This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json) Hash identifier: oHNgVy5wzyLTG7gqBq1QGFJkYeeSK/BWs+XvNYZMmh4= Subject key identifier: FF:E6:34:23:E1:86:93:04:8B:1F:DF:3D:F7:6B:70:1E:A7:BE:AB:34 Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e Certificate serial: 019B3CEC6846F2E607B1DFB4CF0699A400B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft Manifest number: 0872 Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=) 2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=) 3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=) 4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: 9Kg+5+suJLjOtjbRMrviUqOfeNn0+R6S89UPzYjIMaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:68:46:f2:e6:07:b1:df:b4:cf:06:99:a4:00:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=ffe63423e18693048b1fdf3df76b701ea7beab34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:51:5f:53:45:77:1f:90:48:1c:b6:50:70: cf:59:6e:55:37:c2:f1:13:0a:b2:48:04:ab:30:83: 7f:26:68:0c:59:62:c2:92:f1:f9:33:a5:18:80:54: dc:8d:08:55:29:87:61:6c:be:9c:94:e6:12:c1:40: ee:51:9c:67:15:39:44:1b:87:23:4c:9d:1b:c0:4f: c1:72:72:1c:74:27:36:94:d1:b1:61:96:cb:8a:d0: ca:0c:cb:c3:b3:56:99:39:8d:04:96:39:f2:16:d2: 5b:58:22:54:b5:c1:89:47:4b:35:85:f7:fa:ae:99: d2:a9:d9:22:cd:20:11:c2:47:15:e7:ab:37:47:31: 38:b2:81:3c:69:80:82:ea:44:b4:f7:aa:48:2f:9b: dd:fa:04:f4:ef:99:79:0e:ae:01:53:33:43:db:12: fb:58:67:56:bd:50:88:8f:e8:c6:27:ea:05:f0:32: cf:a8:98:8a:4f:d1:97:c2:90:7b:db:00:67:05:95: 0f:eb:5e:49:71:c9:8e:28:ac:29:f1:97:3a:4a:57: 26:8e:49:ea:07:69:f7:82:67:e9:a6:42:ff:85:47: 58:19:f0:9c:79:9c:20:08:8b:a7:67:d7:6f:36:8d: 05:af:d0:be:17:0b:7d:8e:bb:d9:13:7b:d9:8a:f1: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E6:34:23:E1:86:93:04:8B:1F:DF:3D:F7:6B:70:1E:A7:BE:AB:34 X509v3 Authority Key Identifier: keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8d:8c:9c:26:02:b9:3c:aa:74:ec:f8:aa:3b:e5:f9:66:f0: 11:e6:bd:8e:4a:b0:d1:d1:ce:00:cf:7c:bd:c2:c5:a7:65:4d: 00:47:f1:8d:7e:c5:af:ab:6b:32:fb:e8:e6:f7:d0:79:22:cc: 46:e7:24:40:ed:0b:07:9a:2a:9e:4b:e6:84:70:2f:f4:4b:80: 10:e8:47:3e:54:e9:97:a9:52:44:4b:f4:68:15:f6:49:ee:f1: c8:69:e0:c3:27:2f:c9:9d:ef:a5:00:a9:7a:3b:a0:ef:dc:a4: 06:ec:b8:0e:f3:e5:32:7e:4d:a5:24:e9:5d:6a:fc:aa:d7:7c: 1c:62:f2:f6:12:53:f7:56:5a:49:e0:e3:fd:26:34:9a:36:fb: 26:11:5e:e2:f7:b3:dd:1e:69:11:da:ab:36:1a:5c:08:8d:92: 9d:62:44:0a:07:e5:9e:75:1e:06:4a:87:d9:e5:7a:00:96:d1: ec:14:23:6c:ea:63:28:2d:38:80:7b:9a:ae:61:9e:6f:eb:c9: 51:08:46:62:bb:ba:bf:ee:af:85:5a:c1:ea:cb:b4:bd:99:65: b3:7b:97:7f:ca:14:f7:ba:1f:a0:51:86:3f:0d:22:fd:8e:52: 32:8e:00:f7:a3:2f:8b:fd:1d:7f:a2:02:ee:41:bf:cf:70:27: 86:38:17:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GhG8uYHsd+0zwaZpACxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi Y2VkNWUwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD EyhmZmU2MzQyM2UxODY5MzA0OGIxZmRmM2RmNzZiNzAxZWE3YmVhYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TNRX1NFdx+QSBy2UHDPWW5VN8Lx EwqySASrMIN/JmgMWWLCkvH5M6UYgFTcjQhVKYdhbL6clOYSwUDuUZxnFTlEG4cj TJ0bwE/BcnIcdCc2lNGxYZbLitDKDMvDs1aZOY0EljnyFtJbWCJUtcGJR0s1hff6 rpnSqdkizSARwkcV56s3RzE4soE8aYCC6kS096pIL5vd+gT075l5Dq4BUzND2xL7 WGdWvVCIj+jGJ+oF8DLPqJiKT9GXwpB72wBnBZUP615JccmOKKwp8Zc6Slcmjknq B2n3gmfppkL/hUdYGfCceZwgCIunZ9dvNo0Fr9C+Fwt9jrvZE3vZivGzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/mNCPhhpMEix/fPfdrcB6nvqs0MB8GA1UdIwQY MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3 LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqI2MnCYC uTyqdOz4qjvl+WbwEea9jkqw0dHOAM98vcLFp2VNAEfxjX7Fr6trMvvo5vfQeSLM RuckQO0LB5oqnkvmhHAv9EuAEOhHPlTpl6lSREv0aBX2Se7xyGngwycvyZ3vpQCp ejug79ykBuy4DvPlMn5NpSTpXWr8qtd8HGLy9hJT91ZaSeDj/SY0mjb7JhFe4vez 3R5pEdqrNhpcCI2SnWJECgflnnUeBkqH2eV6AJbR7BQjbOpjKC04gHuarmGeb+vJ UQhGYru6v+6vhVrB6su0vZlls3uXf8oU97ofoFGGPw0i/Y5SMo4A96Mvi/0df6IC 7kG/z3AnhjgX+A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:51 2025 by rpki-client