This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft File: j33ZCSspRN36oXbsIwf26Y9N44M.mft (raw, json) Hash identifier: SAKc4LaJt1mjIE7+zoyFExI2TF2VRyyvC8AVYOSAdo0= Subject key identifier: 76:01:BF:83:8C:62:7F:44:62:4A:5B:79:B6:2F:9E:80:92:B6:CD:C9 Authority key identifier: 8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83 Certificate issuer: /CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383 Certificate serial: 019AF276E3C61C78B07C74AC0F170DF49549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft Manifest number: CE Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: j33ZCSspRN36oXbsIwf26Y9N44M.crl (hash: ZiaBcuC9ECrZlwazD5cBt+1Uz93WkvaCBL4qQEloX2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e3:c6:1c:78:b0:7c:74:ac:0f:17:0d:f4:95:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=7601bf838c627f44624a5b79b62f9e8092b6cdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:1e:1c:d1:b8:ff:19:4f:9a:38:ba:60:5c: c7:e3:e7:22:bd:1e:b6:da:e7:c5:52:f3:e7:06:e5: 27:62:d5:52:c7:63:7c:a5:d2:8d:90:d7:b8:2d:3d: e1:aa:41:d7:8c:43:b5:11:6e:d4:cf:0c:49:47:75: 5d:37:3c:11:93:95:bd:dc:32:fe:44:d2:7b:bd:e3: 63:9a:da:95:7a:a8:88:7f:87:b7:f5:76:ae:7d:8d: f1:ce:2d:33:cb:b0:2e:2c:a7:9e:ff:c1:c3:f4:d3: f6:bd:62:c5:ad:06:1b:db:ad:e5:36:95:a0:7a:c8: 64:f5:a3:48:3a:64:5b:3b:a6:2e:48:67:85:de:06: 3f:b0:7b:85:c9:7b:ef:c5:ef:ad:29:64:58:e3:d3: 3e:01:75:55:6a:cf:64:b0:a9:95:cf:7d:bd:05:6a: 33:13:60:2f:ba:be:2d:f5:41:7b:31:c4:03:e1:c7: d9:b9:c5:0d:d5:bb:9f:d7:0a:d5:9d:c9:04:d4:b9: c5:98:92:48:96:3a:3a:76:6b:05:40:cd:a3:35:6a: 5c:dd:3b:51:29:0d:f5:91:5e:db:b9:01:7a:fa:86: 93:7c:41:a2:ef:d7:f6:c6:ed:bf:d0:0f:18:a6:f7: 34:39:da:f5:b2:c3:7e:f1:92:05:e5:a6:52:45:1a: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:BF:83:8C:62:7F:44:62:4A:5B:79:B6:2F:9E:80:92:B6:CD:C9 X509v3 Authority Key Identifier: keyid:8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f0:74:d7:38:b0:14:54:34:78:0b:ec:8c:3a:2a:76:11:ac: 62:c6:49:f6:e1:cc:96:1b:43:78:99:02:ed:3a:08:b2:45:8a: d8:ea:b5:f5:3d:bc:69:ba:fa:9a:2a:23:54:29:c8:7f:f7:61: 19:a9:04:81:85:c8:79:4d:c7:0a:4d:8f:3b:b0:59:f5:4f:c4: e4:c1:ba:f2:1b:e6:31:3d:35:34:43:66:a4:fb:70:34:fe:82: d4:0a:19:c4:7f:f9:8b:63:37:57:cc:67:65:19:e7:bb:06:d8: 09:19:25:04:5d:ae:e3:36:16:ad:23:c3:11:d9:75:be:66:d3: 38:df:dc:ce:7d:61:6e:46:ef:be:46:08:ce:13:3f:9f:73:7f: 34:d8:3c:d9:3c:d1:81:d5:7f:cc:aa:41:a7:15:60:d0:21:ae: f5:41:13:b4:c8:ac:50:5b:0e:af:d8:d3:02:8d:01:21:89:ef: d1:68:5e:24:67:83:37:8f:a6:27:68:3b:fa:bf:4b:8b:0e:d2: d6:52:b4:73:de:77:09:d9:7c:f4:d6:7a:16:61:bc:4a:52:dc: 2d:fd:d1:e6:88:3e:10:00:46:2d:e2:64:aa:92:c2:79:14:d4: 31:a3:65:6f:cc:e8:61:ed:0b:55:90:e5:0b:a8:07:ac:59:b6: 04:a4:e7:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduPGHHiwfHSsDxcN9JVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2RkOTA5MmIyOTQ0ZGRmYWExNzZlYzIzMDdmNmU5OGY0 ZGUzODMwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg3NjAxYmY4MzhjNjI3ZjQ0NjI0YTViNzliNjJmOWU4MDkyYjZjZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQkeHNG4/xlPmji6YFzH4+civR62 2ufFUvPnBuUnYtVSx2N8pdKNkNe4LT3hqkHXjEO1EW7UzwxJR3VdNzwRk5W93DL+ RNJ7veNjmtqVeqiIf4e39XaufY3xzi0zy7AuLKee/8HD9NP2vWLFrQYb263lNpWg eshk9aNIOmRbO6YuSGeF3gY/sHuFyXvvxe+tKWRY49M+AXVVas9ksKmVz329BWoz E2Avur4t9UF7McQD4cfZucUN1buf1wrVnckE1LnFmJJIljo6dmsFQM2jNWpc3TtR KQ31kV7buQF6+oaTfEGi79f2xu2/0A8Ypvc0Odr1ssN+8ZIF5aZSRRoAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYBv4OMYn9EYkpbebYvnoCSts3JMB8GA1UdIwQY MBaAFI992QkrKUTd+qF27CMH9umPTeODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQt ZDZlY2FkMmQ1MTMyLzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85MGM1YjktNmQ3Ny00M2Q5LThlNjQtZDZlY2FkMmQ1MTMy LzEvajMzWkNTc3BSTjM2b1hic0l3ZjI2WTlONDRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/B01ziw FFQ0eAvsjDoqdhGsYsZJ9uHMlhtDeJkC7ToIskWK2Oq19T28abr6miojVCnIf/dh GakEgYXIeU3HCk2PO7BZ9U/E5MG68hvmMT01NENmpPtwNP6C1AoZxH/5i2M3V8xn ZRnnuwbYCRklBF2u4zYWrSPDEdl1vmbTON/czn1hbkbvvkYIzhM/n3N/NNg82TzR gdV/zKpBpxVg0CGu9UETtMisUFsOr9jTAo0BIYnv0WheJGeDN4+mJ2g7+r9Liw7S 1lK0c953Cdl89NZ6FmG8SlLcLf3R5og+EABGLeJkqpLCeRTUMaNlb8zoYe0LVZDl C6gHrFm2BKTnUA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:48 2025 by rpki-client