This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft File: JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json) Hash identifier: AOCl1quyHfdLFruhHH7iAneC8BrNqqzXyLUknaz1uwk= Subject key identifier: 3D:21:17:4B:BB:10:80:26:4A:CB:E0:C3:37:93:F3:61:12:8F:4A:B8 Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Certificate serial: 019AF2097BCBD621E95A9A7B5DC41B7E517C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft Manifest number: 1384 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 7Dych4zveyHs0pzibZ9uvQtJ2wM.roa (hash: CW7T4TaO0Ki1j/sE/BefdFndXGm6ZNbOz4E1BOqKMT8=) 2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: j2kz65H9uBmeyneIHwUxq+BD8Eq0u30M2GTw79HNBPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7b:cb:d6:21:e9:5a:9a:7b:5d:c4:1b:7e:51:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672 Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=3d21174bbb1080264acbe0c33793f361128f4ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:7e:9d:a1:cd:c9:3b:9c:ec:e8:96:7c:6f: 3d:72:b5:a6:53:a3:95:99:55:e5:88:d5:75:cd:14: 53:83:d8:54:7f:58:a8:e2:59:05:71:6c:e4:7d:8b: f8:d8:1f:d0:b3:f2:99:ab:da:1b:69:60:0e:42:44: a5:21:1e:a2:79:42:f5:5e:2e:8e:41:e6:f5:97:c0: e4:45:da:b9:7b:93:40:2d:5f:b9:94:28:e6:72:f3: 80:de:72:ab:ec:14:42:f4:e7:96:ce:1c:e3:05:42: 41:64:08:24:44:0f:d9:45:a4:41:db:47:14:38:2f: 8b:11:d6:82:38:df:51:7a:fc:78:39:68:58:13:95: 0f:36:cf:93:a6:cd:ca:45:fc:b3:bf:8c:65:5e:0a: 48:7f:27:6e:cb:d2:a7:4f:a3:63:14:fc:bd:79:cd: 2b:ae:0c:ea:36:45:15:e8:ac:af:a8:14:19:06:2e: 9d:21:f0:2b:db:26:66:21:bd:ae:33:69:df:70:81: 6a:8b:9d:3a:3f:48:05:76:b2:3d:96:5d:c1:28:b1: 48:57:dd:82:7e:5a:5d:98:e9:bd:14:42:e5:74:2c: 9c:ec:47:fe:e7:bb:8e:3c:a1:49:13:05:af:88:ff: 1a:43:d7:09:f3:64:b8:85:55:ff:68:11:38:d8:be: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:17:4B:BB:10:80:26:4A:CB:E0:C3:37:93:F3:61:12:8F:4A:B8 X509v3 Authority Key Identifier: keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:bf:dd:30:d5:7b:b1:ba:23:b3:12:62:55:0a:ce:0b:f8:b3: 20:db:a0:41:f8:d8:de:ab:13:31:e9:29:86:5d:b2:d5:f8:08: c4:4d:61:4a:6a:83:26:dc:83:16:c7:75:01:1b:71:e4:50:2a: 19:5c:cd:60:65:7f:d8:c7:62:62:af:49:fe:25:35:62:df:3e: d1:48:ef:f0:0b:3f:0e:94:90:fc:85:72:34:84:f2:3b:42:19: 6e:da:c7:a2:f3:70:57:1b:e4:02:95:2f:cd:bd:4c:95:22:ab: cf:4c:85:dd:71:ff:19:34:64:28:4b:50:05:f7:44:85:a1:84: 84:f0:ea:90:60:c0:6a:05:b2:fe:40:e1:bc:a2:bf:2d:f9:19: 06:7c:42:0e:9e:29:63:d4:1e:25:0c:0d:be:6f:5c:df:62:0b: b9:3f:66:34:69:ff:36:f0:fc:82:5e:cd:4c:52:f1:a9:c8:d8: fb:30:f0:d6:5b:80:7c:f3:e9:85:4f:6c:05:f6:fc:2f:5b:ae: d6:c8:15:e3:f7:9f:73:10:e0:74:b5:f9:90:e7:ba:39:5c:0d: 7a:d6:3f:b2:63:99:f5:eb:b1:d7:fd:5d:67:d9:96:50:73:7e: 6b:e1:2c:09:08:81:37:bb:41:2f:5d:96:14:83:d2:c3:b7:ec: 44:f6:cf:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXvL1iHpWpp7XcQbflF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDNkYjhiZWQzNTRiNDc4YzZkMTcwNGExZTNhZTZjOTI2 ZDU2NzIwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EygzZDIxMTc0YmJiMTA4MDI2NGFjYmUwYzMzNzkzZjM2MTEyOGY0YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrN+naHNyTuc7OiWfG89crWmU6OV mVXliNV1zRRTg9hUf1io4lkFcWzkfYv42B/Qs/KZq9obaWAOQkSlIR6ieUL1Xi6O Qeb1l8DkRdq5e5NALV+5lCjmcvOA3nKr7BRC9OeWzhzjBUJBZAgkRA/ZRaRB20cU OC+LEdaCON9Revx4OWhYE5UPNs+Tps3KRfyzv4xlXgpIfyduy9KnT6NjFPy9ec0r rgzqNkUV6KyvqBQZBi6dIfAr2yZmIb2uM2nfcIFqi506P0gFdrI9ll3BKLFIV92C flpdmOm9FELldCyc7Ef+57uOPKFJEwWviP8aQ9cJ82S4hVX/aBE42L7jaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0hF0u7EIAmSsvgwzeT82ESj0q4MB8GA1UdIwQY MBaAFCbT24vtNUtHjG0XBKHjrmySbVZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQt Y2U2YmI3MWE4ZGE2LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jMzIxYTMtZDM2Mi00NTRmLThlODQtY2U2YmI3MWE4ZGE2 LzEvSnRQYmktMDFTMGVNYlJjRW9lT3ViSkp0Vm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2L/dMNV7 sbojsxJiVQrOC/izINugQfjY3qsTMekphl2y1fgIxE1hSmqDJtyDFsd1ARtx5FAq GVzNYGV/2MdiYq9J/iU1Yt8+0Ujv8As/DpSQ/IVyNITyO0IZbtrHovNwVxvkApUv zb1MlSKrz0yF3XH/GTRkKEtQBfdEhaGEhPDqkGDAagWy/kDhvKK/LfkZBnxCDp4p Y9QeJQwNvm9c32ILuT9mNGn/NvD8gl7NTFLxqcjY+zDw1luAfPPphU9sBfb8L1uu 1sgV4/efcxDgdLX5kOe6OVwNetY/smOZ9eux1/1dZ9mWUHN+a+EsCQiBN7tBL12W FIPSw7fsRPbP1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:04 2025 by rpki-client