This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json) Hash identifier: XR0aQOeZ9qGoWGVcFcJh1fJuYaqJnJps/2FqMNHsWIw= Subject key identifier: 05:20:90:73:F0:5F:F0:AB:C7:F2:FD:6F:4C:8E:BB:2B:68:14:3B:C7 Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Certificate serial: 019AF209639E76A7B719AFD01EA2AF3C1A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft Manifest number: 0AD2 Signing time: Sat 06 Dec 2025 05:01:32 +0000 Manifest this update: Sat 06 Dec 2025 05:01:32 +0000 Manifest next update: Sun 07 Dec 2025 05:01:32 +0000 Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: SFXDQobIwWV73oboNpLxXfgFNsSgmz7U94hXJrFMs+E=) 2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:63:9e:76:a7:b7:19:af:d0:1e:a2:af:3c:1a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2 Validity Not Before: Dec 6 05:01:32 2025 GMT Not After : Dec 7 05:01:32 2025 GMT Subject: CN=05209073f05ff0abc7f2fd6f4c8ebb2b68143bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:62:46:ff:e8:46:eb:34:6d:ec:4a:1d:e9: 45:7b:12:76:05:91:07:af:cb:19:a9:2d:d7:73:54: 24:05:68:aa:ea:c6:5e:a0:46:8c:0b:c1:59:1b:ab: 41:ce:0f:32:ed:95:1c:ab:59:51:69:17:bb:20:24: b0:64:ff:53:36:f2:22:29:d7:d1:1c:b7:13:97:0f: 6b:f2:14:f4:71:bc:7e:8a:24:06:62:e2:a0:db:d9: 90:ef:c1:39:27:87:12:35:2e:8f:ab:95:e5:10:02: 05:3b:f5:53:da:cd:85:72:4b:23:6b:4e:45:72:21: ac:00:13:50:c6:4d:ce:e1:e4:90:8f:f7:d0:59:a0: d1:91:be:99:9c:c3:60:3d:6a:a9:3f:6a:4d:1a:40: 6b:53:2f:de:93:b7:aa:33:d7:40:49:86:08:16:21: 54:02:d8:ee:fc:d1:6f:22:35:d3:74:65:be:d4:de: a1:44:8d:bb:1f:f4:d5:ec:6f:b2:8f:43:2c:a8:12: 89:71:2d:92:f6:74:b9:88:51:9f:d6:fa:36:e6:d0: 9c:aa:6e:20:ee:65:4a:ee:aa:9d:42:e1:75:b4:da: c6:dd:02:93:3e:b9:4a:b8:8b:44:bd:93:7c:63:4c: fc:db:c4:9a:bb:61:7d:3e:24:f0:5e:08:eb:8d:33: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:20:90:73:F0:5F:F0:AB:C7:F2:FD:6F:4C:8E:BB:2B:68:14:3B:C7 X509v3 Authority Key Identifier: keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e5:86:b5:fc:c4:fb:a5:b6:84:c5:94:6f:60:21:6b:a3:4d: 3d:72:33:23:2c:9f:77:f3:47:72:7a:fe:ea:6c:48:c3:4f:45: 71:f7:e8:95:ff:4f:ba:5f:cf:b6:24:c5:b9:32:fa:46:be:79: d3:95:19:c3:17:35:f7:9c:e2:d0:11:52:e6:44:90:b6:b3:92: 75:e3:6e:41:2c:4e:1a:cc:23:09:e2:a2:68:b8:ce:7e:1f:aa: 6a:92:59:aa:3c:a5:12:e7:2d:25:42:49:ca:82:4e:44:02:7d: 39:f0:0b:6e:4d:de:9a:33:cc:e0:aa:25:fe:30:80:5c:69:0b: 4e:f4:4c:44:bd:fd:9d:e6:c1:2a:6c:4e:9b:d0:a2:4d:69:58: 2d:47:3b:e8:86:a5:c1:d5:32:fa:38:81:d5:e3:ac:c0:83:05: e0:87:c4:70:38:3f:f6:2d:72:f2:d7:a6:48:ad:c5:10:aa:6a: 16:af:69:21:19:98:b1:33:07:52:f1:29:c1:37:95:6a:79:15: 04:06:29:93:3e:f1:a3:7b:f6:f1:97:3d:40:74:a9:4f:aa:ac: 78:e3:41:49:08:f4:09:7a:d2:fc:e8:72:c4:09:f1:fd:db:d1: f5:0f:1a:e3:54:f8:b4:67:24:45:80:e5:27:be:5a:cf:5f:11: 7c:58:3a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWOedqe3Ga/QHqKvPBoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4 MjFiZDIwHhcNMjUxMjA2MDUwMTMyWhcNMjUxMjA3MDUwMTMyWjAzMTEwLwYDVQQD EygwNTIwOTA3M2YwNWZmMGFiYzdmMmZkNmY0YzhlYmIyYjY4MTQzYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN5iRv/oRus0bexKHelFexJ2BZEH r8sZqS3Xc1QkBWiq6sZeoEaMC8FZG6tBzg8y7ZUcq1lRaRe7ICSwZP9TNvIiKdfR HLcTlw9r8hT0cbx+iiQGYuKg29mQ78E5J4cSNS6Pq5XlEAIFO/VT2s2Fcksja05F ciGsABNQxk3O4eSQj/fQWaDRkb6ZnMNgPWqpP2pNGkBrUy/ek7eqM9dASYYIFiFU Atju/NFvIjXTdGW+1N6hRI27H/TV7G+yj0MsqBKJcS2S9nS5iFGf1vo25tCcqm4g 7mVK7qqdQuF1tNrG3QKTPrlKuItEvZN8Y0z828Sau2F9PiTwXgjrjTOuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUgkHPwX/Crx/L9b0yOuytoFDvHMB8GA1UdIwQY MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2 LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+WGtfzE +6W2hMWUb2Aha6NNPXIzIyyfd/NHcnr+6mxIw09Fcffolf9Pul/PtiTFuTL6Rr55 05UZwxc195zi0BFS5kSQtrOSdeNuQSxOGswjCeKiaLjOfh+qapJZqjylEuctJUJJ yoJORAJ9OfALbk3emjPM4Kol/jCAXGkLTvRMRL39nebBKmxOm9CiTWlYLUc76Ial wdUy+jiB1eOswIMF4IfEcDg/9i1y8temSK3FEKpqFq9pIRmYsTMHUvEpwTeVankV BAYpkz7xo3v28Zc9QHSpT6qseONBSQj0CXrS/OhyxAnx/dvR9Q8a41T4tGckRYDl J75az18RfFg64Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:06 2025 by rpki-client