This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json) Hash identifier: GjE8VzIIymnYI1lkE9w5f5+5hX8EQcCQr+qkJ9C2H8s= Subject key identifier: 57:C4:32:2F:2F:B9:CD:CC:46:7C:DF:51:29:10:B3:FC:A2:CB:71:2D Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Certificate serial: 019AF9C347FD40EA4AE69777BEB72423F2A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 17:01:55 +0000 Manifest this update: Sun 07 Dec 2025 17:01:55 +0000 Manifest next update: Mon 08 Dec 2025 17:01:55 +0000 Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=) 2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: BKO+3ltwIJFKuwK/h7HDveRB4oax2DK8POyDdR/gpDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c3:47:fd:40:ea:4a:e6:97:77:be:b7:24:23:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Validity Not Before: Dec 7 17:01:55 2025 GMT Not After : Dec 8 17:01:55 2025 GMT Subject: CN=57c4322f2fb9cdcc467cdf512910b3fca2cb712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:26:fe:6a:7a:e4:c5:e1:4a:8d:ab:b3:3e: 29:91:75:0e:9f:fd:fb:ae:6f:63:2b:64:0d:af:ea: 28:4b:c8:41:f9:64:ff:7b:04:09:f3:74:a8:3b:c1: ad:d5:7b:96:a4:c3:03:f3:64:9c:06:03:25:c4:11: 3c:f7:4b:99:c8:97:1d:8b:21:96:85:b2:ac:9e:9b: 4a:fb:85:5c:04:0f:83:e7:ad:25:0e:01:d1:72:36: 09:5f:20:85:15:eb:38:e7:f0:e7:1d:0b:8e:1b:97: 80:6e:99:23:c8:d3:96:54:ab:7f:c6:80:92:8e:75: 5c:62:a9:c8:5d:56:9c:0d:d0:80:e9:07:0a:98:da: a5:4a:f8:fd:08:9d:80:de:66:d6:09:9b:0a:00:16: 77:be:f7:6e:ac:5e:c3:0f:2f:ba:04:7d:c1:96:a6: 32:63:9b:2a:f6:59:dc:f9:66:ca:bc:ba:07:82:4a: 8e:b9:d3:cc:b8:8b:c6:47:50:fd:2b:82:20:57:c7: b3:58:6d:19:e1:79:13:7c:59:a4:76:f9:15:8b:ce: 90:be:78:88:b6:45:0b:cf:1d:ce:9b:e9:b8:1d:f6: 9f:b5:d6:0f:c1:08:65:b9:1f:1a:ad:8a:eb:5e:7f: ab:1f:58:4a:30:83:81:d8:a0:aa:07:00:df:e3:0f: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:32:2F:2F:B9:CD:CC:46:7C:DF:51:29:10:B3:FC:A2:CB:71:2D X509v3 Authority Key Identifier: keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:46:34:ec:97:29:55:62:ec:4a:a0:f1:26:fd:0b:46:b1:1a: ea:4c:f0:f0:52:fb:5f:de:c9:43:7a:22:4e:5f:c3:d5:56:51: 47:8a:11:82:df:d5:2c:b8:e1:c4:67:c7:4f:fa:eb:3a:7c:c5: a4:72:d7:5f:23:4e:1c:33:f8:ba:90:df:3b:bd:7b:6f:a2:3d: 52:84:76:00:ac:cf:61:19:bc:af:85:f1:8f:0d:d5:e3:53:ee: 3d:b8:aa:4b:e7:9c:d7:66:57:0f:fa:20:45:09:c2:71:1f:ee: f4:03:55:20:85:e5:9e:79:11:99:05:35:bc:11:05:4b:21:b6: 81:b8:be:4d:59:bd:26:38:93:64:d6:5e:79:18:7b:86:81:8b: 92:7b:5e:a7:d5:39:e0:51:c4:09:16:e0:a5:d0:d8:57:9a:5f: 9d:51:49:41:b1:30:37:f8:e8:c7:70:db:fd:c1:56:b9:ae:4a: 6f:9b:83:84:8f:bc:fa:d7:40:47:9c:2c:89:00:ad:21:a3:ec: 42:6a:61:ee:9d:2d:0c:d3:97:7b:63:c8:72:69:13:ad:d0:f7: 58:1b:96:bb:dd:47:f4:63:9f:23:a7:cc:9a:8f:0b:5d:7f:07: 8f:33:72:4e:17:d9:6d:2e:22:26:44:2d:9a:e5:0b:d6:1b:c3: aa:d6:e9:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5w0f9QOpK5pd3vrckI/KgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm Y2NiMWQwHhcNMjUxMjA3MTcwMTU1WhcNMjUxMjA4MTcwMTU1WjAzMTEwLwYDVQQD Eyg1N2M0MzIyZjJmYjljZGNjNDY3Y2RmNTEyOTEwYjNmY2EyY2I3MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkksm/mp65MXhSo2rsz4pkXUOn/37 rm9jK2QNr+ooS8hB+WT/ewQJ83SoO8Gt1XuWpMMD82ScBgMlxBE890uZyJcdiyGW hbKsnptK+4VcBA+D560lDgHRcjYJXyCFFes45/DnHQuOG5eAbpkjyNOWVKt/xoCS jnVcYqnIXVacDdCA6QcKmNqlSvj9CJ2A3mbWCZsKABZ3vvdurF7DDy+6BH3BlqYy Y5sq9lnc+WbKvLoHgkqOudPMuIvGR1D9K4IgV8ezWG0Z4XkTfFmkdvkVi86QvniI tkULzx3Om+m4HfaftdYPwQhluR8arYrrXn+rH1hKMIOB2KCqBwDf4w+wgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfEMi8vuc3MRnzfUSkQs/yiy3EtMB8GA1UdIwQY MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEY07Jcp VWLsSqDxJv0LRrEa6kzw8FL7X97JQ3oiTl/D1VZRR4oRgt/VLLjhxGfHT/rrOnzF pHLXXyNOHDP4upDfO717b6I9UoR2AKzPYRm8r4Xxjw3V41PuPbiqS+ec12ZXD/og RQnCcR/u9ANVIIXlnnkRmQU1vBEFSyG2gbi+TVm9JjiTZNZeeRh7hoGLkntep9U5 4FHECRbgpdDYV5pfnVFJQbEwN/jox3Db/cFWua5Kb5uDhI+8+tdAR5wsiQCtIaPs Qmph7p0tDNOXe2PIcmkTrdD3WBuWu91H9GOfI6fMmo8LXX8HjzNyThfZbS4iJkQt muUL1hvDqtbpgg== -----END CERTIFICATE-----Generated at Sun Dec 7 20:55:35 2025 by rpki-client