This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json) Hash identifier: 5qpi+dgqwNcvh8jmZQOERYNbc900O1SDCFDvx3rJhug= Subject key identifier: D4:31:A5:32:AB:F6:2A:21:59:F6:B9:45:6F:AF:E7:7B:C5:78:2D:2E Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2 Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2 Certificate serial: 019AF1645C39A40476ABA90A32395E66F0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft Manifest number: 143C Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=) 2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: +zZqfWJWDHcAM7i55rln3pc87iiOAHE4aMX8VYznqiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5c:39:a4:04:76:ab:a9:0a:32:39:5e:66:f0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2 Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=d431a532abf62a2159f6b9456fafe77bc5782d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:73:5b:e7:6f:ad:2d:4c:45:c2:8d:af:ef: dd:dc:2f:7f:72:00:77:bb:7a:a3:2a:65:be:a3:4c: 58:a4:5b:97:8a:db:ba:c0:bf:78:9d:e0:9a:64:d6: 5a:7b:bd:f1:cc:b0:1b:1b:73:fe:49:bc:0d:c7:d5: 25:47:6c:2d:01:88:d8:f5:7c:33:c3:03:15:c1:04: 04:bf:00:ed:ce:4f:08:4b:bb:65:2b:38:e2:30:6d: 2a:de:af:3a:61:c1:8f:48:42:0a:0c:f0:76:b1:aa: d7:6a:39:73:4c:60:c9:60:1c:61:69:3f:a6:3d:32: f6:dc:80:84:98:ac:47:db:17:c7:40:5e:45:b6:90: 9a:be:28:13:a5:95:ce:82:74:7b:78:67:9d:41:7e: 73:7b:6a:9c:90:90:72:87:e7:c1:d9:c8:71:6b:9c: a8:6a:00:d4:3f:82:f7:bd:62:e0:2a:69:90:51:6c: 55:7b:92:b7:5c:1d:0e:11:b6:f4:7f:9c:f8:64:22: ee:97:fa:6a:d7:1b:c2:7c:fd:ef:a7:66:e6:30:c2: 71:e5:13:d6:b0:05:53:a7:c2:bb:bb:7d:ec:68:59: 28:e1:f6:12:b5:2b:a8:77:3a:57:f6:07:50:6f:7b: ed:48:f4:d3:7b:09:4c:f5:7c:b9:3a:2c:19:1e:5d: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:31:A5:32:AB:F6:2A:21:59:F6:B9:45:6F:AF:E7:7B:C5:78:2D:2E X509v3 Authority Key Identifier: keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2f:05:35:ca:96:9e:a3:16:1f:73:58:b6:3e:48:a2:12:14: 91:b3:c0:ca:f4:b8:64:9d:73:be:2b:d9:cd:d0:4f:68:92:fe: 60:90:cd:7d:d8:bf:b1:87:a8:9e:ec:d0:8e:01:7e:7c:e1:cc: 92:1e:54:b9:2a:4e:ad:82:d4:23:ce:b9:12:47:a3:86:46:12: 6b:53:01:26:20:d0:be:0b:f6:cb:9b:e3:84:64:24:fb:96:f3: 44:0f:34:0e:0b:41:49:15:6b:8b:57:d2:67:5b:e4:66:38:16: 50:aa:53:90:4b:92:bb:e6:c6:bb:16:c4:3e:ec:b4:63:d2:16: b6:42:e4:ed:89:74:d2:03:25:7e:d2:3d:94:5c:a8:3e:50:06: 23:3a:91:f3:19:eb:2b:14:f1:47:d3:f6:90:22:3b:4c:fe:49: b9:4c:ac:ca:77:1a:26:61:90:fa:ff:f9:59:3e:f4:84:15:67: 7f:82:21:26:57:f7:69:b0:b9:d6:68:8f:46:e6:29:7d:67:b5: a6:cf:19:96:4d:d3:90:9f:07:37:10:f4:bf:c6:86:ce:1a:d6: 35:82:a7:88:ca:a7:a1:21:54:87:b5:ca:69:11:90:ba:7b:6a: 03:7f:f7:24:6d:c4:5f:e5:86:41:46:79:7f:e2:cc:51:1a:29: 1f:82:71:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFw5pAR2q6kKMjleZvDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh OGIzZDIwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhkNDMxYTUzMmFiZjYyYTIxNTlmNmI5NDU2ZmFmZTc3YmM1NzgyZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSZzW+dvrS1MRcKNr+/d3C9/cgB3 u3qjKmW+o0xYpFuXitu6wL94neCaZNZae73xzLAbG3P+SbwNx9UlR2wtAYjY9Xwz wwMVwQQEvwDtzk8IS7tlKzjiMG0q3q86YcGPSEIKDPB2sarXajlzTGDJYBxhaT+m PTL23ICEmKxH2xfHQF5FtpCavigTpZXOgnR7eGedQX5ze2qckJByh+fB2chxa5yo agDUP4L3vWLgKmmQUWxVe5K3XB0OEbb0f5z4ZCLul/pq1xvCfP3vp2bmMMJx5RPW sAVTp8K7u33saFko4fYStSuodzpX9gdQb3vtSPTTewlM9Xy5OiwZHl3PuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQxpTKr9iohWfa5RW+v53vFeC0uMB8GA1UdIwQY MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy8FNcqW nqMWH3NYtj5IohIUkbPAyvS4ZJ1zvivZzdBPaJL+YJDNfdi/sYeonuzQjgF+fOHM kh5UuSpOrYLUI865EkejhkYSa1MBJiDQvgv2y5vjhGQk+5bzRA80DgtBSRVri1fS Z1vkZjgWUKpTkEuSu+bGuxbEPuy0Y9IWtkLk7Yl00gMlftI9lFyoPlAGIzqR8xnr KxTxR9P2kCI7TP5JuUysyncaJmGQ+v/5WT70hBVnf4IhJlf3abC51miPRuYpfWe1 ps8Zlk3TkJ8HNxD0v8aGzhrWNYKniMqnoSFUh7XKaRGQuntqA3/3JG3EX+WGQUZ5 f+LMURopH4Jxrw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:37 2025 by rpki-client