This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json) Hash identifier: y2C81LH8//6No5Kaavz+bsyv5PGu35o97tjTADDskN4= Subject key identifier: 82:50:42:20:48:3C:07:C0:B2:E8:DD:AC:BD:35:2C:A2:E9:A4:8C:BB Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14 Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14 Certificate serial: 019AF23FA05ABAD7E065FD40BEACAA41CF39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=) 2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: M0RATBGW726izacQCHjeCQ4gOi0HH2Ja8pxvUmae6rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:5a:ba:d7:e0:65:fd:40:be:ac:aa:41:cf:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=82504220483c07c0b2e8ddacbd352ca2e9a48cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:e5:2e:1b:12:5e:88:8e:0b:6f:e5:32:de: 68:32:c5:85:b4:ff:db:03:85:8b:11:1f:7e:bf:76: b4:fe:d3:5a:ef:08:2f:8e:63:55:9b:b4:64:66:d2: 26:ac:f6:48:66:46:b6:67:8d:81:7d:f1:7a:1f:33: 73:b9:72:9c:80:77:7d:1e:e7:42:c9:d7:c4:61:3c: ba:05:ec:8b:3e:7c:04:10:9b:bb:53:ac:80:16:95: fc:45:50:74:97:66:fd:aa:20:df:d2:fb:53:a0:3a: f7:57:96:c1:b6:f4:12:5f:d0:f1:8b:5d:58:d6:be: ae:65:bf:b8:d9:61:c1:7b:99:c0:6e:2e:5a:b3:62: f1:e3:85:90:ea:1f:b4:25:0c:dd:57:37:e6:a3:e8: 37:aa:98:16:61:1b:96:3e:23:2a:f7:35:8b:78:df: 9a:6e:bd:ce:64:e1:d0:9c:08:a8:c4:d5:34:10:60: 4b:99:bb:a7:5c:b7:54:d2:f8:fc:c0:e5:e4:6e:3b: fc:23:e5:5b:33:24:02:21:85:48:a1:57:6c:f7:4d: 99:68:5a:13:ef:ec:9d:a3:a7:05:22:90:98:d4:06: e1:71:35:39:1c:fa:39:45:e0:17:87:85:6d:ff:ec: 0a:2d:a6:75:d4:f2:5d:47:ef:2c:c6:c3:ec:d3:c9: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:50:42:20:48:3C:07:C0:B2:E8:DD:AC:BD:35:2C:A2:E9:A4:8C:BB X509v3 Authority Key Identifier: keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c0:41:dc:c1:f1:3c:11:95:04:85:58:09:6e:76:48:65:05: af:fa:33:a1:5e:a5:97:dc:60:ce:ee:95:63:14:fc:a4:99:dc: aa:07:d5:00:7d:5f:f1:9d:5d:7c:4f:e3:b4:3e:24:c0:09:c6: c5:23:bd:07:4f:3e:2b:9e:e2:ec:a1:80:0a:8d:09:9c:9b:ce: 05:17:47:43:e1:09:27:c6:51:49:33:36:9f:30:86:c4:60:30: af:a9:16:9e:9d:dd:62:08:f7:a2:3d:a2:62:18:ae:b9:e8:54: 51:b9:98:2c:0a:45:82:d7:17:13:dd:68:1d:00:cb:9a:f1:c4: a4:2b:68:0d:95:5e:fd:78:c0:d2:b9:eb:60:03:19:8b:a9:bc: 54:dd:4b:3e:0f:70:a2:eb:8c:88:2c:52:31:b9:44:d2:b7:2c: 53:34:99:96:7c:f3:f1:b0:64:a7:c5:61:5f:88:eb:4c:61:ff: 70:b3:1b:e7:d6:1f:d8:5a:8c:2c:d5:50:38:60:ee:e8:c8:4a: 67:29:86:4e:5b:1a:8c:be:9c:07:fd:1d:40:e8:53:52:f4:39: a7:81:25:69:76:b2:56:97:e2:47:a5:82:c2:1d:dd:29:ee:c2: 6e:a4:cf:89:d5:a7:04:17:a9:4e:7d:2b:d0:7e:be:ee:80:57: ff:eb:00:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6BautfgZf1AvqyqQc85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTcyZThmOTNiMThhNDAxY2ZlY2RmNjI1ODY3ODM4NThj YzVmMTQwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD Eyg4MjUwNDIyMDQ4M2MwN2MwYjJlOGRkYWNiZDM1MmNhMmU5YTQ4Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlrlLhsSXoiOC2/lMt5oMsWFtP/b A4WLER9+v3a0/tNa7wgvjmNVm7RkZtImrPZIZka2Z42BffF6HzNzuXKcgHd9HudC ydfEYTy6BeyLPnwEEJu7U6yAFpX8RVB0l2b9qiDf0vtToDr3V5bBtvQSX9Dxi11Y 1r6uZb+42WHBe5nAbi5as2Lx44WQ6h+0JQzdVzfmo+g3qpgWYRuWPiMq9zWLeN+a br3OZOHQnAioxNU0EGBLmbunXLdU0vj8wOXkbjv8I+VbMyQCIYVIoVds902ZaFoT 7+ydo6cFIpCY1AbhcTU5HPo5ReAXh4Vt/+wKLaZ11PJdR+8sxsPs08lpmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJQQiBIPAfAsujdrL01LKLppIy7MB8GA1UdIwQY MBaAFCVXLo+TsYpAHP7N9iWGeDhYzF8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZjdWo1T3hpa0FjX3MzMkpZWjRPRmpNWHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80YjFhMzUtNGE4NC00MTRiLWIwNzMt NjZkMzVlNTI1MDM5LzEvSlZjdWo1T3hpa0FjX3MzMkpZWjRPRmpNWHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80YjFhMzUtNGE4NC00MTRiLWIwNzMtNjZkMzVlNTI1MDM5 LzEvSlZjdWo1T3hpa0FjX3MzMkpZWjRPRmpNWHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMBB3MHx PBGVBIVYCW52SGUFr/ozoV6ll9xgzu6VYxT8pJncqgfVAH1f8Z1dfE/jtD4kwAnG xSO9B08+K57i7KGACo0JnJvOBRdHQ+EJJ8ZRSTM2nzCGxGAwr6kWnp3dYgj3oj2i YhiuuehUUbmYLApFgtcXE91oHQDLmvHEpCtoDZVe/XjA0rnrYAMZi6m8VN1LPg9w ouuMiCxSMblE0rcsUzSZlnzz8bBkp8VhX4jrTGH/cLMb59Yf2FqMLNVQOGDu6MhK ZymGTlsajL6cB/0dQOhTUvQ5p4ElaXayVpfiR6WCwh3dKe7CbqTPidWnBBepTn0r 0H6+7oBX/+sA2g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:28 2025 by rpki-client