This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json) Hash identifier: tahU8MyTSgMEpuW930r+bOShaVnOea+UcFXVaYEm42o= Subject key identifier: 23:6B:C9:25:A2:F2:4F:80:A7:46:44:E3:9B:E0:53:CD:DB:FE:1B:8A Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Certificate serial: 019B59775C9CD99B52E75AC8EB72C74F461A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft Manifest number: 1030 Signing time: Fri 26 Dec 2025 07:02:33 +0000 Manifest this update: Fri 26 Dec 2025 07:02:33 +0000 Manifest next update: Sat 27 Dec 2025 07:02:33 +0000 Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: dRd0T0CY+kdG3eTWFDwoKh6qPh+knsIVkwaRDWVLYJ0=) 2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:5c:9c:d9:9b:52:e7:5a:c8:eb:72:c7:4f:46:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0 Validity Not Before: Dec 26 07:02:33 2025 GMT Not After : Dec 27 07:02:33 2025 GMT Subject: CN=236bc925a2f24f80a74644e39be053cddbfe1b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:52:62:58:72:55:c2:6f:1e:c0:f3:62:c9: 43:f3:0b:ef:a7:ac:3c:d5:fe:79:64:f4:8e:e4:fd: b3:45:ae:ad:81:7d:4d:d3:84:20:b8:67:2e:9e:44: 05:d5:a3:fd:8d:12:bd:7b:1c:09:21:fc:d3:c1:de: c6:23:6c:66:5e:7e:b4:69:57:64:cd:1f:9c:a0:3e: 85:51:41:6d:b2:e7:63:90:e2:ca:56:33:4f:67:d3: ed:5f:be:41:2d:85:32:fa:1b:b3:17:58:89:45:53: 8c:49:44:19:79:24:f6:0d:3b:d2:f0:39:81:59:5b: bf:f4:ec:d4:58:c6:83:27:43:6e:b3:80:28:4d:1b: 7c:19:e0:eb:df:00:f2:15:bc:17:91:5c:d1:7c:7d: 08:57:d8:38:80:dc:85:b1:37:01:26:e2:c9:2d:60: 00:ad:79:93:c4:86:15:8c:15:55:b2:e8:d3:27:e9: 43:2c:02:db:7c:1b:16:b9:3a:02:38:1a:8c:ec:e7: 68:c0:a1:05:21:1d:28:57:5b:b6:36:3e:1d:f6:24: 8f:06:e1:bf:63:d1:d6:56:2f:34:9f:3f:50:11:e0: fb:68:08:d6:21:7e:19:9e:5b:4b:82:91:7e:96:94: 1c:60:e6:55:4c:1e:5b:22:ec:1a:7b:26:93:51:bb: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6B:C9:25:A2:F2:4F:80:A7:46:44:E3:9B:E0:53:CD:DB:FE:1B:8A X509v3 Authority Key Identifier: keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b0:2c:ea:c1:57:fb:d8:39:65:80:81:22:e1:2f:2c:a0:da: 77:17:c5:1d:07:99:fc:c5:27:c9:67:c3:0d:23:2f:c3:4b:67: 92:84:92:e6:df:9c:41:89:77:52:d7:fb:8a:e4:dd:17:30:3b: d1:cd:79:6b:0e:b0:fe:3b:d5:51:b4:61:e1:07:06:ab:1a:36: a7:50:f6:88:88:5a:0b:8a:1a:14:9a:96:f4:96:da:fe:01:a2: 46:fd:0d:0f:10:07:cc:59:91:b2:8a:eb:fb:42:b2:93:51:74: 67:03:ed:97:3e:9a:54:dc:ee:36:6f:04:ba:cd:88:31:33:f3: 3f:1a:f6:74:9a:d6:ee:21:c1:69:25:88:ca:ab:d6:25:0c:c4: 4f:ce:f8:ca:b6:4c:0b:79:4f:76:a3:1d:81:b2:34:7c:df:e8: 72:72:b0:26:e5:43:4b:f1:91:26:f2:ad:3c:4a:b0:03:d3:88: 6a:95:6a:3b:ef:e2:2c:a6:ea:73:62:7e:5f:32:d0:a9:3f:1e: 59:6a:25:65:f8:49:c9:57:1e:ea:bc:51:b7:20:44:7e:e5:88: c5:d2:c5:f0:9a:dc:15:16:7c:b0:7d:fc:9c:a9:2c:30:f1:2c: cc:5a:ee:e2:6d:31:d8:0b:60:56:9e:4a:13:80:22:3a:df:2f: ca:2e:58:2c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZd1yc2ZtS51rI63LHT0YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1 ZjZjZTAwHhcNMjUxMjI2MDcwMjMzWhcNMjUxMjI3MDcwMjMzWjAzMTEwLwYDVQQD EygyMzZiYzkyNWEyZjI0ZjgwYTc0NjQ0ZTM5YmUwNTNjZGRiZmUxYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru9SYlhyVcJvHsDzYslD8wvvp6w8 1f55ZPSO5P2zRa6tgX1N04QguGcunkQF1aP9jRK9exwJIfzTwd7GI2xmXn60aVdk zR+coD6FUUFtsudjkOLKVjNPZ9PtX75BLYUy+huzF1iJRVOMSUQZeST2DTvS8DmB WVu/9OzUWMaDJ0Nus4AoTRt8GeDr3wDyFbwXkVzRfH0IV9g4gNyFsTcBJuLJLWAA rXmTxIYVjBVVsujTJ+lDLALbfBsWuToCOBqM7OdowKEFIR0oV1u2Nj4d9iSPBuG/ Y9HWVi80nz9QEeD7aAjWIX4ZnltLgpF+lpQcYOZVTB5bIuwaeyaTUbtsGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCNrySWi8k+Ap0ZE45vgU83b/huKMB8GA1UdIwQY MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3 LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1 YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7As 6sFX+9g5ZYCBIuEvLKDadxfFHQeZ/MUnyWfDDSMvw0tnkoSS5t+cQYl3Utf7iuTd FzA70c15aw6w/jvVUbRh4QcGqxo2p1D2iIhaC4oaFJqW9Jba/gGiRv0NDxAHzFmR sorr+0Kyk1F0ZwPtlz6aVNzuNm8Eus2IMTPzPxr2dJrW7iHBaSWIyqvWJQzET874 yrZMC3lPdqMdgbI0fN/ocnKwJuVDS/GRJvKtPEqwA9OIapVqO+/iLKbqc2J+XzLQ qT8eWWolZfhJyVce6rxRtyBEfuWIxdLF8JrcFRZ8sH38nKksMPEszFru4m0x2Atg Vp5KE4AiOt8vyi5YLA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:09 2025 by rpki-client