This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json) Hash identifier: fNiTZquG7jzsIue5nEysZVm/0VXiX1qJSp5tliprmBo= Subject key identifier: CD:F5:A4:4A:04:D7:09:17:FC:34:D6:C0:E4:79:EF:9B:32:81:62:7C Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Certificate serial: 019AF2091CED0BA8F0528DA5B073E47739F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=) 2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: VJkMud/egSSdRUPywv7CP0IAtVtPJdS12/c4oYRQC0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1c:ed:0b:a8:f0:52:8d:a5:b0:73:e4:77:39:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=cdf5a44a04d70917fc34d6c0e479ef9b3281627c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:d2:e0:f4:9f:22:bd:f3:dd:b9:fd:03:f9: 8f:cc:99:46:33:15:ff:1f:6a:91:b7:50:14:ea:a2: 5b:f4:8e:9e:3b:3c:21:9e:97:36:e1:c7:97:4b:ec: 9b:38:e4:45:21:64:4c:fc:15:c5:b8:2c:c3:26:d3: 91:3c:63:a5:81:67:43:5b:66:3c:c6:4d:e3:4a:8b: 18:4f:98:de:dc:2b:e2:23:5b:c9:0e:fe:4b:68:aa: 54:77:7b:74:75:03:30:9a:2f:a4:2a:7b:13:d3:16: 86:7b:65:74:b8:fa:5b:01:6d:14:ec:a9:d6:9f:4b: ab:63:14:27:69:11:7e:ee:20:90:b4:b6:5f:31:41: ef:f9:9c:2f:3d:21:2b:0b:88:d5:4e:37:91:14:18: cc:73:d3:1e:7e:f2:fe:ee:ac:37:a1:8f:86:f5:e3: e7:ef:ac:8d:08:74:00:7c:3d:67:84:aa:c2:07:65: ba:37:ba:ae:26:77:28:89:b3:f9:50:8c:08:9d:1c: 25:43:6e:c8:67:69:f6:05:1c:2b:8d:9e:b8:98:d6: 2f:44:6f:bb:5a:3d:44:1d:02:7f:e9:06:f4:8d:fa: 02:06:74:59:da:9e:9b:b2:74:48:2a:20:51:d3:10: fd:cb:0a:8c:2a:4f:24:19:4b:ee:54:fb:be:23:dc: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F5:A4:4A:04:D7:09:17:FC:34:D6:C0:E4:79:EF:9B:32:81:62:7C X509v3 Authority Key Identifier: keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:54:96:a3:7e:df:11:35:fc:22:67:ff:93:a2:b3:60:37: cf:95:cf:2a:7d:1d:42:22:b1:da:97:d0:f5:c1:77:ed:04:98: c5:10:31:34:e8:ef:34:5a:0e:33:d7:b0:f7:79:c7:06:dc:e1: d8:46:00:f7:f2:83:3a:f8:86:cc:93:5b:cf:fa:36:db:d7:97: e0:88:ff:c0:4f:8b:6b:dd:d6:75:12:c8:4e:a6:ac:f7:5b:ee: 82:99:45:9c:ee:e7:ea:82:ef:ba:b0:36:73:4b:3c:65:a5:c0: ca:86:97:14:16:9e:95:36:8a:85:da:3c:50:d8:b7:63:0a:56: 87:1f:96:70:de:8f:78:c6:c3:28:8e:9b:7f:02:99:7d:81:fd: 8b:e9:f3:3c:1d:6d:3a:ec:45:73:08:c1:bf:d6:27:b3:d3:b3: 86:1d:76:db:32:f2:6f:7a:db:82:67:a6:a3:6e:b5:98:f7:30: c0:8d:c4:2b:ae:ea:0e:80:7c:b8:16:77:ee:3c:08:e9:c5:3e: bd:85:0c:dd:c9:f9:f6:d8:17:6c:81:fd:3a:37:86:4f:76:59: 1d:b4:30:5a:1e:91:ff:08:15:25:5c:31:2a:f5:ef:a3:ca:79: 66:ac:77:0b:af:82:90:61:76:8e:07:90:ce:38:64:41:fd:e9: 34:71:81:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRztC6jwUo2lsHPkdznwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYjYxMzNkNWMyMTA5ZDhhNmY5YmJjYWE0OTZkYmVhZTM0 Nzk3NWMwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhjZGY1YTQ0YTA0ZDcwOTE3ZmMzNGQ2YzBlNDc5ZWY5YjMyODE2MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgzS4PSfIr3z3bn9A/mPzJlGMxX/ H2qRt1AU6qJb9I6eOzwhnpc24ceXS+ybOORFIWRM/BXFuCzDJtORPGOlgWdDW2Y8 xk3jSosYT5je3CviI1vJDv5LaKpUd3t0dQMwmi+kKnsT0xaGe2V0uPpbAW0U7KnW n0urYxQnaRF+7iCQtLZfMUHv+ZwvPSErC4jVTjeRFBjMc9MefvL+7qw3oY+G9ePn 76yNCHQAfD1nhKrCB2W6N7quJncoibP5UIwInRwlQ27IZ2n2BRwrjZ64mNYvRG+7 Wj1EHQJ/6Qb0jfoCBnRZ2p6bsnRIKiBR0xD9ywqMKk8kGUvuVPu+I9x0gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM31pEoE1wkX/DTWwOR575sygWJ8MB8GA1UdIwQY MBaAFI+2Ez1cIQnYpvm7yqSW2+rjR5dcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQt NDUxYTlhZTRjZTUxLzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hZGU0MTAtNGU4Yy00MTJlLTk3NTQtNDUxYTlhZTRjZTUx LzEvajdZVFBWd2hDZGltLWJ2S3BKYmI2dU5IbDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4NUlqN+ 3xE1/CJn/5Ois2A3z5XPKn0dQiKx2pfQ9cF37QSYxRAxNOjvNFoOM9ew93nHBtzh 2EYA9/KDOviGzJNbz/o229eX4Ij/wE+La93WdRLITqas91vugplFnO7n6oLvurA2 c0s8ZaXAyoaXFBaelTaKhdo8UNi3YwpWhx+WcN6PeMbDKI6bfwKZfYH9i+nzPB1t OuxFcwjBv9Yns9Ozhh122zLyb3rbgmemo261mPcwwI3EK67qDoB8uBZ37jwI6cU+ vYUM3cn59tgXbIH9OjeGT3ZZHbQwWh6R/wgVJVwxKvXvo8p5Zqx3C6+CkGF2jgeQ zjhkQf3pNHGBfg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:05 2025 by rpki-client