This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json) Hash identifier: JbHBjtWq26DyXDLmZlE6lZAoLE513tfgYPOVNvgkvhY= Subject key identifier: F9:F3:09:5E:E3:35:77:6C:01:32:4E:1B:6F:F7:87:0D:28:D5:1F:DD Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Certificate serial: 019AF1D1F9F741CC1B9BAABEAC7237727678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft Manifest number: 112C Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: BSIE9Zrhvx7DL4TjT9P9Hef7T93XmrcBKe6GgOINsqI=) 2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f9:f7:41:cc:1b:9b:aa:be:ac:72:37:72:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=f9f3095ee335776c01324e1b6ff7870d28d51fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:6a:01:64:3c:1b:ef:98:19:c4:55:d1:e4: 46:88:b6:4e:ad:0e:6a:3e:a5:7e:d1:f7:0d:2b:4e: b4:a4:60:15:dc:5c:5f:60:b6:d1:74:e5:40:ea:ee: 2f:96:fd:01:89:c2:4a:8b:f8:5b:36:17:e0:14:57: 49:9d:0f:cf:24:32:cd:a3:8c:87:f0:ef:aa:96:c1: b8:b5:ce:83:a2:56:1d:37:45:bd:bb:2b:c3:e7:db: 13:34:e1:89:4c:c2:58:1c:be:54:73:a6:31:d8:2f: 69:e4:c9:fc:b8:28:b2:0d:1a:16:e3:41:f3:71:0c: 40:44:e7:af:b4:5c:4f:b1:01:db:dc:d2:bb:18:fd: 0e:87:37:1c:02:6e:dc:cb:89:78:90:f0:8f:81:09: 25:ba:7e:4f:b9:e7:f0:7d:44:b9:02:c2:52:0f:bb: 70:04:8a:9b:cf:ee:1a:d9:44:e5:df:1c:e0:90:2a: 7c:34:bd:61:57:d2:58:9c:e7:c4:9d:7e:03:3c:93: ad:0d:fe:ed:39:37:a5:b4:be:b3:e7:79:b9:48:08: 7c:ce:df:7b:98:73:1b:03:9c:67:c8:8b:ed:05:90: b1:24:b9:27:ac:02:8a:2f:0b:68:be:bb:d0:6d:34: c1:c5:5d:93:65:8c:44:40:2f:e0:5c:48:30:84:c9: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:09:5E:E3:35:77:6C:01:32:4E:1B:6F:F7:87:0D:28:D5:1F:DD X509v3 Authority Key Identifier: keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:21:45:27:25:02:69:77:d2:c0:5a:69:ee:f2:5e:49:5b: 17:a3:ca:8b:36:97:96:7b:4d:15:8c:a0:3b:e0:5f:b3:71:46: 04:72:8b:fb:eb:a8:74:d6:f7:82:46:f6:34:3c:d3:cd:4a:1e: d3:b5:71:fb:d7:ab:70:ca:ba:a9:5b:77:72:00:4b:a8:5e:a0: 93:f6:16:29:52:1f:0b:c2:7d:3e:20:44:45:45:8b:21:95:f2: ca:95:42:f1:83:e8:37:91:7e:df:a3:93:89:11:41:61:a8:0d: ab:68:7d:60:53:a9:76:2f:03:81:3b:46:4f:c1:61:06:23:df: a8:5a:55:ef:88:6d:7b:50:0f:a5:92:b5:c9:de:c4:8e:ed:3f: 61:e9:27:92:9d:44:13:51:5d:9e:12:d2:1c:06:9d:e8:2b:d3: b1:a6:0f:5d:ed:04:36:bf:5a:71:98:30:9c:d7:a8:c0:6b:c5: 39:e9:da:34:b3:dd:05:a6:28:4c:aa:03:c1:1c:d5:72:ac:b3: 71:3d:e4:f4:79:e8:d5:40:e8:19:e0:7b:c9:57:80:e8:73:28: 2d:2c:e1:0a:ec:72:7d:6a:dc:9d:a3:64:f9:49:30:dc:f8:d7: e0:e3:dd:4b:00:f4:5a:c3:27:0b:37:f1:ab:89:35:c4:b5:57: 40:a4:c3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fn3Qcwbm6q+rHI3cnZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm ZDk4ODkwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhmOWYzMDk1ZWUzMzU3NzZjMDEzMjRlMWI2ZmY3ODcwZDI4ZDUxZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPlqAWQ8G++YGcRV0eRGiLZOrQ5q PqV+0fcNK060pGAV3FxfYLbRdOVA6u4vlv0BicJKi/hbNhfgFFdJnQ/PJDLNo4yH 8O+qlsG4tc6DolYdN0W9uyvD59sTNOGJTMJYHL5Uc6Yx2C9p5Mn8uCiyDRoW40Hz cQxAROevtFxPsQHb3NK7GP0OhzccAm7cy4l4kPCPgQklun5PuefwfUS5AsJSD7tw BIqbz+4a2UTl3xzgkCp8NL1hV9JYnOfEnX4DPJOtDf7tOTeltL6z53m5SAh8zt97 mHMbA5xnyIvtBZCxJLknrAKKLwtovrvQbTTBxV2TZYxEQC/gXEgwhMmexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnzCV7jNXdsATJOG2/3hw0o1R/dMB8GA1UdIwQY MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijYhRScl Aml30sBaae7yXklbF6PKizaXlntNFYygO+Bfs3FGBHKL++uodNb3gkb2NDzTzUoe 07Vx+9ercMq6qVt3cgBLqF6gk/YWKVIfC8J9PiBERUWLIZXyypVC8YPoN5F+36OT iRFBYagNq2h9YFOpdi8DgTtGT8FhBiPfqFpV74hte1APpZK1yd7Eju0/Yeknkp1E E1FdnhLSHAad6CvTsaYPXe0ENr9acZgwnNeowGvFOenaNLPdBaYoTKoDwRzVcqyz cT3k9Hno1UDoGeB7yVeA6HMoLSzhCuxyfWrcnaNk+Ukw3PjX4OPdSwD0WsMnCzfx q4k1xLVXQKTDXA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:41 2025 by rpki-client