This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json) Hash identifier: hy42KIWIiSZCVbAJZeD6cwW1ll0VlS1cbxpIp7H5Fns= Subject key identifier: DD:39:A7:42:CD:04:08:91:A9:42:08:B2:DB:CE:BC:0E:47:0A:CF:0C Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Certificate serial: 019AF12CD5A4D09CA600ED2DCF0AB1B1E2EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft Manifest number: 0E33 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=) 2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: 1N9Av7jW83csby8jv0d7jhKEU8bRdTqCsXge1wZL+/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d5:a4:d0:9c:a6:00:ed:2d:cf:0a:b1:b1:e2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=dd39a742cd040891a94208b2dbcebc0e470acf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:62:2e:2e:7d:55:d9:f7:57:21:ce:cc:3c: 9d:80:90:7f:be:86:1c:20:d7:44:83:a4:d3:62:4c: 66:cf:e3:71:dc:94:e8:91:66:95:2b:ec:71:39:3b: 49:cf:5c:f0:fc:a9:94:9f:c5:d8:83:6c:0f:80:89: 19:0e:28:24:fc:2c:30:8e:ae:83:b9:60:7b:57:67: e7:c1:47:39:05:96:ea:67:76:2e:38:8e:f6:b2:89: 56:e2:38:bb:0d:af:61:9d:71:35:dc:ad:b1:f6:49: 93:fd:0a:86:4e:bc:90:7d:30:a4:cf:50:fb:e2:8c: c3:9c:f2:d0:e1:1b:e3:d8:52:6c:50:70:ea:00:2b: ae:f4:e8:0f:95:b1:9c:92:8f:a3:f8:85:f2:f7:b5: 28:6c:a0:4a:47:b4:e7:a8:f6:a7:87:15:90:9b:61: 7a:50:93:36:36:cc:e3:a5:3e:0d:25:3b:ba:e1:94: 80:01:a4:4b:24:f5:c4:47:a6:4a:ad:47:ad:d3:0d: 85:21:fd:2e:34:83:e8:0e:7f:c0:50:3a:1d:2b:6d: 74:9b:45:95:b0:8b:49:c8:5b:5b:0d:0a:89:99:1e: 28:cb:2f:19:13:f2:2f:0c:88:ee:2b:0e:f1:78:4a: d2:50:4d:11:28:01:51:7c:cf:cd:c8:98:0b:6d:34: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:A7:42:CD:04:08:91:A9:42:08:B2:DB:CE:BC:0E:47:0A:CF:0C X509v3 Authority Key Identifier: keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:76:e9:83:a7:be:d9:3e:bd:db:06:9f:b0:f8:ef:58:35:60: 74:70:b5:8a:83:a3:a9:59:bb:cc:01:23:a8:16:07:d4:ff:ec: 15:05:ac:58:6c:98:a0:a0:9e:42:82:04:e0:bf:12:c4:85:98: d9:7f:43:cd:09:a8:ca:3a:59:31:fc:a5:1a:16:6c:f9:61:5f: 10:55:1f:af:d1:d9:b5:12:57:6c:3a:fe:cd:e5:d6:59:f5:07: a9:c6:da:1f:80:85:3e:10:b4:27:a9:84:47:f7:6d:de:bd:3b: c7:b4:59:3d:62:04:56:22:a6:14:18:8b:42:9d:9f:e2:ed:71: a2:ff:c1:77:d4:40:9a:97:81:94:d2:a1:2f:46:be:9e:b1:01: 9e:c2:55:f6:f1:10:fa:e0:0a:87:80:0c:f5:71:60:43:da:b8: 54:a2:dc:5d:3a:75:1b:8e:a2:70:81:07:4a:2d:3c:a1:bf:28: 4f:64:a5:44:47:9b:de:da:58:ab:cb:dd:83:b4:bb:c5:e3:51: dc:10:77:3c:a2:36:1a:d0:64:09:94:95:28:2d:29:92:6b:b1: 3b:34:f2:37:4c:a6:54:28:b8:18:60:85:a6:09:00:c3:3d:16: 04:9f:52:a7:16:dd:51:a9:02:ae:c2:5d:cb:69:62:fd:42:d0: 8a:63:77:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNWk0JymAO0tzwqxseLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy YTQwODIwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhkZDM5YTc0MmNkMDQwODkxYTk0MjA4YjJkYmNlYmMwZTQ3MGFjZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUhiLi59Vdn3VyHOzDydgJB/voYc INdEg6TTYkxmz+Nx3JTokWaVK+xxOTtJz1zw/KmUn8XYg2wPgIkZDigk/Cwwjq6D uWB7V2fnwUc5BZbqZ3YuOI72solW4ji7Da9hnXE13K2x9kmT/QqGTryQfTCkz1D7 4ozDnPLQ4Rvj2FJsUHDqACuu9OgPlbGcko+j+IXy97UobKBKR7TnqPanhxWQm2F6 UJM2NszjpT4NJTu64ZSAAaRLJPXER6ZKrUet0w2FIf0uNIPoDn/AUDodK210m0WV sItJyFtbDQqJmR4oyy8ZE/IvDIjuKw7xeErSUE0RKAFRfM/NyJgLbTTRUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN05p0LNBAiRqUIIstvOvA5HCs8MMB8GA1UdIwQY MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHbpg6e+ 2T692wafsPjvWDVgdHC1ioOjqVm7zAEjqBYH1P/sFQWsWGyYoKCeQoIE4L8SxIWY 2X9DzQmoyjpZMfylGhZs+WFfEFUfr9HZtRJXbDr+zeXWWfUHqcbaH4CFPhC0J6mE R/dt3r07x7RZPWIEViKmFBiLQp2f4u1xov/Bd9RAmpeBlNKhL0a+nrEBnsJV9vEQ +uAKh4AM9XFgQ9q4VKLcXTp1G46icIEHSi08ob8oT2SlREeb3tpYq8vdg7S7xeNR 3BB3PKI2GtBkCZSVKC0pkmuxOzTyN0ymVCi4GGCFpgkAwz0WBJ9SpxbdUakCrsJd y2li/ULQimN3AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:55 2025 by rpki-client