This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json) Hash identifier: f3ueS9tsjDIb4QL/pEL5VeXH5X/mXA6+vuCiF0Lhm1A= Subject key identifier: 32:68:B8:49:29:59:C6:A1:AC:90:C7:44:B9:A1:D4:5E:CB:00:6D:42 Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Certificate serial: 019B2062475137698B966FAFA6CCB1618067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft Manifest number: 03D3 Signing time: Mon 15 Dec 2025 05:01:10 +0000 Manifest this update: Mon 15 Dec 2025 05:01:10 +0000 Manifest next update: Tue 16 Dec 2025 05:01:10 +0000 Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=) 2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=) 3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: BzgQ32EFID/AEEEb0tFgD13z1oXfGh/kzVg2azFxILk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:47:51:37:69:8b:96:6f:af:a6:cc:b1:61:80:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Validity Not Before: Dec 15 05:01:10 2025 GMT Not After : Dec 16 05:01:10 2025 GMT Subject: CN=3268b8492959c6a1ac90c744b9a1d45ecb006d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:a4:aa:88:bd:3d:c5:ee:47:94:7a:43:4e: d3:e7:3e:57:62:ff:09:7b:cf:42:4d:18:40:bf:1e: 54:60:8f:0f:31:79:00:85:43:4a:68:96:77:38:d3: 7d:6b:74:d0:df:7a:f0:c7:fb:2e:3d:50:7e:a0:3c: 96:19:c6:aa:d9:1d:46:3a:8d:16:6b:b0:15:7a:01: 7a:ef:16:8e:3b:c4:f1:ce:dd:a8:a8:05:82:23:b6: 00:bf:da:a8:ba:60:a8:39:82:e3:ee:48:85:9b:0d: 51:c1:0e:23:20:98:13:03:90:1c:f9:94:20:2e:7b: 0f:0d:55:88:2b:8f:74:3f:b4:ac:19:a5:97:22:77: 0e:ce:48:6e:b9:bf:37:99:ab:cc:ae:63:fe:16:13: a2:79:01:05:56:1f:fe:e4:98:d7:58:d8:2e:0f:41: 7e:66:17:f9:6f:b3:05:b4:29:91:bf:80:51:b7:ff: af:a5:21:72:57:df:dc:f7:c2:d9:a3:53:01:f4:60: 5b:ce:ab:16:da:d3:29:1b:32:62:81:4a:1a:85:de: 8a:d5:6d:5a:78:05:8c:bd:5e:a4:a5:4e:4a:5a:88: 7c:a0:ab:0e:e6:3c:dc:21:2d:3f:28:98:fd:de:57: 56:0c:de:98:29:a4:ce:07:57:0b:08:12:eb:b4:fa: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:B8:49:29:59:C6:A1:AC:90:C7:44:B9:A1:D4:5E:CB:00:6D:42 X509v3 Authority Key Identifier: keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:3a:14:97:11:52:7c:99:91:54:2b:dc:13:11:3b:14:10: 12:98:de:71:10:33:72:08:5a:5f:0d:5c:b4:bd:4b:ec:f6:a5: 08:36:a6:ee:40:0a:95:fc:7c:c7:86:83:5c:e7:58:3c:ae:61: 87:a1:00:9e:79:a9:8e:c8:a4:14:5d:15:d3:5d:5b:46:d8:f6: c4:5d:9d:ab:6e:8c:d3:d7:0a:ee:97:96:e9:de:57:a1:24:1a: 9c:4c:19:bb:6b:74:7c:16:12:69:eb:09:b3:31:5d:bb:6d:a2: 13:1c:b2:d1:85:ff:b8:98:46:2e:d6:f3:b5:fc:17:ba:f1:5b: fc:28:62:b0:67:1d:e7:8f:f8:c7:f2:ba:7f:b3:21:83:3c:41: 3e:f5:a3:6a:05:f1:4c:5e:59:36:16:97:39:94:a2:99:00:4e: 4c:9a:ff:3d:ae:37:d2:86:36:8d:3d:cb:e4:50:10:0b:40:c5: 1e:1f:59:a9:02:39:7b:f6:7f:ae:a9:b2:77:8b:b7:2d:a6:37: 92:51:ad:5f:44:7c:d3:2c:f1:b5:4f:cb:40:da:60:1a:75:38: 99:99:f9:b8:9f:28:59:de:ad:c7:57:c0:1d:53:04:de:d8:65: ef:76:c9:9f:bb:63:ba:ed:19:9f:18:fe:b8:91:ff:89:fc:7a: bc:33:f5:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYkdRN2mLlm+vpsyxYYBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj ZjU1MjYwHhcNMjUxMjE1MDUwMTEwWhcNMjUxMjE2MDUwMTEwWjAzMTEwLwYDVQQD EygzMjY4Yjg0OTI5NTljNmExYWM5MGM3NDRiOWExZDQ1ZWNiMDA2ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpSkqoi9PcXuR5R6Q07T5z5XYv8J e89CTRhAvx5UYI8PMXkAhUNKaJZ3ONN9a3TQ33rwx/suPVB+oDyWGcaq2R1GOo0W a7AVegF67xaOO8Txzt2oqAWCI7YAv9qoumCoOYLj7kiFmw1RwQ4jIJgTA5Ac+ZQg LnsPDVWIK490P7SsGaWXIncOzkhuub83mavMrmP+FhOieQEFVh/+5JjXWNguD0F+ Zhf5b7MFtCmRv4BRt/+vpSFyV9/c98LZo1MB9GBbzqsW2tMpGzJigUoahd6K1W1a eAWMvV6kpU5KWoh8oKsO5jzcIS0/KJj93ldWDN6YKaTOB1cLCBLrtPovlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJouEkpWcahrJDHRLmh1F7LAG1CMB8GA1UdIwQY MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEE6FJcR UnyZkVQr3BMROxQQEpjecRAzcghaXw1ctL1L7PalCDam7kAKlfx8x4aDXOdYPK5h h6EAnnmpjsikFF0V011bRtj2xF2dq26M09cK7peW6d5XoSQanEwZu2t0fBYSaesJ szFdu22iExyy0YX/uJhGLtbztfwXuvFb/ChisGcd54/4x/K6f7MhgzxBPvWjagXx TF5ZNhaXOZSimQBOTJr/Pa430oY2jT3L5FAQC0DFHh9ZqQI5e/Z/rqmyd4u3LaY3 klGtX0R80yzxtU/LQNpgGnU4mZn5uJ8oWd6tx1fAHVME3thl73bJn7tjuu0Znxj+ uJH/ifx6vDP1WA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:45 2025 by rpki-client