This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json) Hash identifier: bQyZUn8cTD1jDlt3e3oSrdFSIshDLoMbBun1yMavIiY= Subject key identifier: C5:3D:29:B4:F1:B1:EA:2D:AE:A8:21:9A:C3:A5:D9:99:DC:4F:DB:5E Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Certificate serial: 019B2B5383EFBCA5BA79BE59AA505F2B63DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:00:52 +0000 Manifest this update: Wed 17 Dec 2025 08:00:52 +0000 Manifest next update: Thu 18 Dec 2025 08:00:52 +0000 Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=) 2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: 8APV44VZC0JuLGG6YhtoNt91xQuWAuHV3fdfoTBkqSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:83:ef:bc:a5:ba:79:be:59:aa:50:5f:2b:63:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af Validity Not Before: Dec 17 08:00:52 2025 GMT Not After : Dec 18 08:00:52 2025 GMT Subject: CN=c53d29b4f1b1ea2daea8219ac3a5d999dc4fdb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:12:15:93:20:07:7f:2c:a1:30:c0:88:1d: f3:27:6b:dd:20:b8:98:0d:a5:e4:0d:07:2f:99:c2: 5c:fe:bb:d3:97:65:5f:85:68:69:1e:9f:72:b7:00: 8d:3d:04:dc:9e:49:6a:72:50:eb:b9:bc:10:a6:75: ee:d4:07:b2:f7:30:bf:ce:42:bc:69:97:06:97:9e: c0:ca:75:62:51:07:07:64:39:82:5f:a5:54:64:05: 33:32:d2:ab:7b:51:fd:d2:6b:35:d6:5d:e9:08:4f: de:4e:98:0c:03:c0:da:86:8e:aa:e7:4b:3d:1b:e6: 6a:a8:bc:56:30:ec:fe:4b:b8:69:8e:3f:76:e8:24: b6:8f:c3:58:a7:7c:e7:cc:cf:e3:28:9b:68:57:94: c2:ef:9b:b2:cb:fb:71:e7:2d:75:d0:51:09:f5:0d: 33:a3:72:1c:98:43:7c:f3:cb:d0:68:1b:15:5e:e3: 3c:42:9b:fd:17:76:c4:f1:bc:f2:45:c8:a7:2e:c6: 20:94:a4:c0:0e:ba:93:c3:78:fd:e8:83:0e:b7:f2: bd:6d:a8:29:39:f4:db:de:b1:6f:31:da:e1:bc:58: 20:dd:21:de:a9:bd:ee:25:82:83:c0:89:e1:97:b3: 3a:5d:8a:f5:40:c4:9d:dc:e8:0d:89:4e:1e:d6:51: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3D:29:B4:F1:B1:EA:2D:AE:A8:21:9A:C3:A5:D9:99:DC:4F:DB:5E X509v3 Authority Key Identifier: keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3f:2d:6f:5d:ab:56:d2:a3:61:6c:3e:74:26:82:22:c5:5e: c5:32:46:a4:0c:ef:f1:28:12:c1:99:38:fe:ed:96:42:3d:0c: 23:c6:31:96:fd:70:cd:cb:9e:64:26:eb:24:50:23:68:50:3c: 56:45:99:65:be:fa:df:44:bb:ea:57:ce:d1:2c:7e:fd:a2:22: fe:70:69:10:74:83:79:a6:2f:75:af:de:c6:d0:0f:ce:63:01: 14:a7:66:77:bd:4b:9c:37:9f:2f:dd:fe:6f:c1:d7:63:a3:e4: 8d:4a:2b:e8:28:81:64:df:60:25:63:68:78:5f:97:7b:ff:eb: 1f:1f:de:bf:0c:98:e5:55:5f:7e:bf:f1:22:65:98:ef:dd:83: 54:2e:b9:f1:f5:50:5f:d7:f0:e5:b8:dc:99:d5:05:26:69:2e: 3b:12:58:c5:c9:7c:73:a3:5d:94:47:e1:3c:72:b3:96:93:e9: 5b:5f:a5:a0:14:81:39:40:de:23:5f:3d:73:7b:23:ef:b2:09: 03:43:0c:27:68:7d:da:90:82:12:b6:53:d4:22:cd:6b:b5:6a: af:49:0e:48:07:e9:3e:8a:8a:25:56:ff:ef:3a:d2:40:3a:9b: 5e:c6:38:72:df:c8:52:3e:ac:56:4f:a4:b9:b8:30:c5:2a:11: 14:44:59:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU4PvvKW6eb5ZqlBfK2PcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3 Nzk3YWYwHhcNMjUxMjE3MDgwMDUyWhcNMjUxMjE4MDgwMDUyWjAzMTEwLwYDVQQD EyhjNTNkMjliNGYxYjFlYTJkYWVhODIxOWFjM2E1ZDk5OWRjNGZkYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MQSFZMgB38soTDAiB3zJ2vdILiY DaXkDQcvmcJc/rvTl2VfhWhpHp9ytwCNPQTcnklqclDrubwQpnXu1Aey9zC/zkK8 aZcGl57AynViUQcHZDmCX6VUZAUzMtKre1H90ms11l3pCE/eTpgMA8Daho6q50s9 G+ZqqLxWMOz+S7hpjj926CS2j8NYp3znzM/jKJtoV5TC75uyy/tx5y110FEJ9Q0z o3IcmEN888vQaBsVXuM8Qpv9F3bE8bzyRcinLsYglKTADrqTw3j96IMOt/K9bagp OfTb3rFvMdrhvFgg3SHeqb3uJYKDwInhl7M6XYr1QMSd3OgNiU4e1lGuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU9KbTxseotrqghmsOl2ZncT9teMB8GA1UdIwQY MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD8tb12r VtKjYWw+dCaCIsVexTJGpAzv8SgSwZk4/u2WQj0MI8Yxlv1wzcueZCbrJFAjaFA8 VkWZZb7630S76lfO0Sx+/aIi/nBpEHSDeaYvda/extAPzmMBFKdmd71LnDefL93+ b8HXY6PkjUor6CiBZN9gJWNoeF+Xe//rHx/evwyY5VVffr/xImWY792DVC658fVQ X9fw5bjcmdUFJmkuOxJYxcl8c6NdlEfhPHKzlpPpW1+loBSBOUDeI189c3sj77IJ A0MMJ2h92pCCErZT1CLNa7Vqr0kOSAfpPoqKJVb/7zrSQDqbXsY4ct/IUj6sVk+k ubgwxSoRFERZ5A== -----END CERTIFICATE-----Generated at Wed Dec 17 17:48:31 2025 by rpki-client