This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json) Hash identifier: nteVducLbR5ZrIAjC7tworq+btzGFkRvfWR3gQZKnxg= Subject key identifier: 90:3C:BB:A7:80:AE:3E:80:DB:05:04:08:64:01:A4:24:31:17:9F:A0 Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Certificate serial: 019B32D676AF07DA0FF2B68EF03BDB056483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:01:14 +0000 Manifest this update: Thu 18 Dec 2025 19:01:14 +0000 Manifest next update: Fri 19 Dec 2025 19:01:14 +0000 Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=) 2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: qjtLgMf/Lo1fVm4HWY7ek4ZSLOqIcqJjt7LTLlPAGIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:76:af:07:da:0f:f2:b6:8e:f0:3b:db:05:64:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3 Validity Not Before: Dec 18 19:01:14 2025 GMT Not After : Dec 19 19:01:14 2025 GMT Subject: CN=903cbba780ae3e80db0504086401a42431179fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:15:bd:fd:f6:ae:4e:2a:5d:49:b0:f9:c1: bb:3b:5c:ba:36:de:b8:2c:6c:b6:dc:9b:77:d9:ed: fc:e7:bc:aa:de:be:39:5e:a8:98:e8:51:fe:18:ef: a2:cf:4c:80:4f:3c:dd:fb:09:d4:bf:ef:6d:e6:5c: 34:f1:b4:ff:3d:5c:c5:ac:2b:5c:d2:18:cc:0f:cb: 21:55:0f:fe:88:97:98:ff:10:68:a4:e4:41:55:9d: c9:d5:61:33:ac:c6:59:c9:6a:99:d5:96:a2:b0:13: 27:af:e8:07:62:81:ba:d2:a1:01:7a:a9:19:8c:43: 5b:70:43:3b:db:01:3c:70:2a:ee:b3:4d:c1:50:51: f5:17:e4:6b:b0:b7:e9:18:7d:47:5a:c5:ce:ac:2a: be:6d:3c:98:d6:63:d8:52:1a:25:a3:7a:37:92:d4: 0d:b2:a1:dc:f8:25:78:91:bc:ef:20:9f:18:0b:d0: 43:8b:c3:75:87:dd:12:0d:6e:bc:f0:1b:a0:0a:78: 04:0c:62:29:e2:a3:50:f1:5c:ae:4a:60:e9:d8:7b: f0:b2:12:87:5e:dd:8f:97:81:36:70:2b:15:e1:5a: ff:48:7c:0e:13:8f:8e:46:32:92:09:58:83:fc:b2: fc:ad:3e:90:2e:88:7e:5f:d9:98:77:60:11:31:17: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3C:BB:A7:80:AE:3E:80:DB:05:04:08:64:01:A4:24:31:17:9F:A0 X509v3 Authority Key Identifier: keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4e:9a:16:ed:c9:93:e4:2f:50:72:ad:b9:c1:5b:9a:ab:1b: db:6b:89:42:c8:47:f5:0c:d4:04:61:bf:c5:41:fc:67:df:00: 52:b4:1a:80:1b:c7:28:1e:4c:b6:e8:17:bf:f6:41:3b:b4:45: 66:9b:3b:89:d9:99:b2:71:43:67:64:16:58:c2:95:ec:34:82: f5:d1:82:60:f9:9c:25:6f:0b:a7:ab:76:f0:b5:16:2e:5b:bb: 02:f6:b7:4e:ea:88:94:1c:65:c6:a8:a1:8b:a5:cb:35:58:29: 9f:ac:3f:fe:b6:68:00:7d:72:c3:4a:a7:09:6a:35:b1:f6:b5: b6:b5:d3:6b:64:c0:5e:af:e5:c5:43:46:54:12:fc:b8:46:eb: 59:ca:fc:7a:3b:d9:d9:8c:d5:de:39:96:0a:22:df:00:79:7d: d9:7c:6e:01:b9:b8:b8:85:9f:68:cd:a7:cc:21:b8:72:6f:1f: 7a:08:cc:2c:91:c1:20:45:68:90:57:6c:26:5f:51:09:8b:4f: e8:3f:64:23:0b:9b:6d:1c:64:b2:31:55:72:13:58:75:d4:32: 4b:44:8a:b6:75:3a:be:be:40:87:6f:06:2b:e6:f6:d3:2c:98: 33:7a:20:d5:92:55:56:ac:f8:d2:e6:f5:c4:04:57:bb:1f:17: f2:e3:e2:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1navB9oP8raO8DvbBWSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0 YWQ4YjMwHhcNMjUxMjE4MTkwMTE0WhcNMjUxMjE5MTkwMTE0WjAzMTEwLwYDVQQD Eyg5MDNjYmJhNzgwYWUzZTgwZGIwNTA0MDg2NDAxYTQyNDMxMTc5ZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu4Vvf32rk4qXUmw+cG7O1y6Nt64 LGy23Jt32e3857yq3r45XqiY6FH+GO+iz0yATzzd+wnUv+9t5lw08bT/PVzFrCtc 0hjMD8shVQ/+iJeY/xBopORBVZ3J1WEzrMZZyWqZ1ZaisBMnr+gHYoG60qEBeqkZ jENbcEM72wE8cCrus03BUFH1F+RrsLfpGH1HWsXOrCq+bTyY1mPYUholo3o3ktQN sqHc+CV4kbzvIJ8YC9BDi8N1h90SDW688BugCngEDGIp4qNQ8VyuSmDp2HvwshKH Xt2Pl4E2cCsV4Vr/SHwOE4+ORjKSCViD/LL8rT6QLoh+X9mYd2ARMRdMbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA8u6eArj6A2wUECGQBpCQxF5+gMB8GA1UdIwQY MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2 LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk6aFu3J k+QvUHKtucFbmqsb22uJQshH9QzUBGG/xUH8Z98AUrQagBvHKB5MtugXv/ZBO7RF Zps7idmZsnFDZ2QWWMKV7DSC9dGCYPmcJW8Lp6t28LUWLlu7Ava3TuqIlBxlxqih i6XLNVgpn6w//rZoAH1yw0qnCWo1sfa1trXTa2TAXq/lxUNGVBL8uEbrWcr8ejvZ 2YzV3jmWCiLfAHl92XxuAbm4uIWfaM2nzCG4cm8fegjMLJHBIEVokFdsJl9RCYtP 6D9kIwubbRxksjFVchNYddQyS0SKtnU6vr5Ah28GK+b20yyYM3og1ZJVVqz40ub1 xARXux8X8uPiAQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:01 2025 by rpki-client