This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft File: JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json) Hash identifier: 7BS9y/1ymAAD2J5UPbA1LKZNbAdezlttmdf2p+ADa/s= Subject key identifier: 73:AE:E7:58:E2:F4:8F:22:91:92:90:C3:43:B4:59:39:40:E6:2C:DB Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B Certificate issuer: /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b Certificate serial: 019AF3C065DB7D29D3C1F178882BECBBB0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 13:01:03 +0000 Manifest this update: Sat 06 Dec 2025 13:01:03 +0000 Manifest next update: Sun 07 Dec 2025 13:01:03 +0000 Files and hashes: 1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: DHqyxoPTeKzw16jkst+dF+jMtkNLszJ5nPpJ9LYfAVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:65:db:7d:29:d3:c1:f1:78:88:2b:ec:bb:b0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b Validity Not Before: Dec 6 13:01:03 2025 GMT Not After : Dec 7 13:01:03 2025 GMT Subject: CN=73aee758e2f48f22919290c343b4593940e62cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:05:23:68:0c:77:85:da:a0:8b:59:f8:d7: ca:26:0e:8b:c3:07:e8:bb:db:db:3e:21:4a:3a:6b: a7:2e:e8:e9:92:a3:8b:a4:ed:96:7b:90:0d:62:54: 0b:bb:32:bb:da:16:c5:80:22:04:05:8d:aa:31:8f: 03:44:4c:84:09:2b:ab:7a:0f:d9:47:6f:ce:c4:ff: bd:e3:53:11:0c:0a:ad:e2:0d:62:a3:0b:2c:b4:7f: 4b:27:8d:44:25:5a:8c:4c:7e:6c:15:53:bd:89:00: 21:ca:5b:c8:cc:5f:84:22:d0:e9:e5:68:1e:2b:97: 43:75:8b:31:3d:16:e4:08:91:fa:c5:8e:94:70:dd: 23:3c:8b:f3:2a:a6:88:0f:c8:d0:1c:9a:ec:b3:45: 28:8e:ab:74:55:cc:a8:1f:6d:fe:a1:e9:c6:c4:bb: 36:73:db:0b:5f:f9:ff:9d:21:1d:a3:4b:b6:ca:16: b2:d1:c3:cf:77:b7:a8:90:0f:43:42:c8:e0:86:23: 3d:06:29:25:3f:fa:71:f4:75:d5:35:bf:9e:d9:0c: b3:e1:c2:da:09:4c:83:4b:a6:0d:1f:f4:f2:cb:b1: a9:ab:cf:ec:d8:b5:2a:3f:b9:83:42:07:d9:e1:9a: 0f:a3:fc:59:50:03:30:26:de:af:1d:5e:6b:e6:dd: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:E7:58:E2:F4:8F:22:91:92:90:C3:43:B4:59:39:40:E6:2C:DB X509v3 Authority Key Identifier: keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0b:17:ab:5e:f7:38:ec:be:a7:6b:9d:bb:db:e2:2b:e6:c9: 06:ea:e9:4a:97:2b:77:42:ce:b8:3e:fc:21:58:31:18:02:b8: 82:35:5c:11:11:db:c5:d4:f4:ec:2d:e6:89:14:f5:53:1d:f5: f6:bb:d2:98:94:2f:a3:54:d8:75:76:a6:a6:6b:dc:42:8b:1b: a0:c3:4a:1e:02:09:98:8b:49:5b:3c:ec:7f:6e:d1:e2:f9:8c: cb:ef:ad:24:c3:3d:3d:ce:ea:b4:fa:a2:42:b5:35:84:04:b1: e3:8f:c5:6a:c7:26:a7:15:e0:59:ff:f4:c1:89:14:20:85:e0: f4:d8:48:89:0f:ff:c0:98:c9:ed:2c:99:72:70:48:fc:e6:2c: 0c:c0:aa:66:4d:5c:7d:f9:cc:16:b3:7c:54:e8:56:33:ac:ea: 7e:b8:ca:48:6c:02:e2:ee:ae:54:b5:76:47:81:09:52:4c:7f: a0:e6:54:bb:97:56:5a:e7:bb:7b:f3:28:2b:35:8e:7e:c5:79: 66:df:42:b9:da:24:0a:39:ee:cd:67:ed:05:34:3c:87:55:f2: 91:9e:4d:c1:2e:b1:a9:b6:f7:e1:6f:1e:5e:b0:01:a9:8b:4c: 7d:23:da:d1:ae:74:0e:33:aa:90:ae:4f:9e:54:17:bc:39:b6: b8:26:35:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGXbfSnTwfF4iCvsu7DyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Zjk4ODhlNzNkZWU3Y2I1Y2RjZmQ5M2IyNjI4ZmJjMTBh M2U5MGIwHhcNMjUxMjA2MTMwMTAzWhcNMjUxMjA3MTMwMTAzWjAzMTEwLwYDVQQD Eyg3M2FlZTc1OGUyZjQ4ZjIyOTE5MjkwYzM0M2I0NTkzOTQwZTYyY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JQFI2gMd4XaoItZ+NfKJg6Lwwfo u9vbPiFKOmunLujpkqOLpO2We5ANYlQLuzK72hbFgCIEBY2qMY8DREyECSureg/Z R2/OxP+941MRDAqt4g1iowsstH9LJ41EJVqMTH5sFVO9iQAhylvIzF+EItDp5Wge K5dDdYsxPRbkCJH6xY6UcN0jPIvzKqaID8jQHJrss0Uojqt0VcyoH23+oenGxLs2 c9sLX/n/nSEdo0u2yhay0cPPd7eokA9DQsjghiM9BiklP/px9HXVNb+e2Qyz4cLa CUyDS6YNH/Tyy7Gpq8/s2LUqP7mDQgfZ4ZoPo/xZUAMwJt6vHV5r5t3qZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOu51ji9I8ikZKQw0O0WTlA5izbMB8GA1UdIwQY MBaAFCb5iI5z3ufLXNz9k7Jij7wQo+kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGIt MWY4MmJhZGY1YzFlLzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80NGEyM2QtYjRlOS00NjBlLWEzZGItMWY4MmJhZGY1YzFl LzEvSnZtSWpuUGU1OHRjM1AyVHNtS1B2QkNqNlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAsXq173 OOy+p2udu9viK+bJBurpSpcrd0LOuD78IVgxGAK4gjVcERHbxdT07C3miRT1Ux31 9rvSmJQvo1TYdXampmvcQosboMNKHgIJmItJWzzsf27R4vmMy++tJMM9Pc7qtPqi QrU1hASx44/FascmpxXgWf/0wYkUIIXg9NhIiQ//wJjJ7SyZcnBI/OYsDMCqZk1c ffnMFrN8VOhWM6zqfrjKSGwC4u6uVLV2R4EJUkx/oOZUu5dWWue7e/MoKzWOfsV5 Zt9CudokCjnuzWftBTQ8h1XykZ5NwS6xqbb34W8eXrABqYtMfSPa0a50DjOqkK5P nlQXvDm2uCY19w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:19 2025 by rpki-client