This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json) Hash identifier: Ohg6veouiT0LGTyFS6SCGJ2nejPIkVX3AWpe+P0Frhs= Subject key identifier: 83:FC:10:BB:AC:1C:7E:0F:E7:0D:0A:C5:2E:04:44:46:26:9D:8F:18 Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Certificate serial: 019AF3520DD3066BA729D219AB3EAAE5C522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft Manifest number: A2 Signing time: Sat 06 Dec 2025 11:00:32 +0000 Manifest this update: Sat 06 Dec 2025 11:00:32 +0000 Manifest next update: Sun 07 Dec 2025 11:00:32 +0000 Files and hashes: 1: 9lTlIJVzjlfPnvZCoUdbSEtQwhw.roa (hash: 7dGAL4VELHTj+w0KDl5p2Kj2u6qzyQX4PVV9HVfH5AM=) 2: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: JfC9RKczWPbnpK4jrV6P6kXb4KZ5e5Hg/vzCrgaJR3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0d:d3:06:6b:a7:29:d2:19:ab:3e:aa:e5:c5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Validity Not Before: Dec 6 11:00:32 2025 GMT Not After : Dec 7 11:00:32 2025 GMT Subject: CN=83fc10bbac1c7e0fe70d0ac52e044446269d8f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:f5:9d:c5:20:ab:88:7b:a4:33:6c:4d:2a: 63:66:6c:eb:c0:24:59:f9:de:a0:f1:c2:0d:eb:8f: 28:fa:2a:2b:c6:90:00:58:d9:84:35:64:5d:a2:53: 3f:bb:87:7e:3c:a9:ac:31:ec:bf:c1:4a:bf:dc:f7: f2:6d:57:14:de:1b:53:ed:01:b5:14:24:30:ab:f7: e6:f6:ae:d2:8d:22:15:7a:2b:29:cd:e0:7d:f1:a0: 2f:be:f5:72:83:5a:2d:82:e6:be:d8:88:e9:17:32: 45:65:74:7c:cc:22:65:2b:62:73:1a:6d:33:83:1f: f3:3c:a6:49:88:13:6a:5a:c2:61:55:f8:87:07:9e: 1f:54:1f:82:4e:56:a5:af:6b:c5:c3:05:98:21:fd: 12:fb:ee:52:0d:ad:ea:29:40:94:dc:7c:e2:12:a0: 91:7a:55:49:7f:d4:f1:47:50:aa:37:e2:d6:79:90: b1:88:01:78:88:ee:b8:fc:8f:a4:27:a1:35:63:51: d9:37:d9:8b:2d:95:29:5f:7a:b4:0b:60:4f:7d:e8: 29:29:54:0d:70:33:99:41:65:9f:d6:56:ca:cc:26: a9:59:77:2b:21:d7:17:ca:55:43:8e:3f:c6:48:3b: 63:b4:bb:28:f9:a1:1c:ed:7f:f0:d2:20:32:94:3c: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:10:BB:AC:1C:7E:0F:E7:0D:0A:C5:2E:04:44:46:26:9D:8F:18 X509v3 Authority Key Identifier: keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8f:9f:2a:69:ff:f3:ce:61:53:01:45:f5:d3:d5:75:b0:1b: d2:e5:09:81:02:a5:d3:eb:f8:f6:a0:75:80:ff:47:4c:72:2b: 6f:f0:72:2f:a3:ee:0e:6a:1d:71:49:c3:34:75:e7:82:b4:68: 16:07:cf:72:da:75:81:e9:68:e0:33:fb:c8:15:0c:2e:b2:e9: 22:5b:78:20:73:71:29:cb:74:8a:9a:c9:23:aa:15:9d:82:48: f4:aa:3b:09:f5:46:2a:ba:23:7f:25:d5:2c:18:b8:99:09:91: 88:a6:64:d7:d4:c8:63:06:c4:f3:e5:41:e8:dd:ce:dd:ca:8d: 38:26:c0:b7:fb:3f:93:c7:88:3f:c1:0b:5e:d4:33:fb:bd:4d: 5c:b0:87:50:4c:3d:64:ec:2c:10:08:0f:e6:34:29:9a:ad:1c: 7e:0b:ef:31:70:ef:77:64:d3:6b:df:e8:a7:64:e6:2a:70:95: c6:d9:5c:d6:37:d3:0b:fe:9d:5d:9c:e0:c0:01:00:de:6c:6b: e3:58:94:21:98:a2:38:33:57:b1:67:e0:43:72:65:f2:48:45: ca:0c:b8:de:72:b0:ec:f7:47:6a:1c:3d:50:bc:18:d8:2a:1f: b3:aa:b8:2a:d9:19:7f:01:03:3b:85:a5:1b:b0:15:b8:cd:2a: 79:64:a1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUg3TBmunKdIZqz6q5cUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi ZmRkNGQwHhcNMjUxMjA2MTEwMDMyWhcNMjUxMjA3MTEwMDMyWjAzMTEwLwYDVQQD Eyg4M2ZjMTBiYmFjMWM3ZTBmZTcwZDBhYzUyZTA0NDQ0NjI2OWQ4ZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzL1ncUgq4h7pDNsTSpjZmzrwCRZ +d6g8cIN648o+iorxpAAWNmENWRdolM/u4d+PKmsMey/wUq/3PfybVcU3htT7QG1 FCQwq/fm9q7SjSIVeispzeB98aAvvvVyg1otgua+2IjpFzJFZXR8zCJlK2JzGm0z gx/zPKZJiBNqWsJhVfiHB54fVB+CTlalr2vFwwWYIf0S++5SDa3qKUCU3HziEqCR elVJf9TxR1CqN+LWeZCxiAF4iO64/I+kJ6E1Y1HZN9mLLZUpX3q0C2BPfegpKVQN cDOZQWWf1lbKzCapWXcrIdcXylVDjj/GSDtjtLso+aEc7X/w0iAylDx8VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP8ELusHH4P5w0KxS4EREYmnY8YMB8GA1UdIwQY MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt ZjMwMjhhZWE5OTc3LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3 LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqo+fKmn/ 885hUwFF9dPVdbAb0uUJgQKl0+v49qB1gP9HTHIrb/ByL6PuDmodcUnDNHXngrRo FgfPctp1gelo4DP7yBUMLrLpIlt4IHNxKct0iprJI6oVnYJI9Ko7CfVGKrojfyXV LBi4mQmRiKZk19TIYwbE8+VB6N3O3cqNOCbAt/s/k8eIP8ELXtQz+71NXLCHUEw9 ZOwsEAgP5jQpmq0cfgvvMXDvd2TTa9/op2TmKnCVxtlc1jfTC/6dXZzgwAEA3mxr 41iUIZiiODNXsWfgQ3Jl8khFygy43nKw7PdHahw9ULwY2Cofs6q4KtkZfwEDO4Wl G7AVuM0qeWShwA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:46 2025 by rpki-client