:35:18:8b:be:58: 02:8f:56:e8:94:69:94:a2:8d:17:03:dc:a8:af:00:cf:e9:9d: ec:ce:28:ea:51:3f:ff:ba:8e:f8:26:33:25:99:22:d8:18:be: f9:9e:4d:a7:05:1f:09:ac:6d:bc:d7:af:8c:47:be:38:2d:57: 1a:9e:58:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpMA8ASXiL78VvT/NZhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1 Nzk2MGUwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhmOGU2MGYxZjc0OTUxYzA5MGY3MDY5NjlkYWQwY2U0M2NkMTNhMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCGySIFiXsPTkjDUaKUvMUKDy8j 0MgoJPjI7DTaw73ilrFjrYhO7xVN/ihsRmnFcHxrrJxaZHBSxdYjMHNdjYyYlhnN /bq3W0FFxPAZb1IiJdKEZKrMWEkZqFkxnSrNghhsztYiagFcU4DBU2a7C9irdVnq qILCMwRXgXavKZKFEiPUCGeIJ9PoFih5+zCo/5wxkVQzASN9hAHD47vNstRLXXB5 k9uwufm8m+DxqIG32Wt+27H0Crh6al9+x7bXiYi2JS35BpXDZWz72Ok9A+vJk8UG CjAHUYTqz2dK8BKdmlnkvHWPLChPB99z+FsFhpM28VX/yPwOnFPLpVa05wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjmDx90lRwJD3BpadrQzkPNE6EaMB8GA1UdIwQY MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4jo4pAC 1LjpVNTPNmJff0gdqrsiLnSeTvgZDJT/2ea0EjTiTaLxBv+yCt2xUTN632BzS0NV RytQE0rTuLhT20lTG6NdAQMnRzBH4d0iPChXkat+hdB+a9UdIa3ScZW9Dg8rBXyD RzZvqAmOhqsYxiUIJkF27jbW8oQsqHbuysGpE5FqbmNj1lE7oHE508JE+ekK21jn 2Yqpx0Ad28GjMqlp/V8Vz9mq+MgVxeB1XY512a0LnETg6spqkaFj5wn7azUYi75Y Ao9W6JRplKKNFwPcqK8Az+md7M4o6lE//7qO+CYzJZki2Bi++Z5NpwUfCaxtvNev jEe+OC1XGp5YRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:32 2025 by rpki-client