This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft File: 1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json) Hash identifier: Lcb95p4dW9YIysbn2Al5a5Cm6r855puC+YSFPHt4qj0= Subject key identifier: 3E:6E:C9:66:3A:8F:D0:22:DF:82:29:09:46:41:73:AD:D2:22:5E:49 Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b Certificate serial: 019AF19AF69780C7806B18550B45B8EB0E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft Manifest number: 03C4 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=) 2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: z5THf0vUwfmnFLV+nKTWdxEAeEbq5S63Qs7U78PG5dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f6:97:80:c7:80:6b:18:55:0b:45:b8:eb:0e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=3e6ec9663a8fd022df822909464173add2225e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:3e:a3:4a:e1:69:e9:54:66:d1:a5:d5:5a: 63:05:c0:62:d4:b2:5e:81:bb:47:bc:8c:1c:ad:87: 01:e7:cb:b3:7f:16:6d:0b:35:03:e6:65:c1:b0:f4: b5:95:72:96:78:79:63:cd:84:90:c0:39:84:ab:96: e0:39:26:91:bd:52:cf:ed:49:9b:e0:46:10:4b:55: a2:95:61:90:ad:a5:c0:8f:54:13:2d:7d:38:d2:28: 06:92:10:c2:fa:3b:b6:b8:43:4b:d5:2d:0d:8c:b8: ce:a9:4d:7e:1c:cc:e5:a7:10:cf:c8:d3:56:ae:57: 02:bc:84:e7:46:c7:25:51:cf:12:c2:6f:9d:74:3c: 24:d4:16:cd:a3:33:80:e2:6c:96:18:1f:05:71:4c: 21:64:d7:19:74:69:86:de:09:11:fc:f1:5a:e3:d3: a4:23:19:b2:2e:5a:71:ad:b0:31:8c:92:15:ac:32: 04:69:f6:d0:ed:e1:db:98:71:c5:a9:3f:5c:88:2e: 52:9f:78:d0:60:79:de:44:25:96:7d:18:6a:64:48: a4:ee:7b:37:df:57:68:3d:fe:5b:29:c8:be:be:c6: 15:de:64:7c:98:c0:59:70:ba:3e:2d:7d:e3:4f:1e: 7d:dd:ae:18:75:4c:de:dd:19:65:1a:55:36:41:0f: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:C9:66:3A:8F:D0:22:DF:82:29:09:46:41:73:AD:D2:22:5E:49 X509v3 Authority Key Identifier: keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:65:6c:90:83:bc:01:86:38:36:36:02:d8:9d:95:ab:98:40: 55:d3:0b:f9:e7:17:7e:6b:12:d4:e1:48:23:6a:73:99:fa:2d: 02:a5:b0:bd:ae:87:88:4c:15:58:65:da:ee:c8:78:5f:14:4d: c1:9b:d5:e1:8e:89:89:97:7e:f4:5b:b0:3f:8b:49:40:c9:11: 45:31:b1:fa:35:cd:ff:35:09:c4:8f:ec:d5:6a:59:18:6c:b8: 15:a2:4a:e6:f8:c0:c8:ac:e7:8f:ac:dc:36:9d:4f:b9:9c:09: 35:10:db:1f:93:2e:f3:bb:6c:d7:76:df:4f:fa:f3:e1:a7:0c: 29:16:6b:0a:32:a0:4f:32:38:08:58:ef:df:8a:02:d6:4b:30: d0:7b:5b:8a:95:a9:2a:c9:42:2e:0e:52:5b:e4:81:8b:9f:ae: 2e:f0:43:d2:95:a0:87:60:a4:cb:91:5a:07:8a:6d:31:f0:fb: c6:44:08:4d:2d:f4:57:bd:ac:65:96:18:4f:96:7f:99:a1:76: 88:a1:89:b0:02:51:50:e0:df:0a:90:1c:d8:bb:2a:0d:72:2f: c5:eb:25:b9:8c:f5:90:70:4a:b0:93:ad:a2:95:7e:8d:fc:7b: e0:cc:f1:d8:6c:c4:ef:0f:76:dc:38:d2:f4:91:f0:4f:0d:32: 49:8a:e7:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvaXgMeAaxhVC0W46w5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2E2ZTI1OGQ2MjgwZjNkZDk3YTk2ZDk0ODZkOTNkNDJm MThkNGIwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygzZTZlYzk2NjNhOGZkMDIyZGY4MjI5MDk0NjQxNzNhZGQyMjI1ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEo+o0rhaelUZtGl1VpjBcBi1LJe gbtHvIwcrYcB58uzfxZtCzUD5mXBsPS1lXKWeHljzYSQwDmEq5bgOSaRvVLP7Umb 4EYQS1WilWGQraXAj1QTLX040igGkhDC+ju2uENL1S0NjLjOqU1+HMzlpxDPyNNW rlcCvITnRsclUc8Swm+ddDwk1BbNozOA4myWGB8FcUwhZNcZdGmG3gkR/PFa49Ok IxmyLlpxrbAxjJIVrDIEafbQ7eHbmHHFqT9ciC5Sn3jQYHneRCWWfRhqZEik7ns3 31doPf5bKci+vsYV3mR8mMBZcLo+LX3jTx593a4YdUze3RllGlU2QQ/0owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5uyWY6j9Ai34IpCUZBc63SIl5JMB8GA1UdIwQY MBaAFNY6biWNYoDz3ZepbZSG2T1C8Y1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Y3MDUtODg2Mi00NGUxLTkwMzMt YTQ3YjY5YzIyY2QwLzEvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Y3MDUtODg2Mi00NGUxLTkwMzMtYTQ3YjY5YzIyY2Qw LzEvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2VskIO8 AYY4NjYC2J2Vq5hAVdML+ecXfmsS1OFII2pzmfotAqWwva6HiEwVWGXa7sh4XxRN wZvV4Y6JiZd+9FuwP4tJQMkRRTGx+jXN/zUJxI/s1WpZGGy4FaJK5vjAyKznj6zc Np1PuZwJNRDbH5Mu87ts13bfT/rz4acMKRZrCjKgTzI4CFjv34oC1ksw0HtbipWp KslCLg5SW+SBi5+uLvBD0pWgh2Cky5FaB4ptMfD7xkQITS30V72sZZYYT5Z/maF2 iKGJsAJRUODfCpAc2LsqDXIvxesluYz1kHBKsJOtopV+jfx74Mzx2GzE7w923DjS 9JHwTw0ySYrnqw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:16 2025 by rpki-client