This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json) Hash identifier: MrfulPjOQmj3Zh2J8binQt5irFuj9rk+oBablBK8D2k= Subject key identifier: 8D:24:D4:66:EE:74:3F:0D:F7:0F:87:9D:82:8C:B0:FC:2F:84:B8:F7 Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb Certificate serial: 019AF389F53A37781ED1ED0106E1A5263554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft Manifest number: 0F0D Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: E1qqDykYdHy/5n1EuUr1wPfe0yJzUhWH7dTngvHB/nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f5:3a:37:78:1e:d1:ed:01:06:e1:a5:26:35:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=8d24d466ee743f0df70f879d828cb0fc2f84b8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:0e:d6:6b:78:a9:11:52:af:71:fd:64:09: c4:86:43:35:56:52:be:b6:a0:85:9e:d0:50:55:c0: c6:8b:0c:5f:09:ce:57:3e:f8:7f:b3:1f:cb:b5:46: 3a:99:67:e0:d4:57:fc:df:d0:2a:f5:5b:76:cb:4a: 47:b9:23:54:ec:7e:b4:3c:29:fd:12:8f:4a:e9:d6: 56:44:7f:c3:2d:c9:df:e2:9d:3e:6e:ba:40:9e:76: 25:90:7b:bd:32:d2:e2:8c:57:a6:27:89:1c:67:26: 44:8a:f8:99:0b:9d:fd:54:bd:24:95:f2:6b:5b:c3: 31:a0:f1:1f:e5:60:4c:c7:09:d7:95:b8:8c:dd:b2: 66:2f:a9:0b:26:90:c3:11:7b:ec:82:88:ce:47:16: e4:f1:54:a6:c6:3a:15:28:8c:31:cf:66:fb:38:8f: bc:d8:d1:84:54:a3:bc:4b:50:6b:8c:4d:3c:8a:28: 9a:32:e3:fb:b5:87:3a:30:82:d8:9d:a3:b2:e2:3a: db:4f:fd:1b:bd:6c:a4:d2:12:7b:5f:4e:6d:d2:58: 51:56:e1:44:68:2e:c5:91:0d:7d:ed:82:2c:b4:86: cb:87:c8:d4:c6:f8:6d:01:9a:93:b4:da:f9:cb:fe: 13:f1:ef:25:e3:a0:d1:bc:89:7a:d2:38:55:53:d8: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:D4:66:EE:74:3F:0D:F7:0F:87:9D:82:8C:B0:FC:2F:84:B8:F7 X509v3 Authority Key Identifier: keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:69:ea:7b:67:2c:2c:b8:b8:3a:4f:8b:d4:bd:de:ce:59:0b: c6:9c:44:7f:d1:42:26:d6:cd:eb:74:d3:d3:b0:13:bd:5c:dc: 70:8b:3b:50:9a:9e:bd:05:bd:df:62:33:45:6f:dd:d5:f6:94: b6:97:ac:3f:6b:50:87:a7:35:9a:d4:3d:95:78:75:d0:cd:d4: c0:0d:cb:66:61:c8:1f:2d:ed:85:c0:c8:ba:7b:27:38:e9:e9: 77:4f:e2:e3:04:33:15:ed:df:d3:27:c6:86:bb:d4:a7:a8:de: 52:ba:22:f1:c6:97:48:41:8e:6e:dc:5e:92:26:f1:c6:47:17: 90:e3:5e:40:55:bf:46:b3:bf:84:8c:40:bb:b2:92:0e:7b:51: 08:eb:c4:d4:c5:89:af:2e:72:64:be:3b:07:cc:23:c2:62:fb: eb:db:23:45:97:38:b6:d3:39:db:6e:25:86:4b:d0:32:50:34: 59:dc:73:d5:7c:73:b0:d9:4a:2c:78:5e:66:70:82:1a:05:97: 3e:3e:b4:61:8f:99:38:e8:e5:69:fd:28:c3:e3:35:7a:9f:f4: c7:af:9d:a4:b8:b4:4b:d9:a9:70:b5:09:a7:dc:32:19:af:f4: 6c:78:14:e2:32:c0:2b:a4:9e:2f:60:ad:9e:e6:40:7c:de:f0: 81:17:26:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifU6N3ge0e0BBuGlJjVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm MjE1ZWIwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD Eyg4ZDI0ZDQ2NmVlNzQzZjBkZjcwZjg3OWQ4MjhjYjBmYzJmODRiOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBIO1mt4qRFSr3H9ZAnEhkM1VlK+ tqCFntBQVcDGiwxfCc5XPvh/sx/LtUY6mWfg1Ff839Aq9Vt2y0pHuSNU7H60PCn9 Eo9K6dZWRH/DLcnf4p0+brpAnnYlkHu9MtLijFemJ4kcZyZEiviZC539VL0klfJr W8MxoPEf5WBMxwnXlbiM3bJmL6kLJpDDEXvsgojORxbk8VSmxjoVKIwxz2b7OI+8 2NGEVKO8S1BrjE08iiiaMuP7tYc6MILYnaOy4jrbT/0bvWyk0hJ7X05t0lhRVuFE aC7FkQ197YIstIbLh8jUxvhtAZqTtNr5y/4T8e8l46DRvIl60jhVU9hccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0k1GbudD8N9w+HnYKMsPwvhLj3MB8GA1UdIwQY MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2 LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWnqe2cs LLi4Ok+L1L3ezlkLxpxEf9FCJtbN63TT07ATvVzccIs7UJqevQW932IzRW/d1faU tpesP2tQh6c1mtQ9lXh10M3UwA3LZmHIHy3thcDIunsnOOnpd0/i4wQzFe3f0yfG hrvUp6jeUroi8caXSEGObtxekibxxkcXkONeQFW/RrO/hIxAu7KSDntRCOvE1MWJ ry5yZL47B8wjwmL769sjRZc4ttM5224lhkvQMlA0Wdxz1XxzsNlKLHheZnCCGgWX Pj60YY+ZOOjlaf0ow+M1ep/0x6+dpLi0S9mpcLUJp9wyGa/0bHgU4jLAK6SeL2Ct nuZAfN7wgRcmyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:20 2025 by rpki-client