This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json) Hash identifier: ZIIT5GTH/kLmFEoFi+jH3d/N+w6f49OVemXwVVLZcKU= Subject key identifier: 53:A3:46:5F:81:81:50:16:C3:7D:0A:B6:04:72:4E:4A:3A:47:03:B1 Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78 Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578 Certificate serial: 019AF49C4EE07D106B518C7146A0AF6450EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft Manifest number: 08CF Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=) 2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: whhW2q4ClDOkaTUeyG/HnPbodvz8xLfDOOs7wdbZvlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4e:e0:7d:10:6b:51:8c:71:46:a0:af:64:50:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=53a3465f81815016c37d0ab604724e4a3a4703b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:b4:e2:e8:3c:00:55:c5:49:ec:d7:b7:9f: e8:94:5b:72:4e:46:63:7c:ac:ff:79:42:a9:f1:24: d8:32:de:19:0e:94:dd:57:9d:86:d5:70:c2:d8:fb: 4d:c2:02:b2:2f:60:1a:28:48:b5:89:a6:d9:8c:b2: 50:48:be:44:6d:5d:08:31:a6:0f:e0:8b:a5:c2:02: 90:ff:36:31:48:00:a3:fc:ab:0b:3c:ec:a4:b6:ab: 06:2a:51:e9:81:18:c7:d2:2f:7a:78:8f:d6:d5:cd: 8d:d6:70:e5:37:1b:6c:11:3e:e0:cc:f1:78:81:05: a2:a9:b3:db:8a:37:48:87:1b:0c:7e:1f:67:08:ec: fe:60:df:d5:04:eb:89:6f:6a:8c:fc:33:ac:e5:2d: dd:0b:1a:fc:40:35:18:ee:e7:5e:66:63:61:41:0f: 4d:7b:2f:0b:09:a0:06:87:5c:c6:b5:75:e7:07:c6: ee:2d:93:aa:60:6b:62:e7:e6:70:4b:08:45:df:a8: 76:53:c6:8d:a3:27:72:64:23:7f:c6:ca:a2:18:c6: 7a:b7:9a:17:48:0e:17:26:b2:43:6e:84:20:44:7f: 8f:ff:05:a3:f0:23:fd:f7:e3:a2:ae:e4:50:15:1e: 23:96:05:be:c1:30:30:56:bb:af:c0:49:b9:72:02: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:46:5F:81:81:50:16:C3:7D:0A:B6:04:72:4E:4A:3A:47:03:B1 X509v3 Authority Key Identifier: keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:87:67:36:8d:2e:fd:d2:83:2c:5d:fc:d2:a1:82:14:09:75: 84:cc:39:71:b5:09:c7:81:0e:a1:57:7d:74:d3:6c:d7:ae:14: 3a:e5:c9:0a:8d:8e:d6:cd:0c:49:0b:a7:ee:2f:45:6e:50:c4: 41:ce:aa:00:58:79:62:37:c5:a5:07:71:74:b1:1d:30:cd:9a: 41:bd:1d:a8:28:ba:ee:e5:78:67:e6:6b:4b:86:94:86:a6:d2: 94:51:67:8d:0a:0e:98:f1:51:bd:ad:2f:ed:b7:73:80:6f:a4: 20:3b:28:b8:87:69:ff:8e:d6:e6:db:3e:06:a3:42:b1:c3:a9: be:e1:7a:47:ed:da:51:9f:ce:03:a6:12:5b:58:e3:b5:8c:2d: a9:d3:43:b1:9a:4c:3c:e8:d1:23:7b:a3:5b:3d:d1:45:28:36: f8:e6:7f:84:11:6e:ac:94:01:0a:a1:c1:d5:02:b5:a0:d2:d6: 52:42:13:25:ba:8e:95:68:2e:f9:11:b8:c7:92:01:f8:17:17: 0a:da:90:9a:58:98:8b:20:d9:d1:df:4b:32:b0:da:86:e0:ca: 70:ed:50:83:11:3c:98:04:8a:5e:f7:97:e7:8f:ec:cf:ee:9c: 6a:ac:e0:b5:fb:93:f8:82:a7:11:59:9f:c0:3b:83:03:17:b5: a8:e9:74:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE7gfRBrUYxxRqCvZFDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTUwMjM5N2RkNjQzOWMwNjhiZDA1M2YyODE4N2RkNzc1 NzQ1NzgwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD Eyg1M2EzNDY1ZjgxODE1MDE2YzM3ZDBhYjYwNDcyNGU0YTNhNDcwM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn604ug8AFXFSezXt5/olFtyTkZj fKz/eUKp8STYMt4ZDpTdV52G1XDC2PtNwgKyL2AaKEi1iabZjLJQSL5EbV0IMaYP 4IulwgKQ/zYxSACj/KsLPOyktqsGKlHpgRjH0i96eI/W1c2N1nDlNxtsET7gzPF4 gQWiqbPbijdIhxsMfh9nCOz+YN/VBOuJb2qM/DOs5S3dCxr8QDUY7udeZmNhQQ9N ey8LCaAGh1zGtXXnB8buLZOqYGti5+ZwSwhF36h2U8aNoydyZCN/xsqiGMZ6t5oX SA4XJrJDboQgRH+P/wWj8CP99+OiruRQFR4jlgW+wTAwVruvwEm5cgLA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOjRl+BgVAWw30KtgRyTko6RwOxMB8GA1UdIwQY MBaAFI/lAjl91kOcBovQU/KBh913V0V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUt YmQ4MDQ3NTc2MmQ1LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUtYmQ4MDQ3NTc2MmQ1 LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYdnNo0u /dKDLF380qGCFAl1hMw5cbUJx4EOoVd9dNNs164UOuXJCo2O1s0MSQun7i9FblDE Qc6qAFh5YjfFpQdxdLEdMM2aQb0dqCi67uV4Z+ZrS4aUhqbSlFFnjQoOmPFRva0v 7bdzgG+kIDsouIdp/47W5ts+BqNCscOpvuF6R+3aUZ/OA6YSW1jjtYwtqdNDsZpM POjRI3ujWz3RRSg2+OZ/hBFurJQBCqHB1QK1oNLWUkITJbqOlWgu+RG4x5IB+BcX CtqQmliYiyDZ0d9LMrDahuDKcO1QgxE8mASKXveX54/sz+6caqzgtfuT+IKnEVmf wDuDAxe1qOl0tg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:27 2025 by rpki-client