This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json) Hash identifier: jpie56Bm7SvaiU5Hcr2sxuP6j/VwFizTx3iXLVWBUzM= Subject key identifier: 8D:EB:0E:31:BC:3B:CA:15:91:74:61:2E:22:2A:2E:DE:2A:C5:E2:3B Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8 Certificate serial: 019AF12D68A00BAACE71B22555138A4E5DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft Manifest number: 0A41 Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: HhiNvk0AiZSlmndHRKi2xepdcrZ+ef20Y0dVoX6mnHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:68:a0:0b:aa:ce:71:b2:25:55:13:8a:4e:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8 Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=8deb0e31bc3bca159174612e222a2ede2ac5e23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:e1:6e:7d:41:62:69:db:e3:bc:76:7d:7a: ec:e5:e7:01:66:07:d3:c5:5a:31:af:95:74:8c:2b: c7:ab:a2:c0:be:39:0f:17:97:84:4c:e0:3f:e3:b1: 24:94:e1:80:e5:79:c1:4b:af:76:48:23:1a:14:12: 02:dd:9d:b0:a6:10:87:64:73:39:cc:6c:c2:8e:ca: ab:d8:4e:57:0a:67:4e:6b:92:e9:11:3c:be:fc:4e: 93:ee:1b:cf:76:ac:d4:1b:d0:cf:ff:45:7c:e3:94: fa:9b:23:0a:13:9a:f1:23:d7:29:14:23:2f:0d:67: c5:c3:55:44:8d:94:0a:23:df:1f:d3:13:79:11:16: f5:e5:3d:d8:42:e6:b5:93:bc:7b:8a:d5:c3:2e:03: bc:31:da:fc:fd:3f:cb:c5:c8:4b:31:ea:6e:37:6a: ca:0a:37:a6:59:41:9e:6d:0c:73:f5:c6:95:97:e8: 82:59:53:d4:1c:32:46:02:74:ee:df:df:84:d1:0c: 43:5d:ee:5e:c3:a5:06:fb:72:c7:a7:6b:3a:e7:6c: e4:fd:9d:a9:ce:a7:ce:99:f3:4b:42:77:9d:0a:5b: 2a:39:70:6e:0d:16:dd:37:08:cd:9d:83:03:df:cf: 72:19:38:f7:85:a2:d1:b6:1b:ae:a2:23:13:61:56: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:0E:31:BC:3B:CA:15:91:74:61:2E:22:2A:2E:DE:2A:C5:E2:3B X509v3 Authority Key Identifier: keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ea:78:e0:d5:f6:ea:43:e0:f7:a1:12:98:e0:7e:0a:ee:be: 3d:61:f4:19:70:45:35:0e:ea:c6:b0:e2:dc:8b:43:bb:43:38: 7d:27:77:42:9c:51:81:92:6a:36:07:a1:cb:15:c7:79:7e:94: f6:cc:c1:c2:22:f6:ef:95:5d:a1:f1:81:de:b7:1e:89:40:23: 3b:51:48:ee:80:2f:0f:df:d7:84:7f:4e:53:f8:73:c6:68:9d: 16:94:3c:aa:ae:e5:30:cc:59:70:36:d3:65:6a:b8:3d:95:06: 4f:81:85:fc:5d:42:0f:be:49:dd:1b:19:03:6a:a2:79:34:ba: 3f:94:e2:21:1b:eb:62:98:3a:44:1b:8e:e6:fd:3c:04:14:c6: 8f:ac:41:16:5c:5f:c5:72:0a:80:6a:e4:9d:b3:62:7b:a1:38: d6:46:87:68:e4:eb:8f:63:bb:6c:46:7b:94:7f:ee:9f:af:92: 3c:6a:6a:f7:10:0b:92:05:a9:3b:19:b5:7b:3b:e2:36:6c:be: 61:81:08:39:29:f1:f4:e3:b5:8b:58:45:56:ca:99:00:62:cd: b6:2d:3b:78:5b:0b:37:65:a6:52:6e:9e:22:89:e0:37:05:38: db:52:bc:af:da:50:8a:ac:76:26:fd:2d:26:bc:72:fa:99:91: 88:56:0d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWigC6rOcbIlVROKTl3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWVjM2Q1YTQ4NjhlMzUzMTIyNjJhN2M2YWE5MTQ0MzU4 OTNjZDgwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD Eyg4ZGViMGUzMWJjM2JjYTE1OTE3NDYxMmUyMjJhMmVkZTJhYzVlMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDhbn1BYmnb47x2fXrs5ecBZgfT xVoxr5V0jCvHq6LAvjkPF5eETOA/47EklOGA5XnBS692SCMaFBIC3Z2wphCHZHM5 zGzCjsqr2E5XCmdOa5LpETy+/E6T7hvPdqzUG9DP/0V845T6myMKE5rxI9cpFCMv DWfFw1VEjZQKI98f0xN5ERb15T3YQua1k7x7itXDLgO8Mdr8/T/LxchLMepuN2rK CjemWUGebQxz9caVl+iCWVPUHDJGAnTu39+E0QxDXe5ew6UG+3LHp2s652zk/Z2p zqfOmfNLQnedClsqOXBuDRbdNwjNnYMD389yGTj3haLRthuuoiMTYVZVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3rDjG8O8oVkXRhLiIqLt4qxeI7MB8GA1UdIwQY MBaAFI1ew9Wkho41MSJip8aqkUQ1iTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTkt OWFmN2NiMzg2ZjgwLzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTktOWFmN2NiMzg2Zjgw LzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+p44NX2 6kPg96ESmOB+Cu6+PWH0GXBFNQ7qxrDi3ItDu0M4fSd3QpxRgZJqNgehyxXHeX6U 9szBwiL275VdofGB3rceiUAjO1FI7oAvD9/XhH9OU/hzxmidFpQ8qq7lMMxZcDbT ZWq4PZUGT4GF/F1CD75J3RsZA2qieTS6P5TiIRvrYpg6RBuO5v08BBTGj6xBFlxf xXIKgGrknbNie6E41kaHaOTrj2O7bEZ7lH/un6+SPGpq9xALkgWpOxm1ezviNmy+ YYEIOSnx9OO1i1hFVsqZAGLNti07eFsLN2WmUm6eIongNwU421K8r9pQiqx2Jv0t Jrxy+pmRiFYNBw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:46 2025 by rpki-client