This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json) Hash identifier: QTrIeC3HZavOj79/3aKTq5kZKwX7wIkRbhmndkHVnzM= Subject key identifier: A8:C3:6F:10:2B:13:A1:AE:03:13:73:1E:4F:73:8F:D0:48:FA:20:17 Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452 Certificate serial: 019B4DE0FC66FFAD221326C285EE061C1799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft Manifest number: 1052 Signing time: Wed 24 Dec 2025 01:02:28 +0000 Manifest this update: Wed 24 Dec 2025 01:02:28 +0000 Manifest next update: Thu 25 Dec 2025 01:02:28 +0000 Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=) 2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: ET1UV0wZz0cH4HeJdFry8BNC/tE0WJsV+Jl2+b3yZUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:fc:66:ff:ad:22:13:26:c2:85:ee:06:1c:17:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452 Validity Not Before: Dec 24 01:02:28 2025 GMT Not After : Dec 25 01:02:28 2025 GMT Subject: CN=a8c36f102b13a1ae0313731e4f738fd048fa2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:9b:45:14:5b:fe:97:d8:6e:87:be:49:1a: 41:58:87:18:c2:54:4f:be:b6:e2:06:b4:58:96:b4: fc:e1:41:98:fa:9b:d5:df:7d:2b:3f:06:ca:52:63: de:63:a6:67:7e:6e:87:ad:69:ee:5a:ee:76:8c:54: 01:9c:75:1b:5a:de:6a:e2:7a:ef:02:64:a2:bd:49: 33:02:20:de:73:de:bf:9b:fe:9e:88:94:f1:b4:1a: 2a:71:2c:c2:77:e5:41:63:44:d4:6a:dd:b2:40:f9: 20:c9:ee:99:9c:42:a0:8c:7c:6e:b7:04:55:9a:fb: ca:2e:42:33:7e:70:34:66:cf:68:ad:33:a2:2f:43: 4e:f2:84:a5:ae:0b:1e:61:60:ac:9a:11:8d:f3:a3: 29:5b:5d:94:ba:3a:4c:48:09:32:11:ef:41:f8:5e: 43:41:04:49:1a:cc:6b:4e:f3:f8:3c:54:c5:a9:4c: a1:34:81:5e:05:ce:a5:b5:9d:88:c1:f6:e9:c1:49: c1:f3:a5:52:e6:cd:18:64:be:8f:ea:f0:83:56:b5: cf:43:c9:3f:72:ff:ab:98:b5:ca:91:73:b7:40:35: 6f:79:92:56:bd:36:a9:d1:f4:b8:1c:83:5a:37:ac: 8b:89:53:e9:d1:fb:6c:8a:9f:07:62:14:2d:15:e7: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C3:6F:10:2B:13:A1:AE:03:13:73:1E:4F:73:8F:D0:48:FA:20:17 X509v3 Authority Key Identifier: keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:aa:e8:13:47:ee:d5:7f:44:f3:88:07:ef:01:f7:cd:0a: 89:2f:f1:7f:f9:fd:89:aa:38:25:37:a9:b8:ab:5e:b4:d0:64: 65:67:93:be:d8:d2:8c:ab:fc:26:34:c7:a1:b8:10:3c:dd:86: fc:f8:5c:e7:62:c0:4c:4c:fb:07:22:56:d1:9d:77:37:8a:58: 10:8c:7a:90:ed:33:58:c0:b9:e7:2f:e6:ed:c4:56:56:10:86: e0:16:e3:2a:89:0d:10:7e:6a:5d:8f:09:ad:91:93:7a:8d:f0: a9:b7:89:10:25:ad:27:5b:13:7d:86:ac:ab:ea:ef:b2:8c:80: 2f:f7:b0:69:a6:56:84:b7:36:97:f6:47:b2:fc:a7:c5:7f:d7: 25:2b:08:dd:44:c7:95:0a:48:be:3f:68:6c:13:32:64:11:16: 94:12:f7:17:b1:91:cb:e9:cf:3f:b9:0c:70:b8:d0:84:63:bd: 8a:3c:47:29:f0:dd:ec:1d:2a:2f:bd:bf:a9:ba:36:e0:d6:e1: 9f:07:5e:50:2f:e9:fd:28:fb:be:5c:31:df:e7:59:cd:cc:69: 02:24:a4:c6:97:13:1c:0b:4b:8e:62:14:b8:96:1f:7d:47:c8: 47:e7:33:18:b2:3a:8f:ca:ef:5b:30:f9:01:2f:7e:92:c5:d7: 96:05:7d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Pxm/60iEybChe4GHBeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3 NTY0NTIwHhcNMjUxMjI0MDEwMjI4WhcNMjUxMjI1MDEwMjI4WjAzMTEwLwYDVQQD EyhhOGMzNmYxMDJiMTNhMWFlMDMxMzczMWU0ZjczOGZkMDQ4ZmEyMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy52bRRRb/pfYboe+SRpBWIcYwlRP vrbiBrRYlrT84UGY+pvV330rPwbKUmPeY6Znfm6HrWnuWu52jFQBnHUbWt5q4nrv AmSivUkzAiDec96/m/6eiJTxtBoqcSzCd+VBY0TUat2yQPkgye6ZnEKgjHxutwRV mvvKLkIzfnA0Zs9orTOiL0NO8oSlrgseYWCsmhGN86MpW12UujpMSAkyEe9B+F5D QQRJGsxrTvP4PFTFqUyhNIFeBc6ltZ2IwfbpwUnB86VS5s0YZL6P6vCDVrXPQ8k/ cv+rmLXKkXO3QDVveZJWvTap0fS4HINaN6yLiVPp0ftsip8HYhQtFeeOCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjDbxArE6GuAxNzHk9zj9BI+iAXMB8GA1UdIwQY MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt MGNiMjE4ZTVlNzA3LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3 LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7iq6BNH 7tV/RPOIB+8B980KiS/xf/n9iao4JTepuKtetNBkZWeTvtjSjKv8JjTHobgQPN2G /Phc52LATEz7ByJW0Z13N4pYEIx6kO0zWMC55y/m7cRWVhCG4BbjKokNEH5qXY8J rZGTeo3wqbeJECWtJ1sTfYasq+rvsoyAL/ewaaZWhLc2l/ZHsvynxX/XJSsI3UTH lQpIvj9obBMyZBEWlBL3F7GRy+nPP7kMcLjQhGO9ijxHKfDd7B0qL72/qbo24Nbh nwdeUC/p/Sj7vlwx3+dZzcxpAiSkxpcTHAtLjmIUuJYffUfIR+czGLI6j8rvWzD5 AS9+ksXXlgV9OQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:41 2025 by rpki-client