This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json) Hash identifier: DJjpo7gfCo+1Px20Vybe4kma8DQ0Y+ds+ZItCQejZP4= Subject key identifier: 11:6F:2C:40:2A:10:D1:0B:32:A3:0D:EC:6A:51:01:43:D3:9C:79:AB Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f Certificate serial: 019AF23FB3CB1F6DEA52D35301742729B78D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft Manifest number: 66 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: 1KaSGdYi7tVMV0aibI1p3UdB0YHhopDSYtRvJGmJ2Xk=) 2: ovh4JK4_mutpHw8DXKARJ3mLIw8.roa (hash: ury01WLPPQeenF3FjQFrwtA6zumz0Gk0JVx72uoV110=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b3:cb:1f:6d:ea:52:d3:53:01:74:27:29:b7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=116f2c402a10d10b32a30dec6a510143d39c79ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:03:0a:e2:1c:12:8a:2e:27:b5:06:33:5c: f0:a9:57:d0:72:fc:18:9f:3d:21:e2:b2:20:83:1a: 75:2f:bd:c3:71:2c:9e:cb:c1:4d:ba:48:8e:05:17: 1b:cd:70:01:b2:2d:8f:d8:18:a3:e8:5e:6c:f7:8e: 84:5c:03:e2:3c:45:bb:51:d2:5a:42:0e:f9:63:37: c4:71:78:fb:6e:a5:00:0b:bf:8b:aa:00:ab:41:b3: 73:01:45:da:7d:9c:cd:cd:79:67:1d:93:5b:93:08: 02:34:8f:af:5f:2c:90:3e:a7:72:40:86:2d:26:9f: 7a:7a:c0:07:52:43:5c:0a:02:f6:6d:47:c6:13:d6: 87:30:ce:15:7c:c8:a2:ac:78:76:e5:1d:82:b9:89: dc:f6:b1:e3:b0:a3:40:66:ac:e7:94:20:3d:38:41: e4:f4:ed:94:a1:34:d4:c6:b7:95:02:82:a0:1d:90: 95:72:32:8f:f2:76:24:d4:2f:4d:50:38:79:db:59: 87:2f:62:3c:ed:15:fb:9d:d9:d9:dd:b6:49:b4:3e: e7:07:76:12:60:06:a6:c4:90:88:7e:c7:5e:71:98: dd:85:85:29:c4:1d:28:40:13:24:4d:d4:08:c4:a4: 4d:4c:65:c7:e8:09:fe:94:0f:53:47:b7:a1:9a:3d: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:2C:40:2A:10:D1:0B:32:A3:0D:EC:6A:51:01:43:D3:9C:79:AB X509v3 Authority Key Identifier: keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7c:46:45:10:10:3f:24:c3:83:44:73:00:02:49:45:01:07: 4f:0c:40:06:7c:1b:20:6f:24:45:aa:c3:ca:dd:a8:61:d7:97: 95:f8:9c:74:9b:3e:e4:80:86:03:51:eb:72:2f:a1:af:d5:87: bb:0a:3b:d9:c6:4d:e1:e3:3d:23:2b:29:6f:8b:3f:91:54:2c: 7e:18:67:72:4e:d9:66:20:67:7b:e7:7e:f6:20:21:6a:d9:7d: 4e:3d:89:76:e6:8b:3e:f8:09:a0:a4:3d:05:e1:88:94:fe:66: f2:d5:3f:3f:ee:e3:26:54:9c:cf:29:6c:0b:fd:96:23:2a:eb: 5e:34:45:92:3c:4b:d9:a8:66:6a:4d:5a:1f:23:b1:a2:52:54: 2a:20:7e:b2:a5:bc:ce:0d:53:71:31:c9:ae:19:e6:13:e2:bc: 3f:a3:55:b0:89:46:68:ce:d3:ad:41:78:5f:99:ae:19:7e:d1: 8f:27:fd:43:7a:f2:ed:aa:6f:ab:94:58:0d:09:93:7e:89:4c: 0e:6f:06:ef:44:41:bb:78:d2:1e:a9:2b:14:ff:ce:7e:bd:0b: ca:de:3a:33:27:77:48:d1:a8:e7:7a:89:24:2f:ca:b2:04:a2: 86:a5:ed:a4:54:8e:ae:8d:f8:67:ba:4f:c4:c1:b4:bd:07:21: 6b:02:4d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7PLH23qUtNTAXQnKbeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjNiZDEyMzEwYTkxMjMzMTYwZjAxMTc4NmE2MTEwMzBm MGZhNWYwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EygxMTZmMmM0MDJhMTBkMTBiMzJhMzBkZWM2YTUxMDE0M2QzOWM3OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZMDCuIcEoouJ7UGM1zwqVfQcvwY nz0h4rIggxp1L73DcSyey8FNukiOBRcbzXABsi2P2Bij6F5s946EXAPiPEW7UdJa Qg75YzfEcXj7bqUAC7+LqgCrQbNzAUXafZzNzXlnHZNbkwgCNI+vXyyQPqdyQIYt Jp96esAHUkNcCgL2bUfGE9aHMM4VfMiirHh25R2CuYnc9rHjsKNAZqznlCA9OEHk 9O2UoTTUxreVAoKgHZCVcjKP8nYk1C9NUDh521mHL2I87RX7ndnZ3bZJtD7nB3YS YAamxJCIfsdecZjdhYUpxB0oQBMkTdQIxKRNTGXH6An+lA9TR7ehmj2vIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFvLEAqENELMqMN7GpRAUPTnHmrMB8GA1UdIwQY MBaAFI0jvRIxCpEjMWDwEXhqYRAw8PpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEt NDk4YjlkNGY3NTdlLzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEtNDk4YjlkNGY3NTdl LzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3xGRRAQ PyTDg0RzAAJJRQEHTwxABnwbIG8kRarDyt2oYdeXlficdJs+5ICGA1Hrci+hr9WH uwo72cZN4eM9Iyspb4s/kVQsfhhnck7ZZiBne+d+9iAhatl9Tj2JduaLPvgJoKQ9 BeGIlP5m8tU/P+7jJlSczylsC/2WIyrrXjRFkjxL2ahmak1aHyOxolJUKiB+sqW8 zg1TcTHJrhnmE+K8P6NVsIlGaM7TrUF4X5muGX7Rjyf9Q3ry7apvq5RYDQmTfolM Dm8G70RBu3jSHqkrFP/Ofr0Lyt46Myd3SNGo53qJJC/KsgSihqXtpFSOro34Z7pP xMG0vQchawJNSw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:41 2025 by rpki-client