This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json) Hash identifier: bip+s/wRsHgY6YCpjxl6SjO9LUugYkjo56jdLXHui1E= Subject key identifier: 3D:91:44:22:A0:C7:3E:F7:7D:B6:FC:38:B7:E4:3D:E1:10:29:78:96 Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65 Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65 Certificate serial: 019AF19AD34B674497C195537CA25DC32F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft Manifest number: 13AA Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: ayRPK5yAkTXnNYn19FpfeAbZGIGL8czrHzrOIyoOTuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:4b:67:44:97:c1:95:53:7c:a2:5d:c3:2f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=3d914422a0c73ef77db6fc38b7e43de110297896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:f9:f9:d8:1c:d6:c2:ee:02:69:29:e9:af: 08:50:e4:1d:da:68:69:60:b9:31:7d:f9:e0:d1:ff: c1:1d:fe:82:1b:eb:2c:57:dd:57:cc:a3:2d:8d:87: 4f:6d:6c:6b:33:05:60:57:d5:43:83:8d:08:b9:4f: 3f:5b:b9:41:66:bf:b5:fe:2d:79:48:18:9f:c8:ce: de:c1:f2:fc:63:4d:c3:d7:9f:27:fe:75:dc:18:b7: 40:a1:2f:8a:33:f1:17:7f:16:6c:e4:89:10:cb:ba: 61:08:93:dd:51:06:2e:ea:9a:5b:83:aa:50:b3:ae: d6:20:51:52:48:00:19:6f:5a:cb:69:01:d1:c6:79: b0:c3:03:c8:30:d3:bb:18:f4:c3:13:3c:25:88:53: 4a:df:86:9a:b2:e8:c6:ad:4e:97:f3:5d:06:c8:3a: f6:71:df:58:45:1f:9f:50:90:03:99:40:a8:c9:29: a4:95:22:bb:51:dc:92:44:77:04:e9:f4:bc:2e:9d: 2c:77:80:c6:24:16:a6:22:14:61:d0:dd:f5:77:4e: 46:ae:f5:4d:5a:8d:69:ab:95:e7:74:d5:70:e2:28: 11:bc:6a:73:bb:b8:f4:08:12:12:58:10:9d:8c:bd: f6:11:96:8c:06:62:34:05:a4:38:5b:a8:fd:d0:1f: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:91:44:22:A0:C7:3E:F7:7D:B6:FC:38:B7:E4:3D:E1:10:29:78:96 X509v3 Authority Key Identifier: keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4c:ba:a7:de:25:e6:74:06:82:f3:ec:8d:02:04:a3:4c:de: 34:5c:d7:9c:1c:22:5e:75:90:cb:15:b4:6a:23:18:f4:9c:e1: 36:01:a0:07:c4:3c:03:30:bb:2b:f4:1e:06:b9:80:d7:0f:fd: 9d:1b:30:e4:c6:60:4a:30:d5:3f:05:17:c5:3c:26:de:bd:d5: 56:4a:3b:c3:36:3b:b0:3f:4f:df:9c:84:bd:51:a5:00:a6:10: e6:df:41:ee:2e:a3:9a:f5:de:e2:71:3f:db:d3:a1:07:4d:5d: cc:e6:6f:94:ca:91:38:2e:c1:e3:7f:75:8e:8f:0f:b7:eb:04: 60:39:98:ef:c4:09:00:b2:71:4b:e1:28:72:8f:ba:d9:29:89: c3:5a:bd:7e:a5:0c:bf:03:6d:ae:d8:73:8f:7f:80:b5:9c:6f: db:1a:85:3a:19:84:96:32:e2:d1:ef:17:d8:24:a1:93:8a:b7: 2a:32:bb:5a:57:a1:15:f1:76:3a:ee:16:c3:76:ec:10:dd:6f: 1e:21:00:13:9b:d1:a5:98:87:5a:0a:5f:8a:99:e1:5e:63:47: c3:b7:a6:dc:71:0b:d7:3a:76:9f:e1:19:5b:de:a6:2e:8a:19: 0b:e7:e7:42:e3:40:4c:0b:1a:d5:e8:26:02:09:7f:dd:94:78: e8:75:b2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtNLZ0SXwZVTfKJdwy9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzBhOWE1ZTY5YzU0ODI2MDk4YmIyMGQzNDFmMDczOGZm NjdlNjUwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EygzZDkxNDQyMmEwYzczZWY3N2RiNmZjMzhiN2U0M2RlMTEwMjk3ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lH5+dgc1sLuAmkp6a8IUOQd2mhp YLkxffng0f/BHf6CG+ssV91XzKMtjYdPbWxrMwVgV9VDg40IuU8/W7lBZr+1/i15 SBifyM7ewfL8Y03D158n/nXcGLdAoS+KM/EXfxZs5IkQy7phCJPdUQYu6ppbg6pQ s67WIFFSSAAZb1rLaQHRxnmwwwPIMNO7GPTDEzwliFNK34aasujGrU6X810GyDr2 cd9YRR+fUJADmUCoySmklSK7UdySRHcE6fS8Lp0sd4DGJBamIhRh0N31d05GrvVN Wo1pq5XndNVw4igRvGpzu7j0CBISWBCdjL32EZaMBmI0BaQ4W6j90B+n2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2RRCKgxz73fbb8OLfkPeEQKXiWMB8GA1UdIwQY MBaAFI3AqaXmnFSCYJi7INNB8HOP9n5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUt NmM1MjkyZDM0ZTU0LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUtNmM1MjkyZDM0ZTU0 LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUy6p94l 5nQGgvPsjQIEo0zeNFzXnBwiXnWQyxW0aiMY9JzhNgGgB8Q8AzC7K/QeBrmA1w/9 nRsw5MZgSjDVPwUXxTwm3r3VVko7wzY7sD9P35yEvVGlAKYQ5t9B7i6jmvXe4nE/ 29OhB01dzOZvlMqROC7B4391jo8Pt+sEYDmY78QJALJxS+Eoco+62SmJw1q9fqUM vwNtrthzj3+AtZxv2xqFOhmEljLi0e8X2CShk4q3KjK7WlehFfF2Ou4Ww3bsEN1v HiEAE5vRpZiHWgpfipnhXmNHw7em3HEL1zp2n+EZW96mLooZC+fnQuNATAsa1egm Agl/3ZR46HWyKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:15 2025 by rpki-client