This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json) Hash identifier: tLsNrVxlM/XUmp3BnawNE5T9B73XO8+YPy6pDfSbLRY= Subject key identifier: CE:39:83:F0:1A:25:8A:5E:97:7A:24:D7:17:A2:E7:B1:91:3B:ED:0A Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Certificate serial: 019AF163DDE0006928450D2127B1A7BFB993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=) 2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: tvEJFDBVjW3k+olgrnExHjIDy1Na8Gwj9DXE52NhiA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:e0:00:69:28:45:0d:21:27:b1:a7:bf:b9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=ce3983f01a258a5e977a24d717a2e7b1913bed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:c6:ef:07:f6:5c:a4:3b:e4:3a:5d:1a:da: 2b:68:00:9d:18:d9:cb:dc:f2:12:51:56:8a:12:c8: ef:75:5d:24:fb:ab:d4:63:1f:6e:d0:9b:c3:d5:27: 8f:db:c0:43:19:1a:5e:8c:4a:1c:e8:b6:7a:74:d5: 3a:59:8e:d5:06:43:26:e6:65:25:56:e4:5b:ea:56: 33:c4:ce:5a:d7:49:87:fa:fd:62:ae:0b:c7:a2:ad: 1f:30:45:ab:f7:6a:23:15:05:f7:81:b2:f2:50:7e: c2:08:d9:23:1c:12:4b:20:16:ff:45:87:22:fd:8a: c3:72:7f:53:b5:07:18:11:a7:f8:49:ad:21:3b:ff: d8:2c:9d:5a:32:6b:66:71:2e:89:86:56:72:74:e8: 51:4c:50:22:4a:17:89:c7:f9:6c:f8:92:72:cb:5a: 20:26:7d:7d:20:62:82:c2:a9:5b:18:48:84:e5:eb: 02:0f:85:e4:7d:e2:31:ad:ee:1f:66:3e:1d:5b:b5: eb:f3:f4:8a:15:5d:be:95:05:7e:f6:ec:0b:03:ea: 45:8a:9c:45:b0:d5:a5:d2:61:12:17:f9:4a:73:69: ed:af:60:19:6d:64:65:c2:e6:b0:42:b4:b0:95:67: d9:24:d3:63:2e:60:f5:ad:ed:67:0d:ec:06:30:36: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:83:F0:1A:25:8A:5E:97:7A:24:D7:17:A2:E7:B1:91:3B:ED:0A X509v3 Authority Key Identifier: keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:5c:d2:fe:ca:ab:7e:c5:96:8f:17:00:86:89:7c:8a:43: 01:13:75:b0:27:01:bc:79:17:57:76:01:df:ad:18:f1:11:15: 31:53:3f:3e:a7:da:e0:0f:b9:9f:5d:ee:4a:95:01:d7:4a:dc: f2:32:c9:1e:1a:13:f9:e3:bb:e5:6e:22:52:9e:8e:0a:e9:2e: e1:a9:3f:a7:6f:1a:53:71:b3:6c:aa:c7:a0:5f:ba:ca:a4:06: 87:ba:b5:36:b5:f7:31:ae:ba:bf:80:1f:4c:62:21:f2:2c:c6: 33:3e:de:78:ac:ef:2a:00:c4:cb:04:93:fd:8b:8c:bc:d6:25: 69:5e:4d:71:2e:bf:44:18:1e:80:70:68:23:be:25:2d:54:fe: ba:7a:0b:55:39:be:8b:85:64:af:b3:89:4d:30:33:cc:ed:d2: c9:2f:6c:a3:0b:8d:2f:2c:d0:19:81:be:21:c3:b1:9f:ef:4e: 5b:b8:01:49:00:16:9c:6e:9b:f6:b0:67:4f:9f:b4:82:c0:08: 6f:c2:bc:48:85:9a:cd:5a:7a:e5:d5:9c:38:a6:cd:bb:6a:85: 57:de:b4:eb:b2:7b:38:ad:2e:a6:02:9d:44:e3:e3:f6:34:76: 9d:70:48:8f:31:79:b4:d8:9a:d2:71:d5:88:2c:c1:92:fb:11: 3f:81:6d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY93gAGkoRQ0hJ7Gnv7mTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx YzY5N2YwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhjZTM5ODNmMDFhMjU4YTVlOTc3YTI0ZDcxN2EyZTdiMTkxM2JlZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lvG7wf2XKQ75DpdGtoraACdGNnL 3PISUVaKEsjvdV0k+6vUYx9u0JvD1SeP28BDGRpejEoc6LZ6dNU6WY7VBkMm5mUl VuRb6lYzxM5a10mH+v1irgvHoq0fMEWr92ojFQX3gbLyUH7CCNkjHBJLIBb/RYci /YrDcn9TtQcYEaf4Sa0hO//YLJ1aMmtmcS6JhlZydOhRTFAiSheJx/ls+JJyy1og Jn19IGKCwqlbGEiE5esCD4XkfeIxre4fZj4dW7Xr8/SKFV2+lQV+9uwLA+pFipxF sNWl0mESF/lKc2ntr2AZbWRlwuawQrSwlWfZJNNjLmD1re1nDewGMDYjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM45g/AaJYpel3ok1xei57GRO+0KMB8GA1UdIwQY MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK85c0v7K q37Flo8XAIaJfIpDARN1sCcBvHkXV3YB360Y8REVMVM/Pqfa4A+5n13uSpUB10rc 8jLJHhoT+eO75W4iUp6OCuku4ak/p28aU3GzbKrHoF+6yqQGh7q1NrX3Ma66v4Af TGIh8izGMz7eeKzvKgDEywST/YuMvNYlaV5NcS6/RBgegHBoI74lLVT+unoLVTm+ i4Vkr7OJTTAzzO3SyS9sowuNLyzQGYG+IcOxn+9OW7gBSQAWnG6b9rBnT5+0gsAI b8K8SIWazVp65dWcOKbNu2qFV96067J7OK0upgKdROPj9jR2nXBIjzF5tNia0nHV iCzBkvsRP4FtIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:29 2025 by rpki-client