This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json) Hash identifier: s+KAA+ikIhriqQSQ6ePeaxbC3jK+xGJHtHatmte+msg= Subject key identifier: F8:12:F5:89:C5:9E:99:C7:C6:35:45:1C:99:D5:17:59:00:48:D9:C0 Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a Certificate serial: 019AF3527DC1CF9163693F5C9F08496F375F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:00 +0000 Manifest this update: Sat 06 Dec 2025 11:01:00 +0000 Manifest next update: Sun 07 Dec 2025 11:01:00 +0000 Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=) 2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: ocykL9CDd42cbRFBuin2jsEypYcPmw8lGmJ5r1uvMcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7d:c1:cf:91:63:69:3f:5c:9f:08:49:6f:37:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a Validity Not Before: Dec 6 11:01:00 2025 GMT Not After : Dec 7 11:01:00 2025 GMT Subject: CN=f812f589c59e99c7c635451c99d517590048d9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:2b:52:69:14:4d:05:32:f4:92:25:b1:8e: 03:e3:75:b2:ff:57:33:90:d4:92:cb:2a:2b:e9:2b: ba:6d:66:2f:2d:ff:96:09:5d:ec:a6:82:18:be:6a: f2:6c:e5:bf:81:fe:75:09:33:b3:6e:30:2c:05:b4: 12:0c:be:bf:b3:2b:27:2e:3f:28:a9:f6:78:62:72: 95:f1:7d:57:8e:22:40:5f:dc:79:f9:1b:94:29:be: 7c:98:3b:76:a7:05:63:36:2f:cf:37:17:ad:91:00: 7f:d4:0c:4d:bf:5e:95:4a:c3:42:61:af:14:c6:b8: 42:78:12:64:46:42:c8:50:21:58:71:d0:b5:1f:cb: 65:54:ab:33:78:fb:d8:ca:01:0e:0d:d0:6c:fc:3d: cc:ea:1e:ba:0c:c2:4c:83:64:0a:f8:b3:fb:92:1d: 74:c3:22:96:54:41:72:d5:9f:cd:09:84:ab:65:43: 56:d8:cc:3a:cf:2b:e7:07:55:00:6d:1a:43:06:39: 49:06:34:83:82:d0:f8:9f:a3:78:7a:56:f2:6c:3c: bc:8d:eb:9d:a6:f2:1f:d1:e2:9c:d3:3f:3b:01:3e: df:08:0f:1c:62:e0:80:d9:7f:9d:df:6f:86:4d:48: 78:75:5c:c9:16:eb:78:db:27:25:15:c0:62:6b:1c: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:12:F5:89:C5:9E:99:C7:C6:35:45:1C:99:D5:17:59:00:48:D9:C0 X509v3 Authority Key Identifier: keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:92:ae:93:bd:53:2d:46:57:90:e1:ef:0a:89:bc:10:b0:f6: 3f:9e:0a:5a:97:59:a7:40:be:7b:02:5c:db:94:00:f5:df:74: c7:8b:40:e7:3d:52:c8:f8:84:b1:5d:ae:97:5e:0e:b3:8d:15: ec:d1:d3:94:52:a2:44:b9:c4:c9:cd:13:14:f4:ce:ea:79:1a: 31:92:28:2f:c4:d4:9e:29:87:72:1d:31:a0:8c:80:91:ad:bf: 7c:7a:44:6e:10:6a:f4:86:33:ee:9d:33:ce:86:d2:af:47:32: b4:94:7f:08:ce:32:a1:cd:8f:5a:ec:ff:c5:a0:3c:e2:60:59: a4:21:50:98:d9:1c:13:cc:69:e0:47:1e:07:09:a1:43:53:64: 7d:c3:74:c0:75:fb:ae:12:5c:07:1f:73:48:b0:41:a3:67:5d: c0:fc:91:94:ac:98:9f:b8:03:2a:94:e1:42:86:e4:eb:ba:46: 94:83:94:13:78:82:18:ac:0c:2e:a8:c9:66:2f:61:7a:36:94: 6b:c5:e9:58:1e:39:ac:ca:82:8e:cf:2a:e2:ae:1c:34:a9:cb: 71:dc:87:29:9a:39:d3:16:ba:f5:58:93:86:79:20:89:0c:99: 1f:8a:1d:aa:e4:9d:d0:b1:e7:72:44:99:d4:b7:03:9d:d8:bf: 6b:a0:95:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUn3Bz5FjaT9cnwhJbzdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDVhNGVkMTdhNjgxODQyMTAyY2M4ZjZlZjAzYTU2OWUx NTYxMmEwHhcNMjUxMjA2MTEwMTAwWhcNMjUxMjA3MTEwMTAwWjAzMTEwLwYDVQQD EyhmODEyZjU4OWM1OWU5OWM3YzYzNTQ1MWM5OWQ1MTc1OTAwNDhkOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUrUmkUTQUy9JIlsY4D43Wy/1cz kNSSyyor6Su6bWYvLf+WCV3spoIYvmrybOW/gf51CTOzbjAsBbQSDL6/sysnLj8o qfZ4YnKV8X1XjiJAX9x5+RuUKb58mDt2pwVjNi/PNxetkQB/1AxNv16VSsNCYa8U xrhCeBJkRkLIUCFYcdC1H8tlVKszePvYygEODdBs/D3M6h66DMJMg2QK+LP7kh10 wyKWVEFy1Z/NCYSrZUNW2Mw6zyvnB1UAbRpDBjlJBjSDgtD4n6N4elbybDy8jeud pvIf0eKc0z87AT7fCA8cYuCA2X+d32+GTUh4dVzJFut42yclFcBiaxx9lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgS9YnFnpnHxjVFHJnVF1kASNnAMB8GA1UdIwQY MBaAFCcFpO0XpoGEIQLMj27wOlaeFWEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUt NjUzNjhmNDA4ZGEzLzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8zYzg3NWQtOWU2NS00ZTA2LTg4NjUtNjUzNjhmNDA4ZGEz LzEvSndXazdSZW1nWVFoQXN5UGJ2QTZWcDRWWVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpKuk71T LUZXkOHvCom8ELD2P54KWpdZp0C+ewJc25QA9d90x4tA5z1SyPiEsV2ul14Os40V 7NHTlFKiRLnEyc0TFPTO6nkaMZIoL8TUnimHch0xoIyAka2/fHpEbhBq9IYz7p0z zobSr0cytJR/CM4yoc2PWuz/xaA84mBZpCFQmNkcE8xp4EceBwmhQ1NkfcN0wHX7 rhJcBx9zSLBBo2ddwPyRlKyYn7gDKpThQobk67pGlIOUE3iCGKwMLqjJZi9hejaU a8XpWB45rMqCjs8q4q4cNKnLcdyHKZo50xa69ViThnkgiQyZH4odquSd0LHnckSZ 1LcDndi/a6CVDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:27:32 2025 by rpki-client