This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json) Hash identifier: k7xezImHO/K4lpw8+ANu8mcrdUlYLprg43YqhuqRf1M= Subject key identifier: A3:6F:D1:54:CE:DD:DD:BE:32:90:87:A0:E7:8E:2F:27:AB:D7:83:D6 Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a Certificate serial: 019B2219613456841B7093D2AA50C992990E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft Manifest number: 09DE Signing time: Mon 15 Dec 2025 13:00:47 +0000 Manifest this update: Mon 15 Dec 2025 13:00:47 +0000 Manifest next update: Tue 16 Dec 2025 13:00:47 +0000 Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=) 2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 5ZJMgNkvUbpadYbVumhpQQnWQkRY/aELvPBx3wo2LCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:61:34:56:84:1b:70:93:d2:aa:50:c9:92:99:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a Validity Not Before: Dec 15 13:00:47 2025 GMT Not After : Dec 16 13:00:47 2025 GMT Subject: CN=a36fd154ceddddbe329087a0e78e2f27abd783d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:f9:78:d7:29:0c:65:3c:02:58:dc:b0:dc: 44:1d:75:4a:c2:8f:6b:6a:32:f9:2c:dc:75:6b:f5: 7e:31:45:1d:3b:5e:01:8c:d1:aa:19:6e:90:ef:a2: 5a:23:cf:3a:7d:03:fd:f3:63:31:b7:ae:48:92:4a: 96:42:14:68:45:e3:e2:29:83:7e:fe:2c:75:04:cf: 5e:57:8d:eb:c1:75:09:b4:3c:03:21:85:25:52:a7: fa:63:fe:6d:e1:ef:50:ce:d2:b8:ba:83:58:eb:a4: 11:c2:8c:26:da:b9:93:70:64:66:1d:02:cf:7a:ac: 16:ec:99:56:17:0e:ee:ca:1a:3b:8f:2d:01:7e:c0: cd:a8:87:0c:a2:fb:1c:97:d3:79:07:88:03:7a:43: 82:70:a8:91:b5:e7:76:30:92:79:19:55:59:e0:f2: 6a:9c:7b:ef:f2:27:37:bb:1f:52:3a:67:1a:0b:a6: be:48:3b:cd:69:13:c5:7b:a1:27:5e:16:18:3d:b4: c6:06:15:98:8b:b5:96:81:52:a7:a6:46:5f:c4:6a: 56:a8:99:5c:27:34:6e:58:b3:9a:a6:25:99:36:e4: 99:14:7c:62:01:30:3b:7d:34:80:ec:ea:9c:8f:92: ce:01:20:8c:9b:9b:51:0e:4b:d5:4f:7f:19:25:bf: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6F:D1:54:CE:DD:DD:BE:32:90:87:A0:E7:8E:2F:27:AB:D7:83:D6 X509v3 Authority Key Identifier: keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4d:04:8f:91:f0:cd:47:74:5c:4a:96:96:04:5c:87:bc:74: 3b:40:10:8d:60:cc:af:f8:0d:67:44:f2:85:9e:f3:1d:31:5d: 87:0f:89:e1:be:73:5b:da:98:dd:d6:6b:18:19:de:7a:72:9d: 86:45:c3:28:ca:d8:52:2b:91:e6:89:56:7e:b3:9b:91:fd:1d: 82:8d:b9:18:5a:8f:31:b8:32:2d:6b:8c:b6:d6:cc:43:69:f6: 84:b9:59:9e:3b:43:24:e3:dd:61:15:86:01:82:8f:61:e3:a3: ea:c1:c8:39:b3:62:86:57:68:52:e4:7d:a7:16:bd:01:0d:37: cf:8a:22:3f:ee:f7:8a:36:d4:ad:a1:10:ed:e1:2f:ed:71:41: b2:08:21:c4:53:e0:bf:6b:ca:4f:2d:d0:68:0c:00:56:f0:00: 16:b6:35:9c:4a:cd:35:2e:a8:7f:8c:d3:9b:c9:6e:a4:70:82: dc:d8:e2:96:8b:4e:de:d1:05:51:b1:52:40:60:2d:0e:44:9f: c4:af:5f:e6:8f:89:a1:f5:68:2c:8e:eb:d6:16:d0:77:fc:97: 16:1d:c9:d4:08:1b:ef:f8:f5:6b:cd:80:85:82:c5:60:65:aa: 15:81:9f:f2:f0:2f:02:77:e6:f1:5c:ef:e6:0d:9f:f2:6e:05: a2:33:e0:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGWE0VoQbcJPSqlDJkpkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl NDU4MGEwHhcNMjUxMjE1MTMwMDQ3WhcNMjUxMjE2MTMwMDQ3WjAzMTEwLwYDVQQD EyhhMzZmZDE1NGNlZGRkZGJlMzI5MDg3YTBlNzhlMmYyN2FiZDc4M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw35eNcpDGU8AljcsNxEHXVKwo9r ajL5LNx1a/V+MUUdO14BjNGqGW6Q76JaI886fQP982Mxt65IkkqWQhRoRePiKYN+ /ix1BM9eV43rwXUJtDwDIYUlUqf6Y/5t4e9QztK4uoNY66QRwowm2rmTcGRmHQLP eqwW7JlWFw7uyho7jy0BfsDNqIcMovscl9N5B4gDekOCcKiRted2MJJ5GVVZ4PJq nHvv8ic3ux9SOmcaC6a+SDvNaRPFe6EnXhYYPbTGBhWYi7WWgVKnpkZfxGpWqJlc JzRuWLOapiWZNuSZFHxiATA7fTSA7Oqcj5LOASCMm5tRDkvVT38ZJb9dXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNv0VTO3d2+MpCHoOeOLyer14PWMB8GA1UdIwQY MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4 LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ00Ej5Hw zUd0XEqWlgRch7x0O0AQjWDMr/gNZ0TyhZ7zHTFdhw+J4b5zW9qY3dZrGBneenKd hkXDKMrYUiuR5olWfrObkf0dgo25GFqPMbgyLWuMttbMQ2n2hLlZnjtDJOPdYRWG AYKPYeOj6sHIObNihldoUuR9pxa9AQ03z4oiP+73ijbUraEQ7eEv7XFBsgghxFPg v2vKTy3QaAwAVvAAFrY1nErNNS6of4zTm8lupHCC3NjilotO3tEFUbFSQGAtDkSf xK9f5o+JofVoLI7r1hbQd/yXFh3J1Agb7/j1a82AhYLFYGWqFYGf8vAvAnfm8Vzv 5g2f8m4FojPgsw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:20:09 2025 by rpki-client