This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json) Hash identifier: I3yo91SsZXJg4FnByDkEPJ2l8RN/u8lr8QXbVWS2rDQ= Subject key identifier: 00:B5:62:20:A7:C0:20:79:EF:CA:E4:19:44:5C:90:A0:8B:0F:CA:3C Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Certificate serial: 019B3CB4C86FD748401F1D64E8305A6D1DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: 34ik7Y5FxYkQFTiHtTmtZyDEtJBzfEjaUw6zhwEJ1hg=) 2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c8:6f:d7:48:40:1f:1d:64:e8:30:5a:6d:1d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9 Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=00b56220a7c02079efcae419445c90a08b0fca3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:b1:9f:fc:32:e8:1d:97:40:80:3c:76:b4: 1d:5f:c9:e3:6d:95:78:ed:c2:99:0e:22:10:79:7f: b8:31:45:95:c0:cf:81:e2:40:8a:c7:1a:9a:18:06: 6b:c5:56:00:07:d2:2e:ab:c6:93:42:f6:21:13:ce: a3:41:5c:fa:bd:a5:c5:d5:f9:a5:31:a6:01:4b:14: 43:51:53:c3:1b:10:5b:c5:11:5d:fb:52:2b:3e:de: 9f:fa:4c:37:e1:f8:fe:d9:eb:6a:57:48:9a:47:78: 6d:f3:27:ee:9e:3b:85:a1:67:ba:f2:85:4d:85:3a: 73:4f:fe:71:5e:3b:59:24:64:61:7f:c7:ce:6d:8f: e6:e9:9c:1f:cf:2a:3d:b2:b3:2d:6d:e3:17:b9:40: 2e:fc:59:00:7a:f7:c1:97:39:a6:59:7e:68:91:e8: 87:19:55:03:72:f1:6a:61:d1:89:4d:b4:a8:16:bf: 2e:02:4c:e5:1b:59:7a:cd:de:42:01:0c:2b:c7:b1: 32:5d:69:c4:20:7e:1f:e2:88:a8:61:6d:ea:91:7d: 90:7e:cc:64:68:3d:df:d1:67:3a:6f:ac:aa:cd:4f: 3a:70:4b:57:b5:1f:dc:5b:8d:75:3f:99:06:69:65: 41:29:b3:c9:d7:6d:06:76:26:93:94:fe:ce:80:3e: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:62:20:A7:C0:20:79:EF:CA:E4:19:44:5C:90:A0:8B:0F:CA:3C X509v3 Authority Key Identifier: keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:d6:76:92:57:98:a1:25:c7:bd:98:08:f8:85:c0:98:99: 67:7d:db:14:fa:46:a8:bf:d5:1e:0b:05:7a:5e:a0:54:00:08: a5:54:f3:a3:f8:4f:d0:07:8b:ad:af:41:a2:fa:9d:3a:cb:fe: 2c:f5:f0:0e:64:54:31:b2:d6:e7:74:65:07:a4:09:70:bb:7d: 4c:0f:b2:ea:08:96:76:5e:ef:d7:ce:c3:c6:76:a4:49:de:e0: 62:cc:65:72:62:37:d2:61:18:90:5f:07:db:8d:34:d4:a0:0d: 3b:4e:e9:46:80:b8:45:03:17:36:37:c7:7e:94:a6:fd:80:ac: a2:14:d2:76:d3:43:13:6b:3d:40:7e:f0:8e:a0:e0:8f:65:66: 65:e8:b6:a7:63:ed:28:cd:4a:2a:9f:cd:81:c3:92:9c:7c:c7: 53:e9:be:bc:64:60:07:de:dd:a8:65:8a:89:3e:00:f4:6c:89: 9e:3a:08:ad:3c:02:9d:02:6d:7d:6c:a2:6b:aa:47:28:2c:00: 3b:fa:6e:3e:b2:7c:e2:4e:a0:9b:86:41:67:b9:f6:a8:4b:05: d4:ab:b9:57:44:bc:90:3b:19:89:de:7a:07:a7:c8:90:2b:1c: f5:94:6b:89:3b:c5:54:7b:4c:6c:91:f4:6f:1a:e7:7f:57:22: 12:3f:f6:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMhv10hAHx1k6DBabR2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj ZTNmYTkwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD EygwMGI1NjIyMGE3YzAyMDc5ZWZjYWU0MTk0NDVjOTBhMDhiMGZjYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYCxn/wy6B2XQIA8drQdX8njbZV4 7cKZDiIQeX+4MUWVwM+B4kCKxxqaGAZrxVYAB9Iuq8aTQvYhE86jQVz6vaXF1fml MaYBSxRDUVPDGxBbxRFd+1IrPt6f+kw34fj+2etqV0iaR3ht8yfunjuFoWe68oVN hTpzT/5xXjtZJGRhf8fObY/m6Zwfzyo9srMtbeMXuUAu/FkAevfBlzmmWX5okeiH GVUDcvFqYdGJTbSoFr8uAkzlG1l6zd5CAQwrx7EyXWnEIH4f4oioYW3qkX2Qfsxk aD3f0Wc6b6yqzU86cEtXtR/cW411P5kGaWVBKbPJ120GdiaTlP7OgD7qlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC1YiCnwCB578rkGURckKCLD8o8MB8GA1UdIwQY MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt MzI5Y2I1MTZkOTM3LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3 LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1XWdpJX mKElx72YCPiFwJiZZ33bFPpGqL/VHgsFel6gVAAIpVTzo/hP0AeLra9BovqdOsv+ LPXwDmRUMbLW53RlB6QJcLt9TA+y6giWdl7v187DxnakSd7gYsxlcmI30mEYkF8H 24001KANO07pRoC4RQMXNjfHfpSm/YCsohTSdtNDE2s9QH7wjqDgj2VmZei2p2Pt KM1KKp/NgcOSnHzHU+m+vGRgB97dqGWKiT4A9GyJnjoIrTwCnQJtfWyia6pHKCwA O/puPrJ84k6gm4ZBZ7n2qEsF1Ku5V0S8kDsZid56B6fIkCsc9ZRriTvFVHtMbJH0 bxrnf1ciEj/2tA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:49 2025 by rpki-client