This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json) Hash identifier: 5VTI6kSK6HO3PRQx316QvcwyUD1j55YZ1ZYChNDih8A= Subject key identifier: 9D:4A:69:02:AA:B2:F8:7F:88:2F:18:A0:1B:7E:67:0C:87:0D:DA:BC Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Certificate serial: 019B4EBBA1608B7B861CFBD2243E2A2ABCB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft Manifest number: 0C83 Signing time: Wed 24 Dec 2025 05:01:17 +0000 Manifest this update: Wed 24 Dec 2025 05:01:17 +0000 Manifest next update: Thu 25 Dec 2025 05:01:17 +0000 Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=) 2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: ZxbIcGmSnfG7lsHprQfe00zWsq8dea/MfHDH+fT+BeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:a1:60:8b:7b:86:1c:fb:d2:24:3e:2a:2a:bc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa Validity Not Before: Dec 24 05:01:17 2025 GMT Not After : Dec 25 05:01:17 2025 GMT Subject: CN=9d4a6902aab2f87f882f18a01b7e670c870ddabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:d2:f8:c4:33:06:4e:ba:27:63:85:61:a9: e1:59:f4:bd:85:82:d4:ad:98:57:01:8a:de:51:27: 5c:0d:44:91:6a:d0:e8:ce:05:88:9d:5b:ea:ff:a5: d8:4f:3b:b8:6e:e6:5b:61:5c:57:f4:28:d9:04:0f: 90:6a:c2:dd:8a:09:51:cf:d4:7d:2c:a2:31:c2:b9: 88:66:f9:61:95:b9:f3:5f:ba:b7:e0:89:93:ed:87: 03:e4:38:4b:09:a1:0a:3f:7d:77:25:60:5c:61:20: ef:22:d9:5a:95:45:b2:66:fe:64:9e:0e:0f:1f:79: 7a:a6:1b:d8:11:89:2a:d6:f6:0a:bf:8a:00:e9:a8: 6c:85:db:00:21:2e:fd:e5:95:54:38:3b:f9:89:6a: 1e:d5:28:55:0d:3e:42:92:d1:1d:41:c2:12:d7:c1: 1a:1d:f9:01:fc:fe:52:9b:6f:29:9a:d2:75:e8:49: a0:bc:15:78:30:f5:d8:ad:e6:d7:ec:c5:8a:f3:29: 9f:12:15:4e:db:09:00:e1:19:cd:d5:81:d8:d6:55: fc:71:cf:1b:87:84:d6:da:05:33:11:8d:f8:ff:bf: 4b:cd:5b:0c:77:b1:87:75:a6:5a:14:16:e6:a6:2d: ba:bd:94:b8:b4:dd:e5:5c:11:bd:dc:2c:3b:dd:3c: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4A:69:02:AA:B2:F8:7F:88:2F:18:A0:1B:7E:67:0C:87:0D:DA:BC X509v3 Authority Key Identifier: keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:3a:62:2b:b0:98:70:0b:d1:2d:6c:0e:3f:4f:1e:af:d0: 22:c7:31:c4:8c:a4:a8:bb:72:9f:34:bd:81:13:10:41:1c:bd: 15:08:34:80:7f:e8:25:52:4a:9b:dc:82:f3:5a:e6:aa:39:ce: 08:bc:43:df:44:1a:20:13:7f:e6:f3:28:3b:88:de:c9:94:6a: 02:7e:4f:ad:17:af:aa:77:60:db:3f:c3:19:e7:7a:b7:1b:b1: 6e:b2:26:c0:95:c9:b2:0b:37:34:ee:63:ba:62:03:f2:3a:7f: 33:d6:09:33:1e:5f:72:48:7e:d7:3e:fb:41:dc:7b:40:c1:3f: d8:49:6f:10:23:7c:7e:3f:7e:d5:ba:e1:a5:5b:fc:38:c1:58: 0c:b2:c6:ca:54:64:71:ec:b9:df:3d:8f:07:00:0e:b7:82:a8: 7d:a8:bc:d5:3b:98:13:94:9c:f3:92:f0:07:83:70:26:70:f1: 19:bf:ea:f7:7b:d9:b3:fc:bb:5f:91:31:19:08:15:a2:c1:e0: 55:53:d6:17:c3:13:21:0a:8e:41:da:a0:73:15:87:97:e1:a8: f8:42:dc:af:46:35:98:cd:3c:0a:8d:6a:e3:61:99:c0:6b:a6: 8e:a3:b6:4a:84:e1:1e:36:6a:54:2a:81:27:f9:87:ab:ff:79: 91:ed:10:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu6Fgi3uGHPvSJD4qKryxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlM2FkYjU4YzEwOGI4YmIxM2U0M2MxNWVlYTNjNzg5OWI2 NGEzYWEwHhcNMjUxMjI0MDUwMTE3WhcNMjUxMjI1MDUwMTE3WjAzMTEwLwYDVQQD Eyg5ZDRhNjkwMmFhYjJmODdmODgyZjE4YTAxYjdlNjcwYzg3MGRkYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApebS+MQzBk66J2OFYanhWfS9hYLU rZhXAYreUSdcDUSRatDozgWInVvq/6XYTzu4buZbYVxX9CjZBA+QasLdiglRz9R9 LKIxwrmIZvlhlbnzX7q34ImT7YcD5DhLCaEKP313JWBcYSDvItlalUWyZv5kng4P H3l6phvYEYkq1vYKv4oA6ahshdsAIS795ZVUODv5iWoe1ShVDT5CktEdQcIS18Ea HfkB/P5Sm28pmtJ16EmgvBV4MPXYrebX7MWK8ymfEhVO2wkA4RnN1YHY1lX8cc8b h4TW2gUzEY34/79LzVsMd7GHdaZaFBbmpi26vZS4tN3lXBG93Cw73TyWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1KaQKqsvh/iC8YoBt+ZwyHDdq8MB8GA1UdIwQY MBaAFK4621jBCLi7E+Q8Fe6jx4mbZKOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMt OGZiYjUxMjhhMmM5LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMtOGZiYjUxMjhhMmM5 LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeA6Yiuw mHAL0S1sDj9PHq/QIscxxIykqLtynzS9gRMQQRy9FQg0gH/oJVJKm9yC81rmqjnO CLxD30QaIBN/5vMoO4jeyZRqAn5PrRevqndg2z/DGed6txuxbrImwJXJsgs3NO5j umID8jp/M9YJMx5fckh+1z77Qdx7QME/2ElvECN8fj9+1brhpVv8OMFYDLLGylRk cey53z2PBwAOt4Kofai81TuYE5Sc85LwB4NwJnDxGb/q93vZs/y7X5ExGQgVosHg VVPWF8MTIQqOQdqgcxWHl+Go+ELcr0Y1mM08Co1q42GZwGumjqO2SoThHjZqVCqB J/mHq/95ke0QGg== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:54 2025 by rpki-client