This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json) Hash identifier: R/j4r8rAkh6bIjKOH1UxWV14KmTAglzj2JM1gcc+/Fw= Subject key identifier: 0A:57:FE:3D:F9:D3:A6:AD:89:37:57:6E:37:F5:14:AD:DF:EE:03:52 Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Certificate serial: 019AF276EC883860B53A8AF57864E3E46DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=) 2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: vfmmiDm0+n4sTDy1dFuR4HJKlXpEBBJhnpHw2j0Y3xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ec:88:38:60:b5:3a:8a:f5:78:64:e3:e4:6d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=0a57fe3df9d3a6ad8937576e37f514addfee0352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:68:5e:4f:67:62:7e:8b:54:d2:41:62:21: 6e:42:a0:f7:ca:90:44:da:80:be:8e:ce:84:64:34: 20:14:d8:d1:53:12:67:1c:3b:5e:21:ff:8b:93:f3: 0e:c0:8e:94:2e:59:04:07:77:86:2d:8f:7e:f7:91: 0b:80:3e:1d:1f:f3:15:81:68:d5:df:f2:16:d4:ad: ac:a4:7c:dc:17:c6:58:23:32:01:7c:ca:04:e4:e0: 8b:6c:67:b9:dd:a3:e5:c8:09:76:a9:20:5e:46:01: e3:d7:e1:df:2d:44:30:cc:96:8c:1f:97:39:37:4b: cd:c5:18:45:80:ee:d4:51:85:6c:52:ab:f3:bb:39: 61:b8:35:c7:18:4c:61:0d:5d:c4:c1:0f:32:1f:ac: da:2f:9b:82:f2:a4:e3:80:3e:ab:04:50:a4:a2:a6: 05:11:c3:d0:72:9c:f0:95:1c:ad:08:49:26:a4:4b: 38:e3:fb:3f:df:06:34:29:87:f0:f6:a8:46:32:9d: a5:e0:5e:2c:a7:47:77:54:67:e0:be:70:92:b0:0f: 55:fe:45:e3:f7:02:f7:35:bf:9b:43:51:7c:a4:2e: ec:c3:a4:14:e7:e4:7a:39:3d:ea:b2:bd:52:0d:63: ec:44:9f:b1:6f:44:3c:32:aa:06:57:05:c2:37:f1: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:FE:3D:F9:D3:A6:AD:89:37:57:6E:37:F5:14:AD:DF:EE:03:52 X509v3 Authority Key Identifier: keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:1b:30:03:01:8a:fc:3c:21:1a:79:4e:2d:ce:2f:be:3f: da:d7:f8:e2:da:27:ae:8f:70:67:e0:e3:60:35:fd:80:bf:1c: 2a:27:f3:e1:78:0a:9f:f7:bc:a9:9a:ec:01:ee:75:a4:9f:9a: cd:b2:f5:43:2d:7e:e4:42:3d:6b:3f:9d:62:0d:fa:63:51:6a: 30:89:fd:75:9d:60:89:6f:56:28:c0:11:46:ff:2e:fa:c2:69: 9c:2f:51:ef:08:36:83:1b:40:ca:83:ce:02:2d:2f:a9:7a:c1: b1:b0:ac:08:57:08:8e:b5:10:3b:b9:32:5d:ca:67:e3:9a:5a: a9:c8:ad:38:dc:0e:4c:ad:70:63:8f:15:a4:10:ea:96:d4:64: 97:63:7f:97:0a:24:b9:45:51:37:c7:2e:3f:44:e7:34:ad:c0: a6:2b:89:a6:a3:dd:67:5a:e7:4a:7d:0b:a3:2d:d8:61:4d:eb: a6:69:b1:dc:8b:45:e0:d6:5b:80:29:27:97:dd:42:3b:fa:da: aa:6e:c3:a3:07:32:ee:61:04:28:1e:11:92:2c:57:e1:4f:18: fd:52:23:34:45:71:55:ae:e6:d3:f7:6d:e9:47:8d:ba:d8:31: a7:91:d7:88:49:45:ab:71:94:4c:d5:20:71:c5:dc:3e:be:39: bc:5c:f9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduyIOGC1Oor1eGTj5G3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi MWM3ZjMwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EygwYTU3ZmUzZGY5ZDNhNmFkODkzNzU3NmUzN2Y1MTRhZGRmZWUwMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ1oXk9nYn6LVNJBYiFuQqD3ypBE 2oC+js6EZDQgFNjRUxJnHDteIf+Lk/MOwI6ULlkEB3eGLY9+95ELgD4dH/MVgWjV 3/IW1K2spHzcF8ZYIzIBfMoE5OCLbGe53aPlyAl2qSBeRgHj1+HfLUQwzJaMH5c5 N0vNxRhFgO7UUYVsUqvzuzlhuDXHGExhDV3EwQ8yH6zaL5uC8qTjgD6rBFCkoqYF EcPQcpzwlRytCEkmpEs44/s/3wY0KYfw9qhGMp2l4F4sp0d3VGfgvnCSsA9V/kXj 9wL3Nb+bQ1F8pC7sw6QU5+R6OT3qsr1SDWPsRJ+xb0Q8MqoGVwXCN/FVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApX/j3506atiTdXbjf1FK3f7gNSMB8GA1UdIwQY MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzMbMAMB ivw8IRp5Ti3OL74/2tf44tonro9wZ+DjYDX9gL8cKifz4XgKn/e8qZrsAe51pJ+a zbL1Qy1+5EI9az+dYg36Y1FqMIn9dZ1giW9WKMARRv8u+sJpnC9R7wg2gxtAyoPO Ai0vqXrBsbCsCFcIjrUQO7kyXcpn45paqcitONwOTK1wY48VpBDqltRkl2N/lwok uUVRN8cuP0TnNK3ApiuJpqPdZ1rnSn0Loy3YYU3rpmmx3ItF4NZbgCknl91CO/ra qm7Dowcy7mEEKB4RkixX4U8Y/VIjNEVxVa7m0/dt6UeNutgxp5HXiElFq3GUTNUg ccXcPr45vFz5fw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:33 2025 by rpki-client