This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json) Hash identifier: rigtcZ+RZCunzu1kblz3W8Gfwd7p/Kw5NFC+P+4eM7Y= Subject key identifier: C6:F7:F6:99:DB:5A:4D:03:A6:29:D8:FE:DE:01:81:A1:A0:0D:43:45 Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0 Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0 Certificate serial: 019B1EAAEDC3630F93D5F6F69758ED063D31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft Manifest number: 0A2E Signing time: Sun 14 Dec 2025 21:01:16 +0000 Manifest this update: Sun 14 Dec 2025 21:01:16 +0000 Manifest next update: Mon 15 Dec 2025 21:01:16 +0000 Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=) 2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: mnXGaMPcwSqNIFz7tWPL2uymIDoyb3cfyC8hJHJrUzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:ed:c3:63:0f:93:d5:f6:f6:97:58:ed:06:3d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0 Validity Not Before: Dec 14 21:01:16 2025 GMT Not After : Dec 15 21:01:16 2025 GMT Subject: CN=c6f7f699db5a4d03a629d8fede0181a1a00d4345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:df:ba:ae:b8:72:35:75:3d:38:ab:73:37: 8b:d9:28:a6:31:59:fc:02:52:90:3d:7a:1d:7f:69: b0:11:71:3d:bc:3e:a2:82:c0:b6:1d:c2:0d:81:6d: 62:94:40:1b:cc:61:ee:28:b5:85:d7:89:c4:5d:82: 21:10:0f:d2:8c:4a:5e:8c:d3:44:c8:6e:13:9a:d8: f1:81:32:14:69:8f:a8:1e:27:61:c6:6c:ef:32:f9: a5:69:16:6c:90:86:91:de:43:f9:8a:d5:ae:01:72: 20:9a:cc:52:ee:bb:0e:39:eb:24:a5:ed:7b:1c:77: 53:40:eb:31:dd:a5:e5:ef:d0:9b:38:6f:9a:99:76: fb:6f:c1:d5:68:ee:73:58:2d:df:6e:3c:6f:54:5e: f4:5b:ba:ac:6a:4e:0a:0b:db:3b:70:b1:28:93:3d: 95:16:ed:92:15:d7:46:98:37:42:6e:88:0d:cd:ad: b6:12:93:bb:f6:30:eb:da:70:c0:57:62:fe:1f:b3: 54:98:ce:08:6b:64:be:e8:55:6c:be:46:fa:65:6a: 83:5f:8b:29:5b:fa:36:7d:10:51:a9:d7:8e:82:74: 12:78:51:23:b7:99:70:bf:85:01:78:b2:ce:62:a9: 38:a3:56:f5:e7:8c:b7:cb:d7:4a:66:09:8f:73:5b: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:F6:99:DB:5A:4D:03:A6:29:D8:FE:DE:01:81:A1:A0:0D:43:45 X509v3 Authority Key Identifier: keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9a:08:d4:28:a9:52:c0:88:ca:19:a7:c9:ff:27:3f:de:bd: a6:62:a3:60:78:c7:91:1a:c8:43:6b:eb:01:24:7f:58:10:b6: 52:bd:32:cb:e7:5b:9c:8d:f5:52:47:d4:da:42:97:27:55:4e: e9:f2:97:83:58:51:ae:fd:82:b7:13:0d:da:df:58:7d:39:a7: 49:b2:62:ca:43:00:24:d7:79:5d:7c:c5:00:16:8f:d9:fc:fb: b6:73:04:0b:76:82:4a:03:11:1f:75:bc:5a:94:59:d2:c5:03: 4c:09:e1:96:9e:d7:40:46:37:15:35:00:ae:d1:08:85:38:9d: 2b:ec:f0:1b:dc:0b:19:d9:72:51:0a:3b:57:10:98:91:92:66: ce:ec:82:3d:15:32:f3:37:58:da:ce:95:16:a1:52:25:f4:7d: bd:85:a5:04:88:6e:58:84:59:b2:9b:64:33:7a:bf:ea:01:9e: 20:17:d8:f2:93:a1:a6:fa:ba:27:f5:fa:05:20:05:ad:ca:ce: 32:95:b6:19:f6:d2:3f:a4:6c:d1:f5:8c:5f:ba:5d:3b:d6:6a: 2a:ce:b4:f7:da:da:e8:23:39:61:8f:06:55:f8:02:56:55:e9: cc:85:0e:2b:3e:d2:18:a6:d0:6e:d8:04:b5:a0:d3:0b:34:19: 49:f4:2d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsequ3DYw+T1fb2l1jtBj0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2JjOWIzYTc0MjRkOTU3NDI0MjdmOTk2MzNkOWMwYjAw ZjY3ZjAwHhcNMjUxMjE0MjEwMTE2WhcNMjUxMjE1MjEwMTE2WjAzMTEwLwYDVQQD EyhjNmY3ZjY5OWRiNWE0ZDAzYTYyOWQ4ZmVkZTAxODFhMWEwMGQ0MzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvXfuq64cjV1PTirczeL2SimMVn8 AlKQPXodf2mwEXE9vD6igsC2HcINgW1ilEAbzGHuKLWF14nEXYIhEA/SjEpejNNE yG4TmtjxgTIUaY+oHidhxmzvMvmlaRZskIaR3kP5itWuAXIgmsxS7rsOOeskpe17 HHdTQOsx3aXl79CbOG+amXb7b8HVaO5zWC3fbjxvVF70W7qsak4KC9s7cLEokz2V Fu2SFddGmDdCbogNza22EpO79jDr2nDAV2L+H7NUmM4Ia2S+6FVsvkb6ZWqDX4sp W/o2fRBRqdeOgnQSeFEjt5lwv4UBeLLOYqk4o1b154y3y9dKZgmPc1uKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb39pnbWk0DpinY/t4BgaGgDUNFMB8GA1UdIwQY MBaAFI07ybOnQk2VdCQn+ZYz2cCwD2fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAt NWNhNTEwZjY3ZjcyLzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAtNWNhNTEwZjY3Zjcy LzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpoI1Cip UsCIyhmnyf8nP969pmKjYHjHkRrIQ2vrASR/WBC2Ur0yy+dbnI31UkfU2kKXJ1VO 6fKXg1hRrv2CtxMN2t9YfTmnSbJiykMAJNd5XXzFABaP2fz7tnMEC3aCSgMRH3W8 WpRZ0sUDTAnhlp7XQEY3FTUArtEIhTidK+zwG9wLGdlyUQo7VxCYkZJmzuyCPRUy 8zdY2s6VFqFSJfR9vYWlBIhuWIRZsptkM3q/6gGeIBfY8pOhpvq6J/X6BSAFrcrO MpW2GfbSP6Rs0fWMX7pdO9ZqKs6099ra6CM5YY8GVfgCVlXpzIUOKz7SGKbQbtgE taDTCzQZSfQtIg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:24 2025 by rpki-client