This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json) Hash identifier: nFDlJb+7LASmicMj1COUuwa2+arOybUNq2dT127cTVo= Subject key identifier: 8F:1F:8C:AD:41:C1:3E:09:75:CA:1B:64:BA:E7:97:9F:C3:C1:43:FA Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6 Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6 Certificate serial: 019B5A88EAD59DA82E168E15A3B37C0442E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 12:01:20 +0000 Manifest this update: Fri 26 Dec 2025 12:01:20 +0000 Manifest next update: Sat 27 Dec 2025 12:01:20 +0000 Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: 36WPvxU0j72TDNCHF8Y5Ri/VZrbLMvSCI+fG6VbkXs0=) 2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ea:d5:9d:a8:2e:16:8e:15:a3:b3:7c:04:42:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6 Validity Not Before: Dec 26 12:01:20 2025 GMT Not After : Dec 27 12:01:20 2025 GMT Subject: CN=8f1f8cad41c13e0975ca1b64bae7979fc3c143fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:43:18:f2:07:44:a1:4e:bb:6c:74:3d:f0: 9b:a1:cd:f0:89:2e:2b:9b:4d:75:b3:0c:36:87:d1: 3e:f5:d3:e2:4f:c4:54:65:43:3d:2e:27:d9:c5:5a: 55:67:16:cd:7a:a2:d9:9b:bf:52:01:86:4e:f0:b5: 6b:01:01:2e:47:60:c3:99:04:c3:5b:61:68:11:3a: 2b:2e:83:30:28:97:6b:55:1e:4f:94:5d:5d:ea:2b: cd:72:ff:ec:3c:2b:b6:d0:82:98:44:9e:65:25:0d: 88:7b:d5:64:0f:28:4e:2f:4a:f6:5d:fa:4c:c8:94: 6c:90:3e:6e:6e:f0:02:4d:ab:9b:e1:d7:75:24:c0: 51:b9:5e:90:04:65:1d:9c:70:33:65:da:c3:2a:e5: aa:44:98:28:5f:3f:1c:c0:3b:7b:41:fb:8b:b3:6e: 52:ee:61:04:8a:03:12:9a:5f:dd:af:cd:1b:0b:0e: 3c:04:e6:0a:40:f9:00:84:6d:21:d1:23:1f:61:f1: 06:59:11:59:2d:f4:24:99:73:5c:77:8f:b9:50:74: f3:59:13:9c:fb:72:29:c0:25:e2:0d:98:4b:08:6d: 47:7a:1b:8b:db:8a:ee:b8:65:54:a1:b8:8f:74:71: 25:98:e3:8e:d3:19:14:f3:83:b8:3b:fe:f7:ee:a3: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1F:8C:AD:41:C1:3E:09:75:CA:1B:64:BA:E7:97:9F:C3:C1:43:FA X509v3 Authority Key Identifier: keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:9f:13:9c:9a:d3:6c:e5:11:6d:da:c3:95:60:2e:5c:6d: de:4e:a2:92:5b:b5:e0:06:96:b6:f3:a6:39:c7:72:d9:ab:53: d0:a7:58:f8:d6:a4:45:82:9b:ba:18:04:4f:32:d1:82:d0:db: 58:b4:78:39:f5:1e:75:15:37:91:1c:00:19:d3:06:a6:c8:04: c2:83:5f:56:ff:2a:6f:99:9e:75:32:bb:9c:e0:3f:c7:83:08: 5a:63:83:3e:f6:69:98:93:a3:e3:39:0c:b2:ac:09:68:0f:41: b3:3f:1f:e5:a8:50:c3:7e:44:0b:12:84:b2:d8:1b:f0:44:3c: 24:7c:9c:68:27:e4:58:9c:6a:39:d1:19:2a:61:db:43:17:dc: d1:b8:3d:ea:8b:ee:cb:3b:91:a2:49:77:e0:a4:1e:f9:13:bc: ba:39:46:57:6b:56:dc:e7:ef:21:37:06:13:42:b8:ac:e9:80: 28:3b:7c:6a:c5:1b:d9:62:57:c9:22:89:3a:0e:f0:bc:21:e9: d4:14:ec:1b:94:97:1f:71:d0:3b:9d:82:f6:c8:91:a9:43:82: 1b:a0:0e:f1:67:3c:44:33:ce:0f:e9:10:5f:5d:f2:c5:8c:27: cd:ef:7a:c5:53:70:56:f6:cc:fd:80:7b:95:9f:49:ac:31:30: 5e:d2:bb:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOrVnaguFo4Vo7N8BELoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjhjYzdmMDZlYTA5YTI0N2Y2YmU5ZTllNTc0YzRmMzdi NGU5YjYwHhcNMjUxMjI2MTIwMTIwWhcNMjUxMjI3MTIwMTIwWjAzMTEwLwYDVQQD Eyg4ZjFmOGNhZDQxYzEzZTA5NzVjYTFiNjRiYWU3OTc5ZmMzYzE0M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GJDGPIHRKFOu2x0PfCboc3wiS4r m011sww2h9E+9dPiT8RUZUM9LifZxVpVZxbNeqLZm79SAYZO8LVrAQEuR2DDmQTD W2FoETorLoMwKJdrVR5PlF1d6ivNcv/sPCu20IKYRJ5lJQ2Ie9VkDyhOL0r2XfpM yJRskD5ubvACTaub4dd1JMBRuV6QBGUdnHAzZdrDKuWqRJgoXz8cwDt7QfuLs25S 7mEEigMSml/dr80bCw48BOYKQPkAhG0h0SMfYfEGWRFZLfQkmXNcd4+5UHTzWROc +3IpwCXiDZhLCG1HehuL24ruuGVUobiPdHElmOOO0xkU84O4O/737qPoyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8fjK1BwT4JdcobZLrnl5/DwUP6MB8GA1UdIwQY MBaAFCYozH8G6gmiR/a+np5XTE83tOm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWIt MTJhMjk3NjFlMDk0LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWItMTJhMjk3NjFlMDk0 LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJqfE5ya 02zlEW3aw5VgLlxt3k6iklu14AaWtvOmOcdy2atT0KdY+NakRYKbuhgETzLRgtDb WLR4OfUedRU3kRwAGdMGpsgEwoNfVv8qb5medTK7nOA/x4MIWmODPvZpmJOj4zkM sqwJaA9Bsz8f5ahQw35ECxKEstgb8EQ8JHycaCfkWJxqOdEZKmHbQxfc0bg96ovu yzuRokl34KQe+RO8ujlGV2tW3OfvITcGE0K4rOmAKDt8asUb2WJXySKJOg7wvCHp 1BTsG5SXH3HQO52C9siRqUOCG6AO8Wc8RDPOD+kQX13yxYwnze96xVNwVvbM/YB7 lZ9JrDEwXtK7MA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:17 2025 by rpki-client