This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json) Hash identifier: +3atOk0Jd21yDWeQQ93uBNYbRfu4OI+L4hsqq5WOmkY= Subject key identifier: 4E:39:02:AA:CB:CC:5E:D6:7A:4E:50:07:7C:23:4E:F7:08:1E:6A:79 Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Certificate serial: 019AF31B31E5482833C7E358CECC110E5D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=) 2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: +RQWOyBiMuX7CK7iYr76YANg0aaMf9hWTQT0sQxbvSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:31:e5:48:28:33:c7:e3:58:ce:cc:11:0e:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=4e3902aacbcc5ed67a4e50077c234ef7081e6a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:28:84:6c:4f:9c:4d:98:ae:fc:b8:0b:24: d7:5c:66:14:60:f1:7c:ae:b6:f8:25:6f:1a:b3:18: 4c:f0:09:5a:37:c8:28:ea:85:a5:33:60:51:16:fd: ad:68:e3:62:7f:8c:c5:29:1d:e7:0e:3e:bf:ff:ea: f1:10:a6:c5:9d:01:c3:fc:37:c5:dc:cf:fb:6c:8f: 8d:70:c8:f3:ff:0b:b4:27:36:8e:be:b9:95:c9:79: 9c:71:f5:17:8c:cf:2e:25:57:a0:1d:21:a7:6c:55: a8:01:6e:b3:9b:ed:db:b8:bb:e6:38:39:25:ab:f8: 03:ec:85:43:85:d0:d8:d8:c7:06:9e:2c:96:68:12: 33:e6:6a:dc:7a:e3:2a:cb:fc:12:6e:d5:27:aa:55: 1c:66:df:a3:b1:10:b4:cf:6e:8b:6c:f5:16:4d:da: dd:68:0b:65:d3:0a:87:3e:e2:6e:df:f8:cc:96:c3: 0d:7b:fb:67:5e:b6:73:c7:e7:2b:83:37:43:ef:9d: 94:ca:f4:8b:ca:c2:29:e5:ee:39:18:5f:c0:d0:52: 4f:1a:d8:cd:6a:e1:13:ee:74:7d:18:3a:0b:63:b2: fe:8a:17:93:46:43:48:b0:6c:d6:74:73:f0:ba:f6: ec:f0:d9:f2:b3:a6:09:81:65:45:4d:ed:c2:af:d7: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:39:02:AA:CB:CC:5E:D6:7A:4E:50:07:7C:23:4E:F7:08:1E:6A:79 X509v3 Authority Key Identifier: keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:61:db:6b:0c:15:c5:a9:07:33:f8:6c:98:a0:1a:25:4c:dd: 8c:38:f8:23:b6:45:25:56:90:f7:17:e6:7a:1d:b1:f4:f7:2d: 9a:96:63:89:b2:84:de:e7:b8:0a:e9:6f:f2:49:91:67:be:9f: b3:b5:e1:99:f6:50:5a:30:66:b4:ff:47:e7:79:25:7a:85:7a: f1:69:22:d1:35:7a:21:f2:a3:52:94:ee:fe:01:ea:9f:49:df: b5:5a:28:c7:d6:98:00:79:e0:67:3a:07:c9:3e:61:21:e1:a3: a7:97:29:56:95:aa:eb:f1:9e:72:f4:48:d8:f3:6b:45:8d:11: 04:64:da:5a:8c:bf:67:77:7c:6c:8e:df:62:a9:ce:6d:cd:5e: 80:25:10:5c:da:98:59:31:63:8b:ab:64:65:4e:fd:d6:e2:d3: b1:e2:3e:7c:4d:c7:a2:a3:18:e7:83:39:fa:23:fa:4e:3e:b6: 44:ed:92:36:cb:57:1e:e0:73:81:ca:54:8a:e7:14:52:ef:6d: 27:10:77:7d:d9:d8:d0:ce:53:45:c8:9f:5f:8d:5a:15:8b:a7: 11:8e:cc:dd:58:ea:f5:d2:77:70:e8:90:2b:79:d8:2f:98:77: 96:06:fb:a8:f9:27:bd:cb:fc:e2:a0:ae:26:0a:50:61:e8:82: 4a:c0:d1:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzHlSCgzx+NYzswRDl0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0 YWQ4YjMwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD Eyg0ZTM5MDJhYWNiY2M1ZWQ2N2E0ZTUwMDc3YzIzNGVmNzA4MWU2YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwohGxPnE2Yrvy4CyTXXGYUYPF8 rrb4JW8asxhM8AlaN8go6oWlM2BRFv2taONif4zFKR3nDj6//+rxEKbFnQHD/DfF 3M/7bI+NcMjz/wu0JzaOvrmVyXmccfUXjM8uJVegHSGnbFWoAW6zm+3buLvmODkl q/gD7IVDhdDY2McGniyWaBIz5mrceuMqy/wSbtUnqlUcZt+jsRC0z26LbPUWTdrd aAtl0wqHPuJu3/jMlsMNe/tnXrZzx+crgzdD752UyvSLysIp5e45GF/A0FJPGtjN auET7nR9GDoLY7L+iheTRkNIsGzWdHPwuvbs8Nnys6YJgWVFTe3Cr9cTpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE45AqrLzF7Wek5QB3wjTvcIHmp5MB8GA1UdIwQY MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2 LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2HbawwV xakHM/hsmKAaJUzdjDj4I7ZFJVaQ9xfmeh2x9PctmpZjibKE3ue4Culv8kmRZ76f s7XhmfZQWjBmtP9H53kleoV68Wki0TV6IfKjUpTu/gHqn0nftVoox9aYAHngZzoH yT5hIeGjp5cpVpWq6/GecvRI2PNrRY0RBGTaWoy/Z3d8bI7fYqnObc1egCUQXNqY WTFji6tkZU791uLTseI+fE3HoqMY54M5+iP6Tj62RO2SNstXHuBzgcpUiucUUu9t JxB3fdnY0M5TRcifX41aFYunEY7M3Vjq9dJ3cOiQK3nYL5h3lgb7qPknvcv84qCu JgpQYeiCSsDRcA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:14 2025 by rpki-client