This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json) Hash identifier: fKZKBtPs5JZ78YnI88AKnb+7cO/gw7lrCTBXQe2ZF+4= Subject key identifier: A8:82:9C:16:18:4B:5D:DC:D6:40:20:5D:5F:A4:F9:7F:80:FE:A3:E6 Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Certificate serial: 019AF0BEFC860BDB672871981A0BDF99DE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft Manifest number: 1578 Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=) 2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: ZTJur8cWgpzLjTOI91JdVSNJywPW4g2rqJAQt/fnSac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fc:86:0b:db:67:28:71:98:1a:0b:df:99:de:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=a8829c16184b5ddcd640205d5fa4f97f80fea3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:b8:9d:0b:d4:28:b6:73:c9:9a:a0:07:2e: ee:86:c8:62:b8:ca:34:21:50:ef:bf:14:c4:f4:2b: 9b:95:ea:20:14:2e:62:cd:4b:f4:27:9a:2e:4a:40: 58:66:ca:dc:e6:0f:03:58:ec:db:6b:d7:cd:d4:41: 2b:91:2b:68:61:d7:fc:46:c6:61:86:af:05:1f:f8: 6d:47:97:cc:40:0e:bd:36:e7:9c:67:ba:97:c5:f7: 45:8b:70:38:2a:e5:01:b5:fa:a7:f6:9c:79:99:f6: b9:da:ce:62:70:01:f5:c5:26:0c:ef:53:51:16:5e: 15:7a:a0:27:53:aa:86:ee:f5:11:04:b9:41:fb:ce: 09:71:39:ca:ef:fb:d4:b7:2e:55:c7:8b:9f:a5:23: 47:4c:33:f5:ca:78:8a:b0:c9:e0:85:2f:6b:4d:77: 3c:94:48:58:e3:a7:20:9e:47:51:e2:a5:53:86:e3: 3d:f6:50:c3:d1:62:90:29:bc:98:e2:51:a5:80:fb: ee:fa:fe:5a:dd:d8:d9:97:39:2a:16:0c:22:7c:f9: aa:6f:74:02:1e:1d:ab:de:d7:6f:be:ba:7c:27:ce: 64:0d:20:29:b0:e4:8f:20:07:33:6b:9a:13:e7:85: 71:25:2b:2b:e6:11:ad:49:70:cf:2d:6e:53:08:9a: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:9C:16:18:4B:5D:DC:D6:40:20:5D:5F:A4:F9:7F:80:FE:A3:E6 X509v3 Authority Key Identifier: keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:77:e6:16:86:9d:6b:f9:73:27:83:a0:bc:7e:9c:b9:e4:c3: dd:a0:b4:7c:65:3d:09:78:e0:9e:a1:b1:5b:6a:c0:16:78:94: fb:b5:fd:d7:45:70:cb:43:a8:63:06:1c:f2:de:b9:8e:bf:a9: 3d:66:80:7c:96:91:7c:60:2d:08:37:7b:e9:52:38:c5:cf:04: de:4d:b5:83:11:77:1e:9c:cf:6a:25:a4:de:fb:e9:8b:e7:03: e4:d4:15:67:4a:d3:45:f1:22:7d:b4:86:a3:fe:f1:49:73:0e: 28:e6:5f:71:f2:d8:e0:22:3b:51:69:c0:e5:0d:c7:51:74:5e: ea:ed:db:c1:08:82:96:ae:5a:fe:09:2d:0e:82:b9:08:48:ef: fe:40:c6:db:a4:88:3c:df:5f:1b:97:ad:d8:ac:3a:9b:6c:a0: 3f:a7:78:19:8b:5c:62:18:af:4a:26:a0:f2:a7:dc:66:3a:5a: 38:eb:23:ea:f6:87:dc:68:6b:69:84:a5:e0:09:fc:88:fc:30: 71:a6:88:16:88:93:b1:8a:38:37:19:47:74:64:9e:b2:b7:dd: 7a:a1:35:d7:8b:b2:ab:23:54:86:7e:a0:26:93:78:77:03:ac: 2a:8f:02:90:5d:cb:6b:38:76:cf:21:03:29:6a:bf:0b:56:6c: c5:70:37:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvyGC9tnKHGYGgvfmd5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5 YjFjZDkwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD EyhhODgyOWMxNjE4NGI1ZGRjZDY0MDIwNWQ1ZmE0Zjk3ZjgwZmVhM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7G4nQvUKLZzyZqgBy7uhshiuMo0 IVDvvxTE9CubleogFC5izUv0J5ouSkBYZsrc5g8DWOzba9fN1EErkStoYdf8RsZh hq8FH/htR5fMQA69NuecZ7qXxfdFi3A4KuUBtfqn9px5mfa52s5icAH1xSYM71NR Fl4VeqAnU6qG7vURBLlB+84JcTnK7/vUty5Vx4ufpSNHTDP1yniKsMnghS9rTXc8 lEhY46cgnkdR4qVThuM99lDD0WKQKbyY4lGlgPvu+v5a3djZlzkqFgwifPmqb3QC Hh2r3tdvvrp8J85kDSApsOSPIAcza5oT54VxJSsr5hGtSXDPLW5TCJpRMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiCnBYYS13c1kAgXV+k+X+A/qPmMB8GA1UdIwQY MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt NmZiNGJlZTk5ZTYzLzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHfmFoad a/lzJ4OgvH6cueTD3aC0fGU9CXjgnqGxW2rAFniU+7X910Vwy0OoYwYc8t65jr+p PWaAfJaRfGAtCDd76VI4xc8E3k21gxF3HpzPaiWk3vvpi+cD5NQVZ0rTRfEifbSG o/7xSXMOKOZfcfLY4CI7UWnA5Q3HUXRe6u3bwQiClq5a/gktDoK5CEjv/kDG26SI PN9fG5et2Kw6m2ygP6d4GYtcYhivSiag8qfcZjpaOOsj6vaH3GhraYSl4An8iPww caaIFoiTsYo4NxlHdGSesrfdeqE114uyqyNUhn6gJpN4dwOsKo8CkF3Lazh2zyED KWq/C1ZsxXA34A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:57 2025 by rpki-client