This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json) Hash identifier: Xr7VXxgopDbVp0NlLh11Y/mj5BURHCYuoYI191m5ZW0= Subject key identifier: 5D:E3:7A:81:4A:1E:89:BE:B8:28:AC:3B:CC:10:F1:8A:9F:EE:C0:19 Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f Certificate serial: 019B1BAAE21C20590FB1E067D848AC0C8E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 07:02:22 +0000 Manifest this update: Sun 14 Dec 2025 07:02:22 +0000 Manifest next update: Mon 15 Dec 2025 07:02:22 +0000 Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: k9Gkq1NHNfMlpk5lW2DCiW7SJd68zxJxJ0DWc2xazDM=) 2: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=) 3: ux92dho2cYr-1uH_cggrGiXNZ3c.roa (hash: gSDKdScN6Ai8I+kzsJX0oBNCs37fov6KbILBlfyfoo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:e2:1c:20:59:0f:b1:e0:67:d8:48:ac:0c:8e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f Validity Not Before: Dec 14 07:02:22 2025 GMT Not After : Dec 15 07:02:22 2025 GMT Subject: CN=5de37a814a1e89beb828ac3bcc10f18a9feec019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:2a:c8:77:bb:86:ab:0c:ed:23:80:0d:aa: a9:e9:26:b1:d4:30:d8:2c:01:7e:0b:c7:c9:89:6b: c3:d8:7b:f8:dc:b4:19:ac:2e:3c:06:d6:8b:c3:d2: de:a4:34:e6:78:e2:db:e1:9a:82:6d:c5:4e:8a:7a: a0:69:4f:7c:e6:e9:e0:48:ae:a5:32:0c:e8:49:6d: 81:da:fa:cd:7c:b7:cf:ac:86:e5:0c:2c:02:c7:b9: 92:37:03:54:9c:1f:dc:fb:d2:b3:91:9a:4e:c8:99: fb:3d:7a:35:2d:e6:81:bc:7b:42:6f:6a:6b:ef:b2: 2d:fe:ea:72:87:42:03:6d:e3:c8:74:e6:e1:2b:8d: cb:e2:5f:de:23:07:af:eb:cd:a1:ab:41:f4:31:f8: 84:c7:7d:2d:a5:6d:7c:2b:b0:53:83:62:6d:5e:8f: b0:7d:37:26:27:86:c0:ae:cc:dc:4d:c1:4f:72:15: 7b:e2:35:e1:7e:1d:0b:e1:00:36:3a:c8:f4:d4:71: 51:cd:6e:b9:14:46:17:14:fe:f1:41:8d:5b:86:e8: d0:f8:38:e7:f1:c4:5c:e1:9e:4e:44:10:34:d6:41: cd:cb:ea:ea:d3:50:14:d7:58:42:2d:81:f6:2a:84: 31:01:90:92:87:5c:fe:ba:88:f0:74:c5:e1:ca:cf: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:7A:81:4A:1E:89:BE:B8:28:AC:3B:CC:10:F1:8A:9F:EE:C0:19 X509v3 Authority Key Identifier: keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d2:07:a4:d2:d6:6f:7f:c0:90:23:28:dc:ef:6f:7f:0f:23: 34:4c:60:33:68:48:42:c8:18:35:9a:70:f5:4a:c0:3b:db:a0: b5:1e:d1:2b:02:a3:30:dd:8e:17:8c:7f:5f:17:c7:90:5e:31: 15:d4:97:12:49:e9:b4:06:aa:10:88:2b:83:e7:ab:b1:dd:da: cb:ca:d6:21:9a:c1:27:c2:27:7f:01:e2:d7:a8:bc:f0:e6:10: 19:07:96:c0:36:2d:8e:23:21:aa:a7:3d:17:d6:e0:7c:d2:6a: 9c:3a:33:e2:de:ca:94:26:8f:1e:e5:c4:15:ee:8d:da:9a:fd: 9d:f6:88:bd:7d:87:cc:08:d0:9f:ed:96:97:6b:2e:18:bf:f0: ae:f6:27:2a:20:d8:ae:2b:c9:a6:c9:d5:f2:d6:54:6e:79:81: e2:c4:9c:28:a1:09:9a:e2:a7:5a:91:c2:b5:bd:e9:4c:d7:bd: 0a:12:23:8d:54:73:e0:bf:f5:57:38:84:70:d4:f6:32:05:0c: 0e:93:83:ac:48:e0:82:dd:91:ec:d6:64:c9:75:79:ea:dd:d5: 11:b8:64:ff:27:73:54:e8:29:a2:d2:26:ee:be:45:ff:17:1c: 02:15:bb:60:f9:99:e8:a9:59:0e:db:bd:fd:a7:94:f3:30:db: 59:f4:11:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbquIcIFkPseBn2EisDI5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw ZDU0NGYwHhcNMjUxMjE0MDcwMjIyWhcNMjUxMjE1MDcwMjIyWjAzMTEwLwYDVQQD Eyg1ZGUzN2E4MTRhMWU4OWJlYjgyOGFjM2JjYzEwZjE4YTlmZWVjMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWYqyHe7hqsM7SOADaqp6Sax1DDY LAF+C8fJiWvD2Hv43LQZrC48BtaLw9LepDTmeOLb4ZqCbcVOinqgaU985ungSK6l MgzoSW2B2vrNfLfPrIblDCwCx7mSNwNUnB/c+9KzkZpOyJn7PXo1LeaBvHtCb2pr 77It/upyh0IDbePIdObhK43L4l/eIwev682hq0H0MfiEx30tpW18K7BTg2JtXo+w fTcmJ4bArszcTcFPchV74jXhfh0L4QA2Osj01HFRzW65FEYXFP7xQY1bhujQ+Djn 8cRc4Z5ORBA01kHNy+rq01AU11hCLYH2KoQxAZCSh1z+uojwdMXhys+9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3jeoFKHom+uCisO8wQ8Yqf7sAZMB8GA1UdIwQY MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0 LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdIHpNLW b3/AkCMo3O9vfw8jNExgM2hIQsgYNZpw9UrAO9ugtR7RKwKjMN2OF4x/XxfHkF4x FdSXEknptAaqEIgrg+ersd3ay8rWIZrBJ8InfwHi16i88OYQGQeWwDYtjiMhqqc9 F9bgfNJqnDoz4t7KlCaPHuXEFe6N2pr9nfaIvX2HzAjQn+2Wl2suGL/wrvYnKiDY rivJpsnV8tZUbnmB4sScKKEJmuKnWpHCtb3pTNe9ChIjjVRz4L/1VziEcNT2MgUM DpODrEjggt2R7NZkyXV56t3VEbhk/ydzVOgpotIm7r5F/xccAhW7YPmZ6KlZDtu9 /aeU8zDbWfQRsw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:47:42 2025 by rpki-client