This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json) Hash identifier: pGjgl/7ohs/URBHbWIFqPIsfZfZCq7uF+2X7dePB22M= Subject key identifier: 0E:0F:54:AE:BA:07:C9:32:5A:58:5E:C8:54:43:7E:D2:15:86:BD:0A Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Certificate serial: 019AF7666B298379482BBD68875FFEEF560D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft Manifest number: 16F7 Signing time: Sun 07 Dec 2025 06:01:15 +0000 Manifest this update: Sun 07 Dec 2025 06:01:15 +0000 Manifest next update: Mon 08 Dec 2025 06:01:15 +0000 Files and hashes: 1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: AC2Al3hxHoUFL0hk+xy9JDgPu52zLkcW0HAYaeJh5mI=) 2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:6b:29:83:79:48:2b:bd:68:87:5f:fe:ef:56:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Validity Not Before: Dec 7 06:01:15 2025 GMT Not After : Dec 8 06:01:15 2025 GMT Subject: CN=0e0f54aeba07c9325a585ec854437ed21586bd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:a5:23:6f:40:65:21:da:00:06:85:bb:d5: 23:35:30:9b:7b:4b:96:b9:d7:c9:e6:58:de:6c:b5: 7d:26:58:ce:c0:c6:3d:37:d5:a9:9f:6d:26:3b:70: 38:ad:a3:48:e8:88:25:ab:8f:13:14:a9:52:a0:58: 9f:7a:2c:9c:c3:6a:4c:e5:d9:c4:e6:2a:42:47:34: b5:ac:dc:19:dd:a3:80:24:42:9a:f9:62:19:7f:05: 8f:0c:9e:31:69:da:82:e7:10:f1:4a:ed:ad:fc:0b: 98:ec:64:39:af:74:de:79:c3:d9:cb:08:9e:14:2e: fc:a4:10:0a:4a:4a:a1:31:b9:56:9d:61:26:d2:44: 57:2f:ad:49:e8:b2:e8:c7:d7:bc:80:b3:0d:26:9e: 51:cb:b3:9d:a1:51:e2:cd:8e:ab:24:bf:48:ef:3a: 80:8b:fe:e1:52:d1:34:cd:73:bb:de:1b:b2:6a:d3: 4b:a6:e2:ed:76:c5:98:37:32:33:0d:17:82:ab:c4: 56:88:1f:27:a2:2d:a2:dd:5b:b7:b7:a6:82:bc:a5: 22:4c:4b:43:96:64:d8:f4:2b:a9:83:43:00:9a:6d: 04:5d:bd:87:2b:d4:03:82:2c:ba:38:a4:06:02:bf: 6f:dd:93:00:3a:00:6b:62:af:2a:98:76:2a:fe:96: 74:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:54:AE:BA:07:C9:32:5A:58:5E:C8:54:43:7E:D2:15:86:BD:0A X509v3 Authority Key Identifier: keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:05:19:d4:3f:9e:1a:c1:f4:5f:08:92:77:7a:1a:06:27:de: 62:5e:b4:60:f0:a0:ed:92:2a:ad:70:21:13:4e:c1:a2:f1:64: e8:20:15:f4:7c:28:7a:58:1f:70:df:0a:88:c2:2c:80:3a:4e: 52:53:e1:22:7f:2b:e8:00:d3:b9:a8:54:ea:3c:dc:af:d0:09: 68:df:5c:2d:23:d5:e2:ce:87:e1:8e:7d:65:b8:4a:69:58:d2: e1:26:d0:84:a5:6c:f1:b4:66:4e:4a:76:d1:6a:07:9e:2f:89: 0e:2a:63:2c:0a:57:9c:cf:ba:dd:25:b2:a7:b7:91:df:38:c7: bf:1d:4e:54:9f:bb:79:59:8d:a5:df:f7:65:3d:73:bf:ba:c7: 75:1b:7c:47:f6:49:0b:ed:38:0f:23:2e:23:9a:98:72:48:b0: b3:c3:c3:76:cf:0e:d1:d6:f9:c0:f0:9d:59:31:91:e8:ce:6b: 27:55:e5:ca:7a:8a:87:77:9a:a3:a9:05:51:66:fc:d5:f0:50: af:b1:67:56:6c:54:f7:16:04:db:a0:15:d2:f8:f6:ee:70:16: 16:f3:3e:a0:50:bb:54:58:67:bc:17:fe:8b:5f:05:15:e7:fe: 2f:cd:9d:83:3f:53:88:f3:29:d8:c9:94:30:58:94:8c:ff:77: ec:dd:97:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Zmspg3lIK71oh1/+71YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1 OWYwZTYwHhcNMjUxMjA3MDYwMTE1WhcNMjUxMjA4MDYwMTE1WjAzMTEwLwYDVQQD EygwZTBmNTRhZWJhMDdjOTMyNWE1ODVlYzg1NDQzN2VkMjE1ODZiZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXGlI29AZSHaAAaFu9UjNTCbe0uW udfJ5ljebLV9JljOwMY9N9Wpn20mO3A4raNI6Iglq48TFKlSoFifeiycw2pM5dnE 5ipCRzS1rNwZ3aOAJEKa+WIZfwWPDJ4xadqC5xDxSu2t/AuY7GQ5r3TeecPZywie FC78pBAKSkqhMblWnWEm0kRXL61J6LLox9e8gLMNJp5Ry7OdoVHizY6rJL9I7zqA i/7hUtE0zXO73huyatNLpuLtdsWYNzIzDReCq8RWiB8noi2i3Vu3t6aCvKUiTEtD lmTY9Cupg0MAmm0EXb2HK9QDgiy6OKQGAr9v3ZMAOgBrYq8qmHYq/pZ0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4PVK66B8kyWlheyFRDftIVhr0KMB8GA1UdIwQY MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt YWNmMDkzMjI2YjA3LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3 LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwUZ1D+e GsH0XwiSd3oaBifeYl60YPCg7ZIqrXAhE07BovFk6CAV9HwoelgfcN8KiMIsgDpO UlPhIn8r6ADTuahU6jzcr9AJaN9cLSPV4s6H4Y59ZbhKaVjS4SbQhKVs8bRmTkp2 0WoHni+JDipjLApXnM+63SWyp7eR3zjHvx1OVJ+7eVmNpd/3ZT1zv7rHdRt8R/ZJ C+04DyMuI5qYckiws8PDds8O0db5wPCdWTGR6M5rJ1XlynqKh3eao6kFUWb81fBQ r7FnVmxU9xYE26AV0vj27nAWFvM+oFC7VFhnvBf+i18FFef+L82dgz9TiPMp2MmU MFiUjP937N2XeQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:52 2025 by rpki-client