This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json) Hash identifier: AjqGEOqIhBJPgKxXRmg+DPxhCaTxU40NF0AzfIzPS1o= Subject key identifier: D1:1A:AB:48:B0:0F:8F:FC:46:31:DD:80:E9:69:AD:A7:D9:A3:DF:6D Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Certificate serial: 019AF31CEA5B4274F50D2E04BA01DEA5E378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft Manifest number: 0630 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=) 2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=) 3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: LKm/T2KjdraPtKgU6tjlWBqTP0OCKYE5s0gMALJzOBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ea:5b:42:74:f5:0d:2e:04:ba:01:de:a5:e3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=d11aab48b00f8ffc4631dd80e969ada7d9a3df6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:be:83:4b:5e:2e:d4:7a:b3:ca:23:b5:77: 0a:b2:20:e3:17:c9:bf:97:3a:66:7a:00:8c:e9:d3: de:d4:6c:ef:1d:c4:5b:39:0c:9d:29:26:52:51:7a: 2e:d0:e0:b9:1f:da:62:4e:54:1e:4d:8e:d0:f4:2b: c6:9b:6a:62:97:74:17:d5:60:e6:d4:24:eb:b5:7f: c2:39:5a:8d:bb:7d:e6:80:ca:34:6a:20:e6:7d:a7: 59:f1:90:93:61:09:2f:47:47:37:76:8d:26:6a:0f: af:74:12:2e:04:c5:db:37:57:45:2c:24:a8:65:97: 5e:d8:41:95:e8:33:f8:93:8c:22:62:5e:81:4b:69: 3d:e6:d9:bb:bf:0a:64:c9:42:cb:fb:3e:03:5a:cd: 6e:b1:cd:42:72:3f:99:3d:6f:ed:3d:d2:c2:5a:d9: 89:89:fa:85:60:c0:96:6b:f0:66:60:9d:08:7f:5f: 59:4c:58:eb:70:c2:a8:d1:dc:81:67:02:c5:93:44: 6d:5a:9d:9e:40:44:69:76:d2:b3:b7:39:f5:96:47: d4:fc:d3:5d:45:59:f8:dc:f0:d8:d9:9f:c8:46:07: 6e:19:97:e0:25:bb:ec:9b:95:ca:05:99:62:68:5f: f4:70:51:81:41:27:f7:0b:bb:c4:64:04:5f:51:a4: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:AB:48:B0:0F:8F:FC:46:31:DD:80:E9:69:AD:A7:D9:A3:DF:6D X509v3 Authority Key Identifier: keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:97:7b:91:b6:83:6d:4f:c2:01:72:fc:a8:e5:86:a7:f0:a0: fc:b7:73:bb:ac:8c:e0:95:0a:2f:c3:15:ad:13:56:42:f0:8a: c7:14:07:d9:e4:7c:a2:31:05:c2:c4:c6:c7:b2:2a:60:fd:2b: 28:94:cb:e2:28:c8:ea:ce:04:09:be:20:ac:ef:f1:0c:02:36: 4c:55:e1:63:70:3e:88:27:55:2f:70:d1:10:c1:ee:52:e4:6f: 7e:39:2b:3b:6b:57:6d:41:5c:21:4d:13:b4:3c:a4:6d:1c:52: 83:d8:80:c7:e5:52:e2:c1:e9:6e:ab:4f:0b:1a:6d:f0:bf:2f: 0b:4f:c0:db:98:13:bf:b8:8a:31:68:51:1d:a7:42:52:69:97: 72:ce:31:69:58:a7:66:f8:f7:75:57:90:b9:21:28:f2:b7:56: ff:77:f5:ea:94:89:3b:ac:41:31:b5:14:37:a0:cf:cc:09:c2: 47:5a:b7:a6:e2:75:4f:68:8f:34:89:c0:66:55:e1:c2:87:da: 5c:e5:01:ac:90:58:4e:32:90:fb:f5:78:ff:b9:e9:88:b6:eb: 27:f6:2a:98:58:8d:d5:eb:9b:9a:78:2a:ad:a0:63:35:1b:d3: 21:79:ed:1a:50:d2:68:74:dc:b0:fd:24:66:de:42:cb:5b:7d: b3:5a:d5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOpbQnT1DS4EugHepeN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0 NTZhYjQwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EyhkMTFhYWI0OGIwMGY4ZmZjNDYzMWRkODBlOTY5YWRhN2Q5YTNkZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zW+g0teLtR6s8ojtXcKsiDjF8m/ lzpmegCM6dPe1GzvHcRbOQydKSZSUXou0OC5H9piTlQeTY7Q9CvGm2pil3QX1WDm 1CTrtX/COVqNu33mgMo0aiDmfadZ8ZCTYQkvR0c3do0mag+vdBIuBMXbN1dFLCSo ZZde2EGV6DP4k4wiYl6BS2k95tm7vwpkyULL+z4DWs1usc1Ccj+ZPW/tPdLCWtmJ ifqFYMCWa/BmYJ0If19ZTFjrcMKo0dyBZwLFk0RtWp2eQERpdtKztzn1lkfU/NNd RVn43PDY2Z/IRgduGZfgJbvsm5XKBZliaF/0cFGBQSf3C7vEZARfUaSg8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEaq0iwD4/8RjHdgOlprafZo99tMB8GA1UdIwQY MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5d7kbaD bU/CAXL8qOWGp/Cg/Ldzu6yM4JUKL8MVrRNWQvCKxxQH2eR8ojEFwsTGx7IqYP0r KJTL4ijI6s4ECb4grO/xDAI2TFXhY3A+iCdVL3DREMHuUuRvfjkrO2tXbUFcIU0T tDykbRxSg9iAx+VS4sHpbqtPCxpt8L8vC0/A25gTv7iKMWhRHadCUmmXcs4xaVin Zvj3dVeQuSEo8rdW/3f16pSJO6xBMbUUN6DPzAnCR1q3puJ1T2iPNInAZlXhwofa XOUBrJBYTjKQ+/V4/7npiLbrJ/YqmFiN1eubmngqraBjNRvTIXntGlDSaHTcsP0k Zt5Cy1t9s1rVeA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:08 2025 by rpki-client