This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json) Hash identifier: 0Qzeqcf+B46rIaRfE6TVYSIZLx9JCaJFyBLUiq2utcs= Subject key identifier: 02:F5:70:A4:AA:3C:33:22:1A:3B:3D:90:BA:11:96:C3:52:30:BF:AA Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Certificate serial: 019AF16441A37A61B2A3D3077CE20D824F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=) 2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: yy1GWZOkhl73/phN3DzuL5SCFmNIvrrWFzbEDS0SSB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:41:a3:7a:61:b2:a3:d3:07:7c:e2:0d:82:4f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6 Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=02f570a4aa3c33221a3b3d90ba1196c35230bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:02:5e:d1:f2:eb:81:c7:56:90:94:f7:ff: dc:23:67:87:ae:dc:07:a3:9e:c0:81:32:83:f7:87: b5:c6:d3:0b:c2:11:9f:1a:90:72:9f:d7:7e:7b:dc: a7:54:03:c8:61:e7:5e:14:a2:76:cd:e9:ad:f9:90: 71:be:41:df:b2:54:ff:89:ce:8e:ee:15:37:c6:ea: 0b:36:83:13:06:d9:cd:cc:d7:74:de:88:2a:2f:48: be:a5:56:d5:73:a6:84:2b:7b:fa:66:23:43:5a:6c: b8:27:9e:45:c5:d5:5e:63:3c:25:1f:e7:02:ac:40: f7:11:37:8e:20:47:88:2c:a1:80:fa:00:10:22:da: 5b:11:8b:bc:84:6d:04:79:30:52:3b:f4:89:f0:4e: 16:97:08:d6:92:1c:c9:8e:89:66:ae:42:0c:ff:78: 74:a3:b6:3c:2d:36:63:bc:34:6d:6c:35:f7:6d:06: 86:8e:6d:19:cb:98:71:96:9c:c6:09:6b:6a:4d:87: 97:75:68:aa:50:63:53:9b:41:c9:03:6b:34:3f:71: e7:3b:9f:7f:85:db:d5:41:cb:60:29:f5:28:31:91: 71:ad:86:49:29:25:6f:64:f7:5d:22:34:78:8e:af: 3f:de:d0:ef:04:4d:75:f8:87:86:77:c2:b5:b2:77: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:70:A4:AA:3C:33:22:1A:3B:3D:90:BA:11:96:C3:52:30:BF:AA X509v3 Authority Key Identifier: keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ac:0b:68:0e:54:0f:e3:05:cf:83:d5:96:80:60:a8:d6:b7: ad:f8:35:f8:bc:d9:1c:b1:46:07:e8:93:6e:00:5d:0f:dc:9e: e5:bc:3c:1a:7b:75:7c:59:74:f2:4b:0b:a0:b4:86:5b:15:70: f2:d3:33:ac:88:fe:eb:cf:5c:c4:ce:cc:51:e0:17:f8:35:bb: 35:f8:19:27:cf:6a:af:fb:ee:eb:ad:1e:05:05:f4:39:58:48: fd:9d:7e:2c:49:36:66:c5:2a:e5:9b:ae:b4:61:cd:fe:60:28: 07:28:29:11:eb:3b:8a:45:46:95:35:31:9a:f8:bb:7d:28:69: ee:51:23:bd:20:8a:35:54:2b:c6:f4:14:95:1a:4d:77:6f:14: 2a:b7:fe:45:9d:5a:ce:ef:c1:4e:4a:41:24:8f:ec:8c:20:87: 68:6a:27:78:70:ae:97:1b:e7:03:f2:3b:90:6e:f0:f0:c0:3d: 07:94:fe:79:6c:6f:03:ba:be:d2:a0:92:ec:25:57:98:1e:e1: f8:4d:fa:c8:6d:2b:e1:6e:31:b6:58:51:d7:85:7f:4a:92:74: f0:a4:ca:5f:58:16:5a:df:2b:ad:13:03:89:d0:a7:ad:87:18: f5:19:09:46:e0:8d:43:9b:68:13:07:55:0b:a8:15:ef:51:0b: ea:44:0b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEGjemGyo9MHfOINgk+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTJhMzk1NGUzMGU0NzUzZTJlMDBhMGVmODE2OTY2ZDZk NjBkYjYwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygwMmY1NzBhNGFhM2MzMzIyMWEzYjNkOTBiYTExOTZjMzUyMzBiZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMECXtHy64HHVpCU9//cI2eHrtwH o57AgTKD94e1xtMLwhGfGpByn9d+e9ynVAPIYedeFKJ2zemt+ZBxvkHfslT/ic6O 7hU3xuoLNoMTBtnNzNd03ogqL0i+pVbVc6aEK3v6ZiNDWmy4J55FxdVeYzwlH+cC rED3ETeOIEeILKGA+gAQItpbEYu8hG0EeTBSO/SJ8E4WlwjWkhzJjolmrkIM/3h0 o7Y8LTZjvDRtbDX3bQaGjm0Zy5hxlpzGCWtqTYeXdWiqUGNTm0HJA2s0P3HnO59/ hdvVQctgKfUoMZFxrYZJKSVvZPddIjR4jq8/3tDvBE11+IeGd8K1sndm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL1cKSqPDMiGjs9kLoRlsNSML+qMB8GA1UdIwQY MBaAFI5So5VOMOR1Pi4AoO+BaWbW1g22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEt Yjg1NmRiMzNjNmM2LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEtYjg1NmRiMzNjNmM2 LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADawLaA5U D+MFz4PVloBgqNa3rfg1+LzZHLFGB+iTbgBdD9ye5bw8Gnt1fFl08ksLoLSGWxVw 8tMzrIj+689cxM7MUeAX+DW7NfgZJ89qr/vu660eBQX0OVhI/Z1+LEk2ZsUq5Zuu tGHN/mAoBygpEes7ikVGlTUxmvi7fShp7lEjvSCKNVQrxvQUlRpNd28UKrf+RZ1a zu/BTkpBJI/sjCCHaGoneHCulxvnA/I7kG7w8MA9B5T+eWxvA7q+0qCS7CVXmB7h +E36yG0r4W4xtlhR14V/SpJ08KTKX1gWWt8rrRMDidCnrYcY9RkJRuCNQ5toEwdV C6gV71EL6kQLCg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:15 2025 by rpki-client