This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json) Hash identifier: +6F237B5KDTkR9MaUcPjEO+4kkE4f1H3GcAy/eINNOc= Subject key identifier: 47:10:AF:53:FA:70:1B:A8:D0:58:9C:44:A1:5D:10:57:F2:51:FE:A4 Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Certificate serial: 019B0E92D7ABCFA60DFDB277AB155023445A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft Manifest number: 0A31 Signing time: Thu 11 Dec 2025 18:01:02 +0000 Manifest this update: Thu 11 Dec 2025 18:01:02 +0000 Manifest next update: Fri 12 Dec 2025 18:01:02 +0000 Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=) 2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: ocd5RNZArZ1d50D8dYEl3eREqflX4k628Rpdxe17imY=) 3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:d7:ab:cf:a6:0d:fd:b2:77:ab:15:50:23:44:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944 Validity Not Before: Dec 11 18:01:02 2025 GMT Not After : Dec 12 18:01:02 2025 GMT Subject: CN=4710af53fa701ba8d0589c44a15d1057f251fea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:53:39:2e:76:ea:0d:b8:0b:99:1c:e9:80: 05:74:07:58:30:c7:41:cd:35:23:42:a2:f9:b7:08: 45:35:88:9c:00:0a:83:6c:95:04:0c:45:cb:45:09: cb:00:9d:51:27:58:91:c3:42:53:a8:b1:70:5c:7a: 06:68:66:f2:9b:69:ee:99:e0:42:54:53:ef:ce:cb: 49:bf:b5:2c:a2:e0:de:65:66:08:e9:bc:2a:ef:75: 70:73:dd:dd:1a:c8:ff:54:1b:9f:d8:b3:8a:c0:73: 2b:22:d3:19:79:5f:58:94:f5:3b:1a:89:14:db:16: 55:03:26:66:e7:c7:cc:9e:7f:8a:ae:c6:4f:e6:02: 51:0f:d4:cc:32:5e:65:c3:e1:98:6b:88:47:47:21: 14:aa:d1:05:7e:eb:d6:cf:c7:3c:c0:14:83:a5:7e: d9:2a:97:ee:03:7f:d8:6c:72:3e:d6:50:a8:09:37: cd:ef:bc:5f:86:2a:39:ed:7d:f6:a1:02:3b:95:5a: ab:2a:36:28:4e:1d:38:24:83:ee:f4:56:2b:ea:38: f3:77:62:8f:db:48:cc:cd:28:5a:c6:47:28:df:3a: 4d:85:17:2f:c6:e8:54:ac:b6:3f:2c:94:8b:9b:38: 90:ee:39:30:e5:37:87:5f:8b:02:93:9a:56:1a:87: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:AF:53:FA:70:1B:A8:D0:58:9C:44:A1:5D:10:57:F2:51:FE:A4 X509v3 Authority Key Identifier: keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:cd:92:b3:ab:c2:72:01:27:85:fc:22:0c:77:c4:0d:65: a7:c7:fc:93:f1:ae:bc:3f:c9:84:08:97:e8:4e:80:6c:df:38: 94:2e:bf:ec:8b:fc:17:a7:08:77:91:96:98:81:2e:a2:02:61: 9f:32:b2:45:a2:6d:00:e5:67:c3:91:36:b6:a4:05:ea:9f:be: 25:2e:7d:3c:b8:ae:33:31:77:f9:f2:45:ec:22:0d:f4:ed:41: 2f:3f:cf:2f:fe:42:5f:fc:c0:50:97:b3:e5:79:77:26:62:28: 8a:e8:d5:0b:da:7b:11:5e:6d:1a:ed:dd:9c:01:35:2d:e2:0f: 1f:67:45:92:ab:b1:25:13:35:37:24:e1:ae:21:6a:1a:4f:a3: 18:a7:ea:fb:02:c7:b0:d0:cd:80:e5:07:dc:73:e6:2f:74:76: 91:07:c3:76:5f:3c:7b:ea:49:bc:3b:60:9e:57:30:eb:a8:79: a8:cb:ff:9f:87:20:1a:6e:05:3d:09:65:c1:e5:2b:60:fc:e5: 50:1e:a3:6f:8f:84:7b:d1:f4:67:92:9d:d5:42:fb:8f:8c:ab: 2e:41:9b:8c:b6:b1:71:0a:f5:47:8d:04:30:3b:61:fa:fe:81: 91:c9:7d:19:a3:4d:d4:62:a8:53:49:87:a0:93:3c:e7:8c:6a: cd:54:07:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkterz6YN/bJ3qxVQI0RaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2 NzQ5NDQwHhcNMjUxMjExMTgwMTAyWhcNMjUxMjEyMTgwMTAyWjAzMTEwLwYDVQQD Eyg0NzEwYWY1M2ZhNzAxYmE4ZDA1ODljNDRhMTVkMTA1N2YyNTFmZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBVTOS526g24C5kc6YAFdAdYMMdB zTUjQqL5twhFNYicAAqDbJUEDEXLRQnLAJ1RJ1iRw0JTqLFwXHoGaGbym2numeBC VFPvzstJv7UsouDeZWYI6bwq73Vwc93dGsj/VBuf2LOKwHMrItMZeV9YlPU7GokU 2xZVAyZm58fMnn+KrsZP5gJRD9TMMl5lw+GYa4hHRyEUqtEFfuvWz8c8wBSDpX7Z KpfuA3/YbHI+1lCoCTfN77xfhio57X32oQI7lVqrKjYoTh04JIPu9FYr6jjzd2KP 20jMzShaxkco3zpNhRcvxuhUrLY/LJSLmziQ7jkw5TeHX4sCk5pWGoc57wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcQr1P6cBuo0FicRKFdEFfyUf6kMB8GA1UdIwQY MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsvNkrOr wnIBJ4X8Igx3xA1lp8f8k/GuvD/JhAiX6E6AbN84lC6/7Iv8F6cId5GWmIEuogJh nzKyRaJtAOVnw5E2tqQF6p++JS59PLiuMzF3+fJF7CIN9O1BLz/PL/5CX/zAUJez 5Xl3JmIoiujVC9p7EV5tGu3dnAE1LeIPH2dFkquxJRM1NyThriFqGk+jGKfq+wLH sNDNgOUH3HPmL3R2kQfDdl88e+pJvDtgnlcw66h5qMv/n4cgGm4FPQllweUrYPzl UB6jb4+Ee9H0Z5Kd1UL7j4yrLkGbjLaxcQr1R40EMDth+v6Bkcl9GaNN1GKoU0mH oJM854xqzVQHfA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:12:17 2025 by rpki-client