This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json) Hash identifier: 4vJTyVTM2dHA6xuhNY2WBnoVNz0/lM3yLnjSiiR+vxM= Subject key identifier: DD:4B:39:AF:A6:DB:26:E7:25:57:23:FB:1D:EA:7F:77:63:20:1D:1C Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Certificate serial: 019AF1643FC2CE21C44146B597E09501A9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: JwKraZekyqZVlIz9nEDgMGHSaQH5Ph7mI466pKz+n7Q=) 2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3f:c2:ce:21:c4:41:46:b5:97:e0:95:01:a9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=dd4b39afa6db26e7255723fb1dea7f7763201d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:48:41:59:b9:5b:d9:bf:4a:31:b4:43:b4: 4c:86:09:72:79:59:42:81:16:f6:00:4f:04:bd:6a: e5:1b:8c:70:9d:11:44:5c:5d:c7:4a:dc:6c:4a:2e: 1e:03:3b:f2:4d:96:63:b6:5e:02:cb:24:2a:a1:91: 6f:b4:3a:e6:ed:ce:ec:d3:e3:dd:80:e5:11:39:0f: 63:32:8d:eb:64:98:ab:65:67:be:a6:95:19:20:f2: e3:43:45:4d:d2:e5:87:b0:51:57:10:13:52:8b:56: 04:db:40:0c:9b:4d:c3:2c:3d:fd:4a:87:a8:43:94: ca:0e:00:e7:e5:13:71:ff:b3:90:fc:d4:49:3f:0a: 51:a1:f1:0a:fd:96:4e:f1:45:f0:bc:49:a4:37:32: 37:d9:06:d2:08:2b:f0:40:33:3f:b5:a8:fd:e7:f9: 0c:9e:04:87:48:32:d8:e9:21:af:e6:c1:39:aa:d5: a3:e0:27:f2:f0:21:39:cb:ae:90:2f:b5:b7:a3:0a: d8:69:ff:cc:ba:ce:34:98:71:88:8e:66:eb:a9:95: ef:fb:ea:4b:cc:bd:94:8d:65:1b:be:bd:92:f1:b0: 7f:dd:f5:ac:63:f2:0d:97:67:34:a5:a5:72:dc:cd: 59:e7:ae:58:0c:d0:63:86:3a:09:fe:cd:d6:97:b5: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:39:AF:A6:DB:26:E7:25:57:23:FB:1D:EA:7F:77:63:20:1D:1C X509v3 Authority Key Identifier: keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d2:5d:ee:b8:7c:15:f2:b4:87:25:50:16:04:54:db:99:e1: ff:ab:4e:d5:57:a3:7f:f7:f8:7f:11:f3:56:dd:59:be:f5:94: fc:db:7d:c4:78:56:2e:d5:15:c9:0e:85:29:f8:83:02:fc:f4: 36:69:e4:05:c2:54:54:04:65:cf:b5:b4:1c:f2:05:9f:8b:d3: 78:e6:52:b6:cf:47:10:57:32:ff:2b:6c:05:28:12:06:f7:f0: 58:39:4d:14:fb:28:b6:37:37:eb:8b:a1:3c:48:3e:74:a6:7e: 54:00:29:56:2d:ae:2e:8d:ed:ae:84:cd:f9:95:ca:f9:03:14: e1:02:73:90:b3:28:81:ed:16:83:7f:1c:41:8d:25:ce:a8:19: 4c:e3:27:ae:7c:15:b2:2c:57:92:57:6b:41:cf:40:db:ee:4b: 92:80:8e:dd:d6:6a:42:fb:16:d0:aa:97:52:53:ac:1e:84:c8: 8f:80:dc:54:a4:0b:99:a8:26:20:e5:89:d7:af:5f:ec:a2:86: b7:d5:62:ca:ba:21:a0:21:81:52:e1:de:5b:10:02:3d:2b:ae: 10:f6:7e:1b:80:18:93:75:91:81:4b:7a:48:bb:22:29:aa:fa: f6:bd:3c:39:36:b6:b6:7f:62:b2:f5:30:de:e3:9c:fb:e9:68: 60:b2:0e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD/CziHEQUa1l+CVAamnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj ZTNmYTkwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhkZDRiMzlhZmE2ZGIyNmU3MjU1NzIzZmIxZGVhN2Y3NzYzMjAxZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvBIQVm5W9m/SjG0Q7RMhglyeVlC gRb2AE8EvWrlG4xwnRFEXF3HStxsSi4eAzvyTZZjtl4CyyQqoZFvtDrm7c7s0+Pd gOUROQ9jMo3rZJirZWe+ppUZIPLjQ0VN0uWHsFFXEBNSi1YE20AMm03DLD39Soeo Q5TKDgDn5RNx/7OQ/NRJPwpRofEK/ZZO8UXwvEmkNzI32QbSCCvwQDM/taj95/kM ngSHSDLY6SGv5sE5qtWj4Cfy8CE5y66QL7W3owrYaf/Mus40mHGIjmbrqZXv++pL zL2UjWUbvr2S8bB/3fWsY/INl2c0paVy3M1Z565YDNBjhjoJ/s3Wl7XJKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1LOa+m2ybnJVcj+x3qf3djIB0cMB8GA1UdIwQY MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt MzI5Y2I1MTZkOTM3LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3 LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9Jd7rh8 FfK0hyVQFgRU25nh/6tO1Vejf/f4fxHzVt1ZvvWU/Nt9xHhWLtUVyQ6FKfiDAvz0 NmnkBcJUVARlz7W0HPIFn4vTeOZSts9HEFcy/ytsBSgSBvfwWDlNFPsotjc364uh PEg+dKZ+VAApVi2uLo3troTN+ZXK+QMU4QJzkLMoge0Wg38cQY0lzqgZTOMnrnwV sixXkldrQc9A2+5LkoCO3dZqQvsW0KqXUlOsHoTIj4DcVKQLmagmIOWJ169f7KKG t9ViyrohoCGBUuHeWxACPSuuEPZ+G4AYk3WRgUt6SLsiKar69r08OTa2tn9isvUw 3uOc++loYLIOtw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:51 2025 by rpki-client