This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json) Hash identifier: BzhKqpKFwkg1ARi8l/L/h3KRm2MwAlTQVYOD6xtjbYk= Subject key identifier: 82:12:E4:6C:76:D3:7B:96:CD:44:10:58:E4:7A:E8:53:80:B4:60:CA Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Certificate serial: 019B65B105493682423DBEF0AB70796102FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 16:00:58 +0000 Manifest this update: Sun 28 Dec 2025 16:00:58 +0000 Manifest next update: Mon 29 Dec 2025 16:00:58 +0000 Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=) 2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: XsCQjbDF2+QBtvsOw3sPiK5J28Pr/zYtfLge5fdQNjk=) 3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=) 4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:05:49:36:82:42:3d:be:f0:ab:70:79:61:02:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Validity Not Before: Dec 28 16:00:58 2025 GMT Not After : Dec 29 16:00:58 2025 GMT Subject: CN=8212e46c76d37b96cd441058e47ae85380b460ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:ec:a2:0c:2f:47:55:a7:b9:04:fa:7d:33: 26:ac:e5:b6:d0:2f:1a:37:0f:92:25:b0:05:2f:86: 83:d9:36:a5:a6:c3:29:15:23:80:18:0b:9b:84:e3: 38:07:04:00:1e:f8:8f:6d:21:a2:3d:21:ab:b6:24: 16:18:ba:21:c8:fd:0e:64:e0:58:24:d8:06:b8:87: 79:83:16:26:94:bc:94:5a:2c:af:fe:58:24:0b:1d: a9:9e:05:41:e9:82:82:8c:62:e3:13:47:e2:f0:39: c7:18:f0:81:62:a8:cb:d5:c7:05:42:48:7e:62:1a: 79:14:6e:9c:bc:4d:d3:de:79:4c:36:b2:fd:25:f3: 43:b3:8a:63:e5:3e:65:f3:e4:3c:2b:fe:f6:a0:90: 69:47:d7:2d:d8:be:ec:74:dd:56:d2:4c:fc:ee:d0: b5:e9:70:ee:44:26:38:ef:91:b2:1d:62:51:82:30: ce:f8:e6:82:da:6a:ca:12:4e:a7:07:b5:73:bb:75: 14:fc:73:1c:38:da:1c:7e:83:92:a5:6c:74:8c:6f: a6:26:df:fd:02:40:d8:7d:1b:db:57:b8:4d:41:d8: e6:33:11:9b:41:10:ac:d4:66:ef:27:05:fe:07:b0: d2:65:fc:83:40:25:bc:ee:a3:30:d7:8b:19:7c:e6: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:12:E4:6C:76:D3:7B:96:CD:44:10:58:E4:7A:E8:53:80:B4:60:CA X509v3 Authority Key Identifier: keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4d:2a:63:8e:c2:b9:79:2f:19:8d:ff:35:c4:3d:17:68:3c: 5c:88:dd:03:4e:c9:68:5a:a4:a4:66:16:f2:ae:9f:51:a6:ac: 3c:4a:c2:7f:c8:4a:92:39:6c:a2:d9:8e:90:9e:d1:26:a5:3e: a8:de:d0:7f:44:3b:c1:a4:3f:60:7c:e6:82:73:57:28:a4:af: a7:a6:ca:30:0c:b2:1d:ac:cd:dc:cf:cf:a2:43:3d:7b:7e:d6: 04:d2:b7:84:32:01:92:96:42:51:23:de:e0:20:81:e6:75:2d: c3:88:e0:d6:11:34:67:df:b6:28:ab:2d:bb:f0:67:0d:97:49: 4d:67:bf:ff:d8:3e:c9:20:58:cd:01:24:59:15:1c:81:29:48: 51:0c:b9:50:b0:14:e7:9e:a7:a8:17:36:c1:01:97:d3:dc:07: 1f:56:c9:ac:88:d2:26:e9:3e:53:d5:eb:65:12:73:01:5c:4b: b1:b9:eb:db:a9:be:90:93:3a:ff:3e:17:fb:f3:18:db:b6:18: 57:ee:75:6f:99:ff:89:12:0f:ce:db:94:f8:6a:1d:60:6b:da: f8:1a:98:ba:d3:01:1a:30:0b:36:98:1e:d2:6c:32:17:e5:d2: 7f:9c:d0:85:76:08:d1:49:04:92:53:d0:e8:a4:ce:6f:04:b0: 21:97:60:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsQVJNoJCPb7wq3B5YQL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk M2QzNzUwHhcNMjUxMjI4MTYwMDU4WhcNMjUxMjI5MTYwMDU4WjAzMTEwLwYDVQQD Eyg4MjEyZTQ2Yzc2ZDM3Yjk2Y2Q0NDEwNThlNDdhZTg1MzgwYjQ2MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWHsogwvR1WnuQT6fTMmrOW20C8a Nw+SJbAFL4aD2TalpsMpFSOAGAubhOM4BwQAHviPbSGiPSGrtiQWGLohyP0OZOBY JNgGuId5gxYmlLyUWiyv/lgkCx2pngVB6YKCjGLjE0fi8DnHGPCBYqjL1ccFQkh+ Yhp5FG6cvE3T3nlMNrL9JfNDs4pj5T5l8+Q8K/72oJBpR9ct2L7sdN1W0kz87tC1 6XDuRCY475GyHWJRgjDO+OaC2mrKEk6nB7Vzu3UU/HMcONocfoOSpWx0jG+mJt/9 AkDYfRvbV7hNQdjmMxGbQRCs1GbvJwX+B7DSZfyDQCW87qMw14sZfOYV2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIS5Gx203uWzUQQWOR66FOAtGDKMB8GA1UdIwQY MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt NDQ4YjliOTViMDllLzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArE0qY47C uXkvGY3/NcQ9F2g8XIjdA07JaFqkpGYW8q6fUaasPErCf8hKkjlsotmOkJ7RJqU+ qN7Qf0Q7waQ/YHzmgnNXKKSvp6bKMAyyHazN3M/PokM9e37WBNK3hDIBkpZCUSPe 4CCB5nUtw4jg1hE0Z9+2KKstu/BnDZdJTWe//9g+ySBYzQEkWRUcgSlIUQy5ULAU 556nqBc2wQGX09wHH1bJrIjSJuk+U9XrZRJzAVxLsbnr26m+kJM6/z4X+/MY27YY V+51b5n/iRIPztuU+GodYGva+BqYutMBGjALNpge0mwyF+XSf5zQhXYI0UkEklPQ 6KTObwSwIZdgMg== -----END CERTIFICATE-----Generated at Sun Dec 28 18:56:05 2025 by rpki-client