This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json) Hash identifier: C7rtXSuoZfKpDDFJ/ydVE7FAlJDkrDFgwLU23v15J7o= Subject key identifier: 28:FA:7D:75:E5:4E:B9:95:91:F1:F5:43:8C:93:51:CF:D0:68:F6:E3 Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Certificate serial: 019B1202A962CD474480D2FB095CD96B41C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft Manifest number: 1785 Signing time: Fri 12 Dec 2025 10:02:02 +0000 Manifest this update: Fri 12 Dec 2025 10:02:02 +0000 Manifest next update: Sat 13 Dec 2025 10:02:02 +0000 Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=) 2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=) 3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=) 4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=) 5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: f8jAPT/G0cKktfRbojHbbZJ/aAE5CvfOJZo6x6nT4b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:a9:62:cd:47:44:80:d2:fb:09:5c:d9:6b:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Validity Not Before: Dec 12 10:02:02 2025 GMT Not After : Dec 13 10:02:02 2025 GMT Subject: CN=28fa7d75e54eb99591f1f5438c9351cfd068f6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:9f:36:5c:d7:d0:c4:df:59:0c:f8:e1:77: b0:de:ed:7c:97:38:c9:37:b8:ab:14:5f:31:a5:22: 29:ba:31:3a:f6:d0:c1:f3:af:94:f3:e3:64:11:c9: 9c:73:64:e2:a1:1d:1f:2f:8b:31:43:fe:15:7f:28: f9:81:c5:f3:01:35:91:2c:e7:98:d2:e4:5d:df:ba: 7e:71:3a:dd:a3:14:33:a6:0e:72:cd:5b:d3:dd:19: 87:28:66:45:03:0b:41:65:de:0a:03:79:76:c6:fb: 67:61:c6:1f:c5:e6:da:21:26:62:7a:f4:9c:7e:2e: 22:c4:89:fc:59:58:69:7a:d1:3d:87:98:c3:4d:14: cf:b9:fa:d1:c3:bd:85:c6:e1:e0:dd:43:d7:2c:f2: f9:fb:7d:97:11:ce:fc:d2:89:92:cc:3b:e3:da:c4: a1:70:4c:26:29:68:91:bc:d6:1e:19:0f:47:33:07: d2:c5:0b:6c:47:71:11:3b:63:ec:ac:35:63:93:6d: 8f:46:bf:dd:ad:3f:2a:39:39:43:b1:07:15:64:5a: 39:89:40:3b:be:09:62:0b:4d:2d:19:34:84:95:3e: 70:16:ff:4b:e6:b7:4a:9f:a7:cb:16:ca:16:35:36: 5f:4d:0a:19:85:21:e3:c5:a9:14:1a:51:cc:e1:8f: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:7D:75:E5:4E:B9:95:91:F1:F5:43:8C:93:51:CF:D0:68:F6:E3 X509v3 Authority Key Identifier: keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bc:37:95:4f:0a:e9:29:4e:d7:d4:58:fe:b3:80:ec:7a:d2: c8:f0:d7:8d:8c:02:50:b9:fa:4d:f5:7f:2f:1c:8e:26:63:22: 85:88:5e:49:d8:9b:3f:07:f4:e7:a0:5b:09:60:83:50:fd:a5: fe:19:f9:fa:05:28:4d:40:1b:31:6a:3f:08:be:b1:ab:89:6e: 02:78:dc:70:48:40:06:63:f9:ec:74:86:44:2a:32:f7:1a:93: 13:cd:cf:3d:f6:90:b1:d6:89:8e:45:0f:9b:20:46:d4:95:47: 2a:a1:cc:cb:ec:5e:11:39:63:d1:98:26:ab:c4:ea:6d:55:11: b2:3e:fa:51:e0:3b:3e:d7:d2:4c:99:db:61:f0:2a:6b:c2:6c: ac:3b:96:1f:80:9c:2b:7b:f4:71:1a:9a:23:e0:a4:75:77:66: 47:cc:a6:68:91:54:26:63:d2:5b:77:83:13:5a:91:34:74:9e: 7d:98:9e:7b:0f:e1:37:ca:66:c0:39:b4:3f:3e:7b:66:a5:03: e9:12:93:41:3b:48:40:04:d2:37:c1:63:a7:09:4c:84:c3:24: f5:a8:b4:ee:a0:0b:04:b3:14:78:f9:84:10:ff:a1:7d:3c:64: e0:6d:35:3a:b4:0d:67:97:3f:51:58:23:fd:95:15:bc:bf:19: ba:ed:24:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAqlizUdEgNL7CVzZa0HIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4 Y2FiODEwHhcNMjUxMjEyMTAwMjAyWhcNMjUxMjEzMTAwMjAyWjAzMTEwLwYDVQQD EygyOGZhN2Q3NWU1NGViOTk1OTFmMWY1NDM4YzkzNTFjZmQwNjhmNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx+fNlzX0MTfWQz44Xew3u18lzjJ N7irFF8xpSIpujE69tDB86+U8+NkEcmcc2TioR0fL4sxQ/4Vfyj5gcXzATWRLOeY 0uRd37p+cTrdoxQzpg5yzVvT3RmHKGZFAwtBZd4KA3l2xvtnYcYfxebaISZievSc fi4ixIn8WVhpetE9h5jDTRTPufrRw72FxuHg3UPXLPL5+32XEc780omSzDvj2sSh cEwmKWiRvNYeGQ9HMwfSxQtsR3ERO2PsrDVjk22PRr/drT8qOTlDsQcVZFo5iUA7 vgliC00tGTSElT5wFv9L5rdKn6fLFsoWNTZfTQoZhSHjxakUGlHM4Y9d1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj6fXXlTrmVkfH1Q4yTUc/QaPbjMB8GA1UdIwQY MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLw3lU8K 6SlO19RY/rOA7HrSyPDXjYwCULn6TfV/LxyOJmMihYheSdibPwf056BbCWCDUP2l /hn5+gUoTUAbMWo/CL6xq4luAnjccEhABmP57HSGRCoy9xqTE83PPfaQsdaJjkUP myBG1JVHKqHMy+xeETlj0Zgmq8TqbVURsj76UeA7PtfSTJnbYfAqa8JsrDuWH4Cc K3v0cRqaI+CkdXdmR8ymaJFUJmPSW3eDE1qRNHSefZieew/hN8pmwDm0Pz57ZqUD 6RKTQTtIQATSN8FjpwlMhMMk9ai07qALBLMUePmEEP+hfTxk4G01OrQNZ5c/UVgj /ZUVvL8Zuu0kAA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:01 2025 by rpki-client