This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json) Hash identifier: /bDEEutKVcu/6BMVZppxKGT2Z0UBSqX+0DFzgAcS4pU= Subject key identifier: 1F:18:36:88:97:3E:30:B4:DE:FA:FF:96:CD:00:FD:AF:A9:00:75:BD Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Certificate serial: 019B563DCDE030083D3E5347B27D2AEC3519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft Manifest number: 13B3 Signing time: Thu 25 Dec 2025 16:00:49 +0000 Manifest this update: Thu 25 Dec 2025 16:00:49 +0000 Manifest next update: Fri 26 Dec 2025 16:00:49 +0000 Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: 1aSqKx0fjrjOIpW8qoad+UW20+jTqyDGUgGIbqDus8o=) 2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:cd:e0:30:08:3d:3e:53:47:b2:7d:2a:ec:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02 Validity Not Before: Dec 25 16:00:49 2025 GMT Not After : Dec 26 16:00:49 2025 GMT Subject: CN=1f183688973e30b4defaff96cd00fdafa90075bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:1f:9a:18:df:ed:24:97:9e:49:26:6c:c6: 62:ae:43:5d:ac:76:5f:eb:a4:fd:0c:29:9d:09:0a: 80:5f:78:99:c2:e0:11:5b:f8:89:5a:3e:6c:a2:ec: 95:c5:d1:b3:cb:28:92:55:ca:a5:28:ce:16:fa:fd: 47:12:cc:cf:8f:f1:dc:81:2b:7f:15:ae:00:40:a2: 5f:65:1a:a6:94:a4:fa:3f:53:55:4f:52:49:a8:b9: 6e:03:8f:90:2b:ea:62:a6:af:34:31:d4:86:d0:8d: 47:e0:68:9b:5d:ca:3d:a2:a7:d8:84:e2:d0:07:3a: 05:a6:58:ac:fb:03:ff:ae:56:54:4a:84:a9:5f:df: 62:ac:25:5b:17:03:58:90:d4:7b:76:c3:2a:bb:84: 1b:3d:6c:f3:32:78:d5:79:84:84:88:bc:e5:c0:3e: a5:22:16:26:5d:0b:53:82:93:e1:fc:7a:7b:63:aa: 55:8f:fb:77:16:9c:59:5d:ae:c5:26:93:ce:1e:77: 8d:cc:7c:0c:f5:28:c3:26:df:1f:13:a1:e1:79:e6: 62:80:07:1c:c0:5c:ed:cc:d6:c5:c6:06:ce:29:3c: 9b:61:36:2f:3a:d9:c3:89:81:db:b9:90:c7:05:55: 57:1e:65:d1:8f:f7:e9:6c:ea:4d:ff:69:dd:7d:ed: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:36:88:97:3E:30:B4:DE:FA:FF:96:CD:00:FD:AF:A9:00:75:BD X509v3 Authority Key Identifier: keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0b:a5:a4:ee:30:e7:c8:2a:25:ad:4d:ac:e9:f1:e4:0c:51: 72:d1:40:3a:c8:18:03:a2:13:cc:d2:d1:ba:01:4e:fd:40:87: 3b:b2:93:d1:47:ed:45:45:57:ba:cc:32:c9:67:c9:7b:b4:e0: 60:62:20:66:91:83:9b:25:cb:43:80:4a:c5:f7:4e:63:2b:ed: c8:5c:52:98:f7:7e:17:99:88:f3:5e:b7:20:97:9d:6f:5b:9c: 66:f8:cf:20:c5:43:c9:88:fb:43:0d:29:2c:6b:1e:50:fe:4a: ac:15:76:73:2f:93:75:a1:c7:72:6d:41:92:66:9f:aa:11:1c: 9e:e5:55:c4:f3:6e:57:ea:cc:e9:d2:dc:c1:5b:a6:16:fd:82: d4:27:5a:bd:ba:ac:f8:43:96:80:37:46:18:ea:85:7c:29:05: dd:79:c8:02:0f:f5:b5:0f:84:f9:c5:ac:28:56:22:be:fb:40: a8:5f:3a:f7:bd:f1:9d:ed:fa:17:15:38:9c:3f:e4:71:62:75: 1b:85:a9:1d:5f:a0:87:44:1d:dd:c7:57:58:96:7e:19:35:c6: d1:4b:31:2a:94:01:b4:7b:1f:ed:47:59:5e:ac:68:2a:3b:d0: b6:36:eb:ad:ff:15:70:89:8b:bc:a4:66:b6:cf:b5:b8:23:dc: 66:a4:b7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPc3gMAg9PlNHsn0q7DUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWE1MWJlYTFiNTcwZmZhNzJkOWM1MmQxYTUxOGMyNGJj NzhjMDIwHhcNMjUxMjI1MTYwMDQ5WhcNMjUxMjI2MTYwMDQ5WjAzMTEwLwYDVQQD EygxZjE4MzY4ODk3M2UzMGI0ZGVmYWZmOTZjZDAwZmRhZmE5MDA3NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy8fmhjf7SSXnkkmbMZirkNdrHZf 66T9DCmdCQqAX3iZwuARW/iJWj5souyVxdGzyyiSVcqlKM4W+v1HEszPj/HcgSt/ Fa4AQKJfZRqmlKT6P1NVT1JJqLluA4+QK+pipq80MdSG0I1H4GibXco9oqfYhOLQ BzoFplis+wP/rlZUSoSpX99irCVbFwNYkNR7dsMqu4QbPWzzMnjVeYSEiLzlwD6l IhYmXQtTgpPh/Hp7Y6pVj/t3FpxZXa7FJpPOHneNzHwM9SjDJt8fE6HheeZigAcc wFztzNbFxgbOKTybYTYvOtnDiYHbuZDHBVVXHmXRj/fpbOpN/2ndfe1vTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8YNoiXPjC03vr/ls0A/a+pAHW9MB8GA1UdIwQY MBaAFKyaUb6htXD/py2cUtGlGMJLx4wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgt YWI1NjMwMjExZjdhLzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgtYWI1NjMwMjExZjdh LzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwulpO4w 58gqJa1NrOnx5AxRctFAOsgYA6ITzNLRugFO/UCHO7KT0UftRUVXuswyyWfJe7Tg YGIgZpGDmyXLQ4BKxfdOYyvtyFxSmPd+F5mI8163IJedb1ucZvjPIMVDyYj7Qw0p LGseUP5KrBV2cy+TdaHHcm1BkmafqhEcnuVVxPNuV+rM6dLcwVumFv2C1Cdavbqs +EOWgDdGGOqFfCkF3XnIAg/1tQ+E+cWsKFYivvtAqF86973xne36FxU4nD/kcWJ1 G4WpHV+gh0Qd3cdXWJZ+GTXG0UsxKpQBtHsf7UdZXqxoKjvQtjbrrf8VcImLvKRm ts+1uCPcZqS3qQ== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:55 2025 by rpki-client