This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json) Hash identifier: O2/E3bYynS3DWYc9hWQQUoTc56ltpU2Vkh35mxXzAbM= Subject key identifier: 79:89:92:83:0B:DC:05:E6:7B:59:76:A1:09:BC:7F:F9:7D:BB:52:D5 Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Certificate serial: 019AF49C428A99F4310EAB0B9B15AE404F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft Manifest number: 1310 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=) 2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=) 3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: ow0mVQeSUHPB9uE9S1w/iY8Lw0eM6nM1niiulDiO7ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:42:8a:99:f4:31:0e:ab:0b:9b:15:ae:40:4f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=798992830bdc05e67b5976a109bc7ff97dbb52d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:70:e3:38:8a:e6:bd:74:35:e3:59:f0:39:4a: 30:b6:a6:c3:de:a5:1a:13:62:fb:d5:a3:9f:ea:b1: 95:26:87:5b:9f:df:1a:f5:db:24:ed:78:3f:d1:5e: 15:a3:d6:45:c7:2b:37:03:d7:ba:5c:b3:56:bb:ac: 0d:04:54:57:12:97:d9:88:48:8b:44:f8:e1:b1:49: 3a:76:57:d9:fc:be:f0:78:ae:fb:c0:c1:54:57:09: 9e:f3:9f:60:a2:8d:23:dc:6a:37:7c:12:5c:52:a7: 4a:d1:ce:fa:05:3a:b2:f7:91:af:d3:d1:fb:af:a6: 47:b2:32:a0:c3:ec:a8:31:76:d8:5e:bd:a5:5e:a9: 00:e3:81:f9:ec:6a:e7:eb:8c:6f:93:4e:a1:0e:30: 84:b3:ae:48:f3:de:bd:f7:86:c5:5e:a4:a2:7f:7d: f3:2c:f3:b1:e1:0d:2f:7d:d5:e2:b6:39:b6:53:a3: db:b3:70:c2:8e:43:80:f5:ad:39:3f:89:25:30:75: 69:0b:a8:06:ae:90:c1:53:77:99:f5:a9:67:db:e2: cd:bc:f8:86:fe:1c:82:6e:b3:4b:09:e2:ac:1c:a4: 89:c4:c0:42:de:86:f3:43:1c:79:0d:25:5f:5b:ed: d2:11:27:48:11:fc:49:20:d1:35:04:df:f9:4b:a2: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:89:92:83:0B:DC:05:E6:7B:59:76:A1:09:BC:7F:F9:7D:BB:52:D5 X509v3 Authority Key Identifier: keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:35:46:7e:c0:08:53:3a:41:54:9b:e1:73:56:9d:47:7a: 72:65:16:2c:00:31:3d:12:9b:9f:ed:eb:d5:0a:37:90:1e:5b: cd:ff:9f:cd:9d:f7:03:6a:94:0d:57:6b:50:7d:fe:86:73:de: e3:28:2e:3a:94:54:39:2d:e4:fd:79:a0:39:d4:f4:16:b8:6e: bc:32:89:ed:38:6a:4b:c0:fb:27:94:fd:30:8f:cb:ec:f9:70: 35:75:36:a3:06:66:c8:54:ea:c7:1a:0f:13:7c:da:23:71:61: 9b:48:fb:0a:54:8d:b8:e5:c2:2a:47:ba:17:2a:6c:07:3d:bc: fe:88:9c:a2:48:c3:33:b1:17:3b:3f:3c:b4:cf:78:d1:fa:3c: fc:72:57:d5:eb:68:17:e1:36:f3:2f:52:f5:24:e1:3c:8c:e9: 1c:51:ed:4f:c6:ba:b6:fb:8e:9a:fd:f0:2e:9c:36:ca:83:c5: 4a:4b:1f:b6:ac:77:3b:5f:26:4d:af:33:2f:8f:d3:2d:a2:27: 86:1d:a0:94:2b:75:c9:f9:94:83:23:c2:5e:93:0a:36:56:ca: c4:7d:72:37:61:f7:11:21:a9:24:0b:77:5c:58:dc:88:61:5c: 1a:a3:59:c3:8c:bb:7c:ce:d7:f7:99:50:f4:67:9b:77:28:83: 41:15:4f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEKKmfQxDqsLmxWuQE8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz NTMwZmUwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD Eyg3OTg5OTI4MzBiZGMwNWU2N2I1OTc2YTEwOWJjN2ZmOTdkYmI1MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinDjOIrmvXQ141nwOUowtqbD3qUa E2L71aOf6rGVJodbn98a9dsk7Xg/0V4Vo9ZFxys3A9e6XLNWu6wNBFRXEpfZiEiL RPjhsUk6dlfZ/L7weK77wMFUVwme859goo0j3Go3fBJcUqdK0c76BTqy95Gv09H7 r6ZHsjKgw+yoMXbYXr2lXqkA44H57Grn64xvk06hDjCEs65I896994bFXqSif33z LPOx4Q0vfdXitjm2U6Pbs3DCjkOA9a05P4klMHVpC6gGrpDBU3eZ9aln2+LNvPiG /hyCbrNLCeKsHKSJxMBC3obzQxx5DSVfW+3SESdIEfxJINE1BN/5S6IknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmJkoML3AXme1l2oQm8f/l9u1LVMB8GA1UdIwQY MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2 LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheM1Rn7A CFM6QVSb4XNWnUd6cmUWLAAxPRKbn+3r1Qo3kB5bzf+fzZ33A2qUDVdrUH3+hnPe 4yguOpRUOS3k/XmgOdT0FrhuvDKJ7ThqS8D7J5T9MI/L7PlwNXU2owZmyFTqxxoP E3zaI3Fhm0j7ClSNuOXCKke6FypsBz28/oicokjDM7EXOz88tM940fo8/HJX1eto F+E28y9S9SThPIzpHFHtT8a6tvuOmv3wLpw2yoPFSksftqx3O18mTa8zL4/TLaIn hh2glCt1yfmUgyPCXpMKNlbKxH1yN2H3ESGpJAt3XFjciGFcGqNZw4y7fM7X95lQ 9GebdyiDQRVPQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:29 2025 by rpki-client