This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json) Hash identifier: cAEK5c9mxfXFBuyvruLCkIi/z6H+ur8GvXUMUAxhbN8= Subject key identifier: 40:F1:92:A1:7D:46:56:C0:D5:62:F4:66:DD:A2:B6:A3:8D:ED:79:22 Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Certificate serial: 019B35A0DAA0809EE337E7D27FD59932A135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:01:32 +0000 Manifest this update: Fri 19 Dec 2025 08:01:32 +0000 Manifest next update: Sat 20 Dec 2025 08:01:32 +0000 Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=) 2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: cw6mRKyyQpm6P8NWWYkqHzzaav2QZVciHj4dlgI0tmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:da:a0:80:9e:e3:37:e7:d2:7f:d5:99:32:a1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Validity Not Before: Dec 19 08:01:32 2025 GMT Not After : Dec 20 08:01:32 2025 GMT Subject: CN=40f192a17d4656c0d562f466dda2b6a38ded7922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:53:9a:a4:74:8a:31:6e:81:2d:71:ca:ee: 64:1d:c8:45:7b:5d:40:92:16:06:26:f4:5c:0c:7a: aa:77:db:b1:3e:96:cf:b4:b6:b8:b8:3f:d8:d1:d5: aa:29:7a:68:70:1d:9c:7e:ce:0e:09:96:48:85:53: 4b:59:86:35:29:47:78:e3:f4:3f:ec:3d:27:b1:15: 9c:da:08:31:08:56:5e:bf:4b:4d:6b:c6:55:6e:2e: 03:ee:1d:fd:e6:bd:31:4f:4d:99:8e:47:6c:84:ad: 7b:d5:6a:07:13:18:6e:66:c8:57:10:a6:68:76:8f: 3d:2f:16:65:92:d3:f2:3d:6a:92:6f:9e:d5:5d:aa: a2:55:63:f7:a2:7d:f4:d3:7c:c6:1f:a1:f8:de:09: b2:63:dd:62:32:bb:4e:8f:ca:de:7b:42:3f:39:eb: 1a:e2:fc:7f:57:7b:fb:f9:1c:54:eb:51:58:a2:9e: 7a:32:5a:0b:ba:ca:29:65:83:6e:d1:51:8b:64:34: 76:8c:08:b6:74:02:31:62:8c:0a:93:ba:cd:3a:20: 2b:af:f5:ca:05:97:dc:5a:7d:16:de:e2:41:af:f7: b7:a1:4d:ba:bc:86:b4:19:73:d1:53:7c:7d:58:07: 4e:98:a5:3a:d8:f5:2c:78:30:47:aa:12:fd:68:82: 53:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:92:A1:7D:46:56:C0:D5:62:F4:66:DD:A2:B6:A3:8D:ED:79:22 X509v3 Authority Key Identifier: keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:24:8c:62:a5:59:a5:a6:a8:c3:ea:5c:ce:43:37:78:4b:42: 1b:c7:64:ca:45:fd:d9:3f:91:d7:f4:3e:72:d4:fe:24:4d:aa: e0:d3:f1:8b:bc:e7:cd:3a:df:23:b4:81:60:40:49:4e:1c:02: df:74:15:20:74:b2:e4:06:b8:8f:1d:fd:33:06:60:0a:63:e5: 65:f0:b3:a5:67:85:e7:ed:d3:57:03:9a:1e:a9:c0:e5:f3:2d: 56:c5:e6:c9:3c:1e:31:5e:d1:34:49:bc:c2:bc:bf:89:a1:f5: 55:0b:45:12:c7:72:f7:0e:a7:ce:7a:2b:52:0b:44:49:4b:36: ad:44:d3:6b:52:f7:1c:72:5a:73:71:6c:f8:71:cd:c2:9e:77: b7:b9:05:a1:3d:35:3f:98:ef:4c:ce:a0:94:13:39:a4:f4:e3: 3a:3b:f4:7a:bd:41:db:63:71:a7:21:ca:92:74:43:ee:a1:56: 9c:6d:2f:08:88:52:b8:89:aa:01:77:65:ad:92:55:2e:01:bf: de:45:48:80:19:de:f8:41:9e:1a:4f:7b:1c:06:12:f8:09:76: 42:cc:71:13:63:3d:92:ea:6b:9c:28:cf:87:58:61:64:90:06: d2:9b:13:18:e7:c0:e4:d6:77:39:8e:8f:90:aa:a6:22:b1:c6: 17:5b:b4:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNqggJ7jN+fSf9WZMqE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm Y2NiMWQwHhcNMjUxMjE5MDgwMTMyWhcNMjUxMjIwMDgwMTMyWjAzMTEwLwYDVQQD Eyg0MGYxOTJhMTdkNDY1NmMwZDU2MmY0NjZkZGEyYjZhMzhkZWQ3OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNTmqR0ijFugS1xyu5kHchFe11A khYGJvRcDHqqd9uxPpbPtLa4uD/Y0dWqKXpocB2cfs4OCZZIhVNLWYY1KUd44/Q/ 7D0nsRWc2ggxCFZev0tNa8ZVbi4D7h395r0xT02ZjkdshK171WoHExhuZshXEKZo do89LxZlktPyPWqSb57VXaqiVWP3on3003zGH6H43gmyY91iMrtOj8ree0I/Oesa 4vx/V3v7+RxU61FYop56MloLusopZYNu0VGLZDR2jAi2dAIxYowKk7rNOiArr/XK BZfcWn0W3uJBr/e3oU26vIa0GXPRU3x9WAdOmKU62PUseDBHqhL9aIJT4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDxkqF9RlbA1WL0Zt2itqON7XkiMB8GA1UdIwQY MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiSMYqVZ paaow+pczkM3eEtCG8dkykX92T+R1/Q+ctT+JE2q4NPxi7znzTrfI7SBYEBJThwC 33QVIHSy5Aa4jx39MwZgCmPlZfCzpWeF5+3TVwOaHqnA5fMtVsXmyTweMV7RNEm8 wry/iaH1VQtFEsdy9w6nznorUgtESUs2rUTTa1L3HHJac3Fs+HHNwp53t7kFoT01 P5jvTM6glBM5pPTjOjv0er1B22NxpyHKknRD7qFWnG0vCIhSuImqAXdlrZJVLgG/ 3kVIgBne+EGeGk97HAYS+Al2QsxxE2M9kuprnCjPh1hhZJAG0psTGOfA5NZ3OY6P kKqmIrHGF1u0TQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:02 2025 by rpki-client