This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json) Hash identifier: R6JHOyklLq8viRFnmG2zkECRT4rJ9Js90PjX+emTafw= Subject key identifier: 82:FF:46:6B:45:44:0F:1B:89:12:D7:06:02:E8:1F:D5:FB:4F:04:20 Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Certificate serial: 019B5A51473EA2A815A030E823C95DE70E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:00:34 +0000 Manifest this update: Fri 26 Dec 2025 11:00:34 +0000 Manifest next update: Sat 27 Dec 2025 11:00:34 +0000 Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=) 2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: 3QrjYnalDjtSkXezy96rw+UEafRtLwjuswCQQPO5NAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:47:3e:a2:a8:15:a0:30:e8:23:c9:5d:e7:0e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Validity Not Before: Dec 26 11:00:34 2025 GMT Not After : Dec 27 11:00:34 2025 GMT Subject: CN=82ff466b45440f1b8912d70602e81fd5fb4f0420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:1a:db:0a:7e:d8:ff:46:1e:7c:e4:c5:3e: d4:4a:5b:3c:75:90:79:e8:bf:7a:72:42:6e:a1:ee: 05:ac:72:f3:43:ec:a8:05:97:47:0a:d0:aa:7a:b7: f5:c2:24:60:5e:0a:b3:d7:a9:2c:65:1b:08:5b:f5: 82:2f:72:91:73:be:65:cb:08:76:7d:57:90:73:5c: d4:81:cb:87:00:ec:95:97:fa:30:c7:7c:8e:96:42: 83:12:ad:4e:d6:4f:b1:ee:bd:0d:7c:21:2b:39:27: 1f:cd:16:35:21:00:91:2b:95:87:cc:96:7f:11:f3: 8a:4d:0b:3c:cb:2e:92:c4:bd:b2:6c:be:5d:04:38: dc:8e:c6:41:d0:e6:b1:1c:65:0d:c4:d0:53:16:89: 10:6c:18:26:89:e3:ca:c5:66:24:67:6b:e1:92:71: ab:a8:5c:ba:63:da:a5:9a:c6:f8:90:79:99:0e:dc: 4a:c0:29:48:cf:07:06:88:13:95:da:f6:a6:fc:ed: 1a:ef:27:1f:9a:7d:d3:ab:83:ce:53:7b:37:76:c1: cd:27:dc:91:9a:b3:2d:e8:91:d7:42:47:eb:f0:15: bc:08:62:6a:f7:c4:5e:1f:07:27:b7:e8:c0:1d:5b: 71:ca:66:e9:99:fa:4c:db:90:03:c1:75:98:cc:1b: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:46:6B:45:44:0F:1B:89:12:D7:06:02:E8:1F:D5:FB:4F:04:20 X509v3 Authority Key Identifier: keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:cc:97:82:80:01:bb:de:1f:25:5e:f8:f7:fa:da:5d:ab: b8:c4:de:a1:5a:bd:37:3b:4c:60:80:07:ad:5a:37:e9:1f:27: 34:d3:63:8d:02:40:ff:78:bc:22:6c:8d:ef:91:a4:a1:ba:3d: 6e:d8:28:18:a9:1f:0f:f8:5f:b0:d8:72:d3:33:f9:ae:ff:86: 18:f0:37:7d:4a:82:23:63:61:dd:b6:0d:6a:cf:1f:30:f4:29: 39:ff:74:d5:a2:c8:df:eb:68:64:fa:05:cb:4a:97:c1:10:d8: d7:b7:f5:4c:11:67:0a:e5:db:15:ef:fe:27:dd:85:f1:09:d4: 40:d7:a6:54:42:68:71:0e:b2:1d:cf:12:78:fe:ce:c1:5c:30: 8d:d5:6a:23:c4:f7:56:16:01:99:6c:60:ae:e9:68:5b:65:ac: 9d:e8:48:6e:f4:88:83:48:3d:f2:e0:3b:06:51:9a:c5:d1:b9: 6f:6d:61:ac:58:9c:8a:c1:ee:7e:fd:15:1d:f2:a0:0b:11:76: 32:d1:64:16:38:1a:f8:cc:b9:12:39:4f:a7:db:c4:a6:82:53: ad:b7:6e:c1:69:d3:b9:00:c1:53:92:b6:f6:52:2b:d4:fd:8d: 80:98:56:8b:f2:cf:85:13:00:f8:99:fd:39:c8:d8:0f:12:89: fb:a5:46:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUc+oqgVoDDoI8ld5w5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm Y2NiMWQwHhcNMjUxMjI2MTEwMDM0WhcNMjUxMjI3MTEwMDM0WjAzMTEwLwYDVQQD Eyg4MmZmNDY2YjQ1NDQwZjFiODkxMmQ3MDYwMmU4MWZkNWZiNGYwNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEca2wp+2P9GHnzkxT7USls8dZB5 6L96ckJuoe4FrHLzQ+yoBZdHCtCqerf1wiRgXgqz16ksZRsIW/WCL3KRc75lywh2 fVeQc1zUgcuHAOyVl/owx3yOlkKDEq1O1k+x7r0NfCErOScfzRY1IQCRK5WHzJZ/ EfOKTQs8yy6SxL2ybL5dBDjcjsZB0OaxHGUNxNBTFokQbBgmiePKxWYkZ2vhknGr qFy6Y9qlmsb4kHmZDtxKwClIzwcGiBOV2vam/O0a7ycfmn3Tq4POU3s3dsHNJ9yR mrMt6JHXQkfr8BW8CGJq98ReHwcnt+jAHVtxymbpmfpM25ADwXWYzBtntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL/RmtFRA8biRLXBgLoH9X7TwQgMB8GA1UdIwQY MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjjMl4KA AbveHyVe+Pf62l2ruMTeoVq9NztMYIAHrVo36R8nNNNjjQJA/3i8ImyN75Gkobo9 btgoGKkfD/hfsNhy0zP5rv+GGPA3fUqCI2Nh3bYNas8fMPQpOf901aLI3+toZPoF y0qXwRDY17f1TBFnCuXbFe/+J92F8QnUQNemVEJocQ6yHc8SeP7OwVwwjdVqI8T3 VhYBmWxgruloW2WsnehIbvSIg0g98uA7BlGaxdG5b21hrFicisHufv0VHfKgCxF2 MtFkFjga+My5EjlPp9vEpoJTrbduwWnTuQDBU5K29lIr1P2NgJhWi/LPhRMA+Jn9 OcjYDxKJ+6VG+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:55 2025 by rpki-client