This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json) Hash identifier: 4qx6h//1OONsex4S3ZANWsDp4mv2Bk05Jai4eohy1a0= Subject key identifier: C3:DC:11:B6:1C:35:92:18:D7:03:E0:E1:67:CA:1C:F2:C6:EF:B0:33 Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076 Certificate serial: 019B2250F877811BB7780CA0879D8357192D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft Manifest number: 1783 Signing time: Mon 15 Dec 2025 14:01:30 +0000 Manifest this update: Mon 15 Dec 2025 14:01:30 +0000 Manifest next update: Tue 16 Dec 2025 14:01:30 +0000 Files and hashes: 1: FGH5MAwo2-kG0-fJhqBT4gIeWJM.roa (hash: 1FaU+6R3v9t9VIFKSp/Yr2MFIF4LwvmQGlBqd0+XyY8=) 2: ZFf_iyyeKGXumKzgD892SHp3lEI.roa (hash: GucWl/4PHqS5zSBhBIbP/NiRS0uj5cEUju99hKwsqPk=) 3: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: XYQMc01pKWcuufxNKb48+GkruAmV2bL0dAolCYrDJH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:f8:77:81:1b:b7:78:0c:a0:87:9d:83:57:19:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076 Validity Not Before: Dec 15 14:01:30 2025 GMT Not After : Dec 16 14:01:30 2025 GMT Subject: CN=c3dc11b61c359218d703e0e167ca1cf2c6efb033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:bb:13:d0:1d:56:dc:76:29:00:2e:52:de: c3:d1:38:a4:2b:df:2f:22:68:54:a2:df:85:b3:93: 9b:05:c1:a8:0a:f6:b3:39:b2:6b:d7:57:e9:be:69: c7:9b:6d:f1:fc:41:c2:d8:2f:4b:0a:9b:6a:bb:a8: 9f:49:eb:9e:93:4b:c4:78:c2:fb:46:00:68:15:c8: 0f:76:41:b2:00:e7:79:97:2c:49:e3:77:6e:5e:63: 1b:4f:f3:d6:2b:b2:91:36:f6:4e:99:f2:b5:e3:0e: af:28:28:b6:56:fd:d8:17:a8:9d:a4:00:b9:83:65: 9b:0c:1c:28:de:a7:5c:a8:6e:13:d9:3c:c1:06:3d: 67:63:96:ca:0a:24:82:c7:e0:b0:d2:c5:9b:5f:b0: fe:18:65:64:1f:50:db:f8:ce:39:9c:b1:40:da:04: 80:41:90:5a:66:e7:1c:33:e5:c8:44:db:02:95:74: a8:39:16:05:4e:6d:75:71:33:5f:50:5f:8f:7e:e3: 82:c8:06:8a:46:f3:0d:1e:55:ce:75:14:a7:1d:c5: ac:47:f2:44:fe:6e:98:26:bd:ff:1d:69:3d:7c:45: 04:05:42:31:a5:c0:1c:ea:45:db:53:e4:7a:b0:a7: fc:3e:31:f0:13:88:66:33:00:8d:5c:d6:2e:38:22: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:11:B6:1C:35:92:18:D7:03:E0:E1:67:CA:1C:F2:C6:EF:B0:33 X509v3 Authority Key Identifier: keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:93:b8:13:a9:1d:c5:79:ba:f8:a6:26:0c:01:8b:11:ad:8c: 89:eb:3b:36:6c:e6:2f:90:77:19:54:14:96:b4:97:a0:8f:80: 35:ac:b1:34:b7:9d:fd:d5:06:bd:10:79:de:dc:cf:e6:c1:f5: 23:f4:55:fc:bd:b8:be:4f:d4:62:84:fd:22:76:7d:3a:b5:22: 73:5a:1a:d6:f8:be:b8:52:8d:7a:2a:87:7e:35:21:40:a3:f7: a4:d6:68:70:41:15:bd:ec:97:27:49:64:1d:83:8c:27:77:3d: 13:a6:94:14:c3:82:69:94:4f:ec:41:15:1d:bb:94:4f:62:b9: 89:b2:26:cf:b6:8e:20:72:17:f5:aa:41:0c:c6:31:94:b7:66: 8b:5d:70:67:e5:b0:99:16:92:8e:e9:be:d7:c2:0d:37:b7:57: 81:10:7c:85:4f:e1:62:69:5d:6c:a1:9e:10:25:da:37:6c:ab: cc:06:9d:79:1e:f4:b8:eb:34:04:96:3a:55:ef:68:d2:2f:6f: 12:45:0a:3d:0a:fc:1c:43:0b:1d:53:87:93:b6:42:78:91:67: f5:a9:f6:01:20:09:5e:12:6c:4f:72:42:79:54:ea:3a:f8:e6: 47:9e:dc:bc:8a:a7:f1:ea:86:fb:c1:65:93:59:1c:7f:75:96: 04:60:31:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUPh3gRu3eAygh52DVxktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi NzAwNzYwHhcNMjUxMjE1MTQwMTMwWhcNMjUxMjE2MTQwMTMwWjAzMTEwLwYDVQQD EyhjM2RjMTFiNjFjMzU5MjE4ZDcwM2UwZTE2N2NhMWNmMmM2ZWZiMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ27E9AdVtx2KQAuUt7D0TikK98v ImhUot+Fs5ObBcGoCvazObJr11fpvmnHm23x/EHC2C9LCptqu6ifSeuek0vEeML7 RgBoFcgPdkGyAOd5lyxJ43duXmMbT/PWK7KRNvZOmfK14w6vKCi2Vv3YF6idpAC5 g2WbDBwo3qdcqG4T2TzBBj1nY5bKCiSCx+Cw0sWbX7D+GGVkH1Db+M45nLFA2gSA QZBaZuccM+XIRNsClXSoORYFTm11cTNfUF+PfuOCyAaKRvMNHlXOdRSnHcWsR/JE /m6YJr3/HWk9fEUEBUIxpcAc6kXbU+R6sKf8PjHwE4hmMwCNXNYuOCLpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPcEbYcNZIY1wPg4WfKHPLG77AzMB8GA1UdIwQY MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3 LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJO4E6kd xXm6+KYmDAGLEa2Mies7NmzmL5B3GVQUlrSXoI+ANayxNLed/dUGvRB53tzP5sH1 I/RV/L24vk/UYoT9InZ9OrUic1oa1vi+uFKNeiqHfjUhQKP3pNZocEEVveyXJ0lk HYOMJ3c9E6aUFMOCaZRP7EEVHbuUT2K5ibImz7aOIHIX9apBDMYxlLdmi11wZ+Ww mRaSjum+18INN7dXgRB8hU/hYmldbKGeECXaN2yrzAadeR70uOs0BJY6Ve9o0i9v EkUKPQr8HEMLHVOHk7ZCeJFn9an2ASAJXhJsT3JCeVTqOvjmR57cvIqn8eqG+8Fl k1kcf3WWBGAx8A== -----END CERTIFICATE-----Generated at Mon Dec 15 18:21:13 2025 by rpki-client