This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft File: d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json) Hash identifier: l0k2MgaMxJg/QR57s/JmdwJgt1/YWNDBWlaryL84osM= Subject key identifier: D9:24:A6:17:BF:5B:AA:29:3D:D0:9B:F4:E2:5A:85:B9:AA:68:51:FC Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Certificate serial: 019AF0BF9DB378E1B174C660C985B25D4BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft Manifest number: 1020 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=) 2: D6YciS_w4aBGgTwchVv0zjl3KM8.roa (hash: 0I0L8dvu+mXVyzn+otu0YMQ4J1Sqc+LW0CCIWiAWR+s=) 3: XyMxVfTmZ9FOajmxjytII90XihY.roa (hash: Y1EWEtYGvmWwkkpTBkRX8z/3qaLQ9HzYwz0slqYxxoo=) 4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: CY5j+RpCwqtnRmUy5bJ6VI54JZmai6Hl9bOpeVwXwJQ=) 5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9d:b3:78:e1:b1:74:c6:60:c9:85:b2:5d:4b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=d924a617bf5baa293dd09bf4e25a85b9aa6851fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:7a:72:97:fb:d8:ce:f3:86:cd:e3:1f:89: ea:3e:a9:ab:15:ac:87:83:a5:68:64:f9:86:48:29: ba:9f:00:86:11:63:1a:24:06:40:8a:d4:3b:95:b2: 75:65:09:d7:89:fd:28:38:d8:fa:06:a6:63:41:cc: ab:94:3c:4d:fe:2b:63:db:b0:c2:89:00:dc:a3:12: c5:f5:90:d0:8a:cd:60:e5:88:aa:61:ec:b5:87:8f: c3:bf:e4:e3:83:dc:06:47:ca:e4:c2:16:9d:ec:bf: 26:e4:e8:ba:e7:cf:37:d7:eb:08:e3:bc:2e:2d:9c: 7c:bf:75:72:93:28:a0:44:98:3f:56:07:1c:60:0c: f4:99:f9:47:88:47:ff:ef:7d:ec:39:ba:51:5d:78: 53:10:b9:0d:35:e1:3e:56:0a:e0:b4:7d:ef:ae:a8: 99:25:21:79:a3:d5:8f:6b:bd:56:9b:7e:bc:18:12: 68:cd:0b:f9:d8:44:72:ca:47:27:b2:dd:09:b9:09: a4:3c:d6:bf:70:ce:17:3d:44:f7:99:2e:7d:a3:a5: ba:06:a6:9f:5d:be:09:9e:92:08:31:09:a3:66:26: d6:4d:7f:70:64:ca:a4:5b:d6:56:41:0e:0e:d5:0d: 55:1e:64:76:a1:c7:ef:3f:bc:e6:7d:fc:45:82:69: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:24:A6:17:BF:5B:AA:29:3D:D0:9B:F4:E2:5A:85:B9:AA:68:51:FC X509v3 Authority Key Identifier: keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:72:78:73:85:ba:d9:4b:76:44:3a:c8:60:a4:4a:e3:99: f1:e1:5d:ae:85:d6:50:32:8e:ae:f3:f3:3b:34:5e:59:4b:ec: 23:25:76:47:35:d8:fc:c5:98:16:e4:a2:cc:b8:ee:29:54:33: 33:c6:98:bb:0c:96:42:12:f8:66:fe:6e:3e:8e:e3:d7:51:0d: 54:1a:9e:42:14:e4:79:71:af:b7:eb:09:8a:40:02:ae:3a:b8: b3:a6:41:56:b2:0c:08:e8:17:f0:17:96:96:22:49:e8:26:c5: 1f:9a:92:c0:c8:d7:77:bd:1f:62:53:c8:45:66:d9:fc:0d:50: 17:b0:4c:a3:82:c6:33:43:1f:0b:6b:a8:85:2f:5f:f3:44:c9: a0:cb:d1:a5:87:d3:a9:a6:a4:84:96:01:e9:fe:f8:6f:5c:c4: 29:7d:94:75:8d:9a:00:d5:96:f9:d0:83:b7:27:b5:0b:c6:2f: c8:ed:5b:5c:cb:09:a5:1c:bb:d7:bc:85:8d:c2:39:dc:26:67: 10:8e:a4:42:6b:75:5c:7c:8c:5d:ad:7d:f9:d3:39:09:18:5c: e5:c9:2a:94:fb:c4:43:fe:7a:c3:92:aa:89:29:b4:ce:46:3e: e1:42:74:b2:7d:6e:0d:1d:7d:ef:5d:fc:29:15:f2:95:5f:d5: 88:a7:95:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv52zeOGxdMZgyYWyXUu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2 MzkwODYwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EyhkOTI0YTYxN2JmNWJhYTI5M2RkMDliZjRlMjVhODViOWFhNjg1MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDB6cpf72M7zhs3jH4nqPqmrFayH g6VoZPmGSCm6nwCGEWMaJAZAitQ7lbJ1ZQnXif0oONj6BqZjQcyrlDxN/itj27DC iQDcoxLF9ZDQis1g5YiqYey1h4/Dv+Tjg9wGR8rkwhad7L8m5Oi658831+sI47wu LZx8v3VykyigRJg/VgccYAz0mflHiEf/733sObpRXXhTELkNNeE+VgrgtH3vrqiZ JSF5o9WPa71Wm368GBJozQv52ERyykcnst0JuQmkPNa/cM4XPUT3mS59o6W6Bqaf Xb4JnpIIMQmjZibWTX9wZMqkW9ZWQQ4O1Q1VHmR2ocfvP7zmffxFgmkE9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkkphe/W6opPdCb9OJahbmqaFH8MB8GA1UdIwQY MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnl1yeHOF utlLdkQ6yGCkSuOZ8eFdroXWUDKOrvPzOzReWUvsIyV2RzXY/MWYFuSizLjuKVQz M8aYuwyWQhL4Zv5uPo7j11ENVBqeQhTkeXGvt+sJikACrjq4s6ZBVrIMCOgX8BeW liJJ6CbFH5qSwMjXd70fYlPIRWbZ/A1QF7BMo4LGM0MfC2uohS9f80TJoMvRpYfT qaakhJYB6f74b1zEKX2UdY2aANWW+dCDtye1C8YvyO1bXMsJpRy717yFjcI53CZn EI6kQmt1XHyMXa19+dM5CRhc5ckqlPvEQ/56w5KqiSm0zkY+4UJ0sn1uDR197138 KRXylV/ViKeVIw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:41 2025 by rpki-client