This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json) Hash identifier: 1e9CXpp3WvN516kU3LZfIp3JfAktttWxiIz86LZe5cM= Subject key identifier: 4A:D3:33:6E:6B:23:87:31:08:E4:26:5A:C4:2B:8A:0A:08:47:F3:FD Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Certificate serial: 019B19F244600E3C53C895E38A13ECB75287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 23:01:06 +0000 Manifest this update: Sat 13 Dec 2025 23:01:06 +0000 Manifest next update: Sun 14 Dec 2025 23:01:06 +0000 Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: 2kMH6NYO5OEAJeSRMYztFr3wyQDEuA9Fpg88qPT2uoo=) 2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:44:60:0e:3c:53:c8:95:e3:8a:13:ec:b7:52:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Validity Not Before: Dec 13 23:01:06 2025 GMT Not After : Dec 14 23:01:06 2025 GMT Subject: CN=4ad3336e6b23873108e4265ac42b8a0a0847f3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:53:01:99:e2:3f:34:a0:87:f0:a4:8d:cb: 48:be:7c:c0:14:1a:fd:0f:d6:01:20:9e:e6:6f:61: 05:7a:1a:95:f1:4f:6b:19:18:0b:9c:0e:3f:cc:cf: 22:96:de:49:d0:1d:79:5f:92:25:c0:3e:32:e3:a7: 5b:3a:75:98:49:a1:d1:6b:aa:2c:ce:09:82:90:3f: 4b:8b:4d:1b:b5:0a:64:97:23:2d:08:89:50:5f:07: c1:b8:5d:53:19:92:28:88:60:59:0a:3f:71:19:6e: 88:8c:b3:d7:26:f0:e3:14:12:d0:82:69:91:8c:b5: 05:6e:f5:e4:15:81:e4:2e:95:d2:1f:c9:bf:68:0a: 7e:cc:8d:2a:2f:5d:46:34:54:01:d2:fe:68:a5:5c: 77:8a:0d:16:48:37:ff:9e:ed:7d:74:05:33:b6:49: d1:d2:d3:87:69:c5:ab:70:45:0a:0c:9c:20:4c:5e: 0b:a4:75:ac:90:f4:ed:d4:f1:f6:50:a6:47:eb:a3: 5f:0b:58:ca:16:d6:61:62:f5:32:0d:66:57:67:a3: 4d:63:8a:df:4a:0a:0f:46:3f:cb:c7:4d:16:c0:8e: 6f:e4:97:6e:7d:fc:a3:1a:e6:92:75:42:a1:a3:12: aa:ff:09:25:80:ac:cc:7f:68:4a:94:9e:6c:6d:7c: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D3:33:6E:6B:23:87:31:08:E4:26:5A:C4:2B:8A:0A:08:47:F3:FD X509v3 Authority Key Identifier: keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:e0:c4:86:ab:ce:e5:ea:69:75:92:80:76:0f:df:3d:03: 53:65:94:77:65:2b:05:44:c7:a9:eb:2f:fd:cd:4d:3b:29:e5: c6:5e:ae:8d:0d:5c:c2:cf:e7:c2:c5:a1:b8:1b:cd:71:43:00: 3b:f9:0f:f5:9b:40:b1:d6:4a:20:99:bf:ff:c8:97:8f:db:f3: 29:fa:c5:ef:9d:1a:24:63:89:76:e7:64:37:18:43:b7:27:1e: f4:8f:51:7d:40:9c:86:7a:6e:b1:41:6f:28:5e:60:54:67:58: 31:b4:29:39:fe:83:9d:0b:ee:6a:51:08:d0:f4:35:b6:c6:5c: 5b:ec:cd:0e:f8:b0:d3:58:1e:ce:1c:62:75:db:bc:2b:f4:c5: 84:e0:56:3d:51:7b:9a:f3:9a:df:37:2c:09:de:a2:99:6b:63: 60:2f:0f:2e:c8:2f:0b:16:42:10:fd:70:f7:d1:0c:fd:d0:b6: 94:78:f8:42:2b:c1:d3:0b:8f:de:e7:e6:86:9b:a8:f5:7b:f3: 09:06:fd:87:bb:58:c3:83:fc:79:5e:e9:bc:24:52:36:af:f1: ea:c7:ae:9d:3e:11:85:40:0d:1a:82:18:dc:a3:ae:99:28:14: d3:08:ab:28:d7:e6:a0:96:39:e5:91:99:73:ea:bb:44:87:81: 38:05:6f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8kRgDjxTyJXjihPst1KHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj ZTNmYTkwHhcNMjUxMjEzMjMwMTA2WhcNMjUxMjE0MjMwMTA2WjAzMTEwLwYDVQQD Eyg0YWQzMzM2ZTZiMjM4NzMxMDhlNDI2NWFjNDJiOGEwYTA4NDdmM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW9TAZniPzSgh/CkjctIvnzAFBr9 D9YBIJ7mb2EFehqV8U9rGRgLnA4/zM8ilt5J0B15X5IlwD4y46dbOnWYSaHRa6os zgmCkD9Li00btQpklyMtCIlQXwfBuF1TGZIoiGBZCj9xGW6IjLPXJvDjFBLQgmmR jLUFbvXkFYHkLpXSH8m/aAp+zI0qL11GNFQB0v5opVx3ig0WSDf/nu19dAUztknR 0tOHacWrcEUKDJwgTF4LpHWskPTt1PH2UKZH66NfC1jKFtZhYvUyDWZXZ6NNY4rf SgoPRj/Lx00WwI5v5JduffyjGuaSdUKhoxKq/wklgKzMf2hKlJ5sbXxXDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErTM25rI4cxCOQmWsQrigoIR/P9MB8GA1UdIwQY MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt MzI5Y2I1MTZkOTM3LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3 LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZPgxIar zuXqaXWSgHYP3z0DU2WUd2UrBUTHqesv/c1NOynlxl6ujQ1cws/nwsWhuBvNcUMA O/kP9ZtAsdZKIJm//8iXj9vzKfrF750aJGOJdudkNxhDtyce9I9RfUCchnpusUFv KF5gVGdYMbQpOf6DnQvualEI0PQ1tsZcW+zNDviw01gezhxiddu8K/TFhOBWPVF7 mvOa3zcsCd6imWtjYC8PLsgvCxZCEP1w99EM/dC2lHj4QivB0wuP3ufmhpuo9Xvz CQb9h7tYw4P8eV7pvCRSNq/x6seunT4RhUANGoIY3KOumSgU0wirKNfmoJY55ZGZ c+q7RIeBOAVvDg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:34 2025 by rpki-client