This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json) Hash identifier: aaStngqwFwpakZe3kufGpK4L5y5/NG7GV9mcal08T38= Subject key identifier: 24:08:6F:E9:45:DD:66:70:34:F5:18:46:47:F2:B6:3B:9F:22:74:ED Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a Certificate serial: 019B2F9E6BBA2EF8BC9FEF97402DAE9D89AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 04:01:09 +0000 Manifest this update: Thu 18 Dec 2025 04:01:09 +0000 Manifest next update: Fri 19 Dec 2025 04:01:09 +0000 Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: vqgPrciDUm824lg5OYrVuPK1ZdU5d7SYd1RUFiwje6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:6b:ba:2e:f8:bc:9f:ef:97:40:2d:ae:9d:89:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a Validity Not Before: Dec 18 04:01:09 2025 GMT Not After : Dec 19 04:01:09 2025 GMT Subject: CN=24086fe945dd667034f5184647f2b63b9f2274ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:e2:4d:f1:ff:a5:91:00:96:e0:c8:b6:af: fc:8c:c2:3e:a2:7d:66:4f:e7:29:f1:e0:a8:38:cf: 4f:c2:3e:cf:5b:38:ba:89:5b:4e:f4:05:6d:12:ed: b2:aa:ab:56:90:b0:25:66:dc:7e:03:f7:c1:9f:2b: d3:bc:08:f3:e8:e1:39:4e:71:50:f4:54:6c:cd:9c: 3f:42:bd:76:3b:f2:fa:45:da:b3:0c:02:b3:d5:ce: cc:dd:12:92:a0:22:9e:19:12:0f:26:ec:15:fe:39: 93:d6:23:df:77:56:f6:57:d4:f7:c4:5c:f6:22:56: 19:ff:9d:10:f1:33:e2:21:3a:a1:62:47:a3:15:25: c8:c7:2a:63:2a:3b:4b:92:a8:40:59:0b:ff:47:89: ff:8c:63:36:e0:02:45:7d:49:f8:07:a3:43:86:3b: 39:a8:39:25:43:24:1a:1f:f7:7f:88:60:34:e3:b3: b8:6b:eb:cf:5f:1f:54:d0:cd:4a:21:62:68:7a:69: e0:ec:3a:28:1f:e9:b8:93:a5:8c:d6:d4:01:5f:4c: 92:f5:2c:49:9b:67:39:6a:19:dd:3c:d1:30:1b:31: d3:43:5e:85:b5:69:34:d4:4a:93:8b:7a:14:13:e7: a9:92:8d:9b:f6:ba:1f:34:20:49:37:0e:0b:ec:fa: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:6F:E9:45:DD:66:70:34:F5:18:46:47:F2:B6:3B:9F:22:74:ED X509v3 Authority Key Identifier: keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:b4:86:ec:6a:e1:39:d9:be:60:ad:83:58:32:14:cc:59: c3:ac:ec:88:ed:b2:78:75:50:ba:02:3e:66:5b:c2:5e:b6:9f: fb:48:40:c9:a2:9d:4f:93:b2:ea:03:76:7b:c4:1a:ca:45:3b: 96:8e:94:a3:24:9b:8b:af:fd:bb:e3:87:f4:73:23:6c:3c:eb: 5e:8e:76:97:b5:a4:40:8c:91:57:b9:5c:2e:c7:e1:ba:9a:26: 3e:77:c3:a0:b2:7c:ed:4d:3d:49:96:54:1f:a5:8b:96:29:fe: f6:dc:37:a5:14:6f:35:53:b5:8b:8c:b0:36:8b:e2:f6:15:11: f3:3f:96:fe:ac:6d:1f:9c:30:a4:01:0d:c5:a4:07:f8:07:ce: c2:4c:b1:46:b6:ee:f1:55:5f:82:38:dd:ab:a4:0e:c8:4d:6b: 82:e4:2e:7f:d1:37:75:35:fa:f0:a2:05:c4:40:e6:8d:fe:36: f9:7c:84:2d:59:57:3c:b3:4c:98:33:ed:da:09:85:b6:17:b9: e4:82:d3:04:b8:14:ca:24:c3:02:27:f7:a1:79:62:ef:06:49: 74:08:d0:b7:1f:c9:41:bd:dc:7a:7d:d4:06:90:2c:05:7a:d0: 42:e5:de:10:1f:71:84:76:0f:7b:4c:08:87:2d:98:63:fe:a3: 40:66:f3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnmu6Lvi8n++XQC2unYmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGE5M2E3MDJmMDNkNjAzNGIwMmM0NjM3MjEyYTc0M2E0 NzJjOGEwHhcNMjUxMjE4MDQwMTA5WhcNMjUxMjE5MDQwMTA5WjAzMTEwLwYDVQQD EygyNDA4NmZlOTQ1ZGQ2NjcwMzRmNTE4NDY0N2YyYjYzYjlmMjI3NGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzibiTfH/pZEAluDItq/8jMI+on1m T+cp8eCoOM9Pwj7PWzi6iVtO9AVtEu2yqqtWkLAlZtx+A/fBnyvTvAjz6OE5TnFQ 9FRszZw/Qr12O/L6RdqzDAKz1c7M3RKSoCKeGRIPJuwV/jmT1iPfd1b2V9T3xFz2 IlYZ/50Q8TPiITqhYkejFSXIxypjKjtLkqhAWQv/R4n/jGM24AJFfUn4B6NDhjs5 qDklQyQaH/d/iGA047O4a+vPXx9U0M1KIWJoemng7DooH+m4k6WM1tQBX0yS9SxJ m2c5ahndPNEwGzHTQ16FtWk01EqTi3oUE+epko2b9rofNCBJNw4L7PoBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQIb+lF3WZwNPUYRkfytjufInTtMB8GA1UdIwQY MBaAFIzak6cC8D1gNLAsRjchKnQ6RyyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAt YTQ2NjFlZTNjOWE2LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAtYTQ2NjFlZTNjOWE2 LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxG0huxq 4TnZvmCtg1gyFMxZw6zsiO2yeHVQugI+ZlvCXraf+0hAyaKdT5Oy6gN2e8QaykU7 lo6UoySbi6/9u+OH9HMjbDzrXo52l7WkQIyRV7lcLsfhupomPnfDoLJ87U09SZZU H6WLlin+9tw3pRRvNVO1i4ywNovi9hUR8z+W/qxtH5wwpAENxaQH+AfOwkyxRrbu 8VVfgjjdq6QOyE1rguQuf9E3dTX68KIFxEDmjf42+XyELVlXPLNMmDPt2gmFthe5 5ILTBLgUyiTDAif3oXli7wZJdAjQtx/JQb3cen3UBpAsBXrQQuXeEB9xhHYPe0wI hy2YY/6jQGbz/A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:04 2025 by rpki-client