This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft File: j493R7eqBqdUJRZiDt45nQHlx-Q.mft (raw, json) Hash identifier: fI3uZ7rVPZiH+sbR+IEKHkHF8vY2M1tLybUyVE44U2w= Subject key identifier: 1A:55:9B:A9:7D:42:2F:C1:D1:B8:EF:6F:49:DA:6C:A3:C8:06:D4:33 Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4 Certificate issuer: /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4 Certificate serial: 019AF2098717D4F4C5C6B2401BDB14901A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft Manifest number: A0 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: j493R7eqBqdUJRZiDt45nQHlx-Q.crl (hash: LNRUQKyg93plPiko5UUa9Z7wsAwAFimJmbIEe7OU51o=) 2: ziCwa1ZpRucLQqC8RsqB-EGT_f8.roa (hash: LDs5gDGAS/QA8OuoaiSZeVmSdeDBB4mdwdOvMRTKuLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:87:17:d4:f4:c5:c6:b2:40:1b:db:14:90:1a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=1a559ba97d422fc1d1b8ef6f49da6ca3c806d433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:d9:69:21:69:86:97:2a:8a:02:7b:56:28: 18:05:58:72:01:f6:b2:8b:4d:94:da:ed:8e:f0:14: ec:83:ec:79:92:34:4f:d8:81:67:81:07:a4:20:4a: 77:d4:3b:33:f8:bd:bc:35:37:d4:6c:c7:27:22:d6: 72:60:c3:1c:19:d1:e8:94:8b:5c:dc:d9:8c:03:76: ee:72:0f:8d:f8:b0:6c:ba:54:ed:e2:12:21:0d:01: 1b:f7:6a:2d:33:5f:17:8b:06:21:ff:61:cf:1c:35: 91:a6:4c:54:34:bf:75:dc:7c:e4:cb:96:cb:25:c5: 00:27:05:0d:08:ca:40:82:f2:c4:4e:e4:7b:0a:e5: 84:e5:9c:9a:c0:14:c5:e3:7d:fd:8b:02:49:15:6d: cc:1f:9e:4f:d0:96:24:52:22:15:a0:e9:d5:7b:0a: 5a:dc:4e:e7:1d:94:45:e8:1f:c6:ee:82:28:50:30: 2b:9e:01:9a:e3:1a:e3:8e:cc:bf:cc:66:1b:9b:d4: 79:98:96:0b:86:cf:b9:64:92:de:25:b7:69:47:bc: 25:d7:64:07:db:3c:6e:2a:38:5e:d1:9d:2d:55:49: 47:1c:27:42:79:48:86:af:08:0a:36:7c:06:ce:ab: 33:05:65:0d:2a:c9:1d:1b:83:91:83:05:01:5b:ae: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:55:9B:A9:7D:42:2F:C1:D1:B8:EF:6F:49:DA:6C:A3:C8:06:D4:33 X509v3 Authority Key Identifier: keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:5f:ae:8d:db:82:56:a3:36:ca:32:3a:15:46:74:1f:c6: 2b:d5:a7:dd:1c:33:13:14:7b:6f:01:8b:20:61:10:d2:cc:87: 90:a0:5f:9e:22:b6:41:ab:48:37:2d:c1:fc:62:b4:33:0d:99: 12:85:68:82:57:7d:30:72:0b:af:23:d2:04:57:b9:c5:11:94: ad:96:20:25:9a:94:6d:47:4b:84:43:53:01:db:24:86:0b:87: 35:1f:3c:52:16:f1:cc:86:d2:27:80:b1:a7:62:3d:23:b0:30: 6a:35:23:d0:e8:d4:0d:17:a1:5f:79:aa:f4:01:e6:e2:b5:a1: 09:2d:7f:a1:92:b0:95:f8:8a:68:a8:5e:f0:83:79:c6:9f:17: 8d:75:af:b4:c5:76:d7:6a:18:06:43:d3:70:4c:ea:71:c1:aa: a7:b4:a9:10:b3:d8:89:40:c9:7c:a5:c0:cb:aa:67:02:3c:80: f3:ac:1d:57:9a:be:81:00:53:39:74:51:ef:10:f9:82:c9:30: 6c:3c:cc:9e:4c:3e:d2:14:3f:32:9e:b0:89:89:ec:75:a8:37: e5:77:d1:09:76:cd:2d:b0:ad:33:bf:7e:fc:3e:a0:69:59:72: 06:ce:dc:91:b5:79:7b:96:27:ba:96:cd:ed:4d:e7:ad:88:a4: 3b:f3:7c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYcX1PTFxrJAG9sUkBqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOGY3NzQ3YjdhYTA2YTc1NDI1MTY2MjBlZGUzOTlkMDFl NWM3ZTQwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EygxYTU1OWJhOTdkNDIyZmMxZDFiOGVmNmY0OWRhNmNhM2M4MDZkNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl7ZaSFphpcqigJ7VigYBVhyAfay i02U2u2O8BTsg+x5kjRP2IFngQekIEp31Dsz+L28NTfUbMcnItZyYMMcGdHolItc 3NmMA3bucg+N+LBsulTt4hIhDQEb92otM18XiwYh/2HPHDWRpkxUNL913Hzky5bL JcUAJwUNCMpAgvLETuR7CuWE5ZyawBTF4339iwJJFW3MH55P0JYkUiIVoOnVewpa 3E7nHZRF6B/G7oIoUDArngGa4xrjjsy/zGYbm9R5mJYLhs+5ZJLeJbdpR7wl12QH 2zxuKjhe0Z0tVUlHHCdCeUiGrwgKNnwGzqszBWUNKskdG4ORgwUBW64W+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpVm6l9Qi/B0bjvb0nabKPIBtQzMB8GA1UdIwQY MBaAFI+Pd0e3qganVCUWYg7eOZ0B5cfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgt Y2JlNDc1ZDMyYzYzLzEvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgtY2JlNDc1ZDMyYzYz LzEvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs1fro3b glajNsoyOhVGdB/GK9Wn3RwzExR7bwGLIGEQ0syHkKBfniK2QatINy3B/GK0Mw2Z EoVogld9MHILryPSBFe5xRGUrZYgJZqUbUdLhENTAdskhguHNR88UhbxzIbSJ4Cx p2I9I7AwajUj0OjUDRehX3mq9AHm4rWhCS1/oZKwlfiKaKhe8IN5xp8XjXWvtMV2 12oYBkPTcEzqccGqp7SpELPYiUDJfKXAy6pnAjyA86wdV5q+gQBTOXRR7xD5gskw bDzMnkw+0hQ/Mp6wiYnsdag35XfRCXbNLbCtM79+/D6gaVlyBs7ckbV5e5YnupbN 7U3nrYikO/N8QA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:01 2025 by rpki-client