This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json) Hash identifier: fLQKXcT7EBS/B/7SX+Dg7QkKOZKOOCfTkhIvVVR4QQI= Subject key identifier: F7:D3:61:35:DE:E3:FA:D9:8A:2A:08:F6:17:3C:E5:DF:77:45:39:2F Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Certificate serial: 019B30E80DABCF22B474746977104634F851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:12 +0000 Manifest this update: Thu 18 Dec 2025 10:01:12 +0000 Manifest next update: Fri 19 Dec 2025 10:01:12 +0000 Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: OvAK7fgibZEI5s1Ql3qvtpKISt4fNVdC3zkXK2WBXS4=) 2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=) 3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:0d:ab:cf:22:b4:74:74:69:77:10:46:34:f8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232 Validity Not Before: Dec 18 10:01:12 2025 GMT Not After : Dec 19 10:01:12 2025 GMT Subject: CN=f7d36135dee3fad98a2a08f6173ce5df7745392f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:59:8d:04:58:f1:0d:2d:61:4f:70:12:4c: dd:42:fd:9f:2c:c6:f0:de:47:56:51:88:32:de:af: 5e:31:ab:b9:17:92:aa:b6:3f:50:27:c7:4e:e1:73: c6:55:66:99:8f:81:ca:5e:74:91:ea:23:18:0c:05: 1f:85:37:69:16:cb:cc:28:8d:77:55:13:7a:3d:56: 4f:9c:ea:14:a7:ce:e3:94:c3:d1:32:64:6f:8e:d3: 9a:7a:9a:83:73:f9:02:77:dd:4f:cc:10:a3:02:d1: aa:77:ef:c3:b8:32:c1:dd:30:ab:87:5c:4a:d8:f4: 94:f2:9f:6b:c6:3f:b1:6f:25:0d:0f:c3:f5:47:70: c8:9f:d4:08:9d:eb:a6:c6:86:05:60:db:21:e3:40: cb:53:09:4c:04:73:f8:80:f3:73:3c:32:c3:e3:8a: 47:8e:95:a6:07:e7:29:bc:df:fe:eb:4e:4b:cd:a4: 39:9b:e4:a2:2c:9f:ec:42:62:0c:0d:9c:e2:49:57: 42:e2:01:05:4f:ad:40:40:db:e0:bd:43:2f:c4:2b: cb:19:83:87:f1:4e:df:13:39:ac:86:03:4a:de:31: 88:98:7f:72:c1:c2:c6:e4:fb:2b:c2:b0:96:6d:02: fc:54:50:b6:95:e5:c0:bf:93:e7:9b:41:43:b5:9d: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:61:35:DE:E3:FA:D9:8A:2A:08:F6:17:3C:E5:DF:77:45:39:2F X509v3 Authority Key Identifier: keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5c:87:30:38:66:57:06:57:b7:4a:c1:2a:a3:89:5b:2c:e5: a2:8d:01:17:0c:05:61:08:db:bd:44:d9:b3:44:16:24:65:87: 45:fb:2d:4d:6d:09:73:0b:66:77:87:98:72:87:de:3f:8f:f0: f2:ac:1d:16:5b:85:81:0d:d9:1b:59:36:7d:1d:d0:3f:19:dc: d9:0a:27:bd:b5:44:cf:bc:b1:74:44:18:e2:98:69:74:f3:1d: e0:8d:d9:8b:7b:40:94:85:86:c9:c2:49:52:34:d7:7e:12:f7: ed:93:44:cc:81:87:1b:c4:a1:11:c5:aa:01:42:1d:a4:0a:2e: 80:70:cf:ff:1d:65:3a:a7:2b:f9:b0:dd:c9:34:8d:f9:b2:cb: ea:31:38:10:3d:3f:fa:35:bd:ab:04:b2:c5:0a:48:49:10:af: 51:17:ca:6c:f0:33:6d:40:6a:8e:0b:dd:79:e9:cd:a2:55:3e: 62:52:2d:d9:39:f1:47:d6:2e:14:b9:0d:8d:85:b5:72:e2:66: 4c:ad:ae:19:46:9a:67:7d:c6:52:9f:75:ad:55:1d:83:60:33: ee:2c:1b:b5:c1:7a:43:85:73:4b:33:26:44:4d:fe:5e:1a:a5: c9:d7:53:60:f4:27:0f:86:dd:c8:f5:5f:cb:33:9c:8e:b2:41: 0b:f0:d6:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6A2rzyK0dHRpdxBGNPhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3 YmYyMzIwHhcNMjUxMjE4MTAwMTEyWhcNMjUxMjE5MTAwMTEyWjAzMTEwLwYDVQQD EyhmN2QzNjEzNWRlZTNmYWQ5OGEyYTA4ZjYxNzNjZTVkZjc3NDUzOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyZZjQRY8Q0tYU9wEkzdQv2fLMbw 3kdWUYgy3q9eMau5F5Kqtj9QJ8dO4XPGVWaZj4HKXnSR6iMYDAUfhTdpFsvMKI13 VRN6PVZPnOoUp87jlMPRMmRvjtOaepqDc/kCd91PzBCjAtGqd+/DuDLB3TCrh1xK 2PSU8p9rxj+xbyUND8P1R3DIn9QIneumxoYFYNsh40DLUwlMBHP4gPNzPDLD44pH jpWmB+cpvN/+605LzaQ5m+SiLJ/sQmIMDZziSVdC4gEFT61AQNvgvUMvxCvLGYOH 8U7fEzmshgNK3jGImH9ywcLG5PsrwrCWbQL8VFC2leXAv5Pnm0FDtZ0oLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfTYTXe4/rZiioI9hc85d93RTkvMB8GA1UdIwQY MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct N2YyMDEyMTJkODgzLzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFyHMDhm VwZXt0rBKqOJWyzloo0BFwwFYQjbvUTZs0QWJGWHRfstTW0Jcwtmd4eYcofeP4/w 8qwdFluFgQ3ZG1k2fR3QPxnc2QonvbVEz7yxdEQY4phpdPMd4I3Zi3tAlIWGycJJ UjTXfhL37ZNEzIGHG8ShEcWqAUIdpAougHDP/x1lOqcr+bDdyTSN+bLL6jE4ED0/ +jW9qwSyxQpISRCvURfKbPAzbUBqjgvdeenNolU+YlIt2TnxR9YuFLkNjYW1cuJm TK2uGUaaZ33GUp91rVUdg2Az7iwbtcF6Q4VzSzMmRE3+XhqlyddTYPQnD4bdyPVf yzOcjrJBC/DWbQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:50 2025 by rpki-client