This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json) Hash identifier: 22u2PUSJZjLHJKC2UV1F1SEX9eZw41JHg/WjGUcyM+M= Subject key identifier: 97:9A:F5:55:DF:39:1F:F8:F5:93:75:DE:7B:CE:ED:18:9E:1B:2F:0C Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a Certificate serial: 019B255306BCA74D2A31415816248970B489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 04:02:36 +0000 Manifest this update: Tue 16 Dec 2025 04:02:36 +0000 Manifest next update: Wed 17 Dec 2025 04:02:36 +0000 Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: geLGOmdgvPpGeO3K/ViuQ4AglbJ+J9kT3QTWN+UuT2Y=) 2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:06:bc:a7:4d:2a:31:41:58:16:24:89:70:b4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a Validity Not Before: Dec 16 04:02:36 2025 GMT Not After : Dec 17 04:02:36 2025 GMT Subject: CN=979af555df391ff8f59375de7bceed189e1b2f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:33:0e:e4:5d:16:0b:63:83:f0:ad:38:42: e9:5a:bc:a0:d6:b3:c4:77:02:6a:b9:37:ef:ef:a1: d7:b0:38:5a:eb:fd:59:86:57:9c:af:60:89:ba:66: 30:00:1f:d1:1b:4a:1d:82:07:f9:e9:62:b8:84:37: ec:b8:97:73:0f:54:8e:61:9a:bf:31:fc:fa:0f:83: 21:92:ee:76:09:8b:26:84:19:b4:b5:71:3a:d2:fa: 2e:2f:f0:bb:c2:ca:8e:62:ee:34:c8:b0:1a:78:42: 03:c2:2d:9c:46:a2:7a:fb:b6:5d:b4:4b:8e:c6:86: 96:d7:38:fa:c6:79:39:f1:f5:92:02:7d:40:94:85: b3:fb:51:79:82:c4:fe:bc:ca:88:83:e4:cf:d3:8a: 25:56:fa:4b:28:bd:5a:43:33:ab:1f:7a:49:1f:14: 9d:a6:98:bd:a9:d9:57:4b:5a:a0:9b:0b:75:d9:ae: 6e:e5:be:12:35:76:2e:a4:b7:dd:af:fa:11:07:17: 97:93:61:c0:62:d7:83:28:8e:88:4f:28:6d:f1:5d: 3d:f2:12:66:f7:ca:40:0d:f3:88:85:83:3c:85:6b: 44:06:1a:88:c9:79:47:34:a2:69:74:73:79:0e:aa: f0:f3:d0:b0:33:b6:6e:77:c3:0b:de:e7:34:0b:fc: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9A:F5:55:DF:39:1F:F8:F5:93:75:DE:7B:CE:ED:18:9E:1B:2F:0C X509v3 Authority Key Identifier: keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a8:64:ba:b7:87:71:4a:23:82:8a:2b:3e:6d:4d:41:c1:58: cf:62:cc:d3:e1:c7:0c:d4:d1:e4:87:48:63:4d:ba:18:b7:cf: 38:71:a9:ea:48:2a:bd:66:66:75:a4:51:f7:a2:8a:1d:b4:d4: 56:6a:b8:33:9e:58:a0:b1:ae:da:47:35:62:fd:dc:b0:00:ac: ae:56:77:88:a7:c2:f9:4f:a6:24:6b:96:ea:49:ff:7a:7a:6a: a9:e5:6b:71:ac:8f:3e:c7:58:14:e7:4e:d4:62:62:d8:94:b9: 59:8a:66:46:9c:87:e7:89:3f:f9:f9:3b:fa:db:f7:44:56:b0: de:9e:83:29:b8:32:77:2f:28:96:75:8b:ec:bc:a3:ef:07:c6: 28:2e:15:4b:37:10:09:36:bf:a9:ef:e5:85:13:b2:32:bd:6f: 1e:bf:ae:60:c7:7e:af:08:d0:f0:64:3c:45:fa:4b:5d:6f:30: 30:4f:05:12:69:51:da:1f:b0:8b:37:25:b6:87:6b:95:40:23: bc:df:11:c7:78:76:bd:75:94:53:f2:82:0c:5a:69:a4:bf:52: b5:21:1b:0b:9e:1d:09:af:f2:31:1d:3d:e6:b1:a9:7c:e0:97: d9:2e:39:43:ff:1e:14:1c:14:a5:00:37:4a:7e:56:c6:b9:ad: 1a:15:3d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUwa8p00qMUFYFiSJcLSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTFiNjU5ODYyZDE1YTUxY2I1ZmYzNGRlNzIyM2M2OWU0 ODEyNmEwHhcNMjUxMjE2MDQwMjM2WhcNMjUxMjE3MDQwMjM2WjAzMTEwLwYDVQQD Eyg5NzlhZjU1NWRmMzkxZmY4ZjU5Mzc1ZGU3YmNlZWQxODllMWIyZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d0zDuRdFgtjg/CtOELpWryg1rPE dwJquTfv76HXsDha6/1Zhlecr2CJumYwAB/RG0odggf56WK4hDfsuJdzD1SOYZq/ Mfz6D4Mhku52CYsmhBm0tXE60vouL/C7wsqOYu40yLAaeEIDwi2cRqJ6+7ZdtEuO xoaW1zj6xnk58fWSAn1AlIWz+1F5gsT+vMqIg+TP04olVvpLKL1aQzOrH3pJHxSd ppi9qdlXS1qgmwt12a5u5b4SNXYupLfdr/oRBxeXk2HAYteDKI6ITyht8V098hJm 98pADfOIhYM8hWtEBhqIyXlHNKJpdHN5Dqrw89CwM7Zud8ML3uc0C/zJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJea9VXfOR/49ZN13nvO7RieGy8MMB8GA1UdIwQY MBaAFCXhtlmGLRWlHLX/NN5yI8aeSBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAt ZTNjN2Q0ZTY1OThmLzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAtZTNjN2Q0ZTY1OThm LzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKhkureH cUojgoorPm1NQcFYz2LM0+HHDNTR5IdIY026GLfPOHGp6kgqvWZmdaRR96KKHbTU Vmq4M55YoLGu2kc1Yv3csACsrlZ3iKfC+U+mJGuW6kn/enpqqeVrcayPPsdYFOdO 1GJi2JS5WYpmRpyH54k/+fk7+tv3RFaw3p6DKbgydy8olnWL7Lyj7wfGKC4VSzcQ CTa/qe/lhROyMr1vHr+uYMd+rwjQ8GQ8RfpLXW8wME8FEmlR2h+wizcltodrlUAj vN8Rx3h2vXWUU/KCDFpppL9StSEbC54dCa/yMR095rGpfOCX2S45Q/8eFBwUpQA3 Sn5WxrmtGhU99Q== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:40 2025 by rpki-client