This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json) Hash identifier: aX5n1SAWguus85Z8IYTjwIKGawtGch58VIjvJCHpwoo= Subject key identifier: 31:32:31:01:EC:32:60:44:FA:19:5D:55:AD:AD:C5:08:CB:C7:FF:80 Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f Certificate serial: 019B19F1B909878A7CDB0C7E5C5B83BE49AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft Manifest number: 1703 Signing time: Sat 13 Dec 2025 23:00:30 +0000 Manifest this update: Sat 13 Dec 2025 23:00:30 +0000 Manifest next update: Sun 14 Dec 2025 23:00:30 +0000 Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=) 2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: srOXihON+goDyE97i/HtOVQLMh3McUuAcAnlWpRO14k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:b9:09:87:8a:7c:db:0c:7e:5c:5b:83:be:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f Validity Not Before: Dec 13 23:00:30 2025 GMT Not After : Dec 14 23:00:30 2025 GMT Subject: CN=31323101ec326044fa195d55adadc508cbc7ff80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:4e:c8:c8:8b:21:85:1b:57:7c:8a:18:12: 5e:21:17:50:5b:f9:a7:25:a9:72:17:34:4b:d5:5f: d0:13:d8:f3:8d:c0:18:4d:9d:50:6f:ac:8a:f2:4b: c3:30:32:8e:ba:dd:92:02:18:8f:1c:63:e6:b2:93: 8a:88:95:88:3d:46:15:c5:43:f7:18:cb:04:ff:ca: 19:53:1d:a9:5e:a9:d2:7d:2a:83:ce:75:2d:b4:01: f3:87:65:a9:cd:20:69:9f:f7:56:cd:88:d1:ae:74: cf:22:67:bb:c9:72:2e:3c:8e:1a:aa:5e:47:51:86: c5:58:53:2c:74:62:57:71:26:56:cc:ac:51:6b:24: 4b:c8:3c:96:65:de:87:c6:cd:1b:53:91:45:6c:5c: 24:8d:ed:e7:fb:0c:0b:90:4c:dc:e0:8a:e0:29:95: 57:24:5e:e8:17:bb:dd:ff:ed:73:d9:12:15:cd:39: 9c:5e:1c:eb:35:4e:87:25:25:ee:e0:44:4e:4d:a9: 3d:08:91:57:5c:13:e6:74:1b:38:c1:8e:fb:d8:3c: d8:0e:ee:b7:3e:b6:da:65:e5:e4:c9:86:40:5f:5b: 3a:06:a5:db:ce:c9:e2:6f:e8:54:3c:44:6f:f5:1e: 66:99:2f:2f:a1:9f:c4:34:c3:94:86:8a:88:dd:a3: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:32:31:01:EC:32:60:44:FA:19:5D:55:AD:AD:C5:08:CB:C7:FF:80 X509v3 Authority Key Identifier: keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4d:1a:1a:0b:e2:26:0c:65:2b:90:e0:65:b9:32:8d:8f:df: 12:2f:07:d3:d0:4b:32:cc:33:f9:a0:0c:f7:e1:de:52:bd:d4: 35:5a:4e:a2:3d:66:1f:a0:94:29:5a:73:c4:6e:f8:1d:f8:1b: ff:ac:44:30:1e:48:8c:4e:49:00:12:51:a0:35:fe:da:8d:26: 2f:7f:dd:4a:40:0d:5f:3a:8e:21:dc:d0:58:55:f5:8a:8f:fa: d2:c5:71:c9:a9:3b:85:a5:86:4b:81:70:43:0e:f7:f3:c8:11: 8b:28:a3:00:a8:1f:a1:cc:de:41:27:d3:e5:dd:88:81:87:0d: 53:e5:d8:08:8b:6a:db:80:9a:b9:59:7c:5f:1f:19:f7:84:39: d6:dd:ac:60:9a:c1:d6:67:49:27:07:2f:57:2f:41:57:7f:34: a1:52:d6:00:55:33:52:60:6c:a1:31:56:a7:95:62:ad:f8:bc: 37:d2:20:1b:18:cd:1c:0e:a9:b3:82:1d:5d:18:7a:35:f8:29: 4d:08:cf:d0:5c:4b:a3:b7:f2:f6:46:07:96:fc:99:c7:c6:1d: 0f:75:7e:7b:2c:67:47:00:09:bb:8c:4d:ef:64:0b:df:c7:d4: d9:72:e2:5b:68:c8:e4:9d:d8:f4:86:5d:eb:56:fe:13:d6:20: c3:e7:17:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8bkJh4p82wx+XFuDvkmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzA4OGVlNzFjYjY4MTU5OTBkYzI0ODY3YjRhMGUzMTk2 ODAwMGYwHhcNMjUxMjEzMjMwMDMwWhcNMjUxMjE0MjMwMDMwWjAzMTEwLwYDVQQD EygzMTMyMzEwMWVjMzI2MDQ0ZmExOTVkNTVhZGFkYzUwOGNiYzdmZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmitOyMiLIYUbV3yKGBJeIRdQW/mn JalyFzRL1V/QE9jzjcAYTZ1Qb6yK8kvDMDKOut2SAhiPHGPmspOKiJWIPUYVxUP3 GMsE/8oZUx2pXqnSfSqDznUttAHzh2WpzSBpn/dWzYjRrnTPIme7yXIuPI4aql5H UYbFWFMsdGJXcSZWzKxRayRLyDyWZd6Hxs0bU5FFbFwkje3n+wwLkEzc4IrgKZVX JF7oF7vd/+1z2RIVzTmcXhzrNU6HJSXu4EROTak9CJFXXBPmdBs4wY772DzYDu63 PrbaZeXkyYZAX1s6BqXbzsnib+hUPERv9R5mmS8voZ/ENMOUhoqI3aOQKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEyMQHsMmBE+hldVa2txQjLx/+AMB8GA1UdIwQY MBaAFI4wiO5xy2gVmQ3CSGe0oOMZaAAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2Et OWVjMmEyYTA5NGQ3LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2EtOWVjMmEyYTA5NGQ3 LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE0aGgvi JgxlK5DgZbkyjY/fEi8H09BLMswz+aAM9+HeUr3UNVpOoj1mH6CUKVpzxG74Hfgb /6xEMB5IjE5JABJRoDX+2o0mL3/dSkANXzqOIdzQWFX1io/60sVxyak7haWGS4Fw Qw7388gRiyijAKgfoczeQSfT5d2IgYcNU+XYCItq24CauVl8Xx8Z94Q51t2sYJrB 1mdJJwcvVy9BV380oVLWAFUzUmBsoTFWp5Virfi8N9IgGxjNHA6ps4IdXRh6Nfgp TQjP0FxLo7fy9kYHlvyZx8YdD3V+eyxnRwAJu4xN72QL38fU2XLiW2jI5J3Y9IZd 61b+E9Ygw+cXBw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:56 2025 by rpki-client