This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft File: jljYxh9jNQx3vvHWaxzPpaAODds.mft (raw, json) Hash identifier: CYptJlpz5ui5GP0qkFoYy6AzduCm3i048PFtjzhyKPg= Subject key identifier: 45:AF:6A:06:3B:2E:22:DF:E0:31:60:47:3C:95:0B:57:F5:7E:2B:8A Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb Certificate serial: 019B4882E524AFA9DF59BF1BDC3E8C7743CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 00:01:36 +0000 Manifest this update: Tue 23 Dec 2025 00:01:36 +0000 Manifest next update: Wed 24 Dec 2025 00:01:36 +0000 Files and hashes: 1: 9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa (hash: CXZ0q1QVdxVDaPhOEyR1OpgzYZ+TJLJ3piBsRyEK14c=) 2: jljYxh9jNQx3vvHWaxzPpaAODds.crl (hash: deUsQDOwTuLYaeG2kHYXU4a2TcBwyKFE429Rb3v9BzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:e5:24:af:a9:df:59:bf:1b:dc:3e:8c:77:43:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb Validity Not Before: Dec 23 00:01:36 2025 GMT Not After : Dec 24 00:01:36 2025 GMT Subject: CN=45af6a063b2e22dfe03160473c950b57f57e2b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:80:f9:93:e0:fc:a0:2a:bb:6e:57:1b:c2: 38:8c:ff:1e:9f:76:61:93:5d:86:dc:3a:c4:ab:6f: 48:b4:aa:4f:e1:bc:75:f8:ae:77:c4:39:4e:8b:20: 3b:86:f7:74:3f:6d:5b:55:46:7f:77:bc:eb:ff:e7: 7b:be:54:0e:89:5e:17:51:16:05:6a:e1:f9:c9:fd: 95:d2:02:50:39:bd:14:5c:b2:f7:d1:3e:c3:b6:f0: 02:d1:fc:a4:f6:09:c7:d3:be:14:c8:fa:8f:89:01: c7:2a:ac:7d:45:00:09:37:2b:6f:b1:73:fa:da:45: ba:4c:3a:65:aa:91:88:eb:69:7c:60:f4:ec:63:77: 56:eb:f9:a7:82:c6:92:cf:2f:87:b7:a4:6f:ec:79: 7b:1b:e7:3c:a0:20:48:e8:15:06:1b:21:21:b3:88: 89:73:3f:af:4d:06:76:25:ef:e1:f8:ed:e8:62:8c: 08:c5:da:9d:a3:54:dd:a4:5e:39:41:0c:50:9f:23: 1d:f9:79:5b:0e:8e:5d:49:cc:d7:24:7d:23:9d:b0: fc:0c:db:38:ae:12:f4:99:84:d6:11:35:e7:b9:ac: 55:bf:57:a6:a7:f6:6c:23:a7:88:d4:2d:53:97:f9: 9f:1c:0d:1b:d8:8f:ab:f9:d5:0e:cf:cf:5b:b8:39: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:6A:06:3B:2E:22:DF:E0:31:60:47:3C:95:0B:57:F5:7E:2B:8A X509v3 Authority Key Identifier: keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6b:58:06:e4:ce:01:ba:6e:d2:aa:17:93:9f:2c:e4:59:45: 97:51:fd:d1:f5:25:43:36:97:9e:3c:bf:cf:69:ce:d4:22:c7: a5:53:17:1d:e4:43:10:98:9e:df:ac:20:88:33:22:7b:bf:1e: 0b:7c:f7:8e:30:f7:be:fb:6f:c5:e8:8a:87:28:da:3f:0f:b8: 2f:59:a4:ed:15:c0:5b:d8:3e:1b:32:38:c6:45:77:c8:51:cc: c2:5f:1f:2a:ed:a3:aa:c0:6b:f4:b6:e1:dd:c1:76:9f:10:f2: e9:2c:b4:19:3c:ad:5e:40:c0:85:48:b7:6f:39:e0:e1:18:93: 98:66:87:d9:bd:db:81:f7:90:95:e9:31:c1:0a:3b:be:7c:f6: cb:b0:fe:71:c7:09:69:7e:f9:81:2c:47:16:fb:c4:f3:d8:87: 38:e0:df:c5:05:5c:1f:0c:eb:e3:41:3b:7f:89:c9:c6:06:cb: 15:46:97:ff:fb:d1:9d:1d:15:35:55:7d:37:2f:cd:0b:d7:65: a2:95:f7:3e:ba:06:7c:5c:3a:d3:4c:2d:18:a1:a7:75:a4:7c: 7b:9d:37:fd:9e:ec:5e:d5:38:c2:6a:a8:5d:82:59:ce:28:bf: 23:f7:d0:9e:19:5c:6c:c1:5c:78:77:6b:a3:54:61:05:9b:e7: 74:d7:eb:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIguUkr6nfWb8b3D6Md0PNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNThkOGM2MWY2MzM1MGM3N2JlZjFkNjZiMWNjZmE1YTAw ZTBkZGIwHhcNMjUxMjIzMDAwMTM2WhcNMjUxMjI0MDAwMTM2WjAzMTEwLwYDVQQD Eyg0NWFmNmEwNjNiMmUyMmRmZTAzMTYwNDczYzk1MGI1N2Y1N2UyYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutCA+ZPg/KAqu25XG8I4jP8en3Zh k12G3DrEq29ItKpP4bx1+K53xDlOiyA7hvd0P21bVUZ/d7zr/+d7vlQOiV4XURYF auH5yf2V0gJQOb0UXLL30T7DtvAC0fyk9gnH074UyPqPiQHHKqx9RQAJNytvsXP6 2kW6TDplqpGI62l8YPTsY3dW6/mngsaSzy+Ht6Rv7Hl7G+c8oCBI6BUGGyEhs4iJ cz+vTQZ2Je/h+O3oYowIxdqdo1TdpF45QQxQnyMd+XlbDo5dSczXJH0jnbD8DNs4 rhL0mYTWETXnuaxVv1emp/ZsI6eI1C1Tl/mfHA0b2I+r+dUOz89buDm12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWvagY7LiLf4DFgRzyVC1f1fiuKMB8GA1UdIwQY MBaAFI5Y2MYfYzUMd77x1mscz6WgDg3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYt YWI1OTU2YjRkOTcwLzEvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYtYWI1OTU2YjRkOTcw LzEvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2tYBuTO Abpu0qoXk58s5FlFl1H90fUlQzaXnjy/z2nO1CLHpVMXHeRDEJie36wgiDMie78e C3z3jjD3vvtvxeiKhyjaPw+4L1mk7RXAW9g+GzI4xkV3yFHMwl8fKu2jqsBr9Lbh 3cF2nxDy6Sy0GTytXkDAhUi3bzng4RiTmGaH2b3bgfeQlekxwQo7vnz2y7D+cccJ aX75gSxHFvvE89iHOODfxQVcHwzr40E7f4nJxgbLFUaX//vRnR0VNVV9Ny/NC9dl opX3ProGfFw600wtGKGndaR8e503/Z7sXtU4wmqoXYJZzii/I/fQnhlcbMFceHdr o1RhBZvndNfrGw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:50:31 2025 by rpki-client