This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft File: 1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json) Hash identifier: IGfw5EI8ymxy6YZtBUjFqjGuqSCdJDECDKcmsXhwqQI= Subject key identifier: B0:F4:73:D9:3C:AB:1F:0A:A1:87:9C:5A:C4:6A:25:B2:C0:07:92:0F Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b Certificate serial: 019B0E92BCE47D2C2FF9369FC8A45DBDAF96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft Manifest number: 03D3 Signing time: Thu 11 Dec 2025 18:00:55 +0000 Manifest this update: Thu 11 Dec 2025 18:00:55 +0000 Manifest next update: Fri 12 Dec 2025 18:00:55 +0000 Files and hashes: 1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=) 2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: L8XaH1xOT+TUJe2axRGRgDrz0fchtPwgyFjNzXLdWsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:bc:e4:7d:2c:2f:f9:36:9f:c8:a4:5d:bd:af:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b Validity Not Before: Dec 11 18:00:55 2025 GMT Not After : Dec 12 18:00:55 2025 GMT Subject: CN=b0f473d93cab1f0aa1879c5ac46a25b2c007920f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:54:42:74:5c:ab:1d:b6:91:c8:b4:a1:6b: 8f:ed:69:fa:f2:d5:8a:ea:00:c4:c7:07:99:b9:85: a4:f7:23:15:42:5b:67:2e:ba:fa:13:a7:35:08:6e: 05:8b:ee:8a:0a:1c:0f:da:8d:95:c2:b5:94:31:c4: 6d:15:7b:92:99:35:84:03:ea:63:63:30:d9:e8:ad: 06:26:78:d2:03:c0:38:c5:bb:e4:e2:87:23:ad:e4: 5f:97:6e:f6:1d:fa:45:78:9a:85:4a:7c:b4:2e:d2: a5:29:cc:b3:54:77:33:33:cf:45:dc:3c:15:de:92: 08:b7:97:d5:ea:32:7b:6b:8c:d0:2a:6f:1e:2b:55: be:bf:fd:4c:67:5c:4c:aa:a1:84:ed:80:b7:bf:c4: 5b:2e:45:cc:c7:68:e7:80:67:e2:4b:d6:a5:d5:bf: 4c:66:32:3d:d6:fe:92:3a:e8:cf:e7:57:45:ad:51: 7a:c4:4d:5e:bf:0c:0d:d2:ad:48:ce:47:4f:ab:be: 66:2b:a0:45:46:a8:a8:21:3c:9d:e6:3c:a8:e1:c7: ee:ec:e3:2d:79:06:82:c3:47:de:f4:87:6a:4d:11: 19:fc:b9:ff:97:15:78:48:a2:93:14:df:f0:d5:53: 2e:d2:6b:2d:bf:05:e2:85:41:e3:6f:77:1e:8d:fd: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:73:D9:3C:AB:1F:0A:A1:87:9C:5A:C4:6A:25:B2:C0:07:92:0F X509v3 Authority Key Identifier: keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:22:31:4c:44:44:70:37:42:26:93:f5:ef:24:ad:81:a8:00: dd:42:d4:41:d2:66:f4:38:d1:7f:42:9a:3c:36:a3:ba:1f:af: 5a:f9:c2:a4:d2:36:2f:48:96:52:a0:83:1d:b6:f7:b9:38:4e: 8f:d0:3c:48:cf:9e:41:9a:2a:66:50:7a:6a:e3:58:6d:ea:a6: c2:9c:ad:e3:28:d8:02:6c:41:82:f2:5a:3d:68:b8:1c:ca:e0: 0d:5d:29:1e:c8:2c:c6:46:70:c6:af:a2:c7:78:4a:07:23:fb: d5:2d:6a:4b:67:cc:14:b4:a3:4a:bf:93:8e:63:ee:56:e9:a8: 95:32:5e:2c:ae:91:ae:26:73:d1:a5:bc:c5:4e:f0:a8:8e:ce: af:3b:a7:59:7a:46:19:6e:c2:c4:e4:e0:15:64:4e:42:0a:b7: 6e:94:29:7a:6c:85:9b:d6:b8:24:75:46:36:3a:55:a7:28:13: 98:59:20:8b:f2:34:4f:f4:b5:4a:a2:37:5c:18:45:e1:f1:e3: ad:82:3e:31:3d:85:c2:f5:0a:7d:9f:0e:bc:a5:84:fe:9c:dd: b7:b7:1f:49:7b:ef:14:52:21:c3:25:c0:ef:bb:62:92:00:5f: 07:02:ab:c3:88:1d:d7:7b:96:40:26:be:3c:f1:b7:7e:50:a7: 64:04:dc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkrzkfSwv+TafyKRdva+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2E2ZTI1OGQ2MjgwZjNkZDk3YTk2ZDk0ODZkOTNkNDJm MThkNGIwHhcNMjUxMjExMTgwMDU1WhcNMjUxMjEyMTgwMDU1WjAzMTEwLwYDVQQD EyhiMGY0NzNkOTNjYWIxZjBhYTE4NzljNWFjNDZhMjViMmMwMDc5MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor9UQnRcqx22kci0oWuP7Wn68tWK 6gDExweZuYWk9yMVQltnLrr6E6c1CG4Fi+6KChwP2o2VwrWUMcRtFXuSmTWEA+pj YzDZ6K0GJnjSA8A4xbvk4ocjreRfl272HfpFeJqFSny0LtKlKcyzVHczM89F3DwV 3pIIt5fV6jJ7a4zQKm8eK1W+v/1MZ1xMqqGE7YC3v8RbLkXMx2jngGfiS9al1b9M ZjI91v6SOujP51dFrVF6xE1evwwN0q1IzkdPq75mK6BFRqioITyd5jyo4cfu7OMt eQaCw0fe9IdqTREZ/Ln/lxV4SKKTFN/w1VMu0mstvwXihUHjb3cejf0YAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD0c9k8qx8KoYecWsRqJbLAB5IPMB8GA1UdIwQY MBaAFNY6biWNYoDz3ZepbZSG2T1C8Y1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Y3MDUtODg2Mi00NGUxLTkwMzMt YTQ3YjY5YzIyY2QwLzEvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Y3MDUtODg2Mi00NGUxLTkwMzMtYTQ3YjY5YzIyY2Qw LzEvMWpwdUpZMWlnUFBkbDZsdGxJYlpQVUx4alVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSIxTERE cDdCJpP17yStgagA3ULUQdJm9DjRf0KaPDajuh+vWvnCpNI2L0iWUqCDHbb3uThO j9A8SM+eQZoqZlB6auNYbeqmwpyt4yjYAmxBgvJaPWi4HMrgDV0pHsgsxkZwxq+i x3hKByP71S1qS2fMFLSjSr+TjmPuVumolTJeLK6RriZz0aW8xU7wqI7OrzunWXpG GW7CxOTgFWROQgq3bpQpemyFm9a4JHVGNjpVpygTmFkgi/I0T/S1SqI3XBhF4fHj rYI+MT2FwvUKfZ8OvKWE/pzdt7cfSXvvFFIhwyXA77tikgBfBwKrw4gd13uWQCa+ PPG3flCnZATcMg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:01 2025 by rpki-client