This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json) Hash identifier: 3QVpapmQuuP5hYnkBiM2sW7xwEjdDdmba7fWnxH7GzY= Subject key identifier: A1:09:92:F7:18:7C:9B:CB:E3:96:01:D2:23:1D:E6:6A:4A:B5:39:F1 Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Certificate serial: 019B3D22C0861681A84931E64D02851E1081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 19:00:46 +0000 Manifest this update: Sat 20 Dec 2025 19:00:46 +0000 Manifest next update: Sun 21 Dec 2025 19:00:46 +0000 Files and hashes: 1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=) 2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: ywgIm5z070bayAcg0jv/YEhRtTkxiWR+yuZpIgBrGaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:c0:86:16:81:a8:49:31:e6:4d:02:85:1e:10:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Validity Not Before: Dec 20 19:00:46 2025 GMT Not After : Dec 21 19:00:46 2025 GMT Subject: CN=a10992f7187c9bcbe39601d2231de66a4ab539f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:20:dd:65:d9:b3:e2:2d:3d:d2:48:2d:ee: 65:3b:cc:c6:cd:b8:02:fa:89:03:71:91:c1:74:9c: 28:e5:6e:ac:55:93:0e:2c:2a:7c:13:0f:19:82:39: 63:bc:03:db:3f:84:0e:7a:bf:2c:1a:48:5e:5a:0e: df:cf:06:62:3b:e6:ac:b9:be:07:38:4a:16:54:98: 35:b2:5c:26:ec:eb:6f:26:74:3b:f4:41:6e:6a:4c: 27:e5:87:0e:f6:00:fb:0f:6d:d4:63:21:bd:ae:65: e3:d3:e1:96:7d:d7:1f:ef:26:47:ef:e7:59:97:91: 75:61:8e:50:de:b2:3d:bf:76:d0:fc:8a:85:00:73: 35:99:c5:74:e4:00:82:de:bb:e4:0a:0e:8c:c1:31: 05:db:93:78:50:aa:e7:1a:5a:ce:76:ab:34:cd:b8: f5:54:c6:29:6a:c8:70:7b:96:7c:fe:61:09:ce:43: 49:7e:ae:c2:48:3b:75:56:7d:ce:27:30:b3:87:a6: 51:4e:68:19:5b:f0:92:3a:e4:13:19:82:3c:61:e9: 0a:1b:8c:fd:c7:db:56:c9:f5:fe:61:8d:e5:df:c8: 7e:b2:6c:12:24:b6:84:b1:a1:6c:bb:59:a3:54:8d: cf:d4:b4:28:59:00:69:14:c1:8f:eb:b0:c2:1b:17: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:09:92:F7:18:7C:9B:CB:E3:96:01:D2:23:1D:E6:6A:4A:B5:39:F1 X509v3 Authority Key Identifier: keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:eb:a6:09:02:67:74:64:fd:00:4c:6d:15:f2:bd:ee:72:16: 3a:85:47:ac:72:49:2d:14:bc:25:7d:b6:d1:02:e9:a8:39:a5: e5:10:fa:9d:50:fa:09:f1:0a:63:ab:7b:6f:0b:65:b5:fa:0c: e0:fd:81:55:1f:16:8a:8d:e8:42:9f:6b:76:a0:fd:41:3e:c9: c3:52:1d:1c:f7:31:0f:38:b2:af:90:3c:ca:06:96:cf:ab:d8: ea:59:7f:42:87:38:ec:d3:65:1c:aa:11:1c:12:21:2f:4c:54: 8a:eb:b8:b1:10:0a:ba:05:9f:24:21:d7:7d:49:f9:78:20:2e: 7b:7f:92:ec:3e:da:69:77:aa:c7:70:60:3c:8f:7a:91:ec:6f: 1d:87:45:e7:52:10:e8:90:0a:a6:95:f6:41:8d:a3:00:87:68: 44:a2:8e:0e:28:53:c5:e0:75:72:bc:83:9e:38:a5:a0:31:ef: 5d:e7:51:63:66:02:a3:7a:1b:5d:96:55:c4:ac:6b:90:f7:97: aa:ef:88:7b:a6:cd:d2:52:86:0f:17:f6:54:c2:9a:3a:52:22: 23:f4:6f:81:8b:6d:ec:ba:f5:2e:4d:e0:95:07:e2:69:ba:f7: 70:56:58:7b:bc:6e:5d:71:80:d0:d9:68:2b:72:be:19:c7:3a: 8e:8f:6f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IsCGFoGoSTHmTQKFHhCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5 ZjdhMmYwHhcNMjUxMjIwMTkwMDQ2WhcNMjUxMjIxMTkwMDQ2WjAzMTEwLwYDVQQD EyhhMTA5OTJmNzE4N2M5YmNiZTM5NjAxZDIyMzFkZTY2YTRhYjUzOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaIg3WXZs+ItPdJILe5lO8zGzbgC +okDcZHBdJwo5W6sVZMOLCp8Ew8ZgjljvAPbP4QOer8sGkheWg7fzwZiO+asub4H OEoWVJg1slwm7OtvJnQ79EFuakwn5YcO9gD7D23UYyG9rmXj0+GWfdcf7yZH7+dZ l5F1YY5Q3rI9v3bQ/IqFAHM1mcV05ACC3rvkCg6MwTEF25N4UKrnGlrOdqs0zbj1 VMYpashwe5Z8/mEJzkNJfq7CSDt1Vn3OJzCzh6ZRTmgZW/CSOuQTGYI8YekKG4z9 x9tWyfX+YY3l38h+smwSJLaEsaFsu1mjVI3P1LQoWQBpFMGP67DCGxfBowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEJkvcYfJvL45YB0iMd5mpKtTnxMB8GA1UdIwQY MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuumCQJn dGT9AExtFfK97nIWOoVHrHJJLRS8JX220QLpqDml5RD6nVD6CfEKY6t7bwtltfoM 4P2BVR8Wio3oQp9rdqD9QT7Jw1IdHPcxDziyr5A8ygaWz6vY6ll/Qoc47NNlHKoR HBIhL0xUiuu4sRAKugWfJCHXfUn5eCAue3+S7D7aaXeqx3BgPI96kexvHYdF51IQ 6JAKppX2QY2jAIdoRKKODihTxeB1cryDnjiloDHvXedRY2YCo3obXZZVxKxrkPeX qu+Ie6bN0lKGDxf2VMKaOlIiI/RvgYtt7Lr1Lk3glQfiabr3cFZYe7xuXXGA0Nlo K3K+Gcc6jo9vNg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:40:14 2025 by rpki-client