This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json) Hash identifier: qZYdTqfToGOtOir0XVHGUAk+4t9vQwLbQJzvKuHjf9w= Subject key identifier: 41:2C:4B:AE:99:34:E1:A8:49:88:16:AE:64:97:B4:3D:69:BF:78:AA Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a Certificate serial: 019AF2773117047F0FA3117FC61D59C9167C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft Manifest number: 1673 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: cY3XDwIJCjm4F7edc5yJbYJnq7TxabOaQ1ZOMf/1aLk=) 2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:31:17:04:7f:0f:a3:11:7f:c6:1d:59:c9:16:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=412c4bae9934e1a8498816ae6497b43d69bf78aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:62:4e:e9:72:fc:c7:8e:ed:0b:8f:fa:60: c8:39:40:02:1f:a3:6a:ad:5d:ea:a3:9c:05:77:97: ec:57:0c:7d:0a:7e:a6:d6:87:8a:76:d4:07:c1:bc: 4e:db:0b:f4:07:2f:56:43:ac:8b:d9:da:75:27:0b: 29:10:9c:11:05:28:82:55:1a:81:d9:14:6b:89:6e: 9d:f7:2a:e2:ab:f8:4b:da:cf:4e:10:ac:dd:6c:1d: aa:35:5e:02:59:36:7f:1e:73:50:fc:dd:31:1c:f7: e0:da:e7:5a:9b:08:8f:2a:4a:7e:af:52:03:b9:a9: c1:23:60:e6:69:a2:fd:8b:91:0b:ca:ba:91:33:d7: 48:c3:48:39:e3:ab:fc:a3:d9:00:2f:f1:c5:11:bc: 57:bc:35:7b:c2:02:0a:fa:68:bc:d8:c6:1e:92:b6: 55:7b:bd:73:3c:e3:ac:c2:9e:1f:f5:90:5d:70:48: 03:6b:d6:30:b7:3c:88:a5:33:e1:ff:ef:4b:5b:48: bb:07:a4:87:52:f5:6f:e4:63:6c:d6:58:1e:5d:cd: 0a:f0:96:71:34:09:f4:a1:9d:da:d0:ab:04:44:cb: 2b:32:03:bc:d3:f0:5d:cc:28:c6:9f:a2:b2:b4:4c: e9:44:dd:f1:ba:a1:25:a2:cc:22:22:bf:ac:74:60: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2C:4B:AE:99:34:E1:A8:49:88:16:AE:64:97:B4:3D:69:BF:78:AA X509v3 Authority Key Identifier: keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:94:2b:24:9f:3d:7f:8e:19:b1:62:c2:8d:61:c0:6d:03:30: 68:8c:31:46:14:ef:63:fc:ea:2b:2f:20:73:3a:6d:58:1d:69: 1f:d7:58:d3:eb:ba:15:9e:20:04:fe:bf:46:44:c4:fb:3e:e1: 71:ba:32:37:4a:04:79:e2:77:98:88:58:50:48:1e:f5:2b:4f: 86:db:28:26:b2:53:15:ed:c3:f2:7c:3b:40:ab:90:8d:1f:e7: 17:84:dd:d5:ef:bf:5b:d6:cd:4f:a0:01:53:a6:10:b1:eb:12: 9d:86:b9:41:56:91:c5:0d:35:54:23:df:97:ed:f0:aa:3e:90: 02:52:fd:bb:87:63:34:6d:92:1e:a8:95:19:cc:cc:19:2a:58: bc:4d:64:ff:9a:39:22:42:21:d6:91:c3:b6:31:45:28:7d:ea: 9b:0b:a9:3c:85:07:72:ef:22:2d:08:a9:f3:8c:2f:a7:59:4f: 86:68:f6:77:88:48:e9:11:0c:dd:2b:c0:9e:2d:52:c7:cb:cb: 13:ca:1b:80:d3:1b:11:c7:96:17:67:3f:d9:6e:37:f9:a6:a3: 42:ad:7c:92:e7:42:bf:eb:67:f1:47:23:7f:11:c6:f5:7d:2e: 9b:fd:a3:e3:d9:af:f8:8f:8a:bb:cf:be:c1:e1:d0:bb:c6:c8: fb:f4:3e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzEXBH8PoxF/xh1ZyRZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzJlZGE1NDc4ODdhNWI0NTAzZDkwNTkyZWE1MDU2NThk YTZlN2EwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg0MTJjNGJhZTk5MzRlMWE4NDk4ODE2YWU2NDk3YjQzZDY5YmY3OGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ViTuly/MeO7QuP+mDIOUACH6Nq rV3qo5wFd5fsVwx9Cn6m1oeKdtQHwbxO2wv0By9WQ6yL2dp1JwspEJwRBSiCVRqB 2RRriW6d9yriq/hL2s9OEKzdbB2qNV4CWTZ/HnNQ/N0xHPfg2udamwiPKkp+r1ID uanBI2DmaaL9i5ELyrqRM9dIw0g546v8o9kAL/HFEbxXvDV7wgIK+mi82MYekrZV e71zPOOswp4f9ZBdcEgDa9YwtzyIpTPh/+9LW0i7B6SHUvVv5GNs1lgeXc0K8JZx NAn0oZ3a0KsERMsrMgO80/BdzCjGn6KytEzpRN3xuqEloswiIr+sdGCetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEsS66ZNOGoSYgWrmSXtD1pv3iqMB8GA1UdIwQY MBaAFI/C7aVHiHpbRQPZBZLqUFZY2m56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEt MTY4MTM3MGQ5YzEwLzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEtMTY4MTM3MGQ5YzEw LzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpQrJJ89 f44ZsWLCjWHAbQMwaIwxRhTvY/zqKy8gczptWB1pH9dY0+u6FZ4gBP6/RkTE+z7h cboyN0oEeeJ3mIhYUEge9StPhtsoJrJTFe3D8nw7QKuQjR/nF4Td1e+/W9bNT6AB U6YQsesSnYa5QVaRxQ01VCPfl+3wqj6QAlL9u4djNG2SHqiVGczMGSpYvE1k/5o5 IkIh1pHDtjFFKH3qmwupPIUHcu8iLQip84wvp1lPhmj2d4hI6REM3SvAni1Sx8vL E8obgNMbEceWF2c/2W43+aajQq18kudCv+tn8UcjfxHG9X0um/2j49mv+I+Ku8++ weHQu8bI+/Q+Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:06 2025 by rpki-client