This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json) Hash identifier: PiPmmVlW31ydzj7NJRP/9vbvGOlmCF9ukDOWvDacPfA= Subject key identifier: 6C:FE:70:1D:2A:3F:FC:59:73:13:44:69:28:CB:01:FB:F5:66:AE:D4 Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb Certificate serial: 019AF12DBD48E04160CF85562804B58DEB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft Manifest number: 087A Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: yCdnK8smKlQ28Y01wvPIGGt0qf2bbktp+U8Nu+azv5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bd:48:e0:41:60:cf:85:56:28:04:b5:8d:eb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=6cfe701d2a3ffc597313446928cb01fbf566aed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:aa:d6:5d:21:54:2d:e4:b0:46:21:18:85: 9c:7f:27:3b:f3:94:97:b3:53:ab:be:2e:c2:b8:ae: d3:87:a2:3d:a0:24:17:63:2f:cb:5e:17:3a:97:ee: d4:a8:c1:32:fa:44:93:dc:55:7e:5c:f4:3a:4e:00: 2b:7a:7e:53:d8:12:19:4b:b0:81:be:fc:a5:e0:fa: fb:aa:76:5d:df:c1:11:b8:bd:75:e0:1c:8e:da:0b: 9e:cd:c9:90:bb:13:86:32:68:4b:50:08:d8:7b:9c: 8e:52:97:cd:af:bf:9a:eb:70:8c:a7:8a:7e:ce:a1: e0:e8:ed:ad:06:02:9f:f4:25:a7:01:15:d1:2d:a4: 34:23:f0:ea:3a:c5:41:2c:83:1b:21:83:75:bd:4e: fd:15:0a:21:31:82:9a:3c:b0:c5:bb:13:70:9b:84: 82:fd:ab:d9:51:1f:2d:77:3b:ec:59:92:4d:8b:b8: 58:ee:77:47:af:65:b6:d2:a6:52:82:4f:47:0f:91: 9f:13:c5:f3:f9:71:0b:cc:99:b0:a2:08:7c:60:34: 64:01:64:b4:2e:84:33:d5:0f:6a:5c:ba:54:e0:64: 64:93:45:94:8c:ce:9d:0d:33:83:9f:fa:ad:2e:64: 2a:09:b8:67:b8:dc:9d:bc:ac:58:10:88:e0:f8:86: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:70:1D:2A:3F:FC:59:73:13:44:69:28:CB:01:FB:F5:66:AE:D4 X509v3 Authority Key Identifier: keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2d:a4:11:c1:49:95:d7:00:66:29:aa:33:8f:de:8b:63:7b: a8:cd:fc:83:2f:2b:2c:c5:e6:cf:64:b4:50:58:b0:16:f3:da: 55:c1:72:d3:5f:96:07:f9:5c:c0:cd:24:82:13:1d:ae:3c:b6: e3:b9:33:92:1b:e7:66:88:23:ea:e1:4f:ef:25:eb:5b:c4:36: aa:a3:7b:ab:bb:1c:e4:05:7c:f9:6c:ca:6a:fd:a8:18:19:28: 1a:fc:ab:62:4d:7a:ef:70:04:8c:7a:e6:4c:6c:e3:46:2d:87: 76:e9:b7:0d:c5:dc:20:43:40:09:1f:c1:dd:4d:a7:79:8a:24: 34:8a:ef:c9:49:f9:cc:eb:6f:f4:c5:aa:02:0b:2b:24:81:0f: f3:67:d4:e1:b3:b1:97:69:5b:64:63:ed:5b:4c:60:bd:34:4b: 87:50:7c:90:b1:3f:e8:eb:95:8d:b6:bc:8a:e2:f9:5b:f8:df: 66:35:4a:88:3d:09:1b:bf:3c:c4:52:16:2d:c6:01:18:7d:7b: b7:c2:00:fb:7e:67:25:b6:9f:5c:a6:e9:2a:fe:da:3f:3a:7d: 5f:59:81:bf:3e:27:9d:78:50:66:13:93:5c:c7:29:7f:a9:37: 6c:43:96:86:35:e5:8a:f2:ea:30:3f:de:b5:0e:d7:0d:e7:04: c6:83:98:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLb1I4EFgz4VWKAS1jeuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0 NmEwYmIwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD Eyg2Y2ZlNzAxZDJhM2ZmYzU5NzMxMzQ0NjkyOGNiMDFmYmY1NjZhZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8yq1l0hVC3ksEYhGIWcfyc785SX s1Orvi7CuK7Th6I9oCQXYy/LXhc6l+7UqMEy+kST3FV+XPQ6TgAren5T2BIZS7CB vvyl4Pr7qnZd38ERuL114ByO2guezcmQuxOGMmhLUAjYe5yOUpfNr7+a63CMp4p+ zqHg6O2tBgKf9CWnARXRLaQ0I/DqOsVBLIMbIYN1vU79FQohMYKaPLDFuxNwm4SC /avZUR8tdzvsWZJNi7hY7ndHr2W20qZSgk9HD5GfE8Xz+XELzJmwogh8YDRkAWS0 LoQz1Q9qXLpU4GRkk0WUjM6dDTODn/qtLmQqCbhnuNydvKxYEIjg+IbIFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz+cB0qP/xZcxNEaSjLAfv1Zq7UMB8GA1UdIwQY MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy2kEcFJ ldcAZimqM4/ei2N7qM38gy8rLMXmz2S0UFiwFvPaVcFy01+WB/lcwM0kghMdrjy2 47kzkhvnZogj6uFP7yXrW8Q2qqN7q7sc5AV8+WzKav2oGBkoGvyrYk1673AEjHrm TGzjRi2Hdum3DcXcIENACR/B3U2neYokNIrvyUn5zOtv9MWqAgsrJIEP82fU4bOx l2lbZGPtW0xgvTRLh1B8kLE/6OuVjba8iuL5W/jfZjVKiD0JG788xFIWLcYBGH17 t8IA+35nJbafXKbpKv7aPzp9X1mBvz4nnXhQZhOTXMcpf6k3bEOWhjXlivLqMD/e tQ7XDecExoOY1A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:11 2025 by rpki-client