This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json) Hash identifier: 0nPoO5IrKAD5kbTxfao/SJaKKHQmVKkpeXMhpEYW+iQ= Subject key identifier: 95:9D:10:F0:D8:1B:AC:D4:0B:04:DF:BB:78:6A:8B:12:95:F0:39:5F Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12 Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12 Certificate serial: 019B0F00509805EBF7DC817A3067774B6716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 20:00:37 +0000 Manifest this update: Thu 11 Dec 2025 20:00:37 +0000 Manifest next update: Fri 12 Dec 2025 20:00:37 +0000 Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=) 2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=) 3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: JqlMjDSt4UVhEHihuP6KRRqKZzY8EhNyFGvmonxRTE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:50:98:05:eb:f7:dc:81:7a:30:67:77:4b:67:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12 Validity Not Before: Dec 11 20:00:37 2025 GMT Not After : Dec 12 20:00:37 2025 GMT Subject: CN=959d10f0d81bacd40b04dfbb786a8b1295f0395f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:50:57:7c:e8:82:26:a9:d1:9d:4c:98:c6: c9:34:b6:f3:a8:01:48:00:13:f3:42:e0:6f:bf:83: 3f:06:17:15:8a:4e:10:cc:34:d4:6b:16:e6:12:27: d6:a5:59:b7:2d:6b:c8:f7:0e:fc:67:51:0f:05:d6: c8:6e:5c:b3:6d:8d:b4:73:c6:20:f7:88:06:83:8a: f6:ed:40:07:80:55:80:18:e5:86:ca:2a:1e:28:2b: f4:c6:92:b1:1f:a2:c7:3d:d8:78:0e:78:30:aa:27: dc:f2:43:6c:c1:18:d4:7f:3e:9e:ee:80:89:85:7a: bf:e6:66:a6:c0:08:2f:f8:03:74:c9:1a:83:be:20: c6:ee:6f:ee:9b:b1:70:93:5a:8d:9a:d0:ae:5f:58: 4b:c0:58:89:a6:21:7f:50:a9:35:f3:d5:58:61:ef: 74:49:60:ea:fd:d3:87:fc:26:bb:02:4a:d7:38:21: e3:00:65:12:f6:96:79:dd:3a:37:60:ba:8d:1c:8b: 96:8e:55:d4:09:33:5a:d6:82:63:45:8f:03:ca:c8: ed:48:a9:d4:07:34:d8:24:b9:0c:c3:4b:18:8a:50: b8:0b:f1:f2:c7:24:97:3c:31:81:b8:2d:cb:2a:1d: 44:42:3d:9f:c3:e9:75:62:23:39:83:6d:3f:23:c4: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:10:F0:D8:1B:AC:D4:0B:04:DF:BB:78:6A:8B:12:95:F0:39:5F X509v3 Authority Key Identifier: keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:80:ed:aa:d7:21:53:60:ec:3d:21:92:6e:4e:4a:fe:8e: d1:c8:6f:5e:4f:77:3f:21:48:f5:fa:44:41:c2:cf:38:63:e6: a5:42:70:f6:18:ab:19:73:9b:4a:0d:04:ff:9e:a5:4c:9f:2a: 3b:47:6f:3b:6c:43:69:f5:cc:0d:5d:85:aa:b1:b8:d6:60:fc: 79:d2:c6:db:d0:e8:d1:f9:b4:91:19:bd:10:71:4e:15:fe:3e: 64:36:a0:21:48:7e:ac:bc:9c:1c:7f:9f:26:1b:a6:c7:69:9a: 90:4f:ee:9f:b7:25:74:72:e9:e0:e4:1c:79:e3:6c:70:a0:ab: 76:93:90:b4:94:e2:6d:14:b2:ad:fa:55:02:78:52:1c:6c:c5: 89:60:18:b2:6f:89:7e:e2:db:5c:de:09:bd:02:4f:61:56:a9: 52:42:07:31:69:68:1e:4c:58:d3:5c:fd:0c:46:13:db:35:36: 21:be:6a:44:57:2f:70:4e:13:bc:01:dc:d5:6b:20:ba:8f:95: 6b:7d:46:b6:f5:54:d1:dc:78:7a:05:b9:6e:ca:39:75:a6:33: 39:b5:c8:67:39:22:33:75:63:0d:59:b7:d8:aa:f8:f3:c2:aa: cf:bb:17:8b:f3:c9:94:b3:cd:0b:2e:22:c5:ab:38:73:61:08: 43:f0:da:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAFCYBev33IF6MGd3S2cWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh MjdiMTIwHhcNMjUxMjExMjAwMDM3WhcNMjUxMjEyMjAwMDM3WjAzMTEwLwYDVQQD Eyg5NTlkMTBmMGQ4MWJhY2Q0MGIwNGRmYmI3ODZhOGIxMjk1ZjAzOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IdQV3zogiap0Z1MmMbJNLbzqAFI ABPzQuBvv4M/BhcVik4QzDTUaxbmEifWpVm3LWvI9w78Z1EPBdbIblyzbY20c8Yg 94gGg4r27UAHgFWAGOWGyioeKCv0xpKxH6LHPdh4Dngwqifc8kNswRjUfz6e7oCJ hXq/5mamwAgv+AN0yRqDviDG7m/um7Fwk1qNmtCuX1hLwFiJpiF/UKk189VYYe90 SWDq/dOH/Ca7AkrXOCHjAGUS9pZ53To3YLqNHIuWjlXUCTNa1oJjRY8DysjtSKnU BzTYJLkMw0sYilC4C/HyxySXPDGBuC3LKh1EQj2fw+l1YiM5g20/I8Su0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWdEPDYG6zUCwTfu3hqixKV8DlfMB8GA1UdIwQY MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt ZWNiYjk0NDJmNTg5LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5 LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsKA7arX IVNg7D0hkm5OSv6O0chvXk93PyFI9fpEQcLPOGPmpUJw9hirGXObSg0E/56lTJ8q O0dvO2xDafXMDV2FqrG41mD8edLG29Do0fm0kRm9EHFOFf4+ZDagIUh+rLycHH+f Jhumx2makE/un7cldHLp4OQceeNscKCrdpOQtJTibRSyrfpVAnhSHGzFiWAYsm+J fuLbXN4JvQJPYVapUkIHMWloHkxY01z9DEYT2zU2Ib5qRFcvcE4TvAHc1Wsguo+V a31GtvVU0dx4egW5bso5daYzObXIZzkiM3VjDVm32Kr488Kqz7sXi/PJlLPNCy4i xas4c2EIQ/DaTw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:52 2025 by rpki-client