This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json) Hash identifier: ZuMBIT3AhzqouUDeTb0Tw+2fYKd4UyFeyU6usU3urDU= Subject key identifier: E1:55:CB:D2:27:02:3C:C9:D6:E0:B9:A8:44:53:FE:2B:AF:F5:F2:62 Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a Certificate serial: 019B27417097DC0E96567DB0EB37B02FD844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 13:02:38 +0000 Manifest this update: Tue 16 Dec 2025 13:02:38 +0000 Manifest next update: Wed 17 Dec 2025 13:02:38 +0000 Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: APt3hbK/iVsbQ5hwEcJZtWCOttCnIAJnJkVn2kHwXfA=) 2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:70:97:dc:0e:96:56:7d:b0:eb:37:b0:2f:d8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a Validity Not Before: Dec 16 13:02:38 2025 GMT Not After : Dec 17 13:02:38 2025 GMT Subject: CN=e155cbd227023cc9d6e0b9a84453fe2baff5f262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:e4:63:52:3c:26:45:34:c9:04:f6:e8:6e: 67:82:72:a3:4f:8d:c2:4d:0e:0a:3a:f6:30:f8:7d: 06:0e:05:75:28:19:d3:62:5c:bd:9a:51:3c:79:66: 58:2c:1a:b6:00:15:97:60:0b:17:79:6d:c6:eb:a8: eb:34:f9:fc:c6:b5:db:84:f8:a3:73:af:53:3c:ac: f2:e3:e2:ee:75:c8:b8:ee:aa:2b:c2:ed:f6:de:de: 98:1e:41:b6:61:be:9c:9d:a9:e0:7c:56:d8:48:f7: 4c:dd:8a:1a:d4:31:8f:ba:4e:d6:88:63:c8:83:c8: 13:53:44:e8:19:4f:3b:98:1d:b8:e0:3f:35:32:6c: 10:4c:fa:5c:a9:61:4e:bc:ae:26:5d:28:53:37:af: 3d:27:3d:ee:d5:7c:90:83:a8:06:68:de:fb:76:c7: b7:ed:bc:bb:12:ac:02:e1:8c:be:c7:96:5e:3c:39: e6:9b:2d:37:64:e2:ed:f8:c8:67:26:b5:76:5c:37: 27:82:1e:e3:ee:09:61:e3:b7:a0:70:93:29:6c:21: b4:f7:f1:a4:0f:7c:f4:22:ab:39:8d:ba:71:6b:ed: a3:0d:03:93:c1:9a:da:fb:6d:bc:a1:08:24:1f:32: 5d:b3:13:5d:ce:ae:0c:7d:2a:ce:75:88:96:d9:ed: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:CB:D2:27:02:3C:C9:D6:E0:B9:A8:44:53:FE:2B:AF:F5:F2:62 X509v3 Authority Key Identifier: keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:49:6d:57:f3:e6:8b:fd:9e:38:33:b4:6c:89:2c:90:1d:a1: 46:a0:60:7c:38:c6:a6:0b:86:57:ab:49:9a:cc:76:5d:86:b3: ab:35:2f:bb:44:b8:79:56:a0:1f:e4:dd:44:45:9b:67:5a:15: 64:8d:ce:97:e2:a5:7f:c9:30:97:da:6b:ea:42:e4:bc:37:8f: 7f:6d:9f:0b:a5:9a:0c:cf:67:d9:ce:c9:f4:eb:04:53:cd:92: 05:cd:31:d7:dc:24:94:9e:bb:35:4a:79:78:7c:82:f2:3c:d7: c0:ae:72:1a:5a:00:e9:d8:db:08:5f:33:70:a1:85:2f:ab:81: d9:1f:1d:bd:52:02:c6:ec:a1:ce:3b:17:55:47:b9:7c:e9:c1: 42:55:d1:12:8e:8e:53:cf:b5:8b:c5:a4:4f:d5:07:fa:9c:fb: 43:83:e7:df:c2:77:39:c3:87:96:4d:34:c0:1e:db:be:c3:38: e0:e9:b4:bf:de:55:e6:b1:9e:b4:ac:65:80:25:af:98:a2:e3: a3:04:2c:04:4d:d2:8e:8e:1f:28:a7:98:b7:65:10:31:d0:42: ba:7d:ad:29:53:d8:ab:df:0a:53:81:26:3a:5e:66:e4:ab:a2: 02:cf:8a:ba:9a:2f:f0:7a:2f:09:c6:30:97:93:61:a8:c4:9a: 71:fa:df:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQXCX3A6WVn2w6zewL9hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTFiNjU5ODYyZDE1YTUxY2I1ZmYzNGRlNzIyM2M2OWU0 ODEyNmEwHhcNMjUxMjE2MTMwMjM4WhcNMjUxMjE3MTMwMjM4WjAzMTEwLwYDVQQD EyhlMTU1Y2JkMjI3MDIzY2M5ZDZlMGI5YTg0NDUzZmUyYmFmZjVmMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PzkY1I8JkU0yQT26G5ngnKjT43C TQ4KOvYw+H0GDgV1KBnTYly9mlE8eWZYLBq2ABWXYAsXeW3G66jrNPn8xrXbhPij c69TPKzy4+Ludci47qorwu323t6YHkG2Yb6cnangfFbYSPdM3Yoa1DGPuk7WiGPI g8gTU0ToGU87mB244D81MmwQTPpcqWFOvK4mXShTN689Jz3u1XyQg6gGaN77dse3 7by7EqwC4Yy+x5ZePDnmmy03ZOLt+MhnJrV2XDcngh7j7glh47egcJMpbCG09/Gk D3z0Iqs5jbpxa+2jDQOTwZra+228oQgkHzJdsxNdzq4MfSrOdYiW2e0/jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFVy9InAjzJ1uC5qERT/iuv9fJiMB8GA1UdIwQY MBaAFCXhtlmGLRWlHLX/NN5yI8aeSBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAt ZTNjN2Q0ZTY1OThmLzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAtZTNjN2Q0ZTY1OThm LzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0ltV/Pm i/2eODO0bIkskB2hRqBgfDjGpguGV6tJmsx2XYazqzUvu0S4eVagH+TdREWbZ1oV ZI3Ol+Klf8kwl9pr6kLkvDePf22fC6WaDM9n2c7J9OsEU82SBc0x19wklJ67NUp5 eHyC8jzXwK5yGloA6djbCF8zcKGFL6uB2R8dvVICxuyhzjsXVUe5fOnBQlXREo6O U8+1i8WkT9UH+pz7Q4Pn38J3OcOHlk00wB7bvsM44Om0v95V5rGetKxlgCWvmKLj owQsBE3Sjo4fKKeYt2UQMdBCun2tKVPYq98KU4EmOl5m5KuiAs+Kupov8HovCcYw l5NhqMSacfrftQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:19:05 2025 by rpki-client