This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json) Hash identifier: DfUKrsg4Q3oidw1qlPLmis+JHWzyT6AaillAf5TFk1c= Subject key identifier: 8E:0E:82:40:91:9E:54:AF:31:63:2A:B3:E5:D3:7F:22:0D:DA:4E:86 Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c Certificate serial: 019B2E8B3AB7DC8DF5313F9A4A939E4F5F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft Manifest number: 1090 Signing time: Wed 17 Dec 2025 23:00:34 +0000 Manifest this update: Wed 17 Dec 2025 23:00:34 +0000 Manifest next update: Thu 18 Dec 2025 23:00:34 +0000 Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=) 2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: hBz/jtbV7Yei26B1Ezq6RqQXK7B5VSQfskq/VwblCmQ=) 3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:3a:b7:dc:8d:f5:31:3f:9a:4a:93:9e:4f:5f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c Validity Not Before: Dec 17 23:00:34 2025 GMT Not After : Dec 18 23:00:34 2025 GMT Subject: CN=8e0e8240919e54af31632ab3e5d37f220dda4e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:2d:f5:99:2a:45:c7:28:c8:52:c4:66:9b: b9:ed:b6:78:22:12:d3:0b:a6:0d:d2:36:c8:79:00: ed:1c:8f:f6:f2:ca:87:6b:f9:73:1c:89:02:84:78: 6b:5b:47:a4:d2:9a:86:68:4f:8e:67:83:20:a3:93: 0b:6e:e6:9e:95:13:0f:ac:6e:36:9d:ed:3a:5f:b6: 8f:26:d3:de:9b:e3:d7:97:b7:bd:e9:a5:49:2a:34: d9:11:e3:a4:f1:79:56:c1:90:13:3f:27:8c:92:6d: 36:0a:6f:61:f0:f5:0a:3d:a7:df:cd:ba:8c:e0:fd: e7:ca:ae:e2:48:15:bb:ed:4f:2f:f6:58:80:ac:12: 41:45:33:2d:77:62:c4:b9:f2:9c:87:9d:b9:ae:78: e5:df:66:17:c9:a1:62:d0:18:30:38:f1:39:bc:62: cd:b2:8b:05:13:af:62:5f:cb:cf:0f:c4:5d:d1:10: 9a:d0:92:47:0b:e0:0e:f5:9a:62:20:90:6e:c8:36: d5:2b:0a:49:31:07:ef:41:10:f7:34:d0:e7:f5:39: 9c:2c:9c:a0:2c:e7:d4:88:3f:85:c8:86:d7:f2:64: b4:ff:6a:12:27:1d:7b:fc:9a:97:77:20:22:bf:79: 1f:b4:64:8e:03:32:12:76:c6:33:7d:2b:ad:ae:2d: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:82:40:91:9E:54:AF:31:63:2A:B3:E5:D3:7F:22:0D:DA:4E:86 X509v3 Authority Key Identifier: keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:65:04:e0:bb:8a:a7:5e:fe:cd:2b:54:61:79:71:d4:53:de: 03:66:e3:59:bc:e0:82:16:26:98:2a:f7:bd:b0:27:52:99:bf: d1:88:fd:4d:2b:09:d4:af:1e:75:c1:59:7e:57:2c:40:1f:fe: ea:e7:df:f0:5a:72:a8:aa:5b:55:0c:ce:f4:d0:e9:f4:fb:ad: c4:3f:16:c8:8a:97:d7:32:fb:8b:64:ae:24:51:6a:bf:8b:11: 09:f0:39:68:29:4e:db:0f:7b:2f:83:f6:c1:74:74:d2:55:c1: e2:80:40:7a:a5:6e:49:a8:c1:f6:ca:33:4c:3a:a8:a2:bd:3c: c1:59:b2:5f:ff:ae:70:8c:64:51:47:9c:bd:a5:eb:ce:dc:d8: 7c:f8:f2:78:00:c3:8d:fe:9c:5f:80:66:f0:6f:6b:48:89:e3: ba:42:a8:27:1a:af:56:ca:4c:a0:80:cb:64:52:db:e8:94:3b: eb:52:20:5f:d9:76:67:27:14:bc:2e:40:cf:6e:cb:3c:49:9d: bc:17:91:ec:c7:85:45:a2:30:6d:3f:01:1c:7a:d6:cd:51:e4: 57:c6:90:49:60:a3:a2:dd:05:e4:9e:31:b2:88:5f:f0:54:a4: 28:d0:dc:f7:41:01:9a:d0:c7:a6:52:e4:2a:8e:cb:f1:0b:93: 35:48:24:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuizq33I31MT+aSpOeT180MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1 MjU3OWMwHhcNMjUxMjE3MjMwMDM0WhcNMjUxMjE4MjMwMDM0WjAzMTEwLwYDVQQD Eyg4ZTBlODI0MDkxOWU1NGFmMzE2MzJhYjNlNWQzN2YyMjBkZGE0ZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbkt9ZkqRccoyFLEZpu57bZ4IhLT C6YN0jbIeQDtHI/28sqHa/lzHIkChHhrW0ek0pqGaE+OZ4Mgo5MLbuaelRMPrG42 ne06X7aPJtPem+PXl7e96aVJKjTZEeOk8XlWwZATPyeMkm02Cm9h8PUKPaffzbqM 4P3nyq7iSBW77U8v9liArBJBRTMtd2LEufKch525rnjl32YXyaFi0BgwOPE5vGLN sosFE69iX8vPD8Rd0RCa0JJHC+AO9ZpiIJBuyDbVKwpJMQfvQRD3NNDn9TmcLJyg LOfUiD+FyIbX8mS0/2oSJx17/JqXdyAiv3kftGSOAzISdsYzfSutri2qNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4OgkCRnlSvMWMqs+XTfyIN2k6GMB8GA1UdIwQY MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt MzJmZjMxY2VlYzhiLzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7GUE4LuK p17+zStUYXlx1FPeA2bjWbzgghYmmCr3vbAnUpm/0Yj9TSsJ1K8edcFZflcsQB/+ 6uff8FpyqKpbVQzO9NDp9PutxD8WyIqX1zL7i2SuJFFqv4sRCfA5aClO2w97L4P2 wXR00lXB4oBAeqVuSajB9sozTDqoor08wVmyX/+ucIxkUUecvaXrztzYfPjyeADD jf6cX4Bm8G9rSInjukKoJxqvVspMoIDLZFLb6JQ761IgX9l2ZycUvC5Az27LPEmd vBeR7MeFRaIwbT8BHHrWzVHkV8aQSWCjot0F5J4xsohf8FSkKNDc90EBmtDHplLk Ko7L8QuTNUgkEA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:01:56 2025 by rpki-client