This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json) Hash identifier: RCN4RLo+/lKDp0/7FQuZUoNyrjRdQp9M4vPdI3TASIs= Subject key identifier: 2F:4A:43:22:73:FD:BE:27:C6:7B:60:E4:E0:33:CB:45:E5:50:A9:CA Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Certificate serial: 019B3D2317BA81613EC8CA76EB0DDDE9A33A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:08 +0000 Manifest this update: Sat 20 Dec 2025 19:01:08 +0000 Manifest next update: Sun 21 Dec 2025 19:01:08 +0000 Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=) 2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: ktN6W5fm6KudZ9euys1ylDhjXiSesHu3SdZTh6B5dhg=) 3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=) 4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:17:ba:81:61:3e:c8:ca:76:eb:0d:dd:e9:a3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Validity Not Before: Dec 20 19:01:08 2025 GMT Not After : Dec 21 19:01:08 2025 GMT Subject: CN=2f4a432273fdbe27c67b60e4e033cb45e550a9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:ef:fe:cd:ee:cc:7a:08:69:96:a8:0c:f5: e9:01:eb:2b:df:95:f7:94:3e:ee:c8:46:43:8e:76: 4f:bf:66:c1:72:1e:35:f0:ac:b0:cc:89:e3:95:84: 00:29:04:82:c3:1e:20:5e:34:58:50:9f:f8:e4:d1: 61:b3:dd:8e:09:b6:62:d1:8e:3a:eb:a6:c4:61:06: 2d:7c:81:50:c0:0c:89:01:7a:19:80:88:9a:47:5b: 86:9b:ca:71:7e:c3:b3:f1:b0:e0:16:78:90:83:94: 49:0b:54:2a:48:18:96:06:ad:28:6f:5b:d9:c3:80: cd:af:50:5e:56:59:7f:42:3c:18:b5:38:f8:12:ca: a7:00:5a:07:ff:e9:b6:18:93:7e:9b:95:53:fa:f4: b0:20:f1:82:92:41:2d:78:8b:aa:5e:c9:f5:5c:1b: 6a:5c:09:28:79:df:30:d7:61:b1:93:47:58:da:30: 06:79:d4:aa:ee:da:1e:dd:b5:29:cb:b8:3e:21:1c: 2e:a6:1e:0b:5c:cf:aa:42:ae:c4:84:e6:d9:fa:e9: 90:34:e6:91:b1:85:4c:f4:f8:c3:4a:86:41:57:50: 75:ea:4c:73:17:45:aa:44:49:c7:e1:a2:e0:ff:e8: e7:1a:aa:e3:60:79:7a:87:83:bb:60:7e:cc:42:a8: 32:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:43:22:73:FD:BE:27:C6:7B:60:E4:E0:33:CB:45:E5:50:A9:CA X509v3 Authority Key Identifier: keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4f:ce:e4:b5:c3:8c:70:32:67:07:68:4d:ee:52:f8:ec:d5: 87:bc:a2:46:35:52:8b:a2:a1:d6:24:10:c0:d6:03:41:03:43: 77:b8:26:85:f2:ca:e8:ad:c7:2f:f0:bc:ef:f2:32:c8:36:c0: 44:38:72:5c:8e:17:5c:72:03:82:d3:55:4e:ab:22:8f:35:df: 02:47:c0:3f:1a:be:6c:58:12:54:7c:14:54:b5:33:91:9f:51: 42:be:5f:2f:ed:61:39:64:1f:51:41:a2:ca:0f:7a:5a:d5:e8: a8:32:5f:4b:1c:12:9b:bc:c0:6d:ff:70:a1:0b:08:22:ba:92: 63:7b:26:92:0f:e3:f7:3f:ef:55:e8:08:72:9d:e3:0d:89:6d: cb:65:b4:ed:a5:ea:93:50:17:54:8e:30:b7:fb:f6:3b:55:2a: b4:01:06:fd:22:cb:a4:08:fe:dd:95:60:ae:16:71:ec:11:41: 5c:4d:5b:ee:3f:6b:42:81:d2:87:ae:53:2e:b6:43:70:dd:e9: cf:ee:26:5c:c7:c4:6f:11:92:1d:cd:99:75:bb:e8:eb:0f:bb: a3:60:a0:7f:4e:c6:72:a6:84:3f:5e:ae:b6:b5:55:88:71:dd: 27:0b:10:19:d2:1f:36:83:d6:be:85:ef:db:e6:b4:21:da:a1: 26:b8:40:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ixe6gWE+yMp26w3d6aM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk M2QzNzUwHhcNMjUxMjIwMTkwMTA4WhcNMjUxMjIxMTkwMTA4WjAzMTEwLwYDVQQD EygyZjRhNDMyMjczZmRiZTI3YzY3YjYwZTRlMDMzY2I0NWU1NTBhOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bv/s3uzHoIaZaoDPXpAesr35X3 lD7uyEZDjnZPv2bBch418KywzInjlYQAKQSCwx4gXjRYUJ/45NFhs92OCbZi0Y46 66bEYQYtfIFQwAyJAXoZgIiaR1uGm8pxfsOz8bDgFniQg5RJC1QqSBiWBq0ob1vZ w4DNr1BeVll/QjwYtTj4EsqnAFoH/+m2GJN+m5VT+vSwIPGCkkEteIuqXsn1XBtq XAkoed8w12Gxk0dY2jAGedSq7toe3bUpy7g+IRwuph4LXM+qQq7EhObZ+umQNOaR sYVM9PjDSoZBV1B16kxzF0WqREnH4aLg/+jnGqrjYHl6h4O7YH7MQqgyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9KQyJz/b4nxntg5OAzy0XlUKnKMB8GA1UdIwQY MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt NDQ4YjliOTViMDllLzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE/O5LXD jHAyZwdoTe5S+OzVh7yiRjVSi6Kh1iQQwNYDQQNDd7gmhfLK6K3HL/C87/IyyDbA RDhyXI4XXHIDgtNVTqsijzXfAkfAPxq+bFgSVHwUVLUzkZ9RQr5fL+1hOWQfUUGi yg96WtXoqDJfSxwSm7zAbf9woQsIIrqSY3smkg/j9z/vVegIcp3jDYlty2W07aXq k1AXVI4wt/v2O1UqtAEG/SLLpAj+3ZVgrhZx7BFBXE1b7j9rQoHSh65TLrZDcN3p z+4mXMfEbxGSHc2Zdbvo6w+7o2Cgf07GcqaEP16utrVViHHdJwsQGdIfNoPWvoXv 2+a0IdqhJrhA/w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:32 2025 by rpki-client