This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json) Hash identifier: ZNgVkprgXsWKftprVV/zRTu6G6dOtk9a/iRIZ7ahGEY= Subject key identifier: A7:BC:1B:20:E8:19:39:24:2D:9E:3A:36:E9:3A:97:BC:7F:02:BB:8B Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Certificate serial: 019B4693BC0D34523B568DDA3A6D793C5B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft Manifest number: 16DF Signing time: Mon 22 Dec 2025 15:00:45 +0000 Manifest this update: Mon 22 Dec 2025 15:00:45 +0000 Manifest next update: Tue 23 Dec 2025 15:00:45 +0000 Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: qmer9FVyJfFYNWdkcLIwbDrDT/GuyEho4OPGIfwMNWI=) 2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:bc:0d:34:52:3b:56:8d:da:3a:6d:79:3c:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Validity Not Before: Dec 22 15:00:45 2025 GMT Not After : Dec 23 15:00:45 2025 GMT Subject: CN=a7bc1b20e81939242d9e3a36e93a97bc7f02bb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:55:5d:11:f7:f0:99:92:f8:49:20:0c:20: 0c:28:13:29:9f:65:de:4e:d1:d8:52:7b:15:06:b8: 77:37:ec:ed:9d:f9:8a:8c:34:05:e9:5d:c0:f0:9c: 7d:65:57:22:b5:6f:57:98:f3:8f:be:e6:ff:ef:40: b0:2e:ea:20:e4:39:3b:f1:10:a2:ef:4d:de:f0:6f: 8f:66:6e:95:f1:78:f3:a8:1f:76:71:9f:8a:69:82: 64:ad:ed:b8:cc:b8:32:aa:32:4c:6d:9c:2e:6e:9e: 57:09:f2:73:ef:74:5b:1c:71:af:f1:96:16:fb:10: 53:44:aa:87:24:70:fb:a8:16:2a:0d:1c:7c:2b:88: 77:ae:e9:31:6e:a6:7b:0e:f1:ed:ac:41:a3:ef:e9: e5:ae:77:e7:f7:db:7a:11:fc:c1:d3:af:89:dc:49: 03:cf:1b:03:8d:5f:9e:bf:a7:ec:35:62:b6:12:61: dc:36:97:b7:d6:f4:c5:98:ea:82:e3:d9:d2:20:c9: 13:85:b8:c1:7f:83:21:b5:ad:5d:80:0d:c0:b2:c5: 70:44:e2:eb:45:bb:3c:36:e7:ad:8f:a2:1b:fa:d9: e8:96:9a:f2:54:b2:96:08:1d:f2:8f:4f:56:1f:c1: 4b:02:6e:d1:77:e8:2d:8c:9a:79:41:4d:07:35:8f: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:1B:20:E8:19:39:24:2D:9E:3A:36:E9:3A:97:BC:7F:02:BB:8B X509v3 Authority Key Identifier: keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:68:ba:56:f3:3d:ab:80:ef:14:3b:a1:06:e0:33:d8:8a:6c: d4:ee:b4:3a:b2:a9:b9:d7:e2:88:42:ff:fb:d9:cb:af:00:c0: b7:2a:49:1d:f8:4b:10:bc:55:b9:20:02:c3:52:ea:a5:fe:7f: 3c:bb:01:26:ab:d0:52:c6:b0:50:e7:8a:90:9a:09:fe:96:d8: 2b:e6:3a:36:42:99:f0:38:53:d7:c2:2f:01:32:32:79:ef:52: 9e:81:5a:9a:59:14:f1:7a:9f:ac:c0:2c:1a:6d:a9:b7:a5:85: 83:5a:7b:71:00:ca:ac:18:81:c9:56:92:50:8d:06:9c:ea:e3: 35:14:b6:94:bb:bf:6f:2e:68:ed:ff:19:24:bc:16:c9:44:e4: 6e:0f:4b:2d:dc:77:2f:40:2b:a6:6a:10:4b:fa:82:8f:56:dd: 6d:2b:70:00:a5:82:f6:33:b6:a0:3a:55:18:7d:75:6f:54:20: 3a:1b:ec:95:20:29:5c:2a:04:b0:28:8c:99:49:6b:6c:88:82: b7:34:35:7f:09:96:4f:c7:44:d9:60:a1:f4:3c:f0:d9:fc:07: 07:23:8b:64:91:97:94:fa:6b:5c:20:fa:47:bb:af:f1:fa:62: 6d:43:02:fc:ed:c6:9e:1b:70:9d:b0:15:ce:37:7a:5e:f8:b0: 18:24:07:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk7wNNFI7Vo3aOm15PFsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi YzEwZjcwHhcNMjUxMjIyMTUwMDQ1WhcNMjUxMjIzMTUwMDQ1WjAzMTEwLwYDVQQD EyhhN2JjMWIyMGU4MTkzOTI0MmQ5ZTNhMzZlOTNhOTdiYzdmMDJiYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzilVXRH38JmS+EkgDCAMKBMpn2Xe TtHYUnsVBrh3N+ztnfmKjDQF6V3A8Jx9ZVcitW9XmPOPvub/70CwLuog5Dk78RCi 703e8G+PZm6V8XjzqB92cZ+KaYJkre24zLgyqjJMbZwubp5XCfJz73RbHHGv8ZYW +xBTRKqHJHD7qBYqDRx8K4h3rukxbqZ7DvHtrEGj7+nlrnfn99t6EfzB06+J3EkD zxsDjV+ev6fsNWK2EmHcNpe31vTFmOqC49nSIMkThbjBf4Mhta1dgA3AssVwROLr Rbs8Nuetj6Ib+tnolpryVLKWCB3yj09WH8FLAm7Rd+gtjJp5QU0HNY8sawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe8GyDoGTkkLZ46Nuk6l7x/AruLMB8GA1UdIwQY MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWi6VvM9 q4DvFDuhBuAz2Ips1O60OrKpudfiiEL/+9nLrwDAtypJHfhLELxVuSACw1Lqpf5/ PLsBJqvQUsawUOeKkJoJ/pbYK+Y6NkKZ8DhT18IvATIyee9SnoFamlkU8XqfrMAs Gm2pt6WFg1p7cQDKrBiByVaSUI0GnOrjNRS2lLu/by5o7f8ZJLwWyUTkbg9LLdx3 L0ArpmoQS/qCj1bdbStwAKWC9jO2oDpVGH11b1QgOhvslSApXCoEsCiMmUlrbIiC tzQ1fwmWT8dE2WCh9Dzw2fwHByOLZJGXlPprXCD6R7uv8fpibUMC/O3GnhtwnbAV zjd6XviwGCQHUA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:50:08 2025 by rpki-client