This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json) Hash identifier: SdGRSz6fBGC/60CiofYEZR38w8y21qth/zqCWajARuQ= Subject key identifier: A8:4A:88:8E:68:FF:87:67:88:A1:65:57:47:02:EB:08:9F:5E:18:17 Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019B25F625DBA8AFE36660C793CCAF35F1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft Manifest number: 1367 Signing time: Tue 16 Dec 2025 07:00:47 +0000 Manifest this update: Tue 16 Dec 2025 07:00:47 +0000 Manifest next update: Wed 17 Dec 2025 07:00:47 +0000 Files and hashes: 1: 0h2grdbQdf4vYHZWDkedoxq82j4.roa (hash: D+Sm+7GDNJl3LW55KT6DhNCDqELpjmMWvTt+C/YfxSA=) 2: 54maDBwwKTxHdkusWjL9_Ovz-qw.roa (hash: K+6mHC5B4TYfPyOtC0Ws3X1xogH31t6cVYvGSG2+010=) 3: GpJsbUU7ynXwevk6zegWgWclf9Y.roa (hash: Gj5/c+xCgDWNgWsyAfXPaCh0mgF3UrEUlCabtiae4lk=) 4: QKYFwfEUtIsE2zwk360KHQOdATU.roa (hash: J7RPiiX3svZf1ggdl8vvm2b4xvCEOydrVgV6jBu1CtA=) 5: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: KcaHPjjLRKS4axqO3TeQn4B/uMZgYnrAgGxjmo/SVTc=) 6: nbxUHEZP7nLPsSWUzZlv-6zoI8E.roa (hash: b2RlxLzrg3Jt5vsvNFiprNhu9Bg/P/h2jB1aLvcyUR4=) 7: prOxBQFXKQHVMxFfWuCKBN6cC28.roa (hash: KQkvvBw6H6mLNvuqMCwSPUrSIm6c/c/LV/GGLcSdkGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:25:db:a8:af:e3:66:60:c7:93:cc:af:35:f1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Dec 16 07:00:47 2025 GMT Not After : Dec 17 07:00:47 2025 GMT Subject: CN=a84a888e68ff876788a165574702eb089f5e1817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:b4:c8:51:e9:44:af:e3:a4:d6:8b:13:20: 8a:79:29:dc:26:0c:7a:38:d4:dd:ff:e5:29:2c:c9: 91:8c:8b:94:86:00:6f:6a:96:99:e5:d2:2e:7c:59: 2f:31:0f:80:ad:73:b7:62:7e:b2:77:53:df:de:87: dd:6e:b9:21:ce:50:e2:db:69:50:e6:c4:7c:07:d4: 56:27:1a:0f:81:06:8a:83:c4:5d:01:23:24:ca:97: c5:b5:0a:4e:c8:27:8f:38:89:ca:e7:34:1e:a6:90: ea:5c:92:79:d7:38:08:db:ea:3e:7e:e5:7b:86:af: 32:08:46:73:0f:81:b5:ff:d9:54:15:70:7d:2c:8a: f0:d7:df:12:98:67:e2:ba:5d:f5:ff:41:1e:12:74: 1d:9d:17:f3:3c:b3:b7:54:4b:4b:78:71:6a:4a:f7: a9:0d:82:bc:37:64:59:14:b6:9c:4d:5b:84:6f:d5: 93:5c:c5:35:64:c0:37:07:0e:9b:1e:eb:62:f6:a3: ab:cc:ae:73:c8:f9:31:60:94:26:a7:55:f0:12:fd: ac:11:c7:a4:3f:84:88:a1:58:b0:df:a4:60:d4:eb: 45:0f:23:91:20:32:8b:91:95:dd:e2:08:84:4c:d8: a4:eb:39:69:b5:d6:6d:e5:1d:94:42:14:3a:c0:4e: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:88:8E:68:FF:87:67:88:A1:65:57:47:02:EB:08:9F:5E:18:17 X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:2a:d2:49:26:e7:6b:7c:16:bc:88:b2:5c:3d:5a:9c:fc:e5: b3:ff:d1:49:d9:d8:c3:f1:ce:cd:21:9f:45:c0:7b:40:e7:80: 1c:ce:15:57:90:47:4e:04:f6:7b:d8:5f:43:b0:e7:f9:82:4c: e4:a1:f0:f6:43:9c:03:7d:1b:5a:99:41:4d:a9:1b:c1:7d:d1: 6a:ca:3b:5e:05:97:c1:50:31:85:9d:3f:4b:47:de:bf:b6:e1: 8a:a7:ad:8a:87:3d:b2:8d:e0:bd:1d:7f:91:3f:99:a5:cf:e1: 8c:82:4f:fa:dd:31:ac:e2:64:4a:59:d7:79:93:90:06:e1:2c: 43:e8:6f:b4:85:bd:0e:c5:43:e9:46:b8:6b:25:bb:00:47:d5: 45:f2:a7:93:ea:22:62:b7:7c:16:5c:93:80:12:ce:26:f8:07: 7e:fb:0e:91:a9:c4:3b:93:60:9c:63:65:f1:3e:dc:ca:4d:4b: 88:23:c7:eb:94:80:a5:b0:d9:31:90:7f:20:20:8d:a5:53:73: 22:e2:50:49:7e:5d:03:cf:b2:83:e1:68:b9:8c:b1:97:3f:ee: 92:43:8a:85:9a:4f:50:24:ff:80:19:02:b2:c8:c5:54:11:e9: b4:fb:11:1f:26:09:d0:96:63:26:19:94:bd:8d:a3:51:11:b5: 6e:98:02:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9iXbqK/jZmDHk8yvNfHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjUxMjE2MDcwMDQ3WhcNMjUxMjE3MDcwMDQ3WjAzMTEwLwYDVQQD EyhhODRhODg4ZTY4ZmY4NzY3ODhhMTY1NTc0NzAyZWIwODlmNWUxODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56+0yFHpRK/jpNaLEyCKeSncJgx6 ONTd/+UpLMmRjIuUhgBvapaZ5dIufFkvMQ+ArXO3Yn6yd1Pf3ofdbrkhzlDi22lQ 5sR8B9RWJxoPgQaKg8RdASMkypfFtQpOyCePOInK5zQeppDqXJJ51zgI2+o+fuV7 hq8yCEZzD4G1/9lUFXB9LIrw198SmGfiul31/0EeEnQdnRfzPLO3VEtLeHFqSvep DYK8N2RZFLacTVuEb9WTXMU1ZMA3Bw6bHuti9qOrzK5zyPkxYJQmp1XwEv2sEcek P4SIoViw36Rg1OtFDyORIDKLkZXd4giETNik6zlptdZt5R2UQhQ6wE499wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhKiI5o/4dniKFlV0cC6wifXhgXMB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2yrSSSbn a3wWvIiyXD1anPzls//RSdnYw/HOzSGfRcB7QOeAHM4VV5BHTgT2e9hfQ7Dn+YJM 5KHw9kOcA30bWplBTakbwX3Raso7XgWXwVAxhZ0/S0fev7bhiqetioc9so3gvR1/ kT+Zpc/hjIJP+t0xrOJkSlnXeZOQBuEsQ+hvtIW9DsVD6Ua4ayW7AEfVRfKnk+oi Yrd8FlyTgBLOJvgHfvsOkanEO5NgnGNl8T7cyk1LiCPH65SApbDZMZB/ICCNpVNz IuJQSX5dA8+yg+FouYyxlz/ukkOKhZpPUCT/gBkCssjFVBHptPsRHyYJ0JZjJhmU vY2jURG1bpgCqg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:11:07 2025 by rpki-client