This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json) Hash identifier: sZ4kcXKg7yBQqd2h9nXuW+GAb+ILDnR9kmeh+brfFWg= Subject key identifier: 1A:A0:8C:92:42:FA:56:45:B2:13:54:3B:8E:A8:83:D7:CA:10:D9:C9 Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Certificate serial: 019B446E6009BBE430ECFFA1CDC2F4D51C1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft Manifest number: 16B3 Signing time: Mon 22 Dec 2025 05:00:42 +0000 Manifest this update: Mon 22 Dec 2025 05:00:42 +0000 Manifest next update: Tue 23 Dec 2025 05:00:42 +0000 Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=) 2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: hRK2YOEZayUZUei9nq2ZIs/VFC/E74iSMMM7WFqkTjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:60:09:bb:e4:30:ec:ff:a1:cd:c2:f4:d5:1c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135 Validity Not Before: Dec 22 05:00:42 2025 GMT Not After : Dec 23 05:00:42 2025 GMT Subject: CN=1aa08c9242fa5645b213543b8ea883d7ca10d9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:6b:53:0e:90:29:93:9a:e2:ed:99:80:fb: 82:99:14:b4:1d:bf:da:4b:ce:27:19:16:99:fa:e3: 96:61:20:45:8c:46:21:3a:1e:39:d9:f7:94:0b:85: cc:67:0a:58:85:68:2a:8f:83:9c:8e:7c:25:fe:aa: dd:67:ce:e7:dd:86:11:95:29:1b:0a:00:96:4b:13: 0b:5e:f4:08:ff:51:9f:8d:19:f7:7d:34:24:eb:53: 1f:b4:8e:fb:b1:b1:d2:54:95:69:d6:6f:d2:4c:67: f2:7d:22:b3:31:8f:48:58:bc:91:33:0d:67:97:76: 28:bd:ea:f2:84:10:fb:ab:13:94:93:93:20:89:c5: cd:41:18:8f:8b:e4:d0:7e:ea:c2:74:c3:15:62:1e: 6e:5b:b5:5b:1e:7c:c9:6d:36:84:a7:04:eb:cc:d8: 2a:1d:8a:da:b5:43:5f:01:b3:96:2e:a0:65:48:77: 16:58:25:d9:12:0e:d8:f8:de:11:f4:d5:13:60:f1: 6d:84:3e:81:de:84:2f:be:37:8b:1d:6e:fb:33:b9: e6:1b:25:3b:07:7b:df:9e:64:07:e8:68:80:c2:b8: 83:00:db:cf:a2:11:d0:6d:bc:f5:7c:38:ec:f1:e7: 66:80:38:cb:77:96:8f:32:c9:7f:b7:89:e6:13:0d: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:8C:92:42:FA:56:45:B2:13:54:3B:8E:A8:83:D7:CA:10:D9:C9 X509v3 Authority Key Identifier: keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:fa:02:dc:fb:e9:37:60:cd:91:fe:12:65:3a:ca:f8:eb: 86:e5:36:88:cc:08:d9:a7:0e:59:ac:e1:04:c8:0a:5d:75:75: 8d:7d:f3:88:67:a1:44:b4:b5:36:89:8c:c2:f8:d7:9f:43:4a: 11:6f:0f:00:a4:88:0a:8b:27:45:40:b5:b1:21:08:9d:c4:d6: be:99:25:e9:e4:e5:b4:2e:f9:ae:32:14:b5:d4:a8:cd:b1:a5: f7:68:fa:78:39:64:aa:4d:55:3c:bf:67:0f:00:59:f2:26:59: 4a:16:ce:55:f6:06:8a:2c:3c:5e:22:5e:56:b7:7e:7f:b0:7a: 55:23:26:16:27:5f:bb:94:b3:c1:3c:ad:19:b8:8f:c2:fd:55: 35:e9:50:20:2b:b6:d9:33:0c:b4:b0:1f:50:ee:ff:2c:e1:8e: 7e:77:36:a8:fd:d5:e6:47:3f:b1:a4:2b:00:e1:e5:9a:d4:40: 53:c8:c5:9e:fa:5c:1e:df:56:27:47:86:c2:cf:ce:4f:c7:90: 6b:a8:5e:9a:91:48:a5:6c:f7:d8:f0:8f:2c:ff:8d:26:07:ba: 01:3d:9b:2e:37:fd:aa:2d:5e:6a:6f:c2:d7:e9:0c:b8:82:cf: 01:f9:ef:03:03:2b:28:6e:c4:aa:0f:eb:04:73:46:4c:21:d6: d8:0c:26:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbmAJu+Qw7P+hzcL01RwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh MjkxMzUwHhcNMjUxMjIyMDUwMDQyWhcNMjUxMjIzMDUwMDQyWjAzMTEwLwYDVQQD EygxYWEwOGM5MjQyZmE1NjQ1YjIxMzU0M2I4ZWE4ODNkN2NhMTBkOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K5rUw6QKZOa4u2ZgPuCmRS0Hb/a S84nGRaZ+uOWYSBFjEYhOh452feUC4XMZwpYhWgqj4Ocjnwl/qrdZ87n3YYRlSkb CgCWSxMLXvQI/1GfjRn3fTQk61MftI77sbHSVJVp1m/STGfyfSKzMY9IWLyRMw1n l3YoveryhBD7qxOUk5MgicXNQRiPi+TQfurCdMMVYh5uW7VbHnzJbTaEpwTrzNgq HYratUNfAbOWLqBlSHcWWCXZEg7Y+N4R9NUTYPFthD6B3oQvvjeLHW77M7nmGyU7 B3vfnmQH6GiAwriDANvPohHQbbz1fDjs8edmgDjLd5aPMsl/t4nmEw0V3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqgjJJC+lZFshNUO46og9fKENnJMB8GA1UdIwQY MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjav6Atz7 6TdgzZH+EmU6yvjrhuU2iMwI2acOWazhBMgKXXV1jX3ziGehRLS1NomMwvjXn0NK EW8PAKSICosnRUC1sSEIncTWvpkl6eTltC75rjIUtdSozbGl92j6eDlkqk1VPL9n DwBZ8iZZShbOVfYGiiw8XiJeVrd+f7B6VSMmFidfu5SzwTytGbiPwv1VNelQICu2 2TMMtLAfUO7/LOGOfnc2qP3V5kc/saQrAOHlmtRAU8jFnvpcHt9WJ0eGws/OT8eQ a6hempFIpWz32PCPLP+NJge6AT2bLjf9qi1eam/C1+kMuILPAfnvAwMrKG7Eqg/r BHNGTCHW2AwmYg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:00:29 2025 by rpki-client