This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json) Hash identifier: xDsBfklP4QRP7jRLt4eA/i9IdEbyDWLN4O/rPxMTYxo= Subject key identifier: 0A:9B:FB:4D:B6:5D:2D:62:4D:45:35:07:3D:CC:9D:64:0A:8F:16:70 Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7 Certificate serial: 019B451429ACD5CD6944E5F81880DAAE6309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft Manifest number: 171F Signing time: Mon 22 Dec 2025 08:01:47 +0000 Manifest this update: Mon 22 Dec 2025 08:01:47 +0000 Manifest next update: Tue 23 Dec 2025 08:01:47 +0000 Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=) 2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: RrGTuzGESy0ouyRc9zdZCIUjL7A3ge+gNSawyxaxJhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:29:ac:d5:cd:69:44:e5:f8:18:80:da:ae:63:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7 Validity Not Before: Dec 22 08:01:47 2025 GMT Not After : Dec 23 08:01:47 2025 GMT Subject: CN=0a9bfb4db65d2d624d4535073dcc9d640a8f1670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:ac:de:1a:f6:c5:59:82:37:24:a4:30:d3: 1e:21:5c:27:bd:bb:95:da:41:9d:5d:e9:24:7d:32: 02:15:a6:aa:a4:8d:46:62:6a:a9:1e:85:84:ed:d9: f8:b7:a0:a8:79:c0:e1:fb:72:c0:61:68:77:fc:18: 6f:b2:f9:b3:e3:a2:38:29:1a:0f:9d:4b:a1:7c:ca: 6e:f3:2e:b8:af:08:80:d6:c2:ea:4a:a1:22:67:92: 88:b4:1c:d7:49:09:8b:8d:58:93:da:3b:67:5b:ad: 5c:a9:0e:37:9f:33:06:82:32:1e:9e:1d:bb:25:a7: cb:1d:94:08:8b:eb:f8:62:19:02:e3:64:f0:37:22: 6c:51:94:07:9d:82:b9:c4:5a:6a:06:c2:5b:14:75: aa:49:4e:db:3f:1e:48:33:6c:b4:4d:0d:85:1f:54: 24:fe:03:b8:56:76:41:63:f3:d9:ca:cb:0c:aa:09: a8:f7:3a:2e:23:d0:6a:95:7d:7e:ea:db:91:0e:1d: 14:3a:36:c9:7a:65:f3:04:7c:f4:4c:1f:77:ca:cc: 47:26:f9:3c:22:d1:85:66:9c:a9:71:35:69:8e:84: 86:8e:ec:45:7f:70:5c:53:7e:d4:05:c1:e7:c5:2c: 94:53:76:aa:71:c1:15:58:17:c1:f6:0e:aa:da:0d: 6d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9B:FB:4D:B6:5D:2D:62:4D:45:35:07:3D:CC:9D:64:0A:8F:16:70 X509v3 Authority Key Identifier: keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c8:4e:71:71:79:f9:40:03:81:3f:83:e9:a1:55:3e:a5:26: 9c:48:43:f4:8c:ca:54:1d:cd:33:8f:17:8e:e2:21:c2:57:f7: 55:21:2e:84:c9:6f:e4:ce:ee:b6:4c:c1:e8:c0:58:57:18:fe: b1:fc:9a:56:51:74:1d:d1:d8:ad:72:ee:2e:ac:64:dc:08:64: 38:db:01:01:1c:54:f7:cb:65:e9:d1:6c:89:4f:09:9a:fb:a0: 8c:57:e9:b9:6b:9c:6b:43:b4:e7:78:e7:9a:f5:13:ba:e6:25: 72:b4:2e:e4:98:dc:c1:91:5b:a2:8a:71:c4:2d:43:1c:c0:d7: 62:c3:20:67:3d:98:a8:9a:d0:cd:f3:1e:8c:2f:79:41:3a:cc: 75:94:42:bf:9f:5a:a3:0e:12:7c:ac:b8:25:43:1a:e6:5f:a3: 7c:a8:3b:29:69:bb:6f:2f:82:e9:5a:91:5e:c0:8d:1a:b3:46: 45:d8:37:c0:55:22:66:28:3b:6a:1f:e2:89:db:67:71:80:33: 80:9f:42:43:f8:22:36:eb:c0:2c:50:78:05:88:f5:e9:77:f8: 95:d6:27:fb:f9:d8:c0:7c:f0:b0:1c:bf:25:d4:39:de:14:95: 5e:0f:d2:97:91:2c:01:1d:40:f5:94:ed:ac:bb:13:93:73:fc: 20:2a:d3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFCms1c1pROX4GIDarmMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl ZWMyZTcwHhcNMjUxMjIyMDgwMTQ3WhcNMjUxMjIzMDgwMTQ3WjAzMTEwLwYDVQQD EygwYTliZmI0ZGI2NWQyZDYyNGQ0NTM1MDczZGNjOWQ2NDBhOGYxNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2s3hr2xVmCNySkMNMeIVwnvbuV 2kGdXekkfTICFaaqpI1GYmqpHoWE7dn4t6CoecDh+3LAYWh3/Bhvsvmz46I4KRoP nUuhfMpu8y64rwiA1sLqSqEiZ5KItBzXSQmLjViT2jtnW61cqQ43nzMGgjIenh27 JafLHZQIi+v4YhkC42TwNyJsUZQHnYK5xFpqBsJbFHWqSU7bPx5IM2y0TQ2FH1Qk /gO4VnZBY/PZyssMqgmo9zouI9BqlX1+6tuRDh0UOjbJemXzBHz0TB93ysxHJvk8 ItGFZpypcTVpjoSGjuxFf3BcU37UBcHnxSyUU3aqccEVWBfB9g6q2g1tDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqb+022XS1iTUU1Bz3MnWQKjxZwMB8GA1UdIwQY MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2 LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8hOcXF5 +UADgT+D6aFVPqUmnEhD9IzKVB3NM48XjuIhwlf3VSEuhMlv5M7utkzB6MBYVxj+ sfyaVlF0HdHYrXLuLqxk3AhkONsBARxU98tl6dFsiU8JmvugjFfpuWuca0O053jn mvUTuuYlcrQu5JjcwZFboopxxC1DHMDXYsMgZz2YqJrQzfMejC95QTrMdZRCv59a ow4SfKy4JUMa5l+jfKg7KWm7by+C6VqRXsCNGrNGRdg3wFUiZig7ah/iidtncYAz gJ9CQ/giNuvALFB4BYj16Xf4ldYn+/nYwHzwsBy/JdQ53hSVXg/Sl5EsAR1A9ZTt rLsTk3P8ICrTog== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:49 2025 by rpki-client