This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json) Hash identifier: cXHXLAoQ9ZDDpUWc0vsmO+1A6vGhMIJHq0ZgLUkCVgc= Subject key identifier: 8D:48:52:E7:11:7A:2B:65:A0:39:22:4A:07:96:D9:6F:39:50:1A:47 Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c Certificate serial: 019AF23F71A1746A6D9217A710787CD725B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=) 2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: Qtp49A+rahGvDt1qCV/gXCZYnn9yM+NsasPyL2R/sw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:71:a1:74:6a:6d:92:17:a7:10:78:7c:d7:25:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=8d4852e7117a2b65a039224a0796d96f39501a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:1d:7a:c6:9d:7c:8b:f2:d4:00:82:9b:ea: 1f:13:da:3a:c7:7c:f5:2a:d4:61:96:62:e5:34:42: 4d:7f:72:1b:e1:f5:0c:31:f8:1c:3b:7e:2f:f3:f8: 56:39:1a:de:fc:db:10:75:f1:fd:58:fe:d7:af:d2: 65:6a:c5:71:8e:2a:bd:f6:44:c5:03:fa:bc:12:1d: e5:e8:73:50:63:6a:aa:51:d2:cc:fd:6e:50:ea:53: 48:50:9d:9d:53:f1:04:09:62:2c:5a:60:48:6f:40: c3:e6:5f:20:b3:6b:86:97:f8:c7:61:d4:84:2d:7d: 43:4d:47:43:98:aa:7b:74:05:22:44:27:6f:36:a3: 76:88:56:72:2d:c3:1c:4f:d5:03:d1:73:1c:bd:c5: de:cf:03:fb:2d:91:fe:0e:74:2d:3b:5d:67:b1:a6: f8:0f:75:83:3e:59:a0:d1:de:95:01:b8:36:da:c6: da:df:e8:5c:0e:78:72:48:c1:3e:b1:ea:93:44:ea: 16:87:70:a2:27:28:67:ce:85:6b:af:28:b4:02:28: a8:a2:d4:e3:82:7f:e0:05:6c:f5:d8:ce:c6:04:e1: de:43:96:dc:90:c6:a0:c4:46:2d:6c:82:c0:e0:df: 6c:5c:73:99:6a:08:90:d7:9a:9d:b4:65:7f:4e:45: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:48:52:E7:11:7A:2B:65:A0:39:22:4A:07:96:D9:6F:39:50:1A:47 X509v3 Authority Key Identifier: keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b5:c1:d4:ca:60:1b:04:80:96:f3:0e:05:ed:d1:7a:4f:86: 10:93:38:57:86:95:e2:24:d7:b6:09:e0:5c:f8:1c:66:45:5c: 58:ed:e1:ae:ed:bd:51:8b:35:21:f4:13:b8:7e:c4:a7:2f:f2: 6e:7e:35:87:31:d1:cf:5c:e9:fa:ca:29:ed:ee:fd:ff:3e:75: e5:bf:ee:e8:33:06:f9:9d:e2:c6:ce:7e:11:44:14:1a:54:d7: 69:06:87:8e:44:6c:f6:48:d4:e8:1b:9c:a8:ec:a9:ba:24:41: 94:8f:19:58:4c:99:ee:a3:6a:0f:e1:d3:12:98:fc:05:5d:8e: 45:fa:8a:8d:e7:80:be:48:75:f8:f3:c9:5b:30:82:31:d6:24: f4:f9:1d:3a:3b:82:d6:ba:a1:45:cd:40:a1:b5:cd:08:78:91: 50:c4:81:7f:85:51:a1:43:3f:1a:2b:97:0c:8a:1b:6d:7f:39: c4:a4:30:3a:aa:4d:30:f5:9d:7e:00:d4:47:c5:63:4a:3f:84: cc:70:45:1a:1c:98:72:f8:dd:bf:1e:31:e8:ad:ab:d7:57:b3: 02:b6:be:5c:a2:14:a4:7e:81:24:dd:a6:a1:71:8b:1d:c8:40: 00:b9:78:0b:7d:e6:af:02:aa:7a:6c:7d:0c:0a:ea:d6:85:45: 01:78:50:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3GhdGptkhenEHh81yW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMzNkZGNlYWIxNTRiZGY2M2U3ODlmNDQ0MzQ4NGFkNTU0 ODY2NGMwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg4ZDQ4NTJlNzExN2EyYjY1YTAzOTIyNGEwNzk2ZDk2ZjM5NTAxYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd0desadfIvy1ACCm+ofE9o6x3z1 KtRhlmLlNEJNf3Ib4fUMMfgcO34v8/hWORre/NsQdfH9WP7Xr9JlasVxjiq99kTF A/q8Eh3l6HNQY2qqUdLM/W5Q6lNIUJ2dU/EECWIsWmBIb0DD5l8gs2uGl/jHYdSE LX1DTUdDmKp7dAUiRCdvNqN2iFZyLcMcT9UD0XMcvcXezwP7LZH+DnQtO11nsab4 D3WDPlmg0d6VAbg22sba3+hcDnhySME+seqTROoWh3CiJyhnzoVrryi0AiiootTj gn/gBWz12M7GBOHeQ5bckMagxEYtbILA4N9sXHOZagiQ15qdtGV/TkXoIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1IUucReitloDkiSgeW2W85UBpHMB8GA1UdIwQY MBaAFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEt ZjJiMGZkM2MzMTM3LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEtZjJiMGZkM2MzMTM3 LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrXB1Mpg GwSAlvMOBe3Rek+GEJM4V4aV4iTXtgngXPgcZkVcWO3hru29UYs1IfQTuH7Epy/y bn41hzHRz1zp+sop7e79/z515b/u6DMG+Z3ixs5+EUQUGlTXaQaHjkRs9kjU6Buc qOypuiRBlI8ZWEyZ7qNqD+HTEpj8BV2ORfqKjeeAvkh1+PPJWzCCMdYk9PkdOjuC 1rqhRc1AobXNCHiRUMSBf4VRoUM/GiuXDIobbX85xKQwOqpNMPWdfgDUR8VjSj+E zHBFGhyYcvjdvx4x6K2r11ezAra+XKIUpH6BJN2moXGLHchAALl4C33mrwKqemx9 DArq1oVFAXhQEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:43 2025 by rpki-client