This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json) Hash identifier: 6+d94zkvFNxPr82jVW95vJN8u1prjKj28jA2yUvHWfQ= Subject key identifier: E0:D5:AC:DE:7B:61:97:A4:78:CC:9E:8A:1B:27:7C:DF:7D:F2:03:16 Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Certificate serial: 019B187142CE38C5B15DC40ED92A4B379091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft Manifest number: 038F Signing time: Sat 13 Dec 2025 16:00:34 +0000 Manifest this update: Sat 13 Dec 2025 16:00:34 +0000 Manifest next update: Sun 14 Dec 2025 16:00:34 +0000 Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: camRi9wmv0aVHNJB2lrPgYdhPJhEF5Ff3d//U4ZFDIU=) 2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:42:ce:38:c5:b1:5d:c4:0e:d9:2a:4b:37:90:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Validity Not Before: Dec 13 16:00:34 2025 GMT Not After : Dec 14 16:00:34 2025 GMT Subject: CN=e0d5acde7b6197a478cc9e8a1b277cdf7df20316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:4d:d0:37:52:b1:48:ef:a3:73:90:17:d4: 4e:fd:07:de:f7:8b:66:25:7d:f0:57:de:30:61:d4: b1:35:88:9a:4d:86:f2:38:22:9f:47:a8:a3:fb:21: 99:13:51:e2:4a:52:72:a2:da:c7:b6:37:90:14:cd: 45:69:32:14:4a:e8:68:32:06:6c:7d:d0:6c:47:1e: e1:21:db:ec:07:c1:38:57:03:8b:97:49:df:17:e3: 44:e3:3a:28:05:32:62:6b:7d:3a:56:8a:ef:95:d7: 9a:5d:f0:29:b1:a1:21:0e:88:d3:9b:5e:0f:d6:ab: 7e:50:b8:e2:65:44:48:0f:e9:30:58:53:f3:0b:1b: 0a:de:07:e9:da:ef:ce:a2:44:e1:e1:e2:1d:96:95: ec:7b:9b:22:a0:e2:c9:e1:69:98:d8:79:09:5f:e9: f0:44:7e:0a:0d:ba:f8:b2:4c:9d:d4:a1:23:6d:80: 83:6e:c0:5c:73:4a:26:f7:c1:ef:0b:8e:42:5e:ab: 83:58:aa:e1:3d:0f:8b:47:22:59:02:8b:80:ff:04: e3:5d:99:12:97:94:6b:81:dd:0d:89:1b:47:b1:e1: af:ad:50:62:91:45:90:c6:29:32:72:8c:22:b3:a3: 1d:18:3a:a1:e6:2b:c7:e3:a5:1c:13:d7:ed:16:98: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:AC:DE:7B:61:97:A4:78:CC:9E:8A:1B:27:7C:DF:7D:F2:03:16 X509v3 Authority Key Identifier: keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fc:11:ff:11:ae:2a:be:7c:aa:85:96:d6:b2:7e:22:79:d6: 6a:33:ae:bb:92:55:ec:f0:9f:fe:3b:d7:ba:fa:88:6e:67:f4: 06:0e:b9:e0:f7:11:8b:18:f9:5f:e9:e5:eb:a8:3a:fc:c4:b2: 8b:7e:f9:dc:31:2a:cd:cb:45:8b:19:d8:31:07:c1:20:bc:7b: 17:20:79:96:e1:d1:3d:2a:68:68:25:e6:0e:fb:03:1f:ea:28: 8f:54:00:27:90:e0:95:78:fb:39:ce:5b:85:bf:d0:9f:45:96: ae:a9:af:38:96:81:46:71:58:bd:7e:af:f4:3e:40:ea:30:7d: 79:6a:5b:73:24:95:b6:b9:9c:aa:d9:e5:96:86:a6:c8:62:4f: b1:df:c2:6e:93:3f:0a:d0:3f:54:12:fc:10:62:2c:88:a2:8f: 16:13:94:6c:5e:2e:17:03:77:f0:36:6b:a8:8f:fd:7f:12:f2: 6f:27:02:5d:1a:5a:2d:85:96:93:02:0a:ac:ec:34:ce:c7:84: ca:d0:3a:3f:7e:29:f6:6f:41:27:f9:47:a2:6a:dc:ec:fe:01: 19:6e:a4:04:d1:92:32:88:d9:87:9c:ec:38:d5:ff:54:95:99: bc:a5:eb:7a:17:e1:6d:ca:26:1d:07:94:5a:a9:d7:47:e9:20: 6a:0c:07:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcULOOMWxXcQO2SpLN5CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw YTlkZTgwHhcNMjUxMjEzMTYwMDM0WhcNMjUxMjE0MTYwMDM0WjAzMTEwLwYDVQQD EyhlMGQ1YWNkZTdiNjE5N2E0NzhjYzllOGExYjI3N2NkZjdkZjIwMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRN0DdSsUjvo3OQF9RO/Qfe94tm JX3wV94wYdSxNYiaTYbyOCKfR6ij+yGZE1HiSlJyotrHtjeQFM1FaTIUSuhoMgZs fdBsRx7hIdvsB8E4VwOLl0nfF+NE4zooBTJia306VorvldeaXfApsaEhDojTm14P 1qt+ULjiZURID+kwWFPzCxsK3gfp2u/OokTh4eIdlpXse5sioOLJ4WmY2HkJX+nw RH4KDbr4skyd1KEjbYCDbsBcc0om98HvC45CXquDWKrhPQ+LRyJZAouA/wTjXZkS l5Rrgd0NiRtHseGvrVBikUWQxikycowis6MdGDqh5ivH46UcE9ftFpgVpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODVrN57YZekeMyeihsnfN998gMWMB8GA1UdIwQY MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvwR/xGu Kr58qoWW1rJ+InnWajOuu5JV7PCf/jvXuvqIbmf0Bg654PcRixj5X+nl66g6/MSy i3753DEqzctFixnYMQfBILx7FyB5luHRPSpoaCXmDvsDH+ooj1QAJ5DglXj7Oc5b hb/Qn0WWrqmvOJaBRnFYvX6v9D5A6jB9eWpbcySVtrmcqtnlloamyGJPsd/CbpM/ CtA/VBL8EGIsiKKPFhOUbF4uFwN38DZrqI/9fxLybycCXRpaLYWWkwIKrOw0zseE ytA6P34p9m9BJ/lHomrc7P4BGW6kBNGSMojZh5zsONX/VJWZvKXrehfhbcomHQeU WqnXR+kgagwH/A== -----END CERTIFICATE-----Generated at Sun Dec 14 01:49:59 2025 by rpki-client