This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json) Hash identifier: 6s90XZL/cGKBUiuZSO6piC33iuJBhK/q90wJn6DIYcM= Subject key identifier: CB:E3:AC:4F:73:2F:0B:93:EB:7B:A3:9C:A7:A4:E3:78:5F:32:55:DE Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Certificate serial: 019B3C0FE752B27A0093C55F8F33D3BFE9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft Manifest number: 159F Signing time: Sat 20 Dec 2025 14:00:33 +0000 Manifest this update: Sat 20 Dec 2025 14:00:33 +0000 Manifest next update: Sun 21 Dec 2025 14:00:33 +0000 Files and hashes: 1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=) 2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: Tk0wJKjQiTw1icViLV34QmdCQkKCkq6awvzFudRp1IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e7:52:b2:7a:00:93:c5:5f:8f:33:d3:bf:e9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9 Validity Not Before: Dec 20 14:00:33 2025 GMT Not After : Dec 21 14:00:33 2025 GMT Subject: CN=cbe3ac4f732f0b93eb7ba39ca7a4e3785f3255de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:c1:96:ac:67:68:ea:9d:94:e7:34:35:44: eb:5f:20:00:d5:e1:91:ad:e9:a3:b1:32:9d:d9:5f: fa:86:63:60:bf:f0:34:eb:fd:ee:de:19:a4:c9:aa: 62:a8:34:08:93:ac:e1:bc:77:f4:39:22:7a:0d:c4: 0c:7b:ac:ff:c9:4c:52:a0:ab:f1:96:3f:47:e3:55: 50:61:4a:61:94:7e:e7:3f:bb:c8:78:9c:1d:bb:a2: 63:cc:22:49:71:a1:07:2e:dd:94:1b:3d:11:a7:0e: 94:9d:d3:9f:4c:31:e1:26:a5:e3:bb:88:82:df:48: ba:f0:4c:d4:70:d1:79:30:8c:cf:29:d6:90:8b:82: 32:06:e7:23:09:ac:83:57:15:6e:ec:e9:e9:4f:6d: a6:26:f8:0d:6d:ab:39:0c:ed:f2:9c:d9:ba:10:54: 03:3e:cc:cb:c1:4b:e6:e5:8a:f3:cd:f5:95:81:25: bc:15:85:f7:5e:18:d1:39:c4:89:45:0c:9a:71:94: 60:8d:8d:f7:6a:09:ff:8d:60:b3:eb:b4:07:35:96: b4:f7:ce:62:9b:a4:e3:77:46:84:47:06:66:1c:25: 79:20:33:24:b3:a6:ce:d4:8f:fc:d0:8a:03:a5:8f: 31:f3:33:a2:77:17:68:92:c9:00:06:57:31:e9:a2: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:AC:4F:73:2F:0B:93:EB:7B:A3:9C:A7:A4:E3:78:5F:32:55:DE X509v3 Authority Key Identifier: keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ba:52:89:0c:09:c7:50:75:d6:04:5c:0f:3e:cc:e0:23:39: 98:3f:1d:33:85:6e:35:b7:33:36:b7:88:72:70:b9:20:df:d6: 76:35:5f:b6:a2:68:e3:07:77:6e:80:d7:ee:94:6a:83:c5:51: 66:9a:89:04:bb:4f:5a:97:06:88:64:9a:52:94:da:8c:7f:e6: 94:71:29:fd:a4:cc:da:22:dd:85:93:27:56:8d:ca:1b:21:ee: 97:d1:17:c8:27:05:be:4d:ec:0d:41:70:dc:2f:a0:7e:f4:52: 54:82:7a:c2:39:57:08:6a:2d:65:7f:d5:64:38:b7:3d:24:56: 09:20:32:8c:38:07:1e:b8:d3:67:0c:a0:96:30:84:ce:d8:2a: 93:0f:1b:4e:91:41:04:42:ec:a6:a9:6e:76:e8:86:63:0a:23: 84:58:a1:c6:d4:05:69:47:75:10:05:b4:aa:68:06:b3:44:4d: bb:9f:c3:cb:2e:7d:fc:65:fe:e8:8f:bb:a7:5f:58:c9:0c:59: cb:7c:df:17:f2:67:7d:a9:ff:2a:9a:3c:29:2e:95:fe:99:e5: 07:e4:3f:b7:d8:2d:2a:3c:b0:4a:68:cc:90:70:97:8a:a7:35: 1c:d5:f3:4a:6a:07:6f:cc:f8:08:0a:68:c3:85:65:70:70:12: d1:4a:b7:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+dSsnoAk8VfjzPTv+mmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5 YjFjZDkwHhcNMjUxMjIwMTQwMDMzWhcNMjUxMjIxMTQwMDMzWjAzMTEwLwYDVQQD EyhjYmUzYWM0ZjczMmYwYjkzZWI3YmEzOWNhN2E0ZTM3ODVmMzI1NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvvBlqxnaOqdlOc0NUTrXyAA1eGR remjsTKd2V/6hmNgv/A06/3u3hmkyapiqDQIk6zhvHf0OSJ6DcQMe6z/yUxSoKvx lj9H41VQYUphlH7nP7vIeJwdu6JjzCJJcaEHLt2UGz0Rpw6UndOfTDHhJqXju4iC 30i68EzUcNF5MIzPKdaQi4IyBucjCayDVxVu7OnpT22mJvgNbas5DO3ynNm6EFQD PszLwUvm5YrzzfWVgSW8FYX3XhjROcSJRQyacZRgjY33agn/jWCz67QHNZa0985i m6Tjd0aERwZmHCV5IDMks6bO1I/80IoDpY8x8zOidxdokskABlcx6aK4wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvjrE9zLwuT63ujnKek43hfMlXeMB8GA1UdIwQY MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt NmZiNGJlZTk5ZTYzLzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbpSiQwJ x1B11gRcDz7M4CM5mD8dM4VuNbczNreIcnC5IN/WdjVftqJo4wd3boDX7pRqg8VR ZpqJBLtPWpcGiGSaUpTajH/mlHEp/aTM2iLdhZMnVo3KGyHul9EXyCcFvk3sDUFw 3C+gfvRSVIJ6wjlXCGotZX/VZDi3PSRWCSAyjDgHHrjTZwygljCEztgqkw8bTpFB BELspqluduiGYwojhFihxtQFaUd1EAW0qmgGs0RNu5/Dyy59/GX+6I+7p19YyQxZ y3zfF/Jnfan/Kpo8KS6V/pnlB+Q/t9gtKjywSmjMkHCXiqc1HNXzSmoHb8z4CApo w4VlcHAS0Uq39w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:03:14 2025 by rpki-client