This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json) Hash identifier: mCmVb2JAvhpCdUSKbwCi9G0zOmw4iaFWRxt94akZC+A= Subject key identifier: 58:7C:5B:B1:10:73:BF:B9:EA:6F:A5:3A:EA:CC:F8:C9:D5:C5:EB:D2 Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52 Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252 Certificate serial: 019B59E3C13B42F176CBAD4C44FF4EBD8D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft Manifest number: 123D Signing time: Fri 26 Dec 2025 09:00:56 +0000 Manifest this update: Fri 26 Dec 2025 09:00:56 +0000 Manifest next update: Sat 27 Dec 2025 09:00:56 +0000 Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: 89NuxtdhSQY4EMiNDeFfwn1v2QpJR6r88otGd04CsII=) 2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:c1:3b:42:f1:76:cb:ad:4c:44:ff:4e:bd:8d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dd003af04774dd3e39730497989a3a171516252 Validity Not Before: Dec 26 09:00:56 2025 GMT Not After : Dec 27 09:00:56 2025 GMT Subject: CN=587c5bb11073bfb9ea6fa53aeaccf8c9d5c5ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:26:f1:79:ec:b6:10:2f:be:c1:6b:ea:25: 29:d9:71:c6:b7:5f:e1:18:40:ea:90:4b:6d:03:87: 80:a1:8d:62:09:99:4c:03:12:b4:81:a7:8b:99:ef: 13:9d:d0:b3:54:f6:e0:97:de:97:02:75:78:4d:2b: c8:59:f0:51:dd:1c:eb:ae:37:90:56:69:6b:59:5d: 5f:70:b4:6b:c9:f5:d3:cc:2c:c5:17:79:6d:2d:bb: 98:a3:95:23:a1:78:c0:0d:92:13:ea:d3:41:85:64: 30:95:58:e9:c4:89:3c:1a:0c:a2:94:10:31:8b:5e: 92:ee:ff:6e:e6:8b:5d:ad:73:f8:1a:f6:3a:e8:53: ab:59:18:23:22:69:1d:ce:7a:a5:b2:6a:ca:2d:d5: 4f:57:bb:16:32:f9:12:41:98:ba:9c:1f:2b:31:89: de:cc:39:e2:33:3e:05:1c:5d:6f:ee:9a:bc:ea:35: eb:a0:6e:eb:60:68:dd:c2:5f:bc:26:41:5c:3b:e1: 54:ad:7c:6a:0a:51:81:c5:68:d9:41:c8:94:0f:b0: b7:28:fd:31:58:7c:f4:ba:f4:f2:e1:04:2e:95:7b: 9b:60:ff:00:4d:e4:d9:8e:a7:72:c2:ce:56:9d:03: ca:8c:ef:77:71:59:39:cf:38:b1:f2:09:39:ff:38: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:5B:B1:10:73:BF:B9:EA:6F:A5:3A:EA:CC:F8:C9:D5:C5:EB:D2 X509v3 Authority Key Identifier: keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:24:28:ae:61:96:91:a1:d0:d6:48:03:d1:15:a9:65:88:78: e4:41:ff:dc:f4:ec:c1:dd:2a:82:9b:bb:59:14:43:f1:ae:3a: 5b:88:30:9f:97:c3:cf:a7:7b:54:33:36:1e:b0:93:76:d2:ab: 8b:72:d0:26:35:f6:31:b1:07:3f:f2:2b:48:3e:8a:d4:30:96: ed:64:1b:5d:70:84:81:8f:7a:4e:ce:3c:17:b5:39:df:4f:9b: aa:ef:d1:a8:9e:f2:c0:81:2c:aa:77:19:9b:a7:f9:72:13:48: 02:04:ef:4b:da:78:ec:20:65:c3:c2:cc:50:03:bb:d3:3f:55: 82:0b:0d:ae:8d:e1:bd:ae:8a:44:f1:68:4c:94:d2:48:35:ac: 91:e0:ad:ba:35:6d:d6:d3:12:f2:d3:5b:bd:6f:fd:0c:de:25: 3e:e6:3e:ac:d4:9c:a5:b1:67:23:5c:e2:45:02:ea:3c:56:ee: 8f:30:2a:d8:42:02:17:8e:08:ce:9b:06:58:b4:4c:79:cb:45: 9b:aa:51:0c:ad:4a:e8:13:64:d2:19:61:ca:37:8b:c2:6d:49: 5f:8b:18:ce:91:e5:2c:98:2d:f1:dc:99:05:22:5e:8b:c1:11: 31:4d:ea:41:2c:c8:92:cd:77:07:4d:43:1e:b8:47:f7:3d:1a: be:37:de:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ48E7QvF2y61MRP9OvY1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1 MTYyNTIwHhcNMjUxMjI2MDkwMDU2WhcNMjUxMjI3MDkwMDU2WjAzMTEwLwYDVQQD Eyg1ODdjNWJiMTEwNzNiZmI5ZWE2ZmE1M2FlYWNjZjhjOWQ1YzVlYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dom8XnsthAvvsFr6iUp2XHGt1/h GEDqkEttA4eAoY1iCZlMAxK0gaeLme8TndCzVPbgl96XAnV4TSvIWfBR3RzrrjeQ VmlrWV1fcLRryfXTzCzFF3ltLbuYo5UjoXjADZIT6tNBhWQwlVjpxIk8GgyilBAx i16S7v9u5otdrXP4GvY66FOrWRgjImkdznqlsmrKLdVPV7sWMvkSQZi6nB8rMYne zDniMz4FHF1v7pq86jXroG7rYGjdwl+8JkFcO+FUrXxqClGBxWjZQciUD7C3KP0x WHz0uvTy4QQulXubYP8ATeTZjqdyws5WnQPKjO93cVk5zzix8gk5/zjcZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh8W7EQc7+56m+lOurM+MnVxevSMB8GA1UdIwQY MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt NjdjZDJiNDU5YWFlLzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyQormGW kaHQ1kgD0RWpZYh45EH/3PTswd0qgpu7WRRD8a46W4gwn5fDz6d7VDM2HrCTdtKr i3LQJjX2MbEHP/IrSD6K1DCW7WQbXXCEgY96Ts48F7U530+bqu/RqJ7ywIEsqncZ m6f5chNIAgTvS9p47CBlw8LMUAO70z9VggsNro3hva6KRPFoTJTSSDWskeCtujVt 1tMS8tNbvW/9DN4lPuY+rNScpbFnI1ziRQLqPFbujzAq2EICF44IzpsGWLRMectF m6pRDK1K6BNk0hlhyjeLwm1JX4sYzpHlLJgt8dyZBSJei8ERMU3qQSzIks13B01D HrhH9z0avjfepg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client