This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft File: js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json) Hash identifier: ncvzxFAP+lzbL91/NABrrxtoNwvr5MvEF9hQQ+udMaI= Subject key identifier: 68:CA:87:07:16:6E:96:EF:20:C3:07:06:2A:A0:CF:EE:6B:5A:71:93 Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Certificate serial: 019B2B1D81F889DD7B4C65A785852A0DED83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft Manifest number: 09BD Signing time: Wed 17 Dec 2025 07:01:52 +0000 Manifest this update: Wed 17 Dec 2025 07:01:52 +0000 Manifest next update: Thu 18 Dec 2025 07:01:52 +0000 Files and hashes: 1: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (hash: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=) 2: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (hash: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=) 3: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: 2tNlf54v99yfhm1oQ2JxT7FS4MjO2PD+MNi1ENrgKhE=) 4: kWqQsigWLE-Ov88YUeZJL-x7iCw.roa (hash: Ge/EMSQE9osHtx1/BzfNSCkBRWxNw3C0d8zRkadzqgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:81:f8:89:dd:7b:4c:65:a7:85:85:2a:0d:ed:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17 Validity Not Before: Dec 17 07:01:52 2025 GMT Not After : Dec 18 07:01:52 2025 GMT Subject: CN=68ca8707166e96ef20c307062aa0cfee6b5a7193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:ab:fc:dc:2a:06:57:c3:21:42:0e:51:91: e5:13:89:cc:eb:a1:a7:96:4e:4e:cd:d1:d9:fa:42: 9c:02:9c:7a:95:b1:c5:41:43:d3:29:b2:e0:e0:a8: c5:35:7a:59:0b:8e:17:b3:95:32:5e:82:53:63:94: 45:4e:e8:27:59:9c:ef:d1:30:23:24:4f:af:8f:2a: 11:10:55:6f:ff:1c:d8:b3:f6:7e:bc:d8:86:3f:2b: 99:5a:cc:63:ac:77:59:e1:dc:62:f1:da:06:35:c2: f4:91:fb:ec:36:0d:e9:32:0c:5a:58:ed:a8:17:3d: 8c:db:67:95:62:e8:1b:07:8b:de:ff:b1:31:8d:c6: bc:fa:91:f0:fe:dd:45:31:7e:b6:4e:a0:1e:37:eb: 78:a7:d1:7c:e1:c4:35:db:e0:87:b1:ac:c7:16:28: 53:48:46:ce:05:6c:3d:0c:6e:b1:0e:bb:af:7b:ea: 11:70:62:c2:c8:54:3c:cd:8a:59:23:6b:a7:74:1f: df:3e:f4:e0:02:2f:7c:ef:cf:52:4c:f9:9b:93:b2: 2f:d0:54:dc:c3:04:35:e5:20:64:02:e3:f7:cb:4a: 15:ac:f5:39:d8:b6:4a:b8:49:68:fb:cf:07:2e:71: ba:4a:cb:41:74:14:8e:e7:d2:40:dd:1c:63:dc:32: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CA:87:07:16:6E:96:EF:20:C3:07:06:2A:A0:CF:EE:6B:5A:71:93 X509v3 Authority Key Identifier: keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:02:4a:09:09:44:9e:93:6a:4e:9b:ac:67:f7:08:fb:d6:a2: 4c:2c:ef:87:16:6c:fe:4c:6a:af:5f:17:b5:95:e8:67:41:c4: d2:5e:59:aa:3f:9f:55:04:c4:c4:37:9d:75:7b:6b:45:cd:ac: af:57:5d:bc:61:63:ef:bd:63:e7:61:61:0f:79:94:7b:15:1c: f0:35:53:0f:1e:98:3d:3c:7a:c4:f8:e1:eb:f7:a4:b5:71:d3: ed:32:ac:34:89:99:5e:23:88:2a:23:79:f9:50:27:dc:bf:e0: 65:13:dd:78:67:3b:7e:64:70:83:5e:a4:1e:c8:dd:23:be:6c: 59:1b:95:a4:93:ca:a9:80:e8:75:fc:fb:16:aa:2f:72:4b:8c: cf:de:ee:91:7b:25:cb:05:48:01:95:07:e4:7f:3c:3f:00:b6: ef:b9:ae:35:a2:50:7a:f2:02:96:44:bc:b2:e5:56:e0:2d:0b: 64:73:04:e6:52:33:ea:af:ad:bd:71:72:86:60:71:1b:fe:59: fc:c4:7b:6c:e5:db:3c:a2:e4:d0:f2:df:b3:c2:02:56:15:b8: d6:fe:29:f1:e8:28:6d:00:c4:1c:ef:4f:30:e3:d7:29:67:4b: bb:59:dd:b1:61:64:1f:f6:5d:c1:32:04:e4:27:50:e6:58:87: da:b8:4d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHYH4id17TGWnhYUqDe2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz MDZhMTcwHhcNMjUxMjE3MDcwMTUyWhcNMjUxMjE4MDcwMTUyWjAzMTEwLwYDVQQD Eyg2OGNhODcwNzE2NmU5NmVmMjBjMzA3MDYyYWEwY2ZlZTZiNWE3MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoir/NwqBlfDIUIOUZHlE4nM66Gn lk5OzdHZ+kKcApx6lbHFQUPTKbLg4KjFNXpZC44Xs5UyXoJTY5RFTugnWZzv0TAj JE+vjyoREFVv/xzYs/Z+vNiGPyuZWsxjrHdZ4dxi8doGNcL0kfvsNg3pMgxaWO2o Fz2M22eVYugbB4ve/7Exjca8+pHw/t1FMX62TqAeN+t4p9F84cQ12+CHsazHFihT SEbOBWw9DG6xDruve+oRcGLCyFQ8zYpZI2undB/fPvTgAi98789STPmbk7Iv0FTc wwQ15SBkAuP3y0oVrPU52LZKuElo+88HLnG6SstBdBSO59JA3Rxj3DKY8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjKhwcWbpbvIMMHBiqgz+5rWnGTMB8GA1UdIwQY MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt MmJiZjhmYWEwMGNhLzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgJKCQlE npNqTpusZ/cI+9aiTCzvhxZs/kxqr18XtZXoZ0HE0l5Zqj+fVQTExDeddXtrRc2s r1ddvGFj771j52FhD3mUexUc8DVTDx6YPTx6xPjh6/ektXHT7TKsNImZXiOIKiN5 +VAn3L/gZRPdeGc7fmRwg16kHsjdI75sWRuVpJPKqYDodfz7FqovckuMz97ukXsl ywVIAZUH5H88PwC277muNaJQevIClkS8suVW4C0LZHME5lIz6q+tvXFyhmBxG/5Z /MR7bOXbPKLk0PLfs8ICVhW41v4p8egobQDEHO9PMOPXKWdLu1ndsWFkH/ZdwTIE 5CdQ5liH2rhNPQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:50:54 2025 by rpki-client