This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json) Hash identifier: kJEEqI9uqU32qVNnGz8Nj3wyfPH9A02xlfC+wF3foWE= Subject key identifier: 7C:4F:1D:DF:67:34:7F:E8:E4:77:F7:30:24:24:D8:CF:0B:28:49:D9 Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698 Certificate serial: 019B2F30049E04252C9DFF92E523A49CBD70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 02:00:34 +0000 Manifest this update: Thu 18 Dec 2025 02:00:34 +0000 Manifest next update: Fri 19 Dec 2025 02:00:34 +0000 Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=) 2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: H7bPqF8DuSGlrWxpG9bCV6tckUfL0OvFwJOWq+1itlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:04:9e:04:25:2c:9d:ff:92:e5:23:a4:9c:bd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698 Validity Not Before: Dec 18 02:00:34 2025 GMT Not After : Dec 19 02:00:34 2025 GMT Subject: CN=7c4f1ddf67347fe8e477f7302424d8cf0b2849d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:36:bb:62:95:53:94:e7:13:40:57:5d:8c: 4f:09:04:30:4d:ff:9c:6f:6e:9c:3c:c0:65:a6:de: ee:2b:13:fd:62:ac:dc:d4:4c:9d:bd:87:1b:3f:1f: 1c:e1:31:16:98:a5:28:a7:26:ef:8d:33:a3:93:a8: e5:93:d3:a9:13:a8:95:c8:b9:9c:b3:8f:30:ce:29: 0c:e2:c5:b0:fc:8f:36:45:1b:45:76:33:a6:63:75: 9b:58:18:7d:a2:5a:7f:43:0f:dd:73:98:5d:00:47: e7:e9:e8:fe:56:b8:28:59:65:da:c7:9b:d6:bd:92: 71:34:94:ae:fa:9c:89:de:a8:aa:04:7f:86:41:e7: 60:dd:0c:ae:c1:1b:32:e1:49:3c:dc:02:f4:96:db: b5:4c:f3:3e:66:a8:b5:d2:0d:b0:b9:a2:d4:97:6b: 2a:9c:8d:30:16:6f:0b:77:f1:64:57:9b:13:17:1f: 26:f8:ad:eb:ba:d8:89:ad:9b:66:a4:86:7f:2a:d2: 3e:32:78:95:51:86:c1:d3:0d:74:62:53:65:25:ff: 74:3f:0b:3d:1d:2d:45:eb:59:22:49:7f:aa:71:03: e6:9c:c4:aa:bd:78:b6:a0:74:fb:6a:c5:73:f6:9d: ec:ea:6a:76:91:ae:9c:4e:4b:39:22:06:53:f4:e0: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:1D:DF:67:34:7F:E8:E4:77:F7:30:24:24:D8:CF:0B:28:49:D9 X509v3 Authority Key Identifier: keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:df:79:ac:db:b7:3e:5a:a0:ba:45:1f:f4:bb:d9:c5:35:1e: 46:10:51:ee:5b:51:82:df:f2:25:e7:d5:80:94:8b:c3:df:82: b8:16:33:c9:88:fb:c2:24:8c:5e:9e:78:f9:3e:92:f3:ce:c0: 5a:46:e3:0e:40:3f:44:a0:10:5b:3d:3f:72:4b:68:2b:53:a7: 68:f0:5b:c9:53:81:16:ac:54:ca:f3:14:51:70:07:ed:68:ef: ec:8e:a4:05:5d:8e:59:fc:5f:48:b5:9a:a4:d0:d7:ad:d9:f4: cc:a8:17:8f:48:4e:83:49:05:37:aa:4b:0f:dc:cb:bf:8a:5b: 16:77:ad:c0:c0:c1:61:aa:02:d9:f1:d6:6b:5a:85:f2:a4:3a: 4d:02:fc:e2:68:1f:ab:5a:f2:f7:25:ef:28:11:cb:31:3a:4b: 2b:05:e8:20:2c:4e:ab:e9:31:3f:cf:bc:86:5e:61:3e:9b:45: ee:09:d0:56:e6:3f:63:3a:59:12:19:8a:cf:a7:67:b2:a9:d4: 58:cf:92:a9:2d:f2:5a:c0:c3:79:fd:d3:5a:39:51:09:2c:99: 17:c0:c7:2b:50:37:2b:35:c9:67:db:c1:f5:fe:89:5c:b5:fb: eb:80:6a:18:8b:0e:69:ba:dd:a1:04:ec:9f:80:7e:da:53:db: eb:dd:e6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMASeBCUsnf+S5SOknL1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz NGI2OTgwHhcNMjUxMjE4MDIwMDM0WhcNMjUxMjE5MDIwMDM0WjAzMTEwLwYDVQQD Eyg3YzRmMWRkZjY3MzQ3ZmU4ZTQ3N2Y3MzAyNDI0ZDhjZjBiMjg0OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJc2u2KVU5TnE0BXXYxPCQQwTf+c b26cPMBlpt7uKxP9Yqzc1EydvYcbPx8c4TEWmKUopybvjTOjk6jlk9OpE6iVyLmc s48wzikM4sWw/I82RRtFdjOmY3WbWBh9olp/Qw/dc5hdAEfn6ej+VrgoWWXax5vW vZJxNJSu+pyJ3qiqBH+GQedg3QyuwRsy4Uk83AL0ltu1TPM+Zqi10g2wuaLUl2sq nI0wFm8Ld/FkV5sTFx8m+K3rutiJrZtmpIZ/KtI+MniVUYbB0w10YlNlJf90Pws9 HS1F61kiSX+qcQPmnMSqvXi2oHT7asVz9p3s6mp2ka6cTks5IgZT9OBK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxPHd9nNH/o5Hf3MCQk2M8LKEnZMB8GA1UdIwQY MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM995rNu3 PlqgukUf9LvZxTUeRhBR7ltRgt/yJefVgJSLw9+CuBYzyYj7wiSMXp54+T6S887A WkbjDkA/RKAQWz0/cktoK1OnaPBbyVOBFqxUyvMUUXAH7Wjv7I6kBV2OWfxfSLWa pNDXrdn0zKgXj0hOg0kFN6pLD9zLv4pbFnetwMDBYaoC2fHWa1qF8qQ6TQL84mgf q1ry9yXvKBHLMTpLKwXoICxOq+kxP8+8hl5hPptF7gnQVuY/YzpZEhmKz6dnsqnU WM+SqS3yWsDDef3TWjlRCSyZF8DHK1A3KzXJZ9vB9f6JXLX764BqGIsOabrdoQTs n4B+2lPb693mdg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:11:29 2025 by rpki-client