This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json) Hash identifier: N6Ie4rjNb9otzug+ztOsgZo+adWH+9E6ntW+snAyJ00= Subject key identifier: 1B:76:A3:62:EE:89:83:60:B6:B6:7C:FF:3C:AE:0B:BB:39:9B:55:73 Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3 Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3 Certificate serial: 019AF31BB2C30A166232F60AAA4B649321FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft Manifest number: 08F8 Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: wm/S4H13zJ3v7hsszMLfMc6mvXoUCJk6Nl5Kfprs0do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b2:c3:0a:16:62:32:f6:0a:aa:4b:64:93:21:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3 Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=1b76a362ee898360b6b67cff3cae0bbb399b5573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:f4:62:6c:27:ef:4d:c0:28:03:a3:4a:c5: 0a:84:0f:2b:97:77:02:55:03:f7:d3:d8:57:60:52: 92:a3:18:86:9f:d6:63:2d:d1:b2:3a:5f:9a:d9:90: c9:53:97:ed:e6:16:12:a1:b2:fe:41:cc:24:d6:66: 9c:84:98:aa:ef:44:df:be:6b:46:4d:58:87:52:dc: 7f:a7:16:73:57:79:65:47:1b:f1:fc:f5:e8:fe:f6: 04:c5:aa:8d:cc:c6:73:80:4b:b2:8e:4f:c3:6f:d5: 92:6b:4b:a0:cd:e9:43:51:b0:69:eb:7e:23:cb:d8: 78:8c:76:c6:4a:14:6e:39:10:bf:4c:49:ff:0f:01: 94:74:b2:20:b5:de:4b:8c:78:4e:5d:23:77:81:d3: 11:9e:34:5f:7a:4b:60:7d:46:13:bc:49:bf:a0:4b: 5b:c7:fb:03:67:bc:d9:28:74:ff:e7:6e:6c:96:a2: 4b:30:24:58:2c:34:71:61:4e:4a:f0:5f:26:ef:79: 9b:05:db:4c:56:72:87:a3:1f:a3:4d:54:1e:27:66: 40:38:bc:58:8d:1c:99:09:c8:cb:44:5b:a8:97:c0: ed:93:e2:ac:8f:96:32:0e:42:40:61:20:c8:7b:bf: bf:af:5d:a1:05:51:87:13:7d:67:ba:0a:96:ae:75: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:A3:62:EE:89:83:60:B6:B6:7C:FF:3C:AE:0B:BB:39:9B:55:73 X509v3 Authority Key Identifier: keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e1:44:eb:89:23:ad:3d:0a:c3:5e:79:64:cc:79:83:f6:fa: 25:72:4f:f4:34:a3:4b:5d:74:a1:87:4d:70:7a:20:2a:53:a2: 81:f6:22:6b:5c:dd:ca:34:55:6e:2f:ad:66:6c:3f:0e:ca:9c: 70:04:ab:98:17:90:e7:ac:88:e6:4a:6c:73:b2:6f:24:db:f1: 6b:8f:95:ef:6b:7f:e1:b4:42:ed:5c:9d:39:5e:91:fa:6f:ae: 6f:a3:0c:2f:d7:17:fb:71:e5:7f:32:00:e8:40:9b:f5:19:11: f2:67:8b:32:23:c4:5f:9f:ef:61:3e:cb:39:ce:cb:44:b5:02: b2:24:21:5d:b1:69:d6:71:83:9f:ac:9c:9f:99:8f:2b:21:fb: de:fd:16:b0:80:c8:bb:d4:f1:32:94:c4:9d:e8:84:4d:7a:0e: 4b:04:c1:d0:fa:47:7d:ce:53:5b:e4:92:b5:80:89:2d:f5:d9: 15:27:f9:0c:4b:f9:45:79:95:83:66:af:a3:d3:f6:95:c5:b1: 72:fb:3a:86:8e:cf:72:50:73:ea:3b:36:81:12:2c:89:ad:fa: 8b:40:95:34:21:cb:4b:be:a0:44:8a:a7:58:4e:ab:d5:f9:80: 93:29:f3:26:c7:31:a7:68:7f:3c:cf:d2:ce:80:ce:23:cd:aa: d8:be:28:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7LDChZiMvYKqktkkyH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2Y1ZGRjMjJiNDM0YWNmYTQwZDY3ZWU1MGIwNDI5MGM3 MGRiYjMwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD EygxYjc2YTM2MmVlODk4MzYwYjZiNjdjZmYzY2FlMGJiYjM5OWI1NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJb0Ymwn703AKAOjSsUKhA8rl3cC VQP309hXYFKSoxiGn9ZjLdGyOl+a2ZDJU5ft5hYSobL+Qcwk1machJiq70TfvmtG TViHUtx/pxZzV3llRxvx/PXo/vYExaqNzMZzgEuyjk/Db9WSa0ugzelDUbBp634j y9h4jHbGShRuORC/TEn/DwGUdLIgtd5LjHhOXSN3gdMRnjRfektgfUYTvEm/oEtb x/sDZ7zZKHT/525slqJLMCRYLDRxYU5K8F8m73mbBdtMVnKHox+jTVQeJ2ZAOLxY jRyZCcjLRFuol8Dtk+Ksj5YyDkJAYSDIe7+/r12hBVGHE31nugqWrnWWPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt2o2LuiYNgtrZ8/zyuC7s5m1VzMB8GA1UdIwQY MBaAFI9/XdwitDSs+kDWfuULBCkMcNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82OWZkNjktMmMyNy00ODcwLTljYzkt MzJkYWM0YjE0MGVkLzEvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82OWZkNjktMmMyNy00ODcwLTljYzktMzJkYWM0YjE0MGVk LzEvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueFE64kj rT0Kw155ZMx5g/b6JXJP9DSjS110oYdNcHogKlOigfYia1zdyjRVbi+tZmw/Dsqc cASrmBeQ56yI5kpsc7JvJNvxa4+V72t/4bRC7VydOV6R+m+ub6MML9cX+3HlfzIA 6ECb9RkR8meLMiPEX5/vYT7LOc7LRLUCsiQhXbFp1nGDn6ycn5mPKyH73v0WsIDI u9TxMpTEneiETXoOSwTB0PpHfc5TW+SStYCJLfXZFSf5DEv5RXmVg2avo9P2lcWx cvs6ho7PclBz6js2gRIsia36i0CVNCHLS76gRIqnWE6r1fmAkynzJscxp2h/PM/S zoDOI82q2L4oQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:59 2025 by rpki-client