This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json) Hash identifier: XZobPLTq9pOVdx/qyW/QPdLNytRQjaQtonkXJ+bTtmM= Subject key identifier: 0E:18:37:E2:C3:1F:BD:53:E4:6D:35:F0:05:EF:9E:A4:01:23:3D:A1 Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74 Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774 Certificate serial: 019ABD085F25DC9971AE15AE0F1D7C5E5618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft Manifest number: 1595 Signing time: Tue 25 Nov 2025 22:00:33 +0000 Manifest this update: Tue 25 Nov 2025 22:00:33 +0000 Manifest next update: Wed 26 Nov 2025 22:00:33 +0000 Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=) 2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: mjYB3FozxxWHc1mzmda9sBo3qJcDfgdzetSUaCwHqKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:08:5f:25:dc:99:71:ae:15:ae:0f:1d:7c:5e:56:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774 Validity Not Before: Nov 25 22:00:33 2025 GMT Not After : Nov 26 22:00:33 2025 GMT Subject: CN=0e1837e2c31fbd53e46d35f005ef9ea401233da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:a6:4e:39:78:36:95:56:a8:c7:ec:6c:1f: 86:dd:bf:2c:d1:58:bf:65:06:24:d8:60:38:19:2c: d5:e1:1c:6e:a3:20:8c:4d:8e:81:2b:f1:fb:cb:e8: 44:cf:24:d0:ef:09:2d:c8:0d:cd:a1:2e:46:c6:11: 91:99:80:3c:f6:95:21:53:38:a2:d2:c2:a9:d7:8f: 72:44:9f:cf:ef:fd:51:6e:e4:51:b8:1e:c5:89:5a: 7c:89:e9:56:37:dc:25:51:9b:b4:e7:a2:c0:71:d6: 4b:83:37:3e:9b:37:98:27:b6:1d:67:f3:09:a4:10: b0:f1:e1:b3:17:72:e0:fa:19:b2:ee:50:9c:4e:d1: 62:fb:a3:9c:0c:4c:ca:1e:da:bb:8c:fa:b9:81:82: 23:b3:6c:6a:e3:a5:d4:98:66:9b:62:24:63:af:dc: 08:75:a0:7a:d0:c0:ac:62:e2:b5:2d:34:fb:6d:19: 38:9c:0a:b1:c4:31:7e:f6:ad:26:a5:5c:11:fa:b7: 1a:bf:d4:72:8c:b2:bc:ea:b3:f5:e1:d6:5c:5f:66: b4:13:2e:a7:f2:a7:f7:d1:5d:73:3d:7d:a2:15:2b: 36:c7:6d:a4:55:32:4d:f7:f5:31:f4:8b:19:56:84: ca:b0:a7:73:a3:a6:6d:67:90:6e:a3:ef:36:a3:4c: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:37:E2:C3:1F:BD:53:E4:6D:35:F0:05:EF:9E:A4:01:23:3D:A1 X509v3 Authority Key Identifier: keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:be:38:d2:e1:aa:8b:bf:f2:81:fc:3c:f6:58:25:0d:6f:dc: 33:5d:84:45:3c:27:6d:88:e2:79:3b:d0:9a:0c:f1:2f:76:7b: 44:75:97:c0:29:b7:c5:7c:1a:c3:98:a5:6f:64:66:2d:45:b1: a4:ef:b4:60:c4:b7:10:7d:ce:64:9a:90:17:25:2a:1b:2a:f9: bf:73:21:04:b8:5d:e9:c9:66:0f:81:39:2c:20:a1:74:48:ca: 3d:79:c0:0f:15:1d:18:e9:77:f3:81:3f:71:8e:8d:08:ef:c0: e5:b3:7b:b5:cb:3e:b3:ea:6d:35:bb:91:85:2f:01:65:fc:68: 1b:11:a4:00:c0:31:a9:2a:46:c2:ab:5f:92:71:53:8d:6a:cd: c0:a8:bd:e2:00:2e:32:29:d9:e4:32:90:40:60:d7:00:86:5d: 61:ef:0a:38:24:4f:21:a4:9a:5d:ed:a9:c8:97:05:1c:5e:98: f2:20:6f:c9:84:ed:4b:8c:00:e6:31:89:17:bc:9a:9c:e5:dd: 20:9b:da:41:9e:66:c9:cd:c0:ef:55:fa:36:1a:89:12:08:11: 65:b4:78:50:db:84:5f:84:17:57:db:71:8c:1f:d5:c4:26:24: 22:aa:1c:98:aa:69:e7:1b:f7:20:e5:a7:f0:31:91:13:5b:15: 61:6a:e3:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq9CF8l3JlxrhWuDx18XlYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi NDQ3NzQwHhcNMjUxMTI1MjIwMDMzWhcNMjUxMTI2MjIwMDMzWjAzMTEwLwYDVQQD EygwZTE4MzdlMmMzMWZiZDUzZTQ2ZDM1ZjAwNWVmOWVhNDAxMjMzZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzimTjl4NpVWqMfsbB+G3b8s0Vi/ ZQYk2GA4GSzV4RxuoyCMTY6BK/H7y+hEzyTQ7wktyA3NoS5GxhGRmYA89pUhUzii 0sKp149yRJ/P7/1RbuRRuB7FiVp8ielWN9wlUZu056LAcdZLgzc+mzeYJ7YdZ/MJ pBCw8eGzF3Lg+hmy7lCcTtFi+6OcDEzKHtq7jPq5gYIjs2xq46XUmGabYiRjr9wI daB60MCsYuK1LTT7bRk4nAqxxDF+9q0mpVwR+rcav9RyjLK86rP14dZcX2a0Ey6n 8qf30V1zPX2iFSs2x22kVTJN9/Ux9IsZVoTKsKdzo6ZtZ5Buo+82o0zQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4YN+LDH71T5G018AXvnqQBIz2hMB8GA1UdIwQY MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3 LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr440uGq i7/ygfw89lglDW/cM12ERTwnbYjieTvQmgzxL3Z7RHWXwCm3xXwaw5ilb2RmLUWx pO+0YMS3EH3OZJqQFyUqGyr5v3MhBLhd6clmD4E5LCChdEjKPXnADxUdGOl384E/ cY6NCO/A5bN7tcs+s+ptNbuRhS8BZfxoGxGkAMAxqSpGwqtfknFTjWrNwKi94gAu MinZ5DKQQGDXAIZdYe8KOCRPIaSaXe2pyJcFHF6Y8iBvyYTtS4wA5jGJF7yanOXd IJvaQZ5myc3A71X6NhqJEggRZbR4UNuEX4QXV9txjB/VxCYkIqocmKpp5xv3IOWn 8DGRE1sVYWrjVg== -----END CERTIFICATE-----Generated at Wed Nov 26 03:47:31 2025 by rpki-client