This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json) Hash identifier: jhN09GgXWclZ9GdJQrUB5m3gd7hJOpZIjkb80uIkzos= Subject key identifier: 14:B7:57:DF:58:E4:47:A1:6B:55:DE:48:95:EA:5D:11:B0:6D:A0:E4 Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Certificate serial: 019B59E3EE665F24FA4551A3F7D2579F61F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft Manifest number: DB Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: 3VOhx7EPavZD3WHtRFtFs4XKMu9xfI6SxOLnUhB2n/w=) 2: z-MXjyMeqnX_NpzieD8tASjlAeQ.roa (hash: 1ZP6YNbM06t/s4yBjd4f2/fgSt5y8HV5ipSLGrndupQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ee:66:5f:24:fa:45:51:a3:f7:d2:57:9f:61:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=14b757df58e447a16b55de4895ea5d11b06da0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:54:d4:2f:45:04:d5:ec:c0:3b:81:8e:e5: 32:3a:f9:5e:ae:11:1f:81:25:ab:6d:fb:f4:da:26: 34:40:c1:98:34:6b:b4:7e:2c:12:f4:3b:20:ee:91: 78:80:32:bf:b9:31:c7:f2:14:00:ae:fb:63:d0:13: 54:fd:45:e7:16:cf:20:5f:9a:fd:4d:c9:b3:4c:d3: 18:90:8a:ac:dd:d9:93:29:9f:fd:ef:33:85:8a:1e: 61:8d:24:94:f5:3a:8d:7f:e1:10:b0:a8:40:f3:8c: fb:5b:d2:33:7d:14:c2:e2:ff:0d:fa:f2:e2:95:b9: f8:59:85:81:d8:91:ba:74:82:cf:e1:4d:98:32:ea: 18:2c:48:c5:0b:d1:c9:4e:e4:25:f8:a5:89:3d:60: 33:da:ed:57:be:86:e1:64:02:f8:22:59:b6:76:7f: 38:f0:09:86:d3:b2:56:ff:d9:57:9e:fc:1b:2b:45: f9:41:69:76:38:1e:ce:92:f4:27:2d:c6:32:78:10: 14:35:43:0e:3c:26:c8:5f:a8:78:02:57:ac:1a:31: c4:7b:b9:cf:87:c3:1b:9a:02:c6:90:2f:82:61:aa: c0:2a:85:34:a2:fd:92:a9:80:b1:cf:ae:a3:19:4c: bc:9b:2f:59:b8:ab:0a:69:51:b0:9b:ae:76:54:f6: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:57:DF:58:E4:47:A1:6B:55:DE:48:95:EA:5D:11:B0:6D:A0:E4 X509v3 Authority Key Identifier: keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1e:a5:45:c6:c5:80:6a:8d:0a:1a:2c:ff:c1:63:7d:79:6e: 9a:af:53:44:2e:67:cb:d7:17:28:4f:0f:53:34:e7:3d:76:64: 6b:1f:bc:6f:62:b3:e1:96:08:64:4c:9f:c2:c8:dd:ce:34:30: c8:02:35:09:13:4e:52:ab:36:3c:6a:de:26:bb:af:38:83:2a: 19:c6:ed:d2:24:10:55:76:cb:71:de:25:4a:29:cb:7b:30:c5: 29:b6:cb:be:6e:09:f2:57:c5:4c:79:15:06:7b:58:c8:56:fa: 20:9e:d9:96:56:01:12:7d:74:42:0d:06:b3:58:b0:c8:db:8e: 65:4b:23:e4:27:a9:c1:ae:c0:d2:ab:ad:49:ec:da:a7:61:9f: 9e:31:47:ed:a6:98:c4:d2:2a:db:7b:a5:b6:70:00:3d:f8:6f: d5:a3:6a:e3:9a:5d:ee:f4:f3:d2:85:20:a4:b4:5b:50:66:7b: b2:2b:60:69:3b:64:cc:e1:06:25:3a:03:60:4d:61:c3:e6:ab: 5c:83:a2:da:79:47:ca:79:ab:d9:3d:cd:cf:af:d0:9c:cd:09: fc:2b:f8:f8:e3:6a:34:47:54:c6:bd:48:b6:f5:24:e6:22:65: 00:f6:c9:d0:9d:a6:58:ab:1c:34:02:e4:d8:d7:db:65:dc:e3: f2:ee:e5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+5mXyT6RVGj99JXn2HwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi ZmRkNGQwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD EygxNGI3NTdkZjU4ZTQ0N2ExNmI1NWRlNDg5NWVhNWQxMWIwNmRhMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnpU1C9FBNXswDuBjuUyOvlerhEf gSWrbfv02iY0QMGYNGu0fiwS9Dsg7pF4gDK/uTHH8hQArvtj0BNU/UXnFs8gX5r9 TcmzTNMYkIqs3dmTKZ/97zOFih5hjSSU9TqNf+EQsKhA84z7W9IzfRTC4v8N+vLi lbn4WYWB2JG6dILP4U2YMuoYLEjFC9HJTuQl+KWJPWAz2u1XvobhZAL4Ilm2dn84 8AmG07JW/9lXnvwbK0X5QWl2OB7OkvQnLcYyeBAUNUMOPCbIX6h4AlesGjHEe7nP h8MbmgLGkC+CYarAKoU0ov2SqYCxz66jGUy8my9ZuKsKaVGwm652VPbg2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS3V99Y5Eeha1XeSJXqXRGwbaDkMB8GA1UdIwQY MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt ZjMwMjhhZWE5OTc3LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3 LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR6lRcbF gGqNChos/8FjfXlumq9TRC5ny9cXKE8PUzTnPXZkax+8b2Kz4ZYIZEyfwsjdzjQw yAI1CRNOUqs2PGreJruvOIMqGcbt0iQQVXbLcd4lSinLezDFKbbLvm4J8lfFTHkV BntYyFb6IJ7ZllYBEn10Qg0Gs1iwyNuOZUsj5Cepwa7A0qutSezap2GfnjFH7aaY xNIq23ultnAAPfhv1aNq45pd7vTz0oUgpLRbUGZ7sitgaTtkzOEGJToDYE1hw+ar XIOi2nlHynmr2T3Nz6/QnM0J/Cv4+ONqNEdUxr1ItvUk5iJlAPbJ0J2mWKscNALk 2NfbZdzj8u7lJw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:18 2025 by rpki-client