This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json) Hash identifier: ceex+Y87SkFLsDZcQoeIjvvP85ZF4Nn9ByEy5exa6sw= Subject key identifier: D9:1C:49:71:29:80:0A:5E:B0:EA:5F:C3:AF:5B:31:36:EF:8F:A7:2F Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Certificate serial: 019B2B1C97D54D5FBC56C43DBADA62A6BE81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft Manifest number: 0E51 Signing time: Wed 17 Dec 2025 07:00:52 +0000 Manifest this update: Wed 17 Dec 2025 07:00:52 +0000 Manifest next update: Thu 18 Dec 2025 07:00:52 +0000 Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=) 2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: SA26NIQRa2CdmmZW80qe1NaW+pw90IhONMxiakeykCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:97:d5:4d:5f:bc:56:c4:3d:ba:da:62:a6:be:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082 Validity Not Before: Dec 17 07:00:52 2025 GMT Not After : Dec 18 07:00:52 2025 GMT Subject: CN=d91c497129800a5eb0ea5fc3af5b3136ef8fa72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:37:47:30:e6:35:7c:ee:ab:f2:d0:23:fe: 0e:07:9e:cb:b2:f4:b4:4d:62:bf:f3:3b:26:c1:37: 76:bd:61:07:8e:7f:77:39:81:e5:c6:73:9d:55:45: 38:90:b5:8d:7f:c0:21:a4:f6:f0:d6:2c:18:68:2a: 54:7f:57:9e:bd:12:da:14:fd:99:a2:d2:89:74:24: 82:a0:fd:29:37:3f:30:aa:db:10:fd:66:b6:cb:e1: 76:13:2a:71:e0:b9:e7:44:58:ba:a5:cb:2b:14:0c: c7:5d:92:9b:59:30:d0:eb:79:5d:fe:f5:f2:5b:b4: 3c:ca:12:70:38:a8:84:fb:29:60:05:1a:02:7a:d6: db:5b:d5:cf:60:d1:9e:23:ca:b2:b3:95:c2:63:ff: d8:ec:10:28:b6:42:c9:a1:de:88:65:5a:34:74:f1: a5:27:08:0f:b3:25:f4:df:87:b6:4c:cc:80:76:91: 28:52:49:85:aa:85:06:1c:11:f1:47:15:23:f6:4a: fc:cf:71:c4:3a:06:5b:a7:07:01:cb:b0:8e:af:73: 68:49:16:da:63:4f:d0:e3:53:de:c4:bf:1a:84:54: 32:ff:ca:07:6a:48:9d:b7:f4:03:b6:af:f6:3e:0b: 79:3a:d8:67:7b:75:cf:ad:14:95:55:83:c7:d0:70: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1C:49:71:29:80:0A:5E:B0:EA:5F:C3:AF:5B:31:36:EF:8F:A7:2F X509v3 Authority Key Identifier: keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d3:2b:31:3f:94:2d:4b:42:5a:a0:f1:a9:3c:bd:96:c2:c5: a8:1f:eb:f1:f4:98:e0:f0:80:7c:5c:38:86:87:8a:0a:df:32: 68:a0:1c:74:ab:d4:8a:70:9c:b7:39:b5:7d:1f:25:a0:c4:37: d0:c7:46:ea:c6:de:86:32:bb:0c:6d:ae:b2:d7:77:b2:8c:48: 61:81:dc:a5:22:4e:12:bf:53:1c:01:70:6c:8c:41:6f:07:98: 35:a7:bd:b1:83:84:29:02:9a:a1:29:6d:d5:0d:09:7f:32:6d: 15:2a:3d:d3:af:02:de:3e:96:11:89:12:f8:0f:28:f8:f6:f9: bd:72:e8:80:df:84:b3:a3:d7:14:3c:2a:01:1b:13:cd:7c:13: 62:a4:fa:41:b5:8f:61:3d:14:a1:ce:a2:dc:c1:d8:83:88:59: cb:a6:07:d2:34:2c:5d:89:60:2b:63:15:68:c3:b8:f4:b6:1a: 4e:ba:dc:41:78:d9:bb:79:99:e5:e6:db:af:4c:e3:d8:b5:13: 5c:53:6d:04:35:db:8c:27:93:7b:a9:e3:45:db:7e:cd:74:8f: ae:4a:69:8e:e3:e3:b0:13:49:0f:37:ac:c2:27:bd:b2:89:16: c0:cb:81:b9:4b:ae:15:85:19:f8:c6:15:8e:ba:c5:71:85:30: c4:67:99:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHJfVTV+8VsQ9utpipr6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy YTQwODIwHhcNMjUxMjE3MDcwMDUyWhcNMjUxMjE4MDcwMDUyWjAzMTEwLwYDVQQD EyhkOTFjNDk3MTI5ODAwYTVlYjBlYTVmYzNhZjViMzEzNmVmOGZhNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vo3RzDmNXzuq/LQI/4OB57LsvS0 TWK/8zsmwTd2vWEHjn93OYHlxnOdVUU4kLWNf8AhpPbw1iwYaCpUf1eevRLaFP2Z otKJdCSCoP0pNz8wqtsQ/Wa2y+F2Eypx4LnnRFi6pcsrFAzHXZKbWTDQ63ld/vXy W7Q8yhJwOKiE+ylgBRoCetbbW9XPYNGeI8qys5XCY//Y7BAotkLJod6IZVo0dPGl JwgPsyX034e2TMyAdpEoUkmFqoUGHBHxRxUj9kr8z3HEOgZbpwcBy7COr3NoSRba Y0/Q41PexL8ahFQy/8oHakidt/QDtq/2Pgt5Othne3XPrRSVVYPH0HA5tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkcSXEpgApesOpfw69bMTbvj6cvMB8GA1UdIwQY MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidMrMT+U LUtCWqDxqTy9lsLFqB/r8fSY4PCAfFw4hoeKCt8yaKAcdKvUinCctzm1fR8loMQ3 0MdG6sbehjK7DG2ustd3soxIYYHcpSJOEr9THAFwbIxBbweYNae9sYOEKQKaoSlt 1Q0JfzJtFSo9068C3j6WEYkS+A8o+Pb5vXLogN+Es6PXFDwqARsTzXwTYqT6QbWP YT0Uoc6i3MHYg4hZy6YH0jQsXYlgK2MVaMO49LYaTrrcQXjZu3mZ5ebbr0zj2LUT XFNtBDXbjCeTe6njRdt+zXSPrkppjuPjsBNJDzeswie9sokWwMuBuUuuFYUZ+MYV jrrFcYUwxGeZ+g== -----END CERTIFICATE-----Generated at Wed Dec 17 15:07:40 2025 by rpki-client