This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json) Hash identifier: 9zFvOuB7POkC8k3G+Vrjnfp9tb3EB6gf5NEHaQuIiV0= Subject key identifier: 1A:25:87:B5:40:B4:F2:35:7D:4B:1E:EB:25:79:D1:1E:13:30:AF:AC Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee Certificate serial: 019AF50BC52E9EA69113AB7C63DA80BF96CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 19:03:00 +0000 Manifest this update: Sat 06 Dec 2025 19:03:00 +0000 Manifest next update: Sun 07 Dec 2025 19:03:00 +0000 Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: KmdZT2arz0KRa/KtH8gzzcjR8Y3zJ2ydwpnTtJOme2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c5:2e:9e:a6:91:13:ab:7c:63:da:80:bf:96:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee Validity Not Before: Dec 6 19:03:00 2025 GMT Not After : Dec 7 19:03:00 2025 GMT Subject: CN=1a2587b540b4f2357d4b1eeb2579d11e1330afac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:4a:68:44:5c:a1:43:53:7e:a1:6c:d2:5b: 7f:25:8e:10:04:15:4f:21:10:e4:8d:8a:c9:a8:36: 78:db:03:ed:63:fc:78:2b:dc:e9:a8:d3:e8:45:5b: 1b:10:3d:48:5c:78:e5:d9:05:58:0b:94:bb:b6:5b: d8:15:31:1e:f7:8f:17:df:50:cb:5e:88:bf:83:05: 71:30:1d:48:45:e3:cf:f6:f0:d3:3d:41:38:19:d2: d3:71:77:2a:af:32:a2:e0:f4:8c:36:80:eb:00:24: 84:2f:3f:b9:de:54:ea:1b:7f:00:8e:69:e3:84:9c: 67:36:bf:2a:bb:ff:a8:91:9d:49:57:35:33:a2:5a: 7c:3e:00:f9:cb:20:4b:e2:08:4c:7d:d9:77:a8:2d: 66:91:67:bf:30:cb:6d:af:14:ef:d5:f4:2a:fa:14: f5:80:18:b5:9b:19:5c:d3:59:67:83:3e:03:41:9c: 11:48:0f:1e:0a:b0:72:4e:6c:64:d0:2b:f1:fe:2c: 5c:ac:20:ac:1d:0b:dc:56:fd:69:41:ab:8d:d2:31: 43:71:ab:4f:b0:1d:4c:ef:4d:c7:f7:aa:5e:d7:8a: 66:8c:75:a1:d9:da:f3:25:5b:39:47:a7:ec:d6:32: be:54:d1:d5:6d:35:83:2f:f6:c8:7e:9c:63:ac:48: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:87:B5:40:B4:F2:35:7D:4B:1E:EB:25:79:D1:1E:13:30:AF:AC X509v3 Authority Key Identifier: keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cc:37:da:95:98:36:4a:4a:df:f6:41:3c:f6:fe:6a:ff:69: 73:a7:9a:7f:d3:40:25:4a:d3:fb:e3:3a:3d:09:a5:5c:d7:fb: fc:c4:b7:a6:ff:7c:9b:7a:31:d3:3f:3a:ad:34:7c:ca:69:1b: 57:07:09:03:0e:12:95:bc:cd:59:1e:6a:ac:37:12:77:77:c0: 2f:f2:a9:87:39:ac:04:d4:09:5c:32:35:1b:76:5b:32:c6:f0: 8c:ee:4d:a5:a7:76:a7:00:a8:3c:90:11:75:25:37:dc:45:40: b6:f2:ee:ab:3c:00:de:98:cd:20:cf:65:c0:b6:7b:94:5b:f0: 18:6b:01:33:15:2d:47:4a:44:21:09:64:f7:6e:f6:1d:84:f2: dd:16:47:4c:34:d9:ec:6f:14:92:a1:e2:7a:db:f6:c2:8f:8c: 39:a5:8d:a8:e9:95:20:b8:a3:d8:58:fa:26:b4:8b:bf:7b:fb: 8a:56:bb:32:0b:94:95:60:26:b9:52:0a:bd:bb:44:21:f5:0c: 6c:28:a5:1c:f8:1e:c0:95:02:a0:f8:61:64:8f:26:a6:03:0d: a2:36:df:f9:22:3a:df:62:00:5b:48:e1:f5:3e:d2:a5:3f:2a: ec:2d:05:8d:d1:5f:ed:6b:d0:08:d6:90:ad:47:20:fb:e5:24: 01:5f:54:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8UunqaRE6t8Y9qAv5bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz ZjBmZWUwHhcNMjUxMjA2MTkwMzAwWhcNMjUxMjA3MTkwMzAwWjAzMTEwLwYDVQQD EygxYTI1ODdiNTQwYjRmMjM1N2Q0YjFlZWIyNTc5ZDExZTEzMzBhZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4RKaERcoUNTfqFs0lt/JY4QBBVP IRDkjYrJqDZ42wPtY/x4K9zpqNPoRVsbED1IXHjl2QVYC5S7tlvYFTEe948X31DL Xoi/gwVxMB1IRePP9vDTPUE4GdLTcXcqrzKi4PSMNoDrACSELz+53lTqG38Ajmnj hJxnNr8qu/+okZ1JVzUzolp8PgD5yyBL4ghMfdl3qC1mkWe/MMttrxTv1fQq+hT1 gBi1mxlc01lngz4DQZwRSA8eCrByTmxk0Cvx/ixcrCCsHQvcVv1pQauN0jFDcatP sB1M703H96pe14pmjHWh2drzJVs5R6fs1jK+VNHVbTWDL/bIfpxjrEjBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBolh7VAtPI1fUse6yV50R4TMK+sMB8GA1UdIwQY MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8w32pWY NkpK3/ZBPPb+av9pc6eaf9NAJUrT++M6PQmlXNf7/MS3pv98m3ox0z86rTR8ymkb VwcJAw4SlbzNWR5qrDcSd3fAL/KphzmsBNQJXDI1G3ZbMsbwjO5Npad2pwCoPJAR dSU33EVAtvLuqzwA3pjNIM9lwLZ7lFvwGGsBMxUtR0pEIQlk9272HYTy3RZHTDTZ 7G8UkqHietv2wo+MOaWNqOmVILij2Fj6JrSLv3v7ila7MguUlWAmuVIKvbtEIfUM bCilHPgewJUCoPhhZI8mpgMNojbf+SI632IAW0jh9T7SpT8q7C0FjdFf7WvQCNaQ rUcg++UkAV9UGA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:29 2025 by rpki-client