This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json) Hash identifier: gYWrpZ5GNNtS4rOWmxiHKO+qOBeT14x61uU0kNtWGFU= Subject key identifier: 58:48:9C:83:42:74:DB:FF:A7:24:82:8B:0E:B8:22:96:14:F3:2A:6C Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f Certificate serial: 019B5A88661B91BC78747CE3DD981C1CFC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft Manifest number: 9C Signing time: Fri 26 Dec 2025 12:00:46 +0000 Manifest this update: Fri 26 Dec 2025 12:00:46 +0000 Manifest next update: Sat 27 Dec 2025 12:00:46 +0000 Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: M2FTmjWtGLQypwnLqvIC4ydYAst/wBxN8oltdakoZe0=) 2: ovh4JK4_mutpHw8DXKARJ3mLIw8.roa (hash: ury01WLPPQeenF3FjQFrwtA6zumz0Gk0JVx72uoV110=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:66:1b:91:bc:78:74:7c:e3:dd:98:1c:1c:fc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f Validity Not Before: Dec 26 12:00:46 2025 GMT Not After : Dec 27 12:00:46 2025 GMT Subject: CN=58489c834274dbffa724828b0eb8229614f32a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:40:7e:d1:51:94:65:0f:97:29:56:a4:1d: a0:89:e8:da:31:f4:67:89:92:21:07:1c:b9:49:13: ab:91:8e:ff:e6:61:20:07:99:48:46:fb:b8:e1:be: 42:d8:be:47:0b:92:33:94:f9:f0:6b:3d:0c:b4:aa: 0e:0c:91:77:60:9a:56:bc:e4:e6:d8:89:e5:e4:1e: 82:44:b8:5d:6f:2c:fc:f1:9a:21:d9:a1:62:9f:ec: cc:c9:b0:18:e5:ec:b2:96:4c:b0:5a:54:e2:ff:59: a4:e8:87:9e:3f:3c:b8:6b:b6:96:87:32:c4:9c:86: c5:f3:0a:a0:11:d6:31:f9:56:8b:fa:3c:81:41:bd: 0f:25:43:3f:0c:e4:a4:b2:8e:8c:85:c9:b4:f9:a5: d8:6c:ba:e2:a3:9b:a7:9c:c3:6e:b1:47:bf:43:70: 2e:3c:8a:ce:95:03:fb:42:66:3d:d2:e4:6c:cd:d2: b8:c6:6c:d8:9d:a8:04:ef:37:60:f8:b3:93:cf:5f: e7:e0:ea:29:79:44:4e:a0:49:74:3b:a6:c6:10:c0: 85:6d:02:98:17:5a:be:3f:24:d8:41:3a:ba:69:60: f1:84:03:9b:1c:73:2d:43:b6:1b:f0:77:49:1a:91: 2b:12:fc:e0:d8:9c:99:9e:ac:4a:0a:83:b9:42:bf: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:48:9C:83:42:74:DB:FF:A7:24:82:8B:0E:B8:22:96:14:F3:2A:6C X509v3 Authority Key Identifier: keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:93:88:50:4d:a6:78:7c:cf:9a:09:8a:78:c3:69:35:09: a0:d4:b9:e4:03:da:93:46:88:f0:d0:13:ee:2e:18:a1:21:bd: 15:88:50:38:0f:e1:0a:de:34:43:4f:2f:eb:f3:57:9b:bb:0f: 55:26:23:a7:f2:87:e9:af:5d:e1:cd:26:f1:e3:37:80:ec:ec: f2:74:59:1f:4f:3a:05:42:f4:e7:cf:53:bd:94:bc:d3:bc:99: 25:7c:95:ef:4f:3c:c9:31:12:8d:31:3f:3f:b2:24:55:3b:ba: 67:1d:db:6c:80:23:f9:db:01:10:30:2a:69:67:4a:d8:03:26: 8b:09:ec:48:d8:73:40:93:f5:23:3f:96:e4:75:33:47:ff:ca: 69:b8:91:3d:0b:f5:15:54:cd:3b:9c:03:b5:66:da:7e:a7:33: f8:b1:ea:74:6c:c9:c9:eb:46:c2:a9:f1:3b:26:cf:b7:dd:43: d5:cd:c8:ff:c3:3b:cb:86:40:d0:48:fb:ed:e9:94:2a:af:20: 9c:bb:52:d0:b6:67:62:6f:af:a5:8d:5e:35:4f:98:ef:4f:64: 11:d8:6e:66:8b:4e:c4:34:67:de:30:6d:d4:ad:f3:67:d3:58: d4:68:82:34:7d:19:2f:2b:35:3c:b7:fb:08:08:2e:10:a9:b3: fa:1e:3c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGYbkbx4dHzj3ZgcHPw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjNiZDEyMzEwYTkxMjMzMTYwZjAxMTc4NmE2MTEwMzBm MGZhNWYwHhcNMjUxMjI2MTIwMDQ2WhcNMjUxMjI3MTIwMDQ2WjAzMTEwLwYDVQQD Eyg1ODQ4OWM4MzQyNzRkYmZmYTcyNDgyOGIwZWI4MjI5NjE0ZjMyYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+VAftFRlGUPlylWpB2giejaMfRn iZIhBxy5SROrkY7/5mEgB5lIRvu44b5C2L5HC5IzlPnwaz0MtKoODJF3YJpWvOTm 2Inl5B6CRLhdbyz88Zoh2aFin+zMybAY5eyylkywWlTi/1mk6IeePzy4a7aWhzLE nIbF8wqgEdYx+VaL+jyBQb0PJUM/DOSkso6Mhcm0+aXYbLrio5unnMNusUe/Q3Au PIrOlQP7QmY90uRszdK4xmzYnagE7zdg+LOTz1/n4OopeUROoEl0O6bGEMCFbQKY F1q+PyTYQTq6aWDxhAObHHMtQ7Yb8HdJGpErEvzg2JyZnqxKCoO5Qr9j3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhInINCdNv/pySCiw64IpYU8ypsMB8GA1UdIwQY MBaAFI0jvRIxCpEjMWDwEXhqYRAw8PpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEt NDk4YjlkNGY3NTdlLzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEtNDk4YjlkNGY3NTdl LzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYyTiFBN pnh8z5oJinjDaTUJoNS55APak0aI8NAT7i4YoSG9FYhQOA/hCt40Q08v6/NXm7sP VSYjp/KH6a9d4c0m8eM3gOzs8nRZH086BUL0589TvZS807yZJXyV7088yTESjTE/ P7IkVTu6Zx3bbIAj+dsBEDAqaWdK2AMmiwnsSNhzQJP1Iz+W5HUzR//KabiRPQv1 FVTNO5wDtWbafqcz+LHqdGzJyetGwqnxOybPt91D1c3I/8M7y4ZA0Ej77emUKq8g nLtS0LZnYm+vpY1eNU+Y709kEdhuZotOxDRn3jBt1K3zZ9NY1GiCNH0ZLys1PLf7 CAguEKmz+h48wQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client