This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json) Hash identifier: pySxCA7ooUDLZkyGdXyPwOhmzAiv9UqQQDV86Arzh4E= Subject key identifier: DA:52:27:45:B6:2F:52:DF:CD:7D:C5:49:70:87:E3:14:DF:CB:04:D9 Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Certificate serial: 019B20CFB78B7FB6DD96117C7E87E04F319C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft Manifest number: 0CAA Signing time: Mon 15 Dec 2025 07:00:42 +0000 Manifest this update: Mon 15 Dec 2025 07:00:42 +0000 Manifest next update: Tue 16 Dec 2025 07:00:42 +0000 Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=) 2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: jjyHBwg2ZoVdTZz+gRtfJ4OjNK7aYm5+em61J1Kay0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:b7:8b:7f:b6:dd:96:11:7c:7e:87:e0:4f:31:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Validity Not Before: Dec 15 07:00:42 2025 GMT Not After : Dec 16 07:00:42 2025 GMT Subject: CN=da522745b62f52dfcd7dc5497087e314dfcb04d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:59:9f:28:60:fd:15:13:60:83:fb:a1:f3:c1: e2:3c:39:2f:6e:4e:82:a7:a0:a5:27:a5:c0:e5:06: 33:1e:f9:49:0f:ec:b7:79:8b:17:82:72:70:54:32: 1f:a0:e7:e9:aa:68:ee:b6:db:61:f3:af:7b:84:c9: d0:05:81:08:c6:22:a4:77:2a:4b:e1:ca:28:92:b8: 8a:e1:69:94:19:52:5b:db:5c:68:4a:3a:97:23:3b: 66:d4:e5:e5:e7:b7:c9:cd:d7:35:28:bc:07:00:50: 2d:8f:cc:00:8e:92:04:d4:9c:a5:82:87:5a:7b:85: 45:e2:30:9b:bf:9b:a7:90:7a:45:00:af:25:ec:dd: 96:d5:39:96:0a:96:34:69:00:74:c6:8e:e6:47:c4: 91:69:22:47:ba:18:4e:25:53:63:72:13:dc:01:fd: 7e:f5:5e:f2:ec:83:44:57:32:5f:2b:b4:ca:3c:dc: c7:04:16:17:35:40:d4:83:23:f1:1a:cb:c7:13:11: f6:3e:22:85:45:28:7a:78:b1:8c:32:2b:32:4f:5e: 53:41:53:cb:09:61:bf:25:6f:cd:11:b2:5a:9c:86: a2:b2:bd:6c:62:ea:37:5f:ff:d3:3e:83:ec:cd:80: 31:9e:22:7c:11:73:f0:01:76:f7:a5:bc:7f:98:40: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:27:45:B6:2F:52:DF:CD:7D:C5:49:70:87:E3:14:DF:CB:04:D9 X509v3 Authority Key Identifier: keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a2:a0:fa:79:bc:02:bc:44:f2:d7:02:09:77:c7:bb:72:4d: 67:e2:6b:98:d9:4d:9f:8b:e9:df:62:b8:23:dc:08:1a:60:e4: 9e:b0:ed:ae:31:92:0d:92:2a:29:be:a9:f7:e0:86:12:cf:f7: 96:1a:e9:be:92:2b:94:b1:04:e0:32:c6:c4:3a:0c:86:74:d8: ea:ff:38:59:72:f6:ca:7e:a0:3b:d4:a1:53:dd:76:e9:38:b1: c4:da:33:03:3d:2f:56:be:d9:77:2e:32:35:4e:9a:da:cd:73: ca:69:94:1b:f1:37:69:41:61:02:8b:40:77:29:71:65:c9:52: 6e:3e:63:6c:1e:16:f4:85:41:ce:bf:5e:cb:ae:84:80:b4:b2: 3a:0f:09:e7:79:f4:89:fc:d8:eb:2a:ab:bc:ab:80:20:d7:0a: d0:23:e5:30:b4:7c:96:84:f9:6c:da:7f:c1:85:e3:92:b0:f0: a2:83:a1:c0:f9:28:be:f7:4e:2c:93:ed:43:81:14:56:ee:a8: c3:63:bf:f3:60:2f:13:25:84:ec:1b:b1:15:4a:01:15:26:e9: b8:95:28:ef:2b:a7:b6:3e:cb:6a:96:e2:39:56:f3:93:82:46: 04:e4:72:c7:64:38:9f:46:a7:1e:86:2c:38:7f:40:ef:ec:39: 7f:94:60:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz7eLf7bdlhF8fofgTzGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm NmE1Y2YwHhcNMjUxMjE1MDcwMDQyWhcNMjUxMjE2MDcwMDQyWjAzMTEwLwYDVQQD EyhkYTUyMjc0NWI2MmY1MmRmY2Q3ZGM1NDk3MDg3ZTMxNGRmY2IwNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FmfKGD9FRNgg/uh88HiPDkvbk6C p6ClJ6XA5QYzHvlJD+y3eYsXgnJwVDIfoOfpqmjuttth8697hMnQBYEIxiKkdypL 4cookriK4WmUGVJb21xoSjqXIztm1OXl57fJzdc1KLwHAFAtj8wAjpIE1Jylgoda e4VF4jCbv5unkHpFAK8l7N2W1TmWCpY0aQB0xo7mR8SRaSJHuhhOJVNjchPcAf1+ 9V7y7INEVzJfK7TKPNzHBBYXNUDUgyPxGsvHExH2PiKFRSh6eLGMMisyT15TQVPL CWG/JW/NEbJanIaisr1sYuo3X//TPoPszYAxniJ8EXPwAXb3pbx/mECJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpSJ0W2L1LfzX3FSXCH4xTfywTZMB8GA1UdIwQY MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKKg+nm8 ArxE8tcCCXfHu3JNZ+JrmNlNn4vp32K4I9wIGmDknrDtrjGSDZIqKb6p9+CGEs/3 lhrpvpIrlLEE4DLGxDoMhnTY6v84WXL2yn6gO9ShU9126TixxNozAz0vVr7Zdy4y NU6a2s1zymmUG/E3aUFhAotAdylxZclSbj5jbB4W9IVBzr9ey66EgLSyOg8J53n0 ifzY6yqrvKuAINcK0CPlMLR8loT5bNp/wYXjkrDwooOhwPkovvdOLJPtQ4EUVu6o w2O/82AvEyWE7BuxFUoBFSbpuJUo7yuntj7LapbiOVbzk4JGBORyx2Q4n0anHoYs OH9A7+w5f5RgYg== -----END CERTIFICATE-----Generated at Mon Dec 15 09:17:45 2025 by rpki-client