This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json) Hash identifier: A/9e75nJv6cbgqBctNtCk4LRoL7b08z1F+GJmJsKjxM= Subject key identifier: A9:D7:BB:96:92:A7:1B:33:EC:75:CF:70:89:1B:59:D8:69:FD:12:EF Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Certificate serial: 019B1494F593F553DE7BA8AFC51F272F48F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft Manifest number: 12CE Signing time: Fri 12 Dec 2025 22:01:05 +0000 Manifest this update: Fri 12 Dec 2025 22:01:05 +0000 Manifest next update: Sat 13 Dec 2025 22:01:05 +0000 Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=) 2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=) 3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: /2FDFQTFoNoR7dvp4/yeG8g1wsn3IWTgurSwx++wHac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:94:f5:93:f5:53:de:7b:a8:af:c5:1f:27:2f:48:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312 Validity Not Before: Dec 12 22:01:05 2025 GMT Not After : Dec 13 22:01:05 2025 GMT Subject: CN=a9d7bb9692a71b33ec75cf70891b59d869fd12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:2d:bf:80:ec:bd:2e:fb:cf:14:1b:72:61: f5:56:96:8b:37:39:d2:ba:59:7c:88:24:b2:b8:ef: 0a:ad:1d:c9:32:c6:09:ca:0a:20:75:56:67:68:0c: ac:f4:50:f7:73:e2:35:5e:42:30:4e:46:97:68:64: 6c:36:c8:ec:aa:27:ea:1f:05:36:b8:a8:81:24:a0: 62:47:0b:7f:0b:1b:6e:60:6f:4e:3b:1f:0a:0f:79: f0:e0:ed:d6:79:d9:21:dd:3a:db:17:ca:b4:a5:2c: 60:be:ae:eb:8c:ba:eb:93:90:2b:a0:89:1d:99:eb: 5e:a9:35:1b:88:a8:89:82:83:84:5c:26:3a:bc:64: 63:5a:26:79:81:9b:67:4a:79:22:c4:45:ee:cd:ef: 2d:40:15:62:ce:a7:f2:cd:d1:1e:48:2a:c7:c9:ad: 56:11:05:24:9d:c9:df:87:e3:27:fb:af:8e:15:20: 45:f0:4b:82:31:09:ae:38:4b:e5:8f:25:af:9e:04: 59:4c:cc:d3:b2:7c:ed:6d:16:c3:e6:90:90:aa:ca: 83:71:54:96:d0:95:9f:5d:02:2d:c0:9b:47:8c:35: 97:73:4b:65:3b:91:03:8e:77:c8:7a:ac:46:dd:4b: cd:d6:50:d7:0d:5b:83:d5:81:bb:5a:a5:ec:8b:fd: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:BB:96:92:A7:1B:33:EC:75:CF:70:89:1B:59:D8:69:FD:12:EF X509v3 Authority Key Identifier: keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:b4:38:39:0e:31:4c:b4:9c:f1:97:01:dc:96:c2:4f:16: b8:04:ca:83:c9:fb:af:50:53:a8:d4:90:cd:f1:3b:96:06:a1: 89:f1:cf:89:46:b9:9f:ff:43:8f:4f:2a:d3:c7:0c:e1:89:62: 38:33:4d:48:69:e6:3d:c2:7d:b2:d2:73:44:6e:b6:43:a0:00: ba:32:4f:23:ea:17:fe:cb:3f:32:45:09:81:3d:c1:09:b0:fe: 92:a8:ba:df:98:79:7f:49:95:87:97:65:70:68:d2:ad:04:cd: 57:e2:ef:48:86:00:ce:04:c2:c9:b1:5c:81:4a:ce:fc:43:43: d4:21:78:1b:e9:b3:93:0d:be:7b:e4:9c:3f:3b:e0:47:e6:df: 11:e4:81:3f:e3:e4:20:ad:5f:94:a6:e5:5f:8a:a8:c0:5f:21: c0:7b:e3:6e:98:e3:2f:b4:54:0f:c9:b0:c1:31:2a:67:06:d0: 4f:3d:2f:11:83:a3:cd:c4:07:24:62:8f:30:bb:ae:ab:97:26: 8c:1c:8a:59:96:0c:ef:c2:e5:01:aa:6b:92:eb:2d:45:96:b4: dd:c5:37:b0:fc:55:10:d2:64:a4:c4:c8:02:62:0f:81:b3:c5: 83:99:0e:71:e1:47:a3:2b:13:96:24:f4:09:83:68:bf:4b:4a: c0:36:df:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUlPWT9VPee6ivxR8nL0jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm NzQzMTIwHhcNMjUxMjEyMjIwMTA1WhcNMjUxMjEzMjIwMTA1WjAzMTEwLwYDVQQD EyhhOWQ3YmI5NjkyYTcxYjMzZWM3NWNmNzA4OTFiNTlkODY5ZmQxMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkggtv4DsvS77zxQbcmH1VpaLNznS ull8iCSyuO8KrR3JMsYJygogdVZnaAys9FD3c+I1XkIwTkaXaGRsNsjsqifqHwU2 uKiBJKBiRwt/CxtuYG9OOx8KD3nw4O3Wedkh3TrbF8q0pSxgvq7rjLrrk5AroIkd meteqTUbiKiJgoOEXCY6vGRjWiZ5gZtnSnkixEXuze8tQBVizqfyzdEeSCrHya1W EQUkncnfh+Mn+6+OFSBF8EuCMQmuOEvljyWvngRZTMzTsnztbRbD5pCQqsqDcVSW 0JWfXQItwJtHjDWXc0tlO5EDjnfIeqxG3UvN1lDXDVuD1YG7WqXsi/3/bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnXu5aSpxsz7HXPcIkbWdhp/RLvMB8GA1UdIwQY MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/20ODkO MUy0nPGXAdyWwk8WuATKg8n7r1BTqNSQzfE7lgahifHPiUa5n/9Dj08q08cM4Yli ODNNSGnmPcJ9stJzRG62Q6AAujJPI+oX/ss/MkUJgT3BCbD+kqi635h5f0mVh5dl cGjSrQTNV+LvSIYAzgTCybFcgUrO/END1CF4G+mzkw2+e+ScPzvgR+bfEeSBP+Pk IK1flKblX4qowF8hwHvjbpjjL7RUD8mwwTEqZwbQTz0vEYOjzcQHJGKPMLuuq5cm jByKWZYM78LlAaprkustRZa03cU3sPxVENJkpMTIAmIPgbPFg5kOceFHoysTliT0 CYNov0tKwDbfKA== -----END CERTIFICATE-----Generated at Sat Dec 13 06:27:48 2025 by rpki-client