This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json) Hash identifier: iC+fcl/9/YXW46EMeizubwqaBykHLdSvmN/t6LEpfR4= Subject key identifier: 58:D2:23:84:20:84:98:75:14:1B:D5:AD:97:F2:1F:AB:41:2D:2D:48 Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa Certificate serial: 019AF352077F8EF9AA19229616A4EB6F3505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft Manifest number: 1296 Signing time: Sat 06 Dec 2025 11:00:30 +0000 Manifest this update: Sat 06 Dec 2025 11:00:30 +0000 Manifest next update: Sun 07 Dec 2025 11:00:30 +0000 Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: Ct6a4AcvxzhE0wOCwUL00tbCeCAz8xJOF0vFQC8+500=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:07:7f:8e:f9:aa:19:22:96:16:a4:eb:6f:35:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa Validity Not Before: Dec 6 11:00:30 2025 GMT Not After : Dec 7 11:00:30 2025 GMT Subject: CN=58d2238420849875141bd5ad97f21fab412d2d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:06:0c:11:cc:6c:a4:cc:b6:3f:59:8c:e2: de:66:76:75:39:7a:4e:ed:8f:25:64:4a:db:f3:86: 35:26:dc:e6:5e:cb:dd:82:43:d4:ae:63:57:d4:ed: a4:6c:e2:f2:c9:16:34:bc:e7:86:f0:a8:4c:7c:33: 91:e6:50:f0:d3:95:9a:7c:1a:10:ff:fd:9a:34:d8: f5:a5:0e:88:37:95:0e:33:50:f0:13:a8:f6:23:81: a3:2b:ea:69:44:74:7d:0e:26:69:ef:47:44:e8:72: 11:df:8d:d7:33:a0:32:68:19:8a:b7:a9:2b:ea:49: 25:db:44:06:f8:fe:b6:2e:e7:25:08:13:bb:ee:d1: 99:ed:a6:59:64:63:10:d8:58:d6:2a:f6:fa:db:30: 97:ba:b6:a2:a9:51:88:11:19:f3:37:7e:6e:e1:0e: 9f:6b:63:7f:1c:c1:f3:f7:87:1f:2b:c2:89:29:99: 3e:e3:4a:58:f8:41:9c:ee:1e:2d:fe:d4:8f:97:a9: 7a:12:30:20:42:26:17:9d:21:b3:1a:44:91:25:2f: 7f:c6:3d:73:0c:9b:14:84:14:7b:cb:fd:bd:7b:36: 52:b0:04:6b:2a:46:e5:1a:7b:00:fb:01:1c:46:36: ec:20:f0:f6:28:87:9c:6f:bb:67:9a:83:00:70:54: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:23:84:20:84:98:75:14:1B:D5:AD:97:F2:1F:AB:41:2D:2D:48 X509v3 Authority Key Identifier: keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:27:62:03:9e:4c:21:08:9d:c0:5b:7b:6d:81:74:46:a1:51: a8:2b:db:4c:58:9c:2e:a0:0e:33:ed:b1:75:05:08:b3:c8:c7: 2a:21:2b:54:af:ed:8b:8e:f9:c9:54:4e:47:84:cc:a9:aa:c0: 99:5a:44:27:36:c4:76:73:15:bf:7d:de:22:c1:62:34:63:1c: 44:f7:30:27:f3:18:a1:da:35:42:ed:44:c2:cd:71:3e:d6:89: b8:1c:9d:80:c4:27:b0:48:b5:74:e7:21:26:00:c7:81:4a:b1: 07:2d:97:26:a9:da:d4:67:91:e1:75:c2:3b:cd:57:39:72:9d: e0:90:d2:7f:e1:26:77:1b:7e:c0:6c:1b:11:d3:7c:1d:c5:20: 29:73:2d:ad:da:d0:e8:1a:8f:de:0f:4c:9b:c0:e2:79:e4:a4: f5:7e:ee:81:02:35:d9:d2:07:c7:79:36:97:f6:ca:92:c2:5b: 5d:40:65:59:54:8d:63:95:48:80:32:0c:ac:a8:d4:6e:d0:bd: b7:81:29:6b:03:54:02:65:eb:a3:1c:83:6e:24:0b:47:9f:fd: 96:6c:e2:40:1e:9e:8a:84:17:8e:5b:a7:2d:d0:9c:3d:ad:e2: e3:07:8b:1a:4e:15:6c:2d:a8:18:e9:fd:92:61:32:da:5f:c0: 3e:de:75:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgd/jvmqGSKWFqTrbzUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzdjNmFlNDg4YzNhNjk3ODAzN2I3NzBhYTUyM2NiMjUx YzlmZmEwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD Eyg1OGQyMjM4NDIwODQ5ODc1MTQxYmQ1YWQ5N2YyMWZhYjQxMmQyZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NcGDBHMbKTMtj9ZjOLeZnZ1OXpO 7Y8lZErb84Y1JtzmXsvdgkPUrmNX1O2kbOLyyRY0vOeG8KhMfDOR5lDw05WafBoQ //2aNNj1pQ6IN5UOM1DwE6j2I4GjK+ppRHR9DiZp70dE6HIR343XM6AyaBmKt6kr 6kkl20QG+P62LuclCBO77tGZ7aZZZGMQ2FjWKvb62zCXuraiqVGIERnzN35u4Q6f a2N/HMHz94cfK8KJKZk+40pY+EGc7h4t/tSPl6l6EjAgQiYXnSGzGkSRJS9/xj1z DJsUhBR7y/29ezZSsARrKkblGnsA+wEcRjbsIPD2KIecb7tnmoMAcFRc8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjSI4QghJh1FBvVrZfyH6tBLS1IMB8GA1UdIwQY MBaAFI53xq5IjDppeAN7dwqlI8slHJ/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEt NGE0NzFlNmMwZWYyLzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEtNGE0NzFlNmMwZWYy LzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZidiA55M IQidwFt7bYF0RqFRqCvbTFicLqAOM+2xdQUIs8jHKiErVK/ti475yVROR4TMqarA mVpEJzbEdnMVv33eIsFiNGMcRPcwJ/MYodo1Qu1Ews1xPtaJuBydgMQnsEi1dOch JgDHgUqxBy2XJqna1GeR4XXCO81XOXKd4JDSf+Emdxt+wGwbEdN8HcUgKXMtrdrQ 6BqP3g9Mm8DieeSk9X7ugQI12dIHx3k2l/bKksJbXUBlWVSNY5VIgDIMrKjUbtC9 t4EpawNUAmXroxyDbiQLR5/9lmziQB6eioQXjlunLdCcPa3i4weLGk4VbC2oGOn9 kmEy2l/APt51RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:02 2025 by rpki-client