This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft File: jVqxQkxBKz-_Tvrprh5o42wr7oE.mft (raw, json) Hash identifier: B75igJvs98PLI6I+bs7NBCU7c5m4nO6ik3HvzE64x+U= Subject key identifier: 17:2A:4F:58:5B:2C:A1:90:01:BA:AC:FA:27:29:40:F1:0D:59:92:FD Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Certificate serial: 019AF1D21227E20DD9BAB04812F0A0CABF16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft Manifest number: C9 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: A4nvWxPWlzAQ5MyQBKFam5tqK2Y.roa (hash: uB+mrGBEprFri2JMpN/r8bicbt8/Y9Un0gqpGX/41SY=) 2: jVqxQkxBKz-_Tvrprh5o42wr7oE.crl (hash: VpzhTpb0iK4ULQzTKLQHQnjQKsCcQVyI5Trne65fntc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:12:27:e2:0d:d9:ba:b0:48:12:f0:a0:ca:bf:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=172a4f585b2ca19001baacfa272940f10d5992fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:da:84:a0:8d:7c:2b:8e:e8:ee:fd:ad:dc: b2:af:fe:a1:a0:f1:10:3d:50:64:00:44:67:7e:8a: 11:83:34:3e:45:14:9d:75:d3:0a:be:2d:30:e1:ed: 88:0e:24:5e:18:d2:62:5a:68:24:09:e7:f9:c0:4d: 87:6c:ce:1a:02:f2:95:ea:f0:4c:b3:06:d2:28:c4: 67:02:59:23:28:02:07:73:97:ff:1c:1d:14:b2:c3: 90:8d:74:9e:17:23:29:d0:8b:fd:0b:2b:8f:b4:e6: 29:74:60:45:b3:86:16:70:11:df:c4:19:58:8c:99: 22:da:ce:43:de:f4:4a:aa:a3:89:26:37:3d:03:7d: c1:b2:71:0f:c5:aa:fa:44:75:cb:82:16:71:6d:c4: 9b:2e:61:57:46:59:e1:82:b4:c9:78:f1:64:4a:3c: 50:52:06:75:7f:26:6d:5c:21:91:a8:a9:6b:1c:8f: 66:de:dc:e9:45:9c:b4:eb:e7:31:dc:10:f6:91:9b: c4:29:9f:a0:25:39:1e:95:bb:72:ca:7d:ae:23:8c: 3b:72:a9:44:f5:55:e8:3c:ed:40:d7:20:e1:10:4b: 2a:2f:43:f6:14:d3:e3:46:7b:ce:c4:5b:26:fe:10: 77:8f:1f:31:87:52:a9:1f:ad:d5:04:a5:d4:f3:c8: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2A:4F:58:5B:2C:A1:90:01:BA:AC:FA:27:29:40:F1:0D:59:92:FD X509v3 Authority Key Identifier: keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:fa:28:db:29:88:94:18:f9:ff:dd:c9:9d:0f:18:ad:4f: 16:37:19:fa:cc:e4:f9:eb:2d:e8:83:9d:4f:12:32:9b:3d:70: 97:f9:13:b7:bc:84:ae:de:b4:e3:24:ae:e7:32:cf:ab:71:00: e0:74:72:92:ce:33:79:78:bd:23:5f:24:cd:e5:21:37:7a:72: 04:de:c0:34:c7:d1:ad:65:e7:d4:69:bb:5a:df:00:5e:cf:7a: 42:8a:93:b3:84:dd:e3:f7:2b:78:7c:47:67:30:71:83:d7:6a: d0:8e:d1:c4:20:4b:1e:51:7f:44:77:51:3a:d0:e6:8e:80:d4: 57:3e:fb:87:a8:f6:7c:2c:67:71:08:3f:4f:b5:f3:28:a1:9f: bc:7d:e5:79:82:e1:4c:a5:86:8d:71:ca:1d:1e:c3:c9:88:b6: a6:6c:25:4e:2a:fc:4b:4f:3d:9a:32:3f:e1:8c:4f:4e:75:5c: da:67:64:49:9d:ca:03:1b:16:dc:ee:e3:9f:dc:f6:76:dc:51: 80:ca:e2:b7:68:30:ab:8a:fc:28:2a:35:00:20:cf:c3:77:de: 11:b3:d3:07:1c:d9:1b:b2:bd:a9:0c:67:1d:da:27:44:c8:f6: 25:3e:ce:3d:8b:a0:81:62:79:70:f6:90:ed:79:3e:1a:8f:fb: 33:99:8a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hIn4g3ZurBIEvCgyr8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWFiMTQyNGM0MTJiM2ZiZjRlZmFlOWFlMWU2OGUzNmMy YmVlODEwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EygxNzJhNGY1ODViMmNhMTkwMDFiYWFjZmEyNzI5NDBmMTBkNTk5MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKjahKCNfCuO6O79rdyyr/6hoPEQ PVBkAERnfooRgzQ+RRSdddMKvi0w4e2IDiReGNJiWmgkCef5wE2HbM4aAvKV6vBM swbSKMRnAlkjKAIHc5f/HB0UssOQjXSeFyMp0Iv9CyuPtOYpdGBFs4YWcBHfxBlY jJki2s5D3vRKqqOJJjc9A33BsnEPxar6RHXLghZxbcSbLmFXRlnhgrTJePFkSjxQ UgZ1fyZtXCGRqKlrHI9m3tzpRZy06+cx3BD2kZvEKZ+gJTkelbtyyn2uI4w7cqlE 9VXoPO1A1yDhEEsqL0P2FNPjRnvOxFsm/hB3jx8xh1KpH63VBKXU88hEwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcqT1hbLKGQAbqs+icpQPENWZL9MB8GA1UdIwQY MBaAFI1asUJMQSs/v0766a4eaONsK+6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2Qt ZjEwMDJmNTQ4NjE1LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2QtZjEwMDJmNTQ4NjE1 LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYT6KNsp iJQY+f/dyZ0PGK1PFjcZ+szk+est6IOdTxIymz1wl/kTt7yErt604ySu5zLPq3EA 4HRyks4zeXi9I18kzeUhN3pyBN7ANMfRrWXn1Gm7Wt8AXs96QoqTs4Td4/creHxH ZzBxg9dq0I7RxCBLHlF/RHdROtDmjoDUVz77h6j2fCxncQg/T7XzKKGfvH3leYLh TKWGjXHKHR7DyYi2pmwlTir8S089mjI/4YxPTnVc2mdkSZ3KAxsW3O7jn9z2dtxR gMrit2gwq4r8KCo1ACDPw3feEbPTBxzZG7K9qQxnHdonRMj2JT7OPYuggWJ5cPaQ 7Xk+Go/7M5mKTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:21 2025 by rpki-client