This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json) Hash identifier: 7pBZZ6nenROjtmKZgd+Xi87+/6EYgs7YJuOgv8qM1L8= Subject key identifier: 90:87:EB:9F:14:35:72:BE:C0:7A:EF:99:3F:E3:57:28:0D:10:61:6D Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae Certificate serial: 019AF61CC3D5BA37964936B37B2F2DC565AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft Manifest number: 071F Signing time: Sun 07 Dec 2025 00:01:11 +0000 Manifest this update: Sun 07 Dec 2025 00:01:11 +0000 Manifest next update: Mon 08 Dec 2025 00:01:11 +0000 Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=) 2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: XPdIjZukzUIS5zmb1PzeDXFdApTbuE7N4tJYbZTDwzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:c3:d5:ba:37:96:49:36:b3:7b:2f:2d:c5:65:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae Validity Not Before: Dec 7 00:01:11 2025 GMT Not After : Dec 8 00:01:11 2025 GMT Subject: CN=9087eb9f143572bec07aef993fe357280d10616d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:b2:82:4d:db:15:a8:c3:f9:aa:a9:83:d2: 63:26:30:57:bf:2d:e4:c6:e4:76:1c:d7:bd:c4:2a: fe:e5:d8:34:d2:d8:84:30:a9:92:3c:e5:6d:0a:17: 83:4f:ba:ec:89:d8:0b:53:35:97:30:b7:46:97:76: be:c0:7d:a3:b6:4c:2d:29:8b:57:c1:5b:97:10:1a: f7:de:9f:a7:38:1e:2c:e0:83:d3:2e:64:a3:dd:ce: 3e:55:a1:a6:9e:c9:1f:f0:21:1c:3f:8b:f3:98:f1: 41:41:47:c7:3a:6a:fa:0e:49:8b:54:cb:30:54:c9: fd:de:d0:b9:90:ee:20:aa:92:ae:71:71:85:3f:29: 67:c2:fe:c6:17:97:94:99:0d:04:80:3e:a1:d4:3b: 5b:3c:fa:d1:3f:03:ec:15:42:0e:47:d9:55:69:16: eb:d7:fa:ff:7e:b2:17:9f:9a:0d:69:76:2e:21:54: d3:c0:cb:72:1f:12:71:6f:84:ba:cb:df:74:71:18: a8:6c:27:90:4b:9f:50:a4:25:98:8f:cd:69:c5:c1: 7d:61:4d:50:31:78:22:01:7d:bd:45:49:02:d5:0a: b6:43:e8:47:17:d4:cb:5f:e5:4b:f0:d0:96:00:bc: 03:58:36:55:35:7e:5f:23:cf:74:01:c1:39:bf:ff: 48:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:EB:9F:14:35:72:BE:C0:7A:EF:99:3F:E3:57:28:0D:10:61:6D X509v3 Authority Key Identifier: keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:ad:22:11:6e:2d:99:03:67:f8:a9:8d:58:82:42:18:90: 1c:f1:82:01:48:a6:e2:ca:f3:5c:49:77:3a:c3:6a:d2:c4:43: 37:0d:5a:4b:a6:e6:d5:1b:f5:05:14:91:95:ac:ac:59:96:c7: 1b:28:c7:56:3e:f9:1d:9d:d3:a7:1f:e5:90:d6:c4:5c:95:55: 5b:b9:39:7a:34:1f:c0:d4:71:05:27:92:cb:c4:99:d9:f1:32: 36:ee:c9:a0:95:5d:a3:5f:43:be:25:d7:e2:c5:3f:b8:78:15: aa:ab:cb:61:54:9e:4b:d5:45:23:c4:41:84:8f:fa:57:71:d1: fa:eb:6b:88:e6:01:06:17:76:70:50:c0:84:4f:6f:a0:52:e4: f6:1a:e9:1b:d6:4c:ea:4a:61:54:6a:c1:5e:02:ee:c7:2f:ec: a4:31:6c:89:43:37:fa:4c:6b:f2:3f:8a:79:5f:09:09:95:43: 8e:90:53:54:e5:b2:43:ee:7b:00:83:5a:e2:db:e7:c7:e6:14: fd:ac:22:0a:aa:6b:bb:1d:05:0b:14:ec:5d:4f:ee:c5:5d:99: 44:36:d0:cc:51:cc:a8:10:bb:dd:ca:5a:da:3b:31:8a:e0:e6: 64:0f:dd:b3:24:7e:af:68:76:ea:33:f2:5d:89:e9:3a:5c:09: 7a:c3:12:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HMPVujeWSTazey8txWWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Y2M5ZDUwMDdjMDA1ODk5MzI5YmNlZTM2NjMzMDhhMzdk NDBlYWUwHhcNMjUxMjA3MDAwMTExWhcNMjUxMjA4MDAwMTExWjAzMTEwLwYDVQQD Eyg5MDg3ZWI5ZjE0MzU3MmJlYzA3YWVmOTkzZmUzNTcyODBkMTA2MTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAiygk3bFajD+aqpg9JjJjBXvy3k xuR2HNe9xCr+5dg00tiEMKmSPOVtCheDT7rsidgLUzWXMLdGl3a+wH2jtkwtKYtX wVuXEBr33p+nOB4s4IPTLmSj3c4+VaGmnskf8CEcP4vzmPFBQUfHOmr6DkmLVMsw VMn93tC5kO4gqpKucXGFPylnwv7GF5eUmQ0EgD6h1DtbPPrRPwPsFUIOR9lVaRbr 1/r/frIXn5oNaXYuIVTTwMtyHxJxb4S6y990cRiobCeQS59QpCWYj81pxcF9YU1Q MXgiAX29RUkC1Qq2Q+hHF9TLX+VL8NCWALwDWDZVNX5fI890AcE5v/9IfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCH658UNXK+wHrvmT/jVygNEGFtMB8GA1UdIwQY MBaAFCbMnVAHwAWJkym87jZjMIo31A6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgt M2NiYTRiZTRjMjllLzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZGM0NWEtMjFlYi00Y2M4LTkwYjgtM2NiYTRiZTRjMjll LzEvSnN5ZFVBZkFCWW1US2J6dU5tTXdpamZVRHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbitIhFu LZkDZ/ipjViCQhiQHPGCAUim4srzXEl3OsNq0sRDNw1aS6bm1Rv1BRSRlaysWZbH GyjHVj75HZ3Tpx/lkNbEXJVVW7k5ejQfwNRxBSeSy8SZ2fEyNu7JoJVdo19DviXX 4sU/uHgVqqvLYVSeS9VFI8RBhI/6V3HR+utriOYBBhd2cFDAhE9voFLk9hrpG9ZM 6kphVGrBXgLuxy/spDFsiUM3+kxr8j+KeV8JCZVDjpBTVOWyQ+57AINa4tvnx+YU /awiCqprux0FCxTsXU/uxV2ZRDbQzFHMqBC73cpa2jsxiuDmZA/dsyR+r2h26jPy XYnpOlwJesMSfw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:20 2025 by rpki-client