This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json) Hash identifier: PSuvm0Yj3MzyVrsbgmzmqsOpzYxqI/wLW+pxw9a2MlI= Subject key identifier: 5B:90:58:08:28:75:C3:AD:12:24:C9:79:DF:DA:BE:D6:4F:4A:81:40 Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019B507295335040EA2E04384DD2C967FBCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 13:00:45 +0000 Manifest this update: Wed 24 Dec 2025 13:00:45 +0000 Manifest next update: Thu 25 Dec 2025 13:00:45 +0000 Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=) 2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: 14vtEJ/ykmesdBlh8ERXNxZ3s4ZaX6js1Ui8v4kIWZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:95:33:50:40:ea:2e:04:38:4d:d2:c9:67:fb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Dec 24 13:00:45 2025 GMT Not After : Dec 25 13:00:45 2025 GMT Subject: CN=5b9058082875c3ad1224c979dfdabed64f4a8140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:2f:89:9a:20:ab:5b:c4:e9:65:62:21:9f: 5c:64:93:47:1e:0e:25:93:c2:ee:94:ab:80:86:c3: dd:12:08:21:e2:8f:1d:de:1e:bc:0a:91:cc:d6:15: a3:99:f6:7f:ef:a2:49:f8:84:86:7c:5e:50:f7:21: 03:07:83:fa:90:2e:ba:6c:e7:83:fc:d5:44:f6:bb: cb:7e:d7:b2:87:87:a1:0f:46:08:a9:1a:d6:89:23: 01:f7:8a:00:53:60:97:6a:c8:62:bc:f1:ee:de:6a: 8f:29:cd:2b:d4:f7:71:a0:b9:61:8b:d8:39:1b:97: 60:9b:e5:84:a9:14:c5:a3:32:92:31:f1:ee:9a:e8: c0:ad:df:ee:92:e9:95:bf:12:00:5d:b0:6b:7b:7e: 40:1f:99:92:f6:4e:b8:83:8f:b9:3c:8b:09:37:79: a0:28:b9:6a:e0:e5:87:01:bd:95:cf:41:6d:e3:44: e3:9f:41:2b:b5:61:0c:bf:6d:53:13:f8:d6:eb:9d: 1b:c5:6a:d2:4d:37:9f:94:fb:da:a8:fa:5b:a5:7a: cf:1d:f3:5b:53:05:ae:75:66:f5:18:4a:86:b1:e6: 00:05:f6:26:e1:42:21:a4:3d:da:64:aa:1b:01:9b: 49:15:9f:1d:0e:23:59:a8:4a:b7:45:4e:5e:c2:5f: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:58:08:28:75:C3:AD:12:24:C9:79:DF:DA:BE:D6:4F:4A:81:40 X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:5a:8b:df:ae:c4:1d:4e:dc:45:e1:09:3c:4d:78:93:96: 37:dd:ba:0f:95:a1:fa:4a:7d:27:df:f9:a2:00:35:7c:b9:4a: 6a:f6:95:99:70:52:fe:b9:92:2d:86:5e:d7:11:7a:b7:84:5d: 8e:cb:c6:d4:2a:5b:68:d8:96:88:d4:f8:40:a1:78:d2:da:5e: cc:d5:e4:5e:c6:07:d8:ad:43:48:b8:4a:03:2a:e6:bf:68:d7: 3d:22:a3:44:29:ec:e2:81:3d:8d:ba:1a:94:55:50:ef:6f:62: 43:ac:49:e0:c8:e4:58:75:a3:c7:ad:b0:22:80:e6:8c:d2:0e: c3:75:a1:04:4c:c4:eb:a6:b6:f8:21:d8:e9:07:eb:65:c5:7d: 31:ab:a7:fa:24:2d:da:aa:7c:7f:fd:9a:23:17:6b:b5:a2:37: d7:6b:10:bc:b9:c0:82:65:03:b9:87:8f:0e:67:d2:1d:2d:12: 2c:2b:da:a2:91:cb:9f:d6:3a:fc:b8:31:e1:a8:4a:35:bf:7e: 35:93:5f:31:5f:0f:90:9a:a6:94:33:b5:b6:88:63:ee:d7:d3: 05:ae:66:74:39:78:4c:4a:fb:23:65:a7:db:a7:bc:96:a0:6a: 06:72:f5:01:68:e3:63:7d:dd:24:5c:85:88:19:61:50:8b:da: 73:b0:f5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpUzUEDqLgQ4TdLJZ/vMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjUxMjI0MTMwMDQ1WhcNMjUxMjI1MTMwMDQ1WjAzMTEwLwYDVQQD Eyg1YjkwNTgwODI4NzVjM2FkMTIyNGM5NzlkZmRhYmVkNjRmNGE4MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizQviZogq1vE6WViIZ9cZJNHHg4l k8LulKuAhsPdEggh4o8d3h68CpHM1hWjmfZ/76JJ+ISGfF5Q9yEDB4P6kC66bOeD /NVE9rvLfteyh4ehD0YIqRrWiSMB94oAU2CXashivPHu3mqPKc0r1PdxoLlhi9g5 G5dgm+WEqRTFozKSMfHumujArd/ukumVvxIAXbBre35AH5mS9k64g4+5PIsJN3mg KLlq4OWHAb2Vz0Ft40Tjn0ErtWEMv21TE/jW650bxWrSTTeflPvaqPpbpXrPHfNb UwWudWb1GEqGseYABfYm4UIhpD3aZKobAZtJFZ8dDiNZqEq3RU5ewl/M1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuQWAgodcOtEiTJed/avtZPSoFAMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFBai9+u xB1O3EXhCTxNeJOWN926D5Wh+kp9J9/5ogA1fLlKavaVmXBS/rmSLYZe1xF6t4Rd jsvG1CpbaNiWiNT4QKF40tpezNXkXsYH2K1DSLhKAyrmv2jXPSKjRCns4oE9jboa lFVQ729iQ6xJ4MjkWHWjx62wIoDmjNIOw3WhBEzE66a2+CHY6QfrZcV9Maun+iQt 2qp8f/2aIxdrtaI312sQvLnAgmUDuYePDmfSHS0SLCvaopHLn9Y6/Lgx4ahKNb9+ NZNfMV8PkJqmlDO1tohj7tfTBa5mdDl4TEr7I2Wn26e8lqBqBnL1AWjjY33dJFyF iBlhUIvac7D1zw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:46 2025 by rpki-client