This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json) Hash identifier: LobOr/ipw28IqnqsqnAiUba2ngih+DXph5PTkdrt9t0= Subject key identifier: 8B:D9:C5:01:30:AD:C4:71:43:44:F8:6F:E8:A3:C6:ED:C7:B6:70:98 Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Certificate serial: 019B2AAE73D39C15FD4D2E38380B30D062D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft Manifest number: 153C Signing time: Wed 17 Dec 2025 05:00:34 +0000 Manifest this update: Wed 17 Dec 2025 05:00:34 +0000 Manifest next update: Thu 18 Dec 2025 05:00:34 +0000 Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=) 2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=) 3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: khL0EoiTryZ++az75zSggzYyGxJ+pgYsqRRIYivelEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:73:d3:9c:15:fd:4d:2e:38:38:0b:30:d0:62:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f Validity Not Before: Dec 17 05:00:34 2025 GMT Not After : Dec 18 05:00:34 2025 GMT Subject: CN=8bd9c50130adc4714344f86fe8a3c6edc7b67098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:34:e9:09:bc:b1:b9:67:9f:9f:4d:78:ee: fd:58:59:69:d1:2b:08:a2:2b:54:8a:ba:17:2a:79: 28:bc:69:f3:c4:b2:0c:5d:7a:c7:46:2f:6e:ff:44: 1a:22:8e:6c:5d:3e:b2:d7:6b:f2:06:29:bc:a5:90: 54:62:98:07:32:cb:58:17:de:4f:7b:00:dc:7d:1b: 3b:8e:7b:cf:57:36:24:00:5b:00:27:1f:74:d6:2e: 28:89:a4:a8:aa:26:fa:74:50:00:e5:95:70:9d:33: a1:5c:ce:cf:89:12:04:ef:79:a5:49:b7:c4:85:dd: ea:88:ab:e7:4a:ac:73:5e:c0:18:9c:2e:96:43:f2: ed:ee:20:72:e5:41:7a:5c:ae:af:8a:59:a4:dc:b4: 18:5b:31:a2:d1:3f:e5:ce:ca:35:ec:ea:3b:45:98: ef:0e:70:63:2d:c4:ca:da:78:3b:23:c7:56:ce:73: c5:f2:de:f1:b0:8a:86:7b:f6:fd:1d:52:d9:6b:ee: 05:58:e6:f1:8d:73:bc:69:84:80:8c:28:c5:dc:0e: e5:1a:e8:3e:a1:56:b7:b5:c2:a3:96:31:04:4e:16: c1:4a:b8:85:a9:68:61:75:0e:85:2b:76:ea:93:c1: 20:16:79:29:7a:20:a6:dc:b9:ef:4e:3c:c2:73:73: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D9:C5:01:30:AD:C4:71:43:44:F8:6F:E8:A3:C6:ED:C7:B6:70:98 X509v3 Authority Key Identifier: keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:d4:da:94:c0:5d:3a:0c:f8:eb:5f:98:8b:0d:41:79:95: 3a:03:01:4f:c9:f8:88:cc:28:a0:3c:a4:44:90:e1:5c:a2:15: 43:c9:3f:7f:76:24:cb:ad:dd:a1:d8:a4:75:94:49:57:d0:98: f1:96:54:4e:36:27:9f:3b:c2:23:25:98:39:a5:ec:f4:03:31: 27:32:72:ac:81:ad:e2:52:d0:77:af:b4:0d:fa:db:01:d4:76: 33:59:a8:25:3b:af:ad:d0:49:bc:57:4f:e1:c4:03:f5:88:a4: 8b:e4:a4:19:28:f8:56:32:24:4c:ee:64:da:85:c5:ab:26:d7: 5a:10:1e:53:f5:1f:9c:29:38:83:25:69:5e:31:28:a6:aa:95: e7:b7:3e:58:72:82:a6:11:06:92:a0:51:9d:64:87:1f:65:13: 0e:c7:a3:38:d1:5e:3e:1c:f4:33:48:d0:d3:e8:85:79:d7:dc: d5:08:8d:14:51:94:d8:03:eb:71:b1:d8:c7:ee:e4:ff:2e:dd: 43:c2:d3:11:9d:d2:0c:bc:36:26:92:7d:0f:66:8a:27:3e:76: c7:ee:06:99:68:06:c1:14:08:c1:21:c6:09:72:f1:3b:b0:28: e2:6c:70:bf:50:4c:f7:c1:1d:40:ba:fa:18:c6:64:8b:eb:51: 33:3f:51:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrnPTnBX9TS44OAsw0GLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw ZjQ1MWYwHhcNMjUxMjE3MDUwMDM0WhcNMjUxMjE4MDUwMDM0WjAzMTEwLwYDVQQD Eyg4YmQ5YzUwMTMwYWRjNDcxNDM0NGY4NmZlOGEzYzZlZGM3YjY3MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiA06Qm8sblnn59NeO79WFlp0SsI oitUiroXKnkovGnzxLIMXXrHRi9u/0QaIo5sXT6y12vyBim8pZBUYpgHMstYF95P ewDcfRs7jnvPVzYkAFsAJx901i4oiaSoqib6dFAA5ZVwnTOhXM7PiRIE73mlSbfE hd3qiKvnSqxzXsAYnC6WQ/Lt7iBy5UF6XK6vilmk3LQYWzGi0T/lzso17Oo7RZjv DnBjLcTK2ng7I8dWznPF8t7xsIqGe/b9HVLZa+4FWObxjXO8aYSAjCjF3A7lGug+ oVa3tcKjljEEThbBSriFqWhhdQ6FK3bqk8EgFnkpeiCm3LnvTjzCc3NHMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvZxQEwrcRxQ0T4b+ijxu3HtnCYMB8GA1UdIwQY MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1 LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAionU2pTA XToM+OtfmIsNQXmVOgMBT8n4iMwooDykRJDhXKIVQ8k/f3Yky63dodikdZRJV9CY 8ZZUTjYnnzvCIyWYOaXs9AMxJzJyrIGt4lLQd6+0DfrbAdR2M1moJTuvrdBJvFdP 4cQD9Yiki+SkGSj4VjIkTO5k2oXFqybXWhAeU/UfnCk4gyVpXjEopqqV57c+WHKC phEGkqBRnWSHH2UTDsejONFePhz0M0jQ0+iFedfc1QiNFFGU2APrcbHYx+7k/y7d Q8LTEZ3SDLw2JpJ9D2aKJz52x+4GmWgGwRQIwSHGCXLxO7Ao4mxwv1BM98EdQLr6 GMZki+tRMz9R7w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:41:55 2025 by rpki-client