This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json) Hash identifier: fD3+2bw6jrVmwLrgCSpNhw11i6LoJEAPOnfqZOLWZ7I= Subject key identifier: 2E:F6:A9:51:29:EB:C0:11:74:9B:D1:A6:DB:C8:BA:52:B5:B4:7C:0A Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Certificate serial: 019AC97B1ACA7F39C0D0FE2A4E9CE061B653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft Manifest number: 16E2 Signing time: Fri 28 Nov 2025 08:01:19 +0000 Manifest this update: Fri 28 Nov 2025 08:01:19 +0000 Manifest next update: Sat 29 Nov 2025 08:01:19 +0000 Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: 60+SwqmWm2eN7OIuDHdxQ9CC8ue66D2YA7Ml7iJbGW0=) 2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:7b:1a:ca:7f:39:c0:d0:fe:2a:4e:9c:e0:61:b6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Validity Not Before: Nov 28 08:01:19 2025 GMT Not After : Nov 29 08:01:19 2025 GMT Subject: CN=2ef6a95129ebc011749bd1a6dbc8ba52b5b47c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:36:9d:bd:7c:5f:e2:5f:aa:8d:1c:13:33: b1:cd:40:31:37:6c:6c:50:69:a1:4f:e7:23:8a:3e: 6b:96:8c:e4:dd:e2:52:99:c7:bb:ac:87:60:0d:d9: c0:00:5e:48:09:ed:a9:16:c8:c0:ba:13:9d:8f:1d: 74:0e:9f:dd:8b:c1:5f:da:6e:56:bf:16:49:5c:c4: 2e:fd:19:ce:76:9b:f6:17:e5:d4:06:b4:ca:f2:b4: ac:3c:6e:d8:6b:ce:bc:10:67:85:09:17:02:65:96: 46:3d:6a:c1:a9:9b:06:86:97:d5:31:78:0a:72:a9: a6:f4:4a:71:3d:3a:0d:00:60:16:64:74:2c:43:47: 39:50:38:a3:f4:25:12:55:6d:d5:dc:f1:19:e5:3b: ba:5c:13:b3:a1:92:74:16:78:50:db:d5:5f:54:ca: f1:0f:eb:30:92:44:f3:e2:cf:ea:97:0c:16:36:7b: 4e:ba:f1:42:1e:30:f2:f2:35:fa:60:93:46:6b:c9: ee:e8:56:de:f1:e7:12:40:56:76:66:e8:e6:15:09: 61:44:8c:9b:b2:fe:8c:99:f6:65:b8:16:c3:7e:d2: 58:37:ae:25:7d:83:15:37:60:07:ef:6a:1c:4d:e3: 6e:a8:aa:20:04:ce:c4:5d:de:f2:00:17:f4:4d:4b: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:A9:51:29:EB:C0:11:74:9B:D1:A6:DB:C8:BA:52:B5:B4:7C:0A X509v3 Authority Key Identifier: keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3a:54:35:77:b9:ff:50:61:1f:69:9b:d3:a2:3e:7e:72:54: db:8e:d5:03:b9:ff:74:4f:32:ec:1e:ab:dd:5e:ab:e4:8c:6e: c6:83:5e:2f:c4:bb:e9:e8:16:65:27:31:85:3b:07:90:05:35: 89:e9:37:66:31:d0:d2:47:eb:8c:88:c0:72:9c:4e:30:6f:3b: a4:a9:a8:56:83:f4:c4:33:6d:9a:ac:86:e1:3b:6b:cb:15:63: c6:5d:8c:4f:82:58:c7:e9:77:bf:c3:aa:cf:a0:ab:3f:10:9d: 75:7a:14:82:52:fb:4b:11:69:72:fb:39:9f:9a:a0:79:62:9b: 02:38:db:55:ce:ef:18:c9:fc:b8:21:f9:32:2f:d3:fe:13:27: 31:94:29:43:4a:4a:94:ad:01:90:99:b3:5e:5f:79:b5:23:29: 9d:37:19:5e:f7:c5:9e:d7:59:6f:8b:54:e4:49:ad:bd:e7:4e: ce:f9:ea:c3:c6:51:6f:2a:03:c1:1f:6b:f6:0b:5b:07:ee:13: da:a7:55:17:89:10:33:c4:bf:5f:9c:12:4a:b8:3b:15:03:8c: 50:6a:04:13:5f:09:40:65:63:8b:8a:68:05:93:bf:f8:22:71: 4d:82:ed:d2:ee:5d:37:72:6c:c5:69:db:92:0c:2b:fb:71:23: b5:33:e7:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJexrKfznA0P4qTpzgYbZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5 NjlkZDUwHhcNMjUxMTI4MDgwMTE5WhcNMjUxMTI5MDgwMTE5WjAzMTEwLwYDVQQD EygyZWY2YTk1MTI5ZWJjMDExNzQ5YmQxYTZkYmM4YmE1MmI1YjQ3YzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjk2nb18X+Jfqo0cEzOxzUAxN2xs UGmhT+cjij5rlozk3eJSmce7rIdgDdnAAF5ICe2pFsjAuhOdjx10Dp/di8Ff2m5W vxZJXMQu/RnOdpv2F+XUBrTK8rSsPG7Ya868EGeFCRcCZZZGPWrBqZsGhpfVMXgK cqmm9EpxPToNAGAWZHQsQ0c5UDij9CUSVW3V3PEZ5Tu6XBOzoZJ0FnhQ29VfVMrx D+swkkTz4s/qlwwWNntOuvFCHjDy8jX6YJNGa8nu6Fbe8ecSQFZ2ZujmFQlhRIyb sv6MmfZluBbDftJYN64lfYMVN2AH72ocTeNuqKogBM7EXd7yABf0TUvw+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC72qVEp68ARdJvRptvIulK1tHwKMB8GA1UdIwQY MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt OTFiZjYxZGQ4NTNmLzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDpUNXe5 /1BhH2mb06I+fnJU247VA7n/dE8y7B6r3V6r5IxuxoNeL8S76egWZScxhTsHkAU1 iek3ZjHQ0kfrjIjAcpxOMG87pKmoVoP0xDNtmqyG4TtryxVjxl2MT4JYx+l3v8Oq z6CrPxCddXoUglL7SxFpcvs5n5qgeWKbAjjbVc7vGMn8uCH5Mi/T/hMnMZQpQ0pK lK0BkJmzXl95tSMpnTcZXvfFntdZb4tU5EmtvedOzvnqw8ZRbyoDwR9r9gtbB+4T 2qdVF4kQM8S/X5wSSrg7FQOMUGoEE18JQGVji4poBZO/+CJxTYLt0u5dN3JsxWnb kgwr+3EjtTPngA== -----END CERTIFICATE-----Generated at Fri Nov 28 14:42:44 2025 by rpki-client