This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json) Hash identifier: Z3e2FFZnvQOBnFUfTt4eugAPEYxiyYR+5KUCzBgbEKg= Subject key identifier: 2E:D6:B1:C7:ED:43:8B:41:0D:57:E9:DE:7F:96:46:55:D1:9D:17:7C Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Certificate serial: 019B5418549BF4C422030E49558FBB482B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft Manifest number: 1727 Signing time: Thu 25 Dec 2025 06:00:39 +0000 Manifest this update: Thu 25 Dec 2025 06:00:39 +0000 Manifest next update: Fri 26 Dec 2025 06:00:39 +0000 Files and hashes: 1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: p+8TP9s+3GmzqhfHBX36G+9HKceAUeqrEqt/SPMyG3w=) 2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:54:9b:f4:c4:22:03:0e:49:55:8f:bb:48:2b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6 Validity Not Before: Dec 25 06:00:39 2025 GMT Not After : Dec 26 06:00:39 2025 GMT Subject: CN=2ed6b1c7ed438b410d57e9de7f964655d19d177c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:a5:09:11:47:e7:90:b0:0a:fb:45:99:c3: e4:30:84:3e:1b:42:38:ad:20:83:46:bd:81:17:72: 00:b9:77:05:a9:a2:84:94:57:48:12:dd:a4:61:61: 33:dd:4c:b0:64:d3:e6:5d:3a:e6:3f:38:89:a3:ef: 8c:8b:f7:ef:c4:70:99:35:58:22:44:8d:62:d2:a5: 69:9c:89:55:de:c0:4c:a3:0f:e0:b7:10:f4:9f:4c: d9:66:9c:38:8a:d5:8a:96:36:48:9a:1f:51:11:b3: 42:32:bc:84:24:19:aa:ff:d9:85:1f:0c:c8:9e:52: cc:87:77:a9:c1:c5:24:59:8e:f7:f2:7d:4d:5b:dc: c7:dd:1b:d1:ac:aa:87:11:33:8b:6b:b0:63:67:4f: 0f:ec:c7:56:f4:32:f3:0c:32:e4:b1:ce:a8:d2:c3: a4:fd:17:ca:b9:2b:3d:0a:b5:06:f3:f4:70:e0:88: b4:ba:06:4c:da:fc:15:ec:03:3e:d3:7a:0f:cc:ff: 53:e9:c1:5b:f6:03:84:f2:a3:68:ff:52:40:e0:ac: 9e:e2:e1:8c:b0:65:b2:78:23:6b:0b:cb:e9:1c:49: 19:cc:b4:68:a3:59:8f:58:62:3d:5e:ef:ca:71:2b: 5e:47:b0:b7:a2:4b:9b:da:9b:fd:f4:4c:61:78:56: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:B1:C7:ED:43:8B:41:0D:57:E9:DE:7F:96:46:55:D1:9D:17:7C X509v3 Authority Key Identifier: keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f4:f3:29:55:23:b7:52:23:95:47:3b:ba:14:71:6b:ef:ba: 82:48:e5:2c:37:20:6b:ee:61:00:67:ae:46:6f:88:e6:58:d5: 9e:60:46:6a:6f:64:04:77:a5:a0:86:e3:49:ea:da:75:2f:43: 47:8e:04:53:2d:11:2c:de:d1:34:58:6f:0c:92:56:67:0f:59: 12:d0:20:21:be:82:80:ae:b2:7d:d3:8e:68:ed:93:8c:93:d4: a9:04:13:8d:25:44:08:ea:e1:df:84:cb:ec:e0:ff:e5:ce:fd: 87:4a:c1:45:eb:d4:fc:aa:7e:11:b3:f1:c0:6c:60:0f:55:70: 08:82:9e:3c:6a:0a:90:7a:23:e7:25:f6:61:c8:9f:73:87:c6: 3b:a7:0b:86:46:ff:26:cf:03:df:7c:c8:e6:bb:4e:cf:34:e7: 98:f0:50:b9:ad:c3:b6:a3:b7:7f:35:c0:1a:06:82:a2:13:23: 0d:dd:a3:04:e4:fb:db:92:d9:4d:9e:2c:3f:9a:0d:4a:54:b3: a0:b5:63:7e:34:b4:2a:d8:df:66:26:bf:7d:5d:be:0b:57:1b: fb:c9:96:2e:2d:dd:79:0c:6d:db:be:fa:61:c0:24:a4:ba:01: d9:73:4e:2f:5d:af:56:0e:91:64:2d:ad:61:60:dc:5f:d5:0c: 8a:22:3c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGFSb9MQiAw5JVY+7SCt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1 OWYwZTYwHhcNMjUxMjI1MDYwMDM5WhcNMjUxMjI2MDYwMDM5WjAzMTEwLwYDVQQD EygyZWQ2YjFjN2VkNDM4YjQxMGQ1N2U5ZGU3Zjk2NDY1NWQxOWQxNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGOlCRFH55CwCvtFmcPkMIQ+G0I4 rSCDRr2BF3IAuXcFqaKElFdIEt2kYWEz3UywZNPmXTrmPziJo++Mi/fvxHCZNVgi RI1i0qVpnIlV3sBMow/gtxD0n0zZZpw4itWKljZImh9REbNCMryEJBmq/9mFHwzI nlLMh3epwcUkWY738n1NW9zH3RvRrKqHETOLa7BjZ08P7MdW9DLzDDLksc6o0sOk /RfKuSs9CrUG8/Rw4Ii0ugZM2vwV7AM+03oPzP9T6cFb9gOE8qNo/1JA4Kye4uGM sGWyeCNrC8vpHEkZzLRoo1mPWGI9Xu/KcSteR7C3okub2pv99ExheFZFJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7WscftQ4tBDVfp3n+WRlXRnRd8MB8GA1UdIwQY MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt YWNmMDkzMjI2YjA3LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3 LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/TzKVUj t1IjlUc7uhRxa++6gkjlLDcga+5hAGeuRm+I5ljVnmBGam9kBHeloIbjSeradS9D R44EUy0RLN7RNFhvDJJWZw9ZEtAgIb6CgK6yfdOOaO2TjJPUqQQTjSVECOrh34TL 7OD/5c79h0rBRevU/Kp+EbPxwGxgD1VwCIKePGoKkHoj5yX2Ycifc4fGO6cLhkb/ Js8D33zI5rtOzzTnmPBQua3DtqO3fzXAGgaCohMjDd2jBOT725LZTZ4sP5oNSlSz oLVjfjS0KtjfZia/fV2+C1cb+8mWLi3deQxt2776YcAkpLoB2XNOL12vVg6RZC2t YWDcX9UMiiI8ng== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:31 2025 by rpki-client