This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json) Hash identifier: FNSHV53H1nwk7/+NlhzHjLpRqdArHeJtbgHUgzWzYXQ= Subject key identifier: 82:A9:C3:28:86:F0:BF:50:53:B7:DD:BB:DC:04:2C:31:65:70:1D:45 Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70 Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70 Certificate serial: 019AF3C0890B6673FE2BC37756DFDD6675D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft Manifest number: 0FB5 Signing time: Sat 06 Dec 2025 13:01:12 +0000 Manifest this update: Sat 06 Dec 2025 13:01:12 +0000 Manifest next update: Sun 07 Dec 2025 13:01:12 +0000 Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: UQ5N1Lg3sVGtjH95w0YxXjjAQBsMzRsx2Ku1ScYSXwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:89:0b:66:73:fe:2b:c3:77:56:df:dd:66:75:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70 Validity Not Before: Dec 6 13:01:12 2025 GMT Not After : Dec 7 13:01:12 2025 GMT Subject: CN=82a9c32886f0bf5053b7ddbbdc042c3165701d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:58:49:48:30:1a:1a:13:2c:14:7f:47:1f: 4f:08:b9:ed:3e:f3:29:9d:ec:25:9b:21:d6:ca:bb: 50:50:48:b8:5b:20:2c:70:d1:47:c3:53:92:2d:af: 90:3c:e8:a5:b6:32:ed:97:34:07:1a:90:be:6d:b3: e1:27:69:8d:c8:42:4b:e9:fe:45:ee:14:f5:45:32: 6c:5b:1d:3d:0b:fa:cc:54:4f:74:5c:20:92:89:5a: 73:65:ca:e7:3f:71:d2:45:4c:f6:da:af:51:5d:9d: 75:a8:25:00:c6:cc:57:53:ac:12:10:3f:cc:eb:05: fa:80:e4:8c:03:ef:7e:b6:4e:8b:2d:07:d6:77:b2: 47:26:a5:c8:77:30:d8:59:82:c4:dc:d9:03:3e:55: 21:f3:e5:ac:43:27:75:3e:91:8b:5a:1e:cf:65:63: 92:e5:80:b0:82:46:fc:92:4c:a9:da:13:53:44:b1: 6a:55:99:88:41:0b:4f:82:9c:55:59:5c:99:e0:37: ab:72:f0:15:e5:19:de:86:ae:71:9f:6a:af:c6:e7: 70:af:63:2b:94:ef:49:8a:68:11:3d:06:af:38:cc: 71:e7:1b:c7:26:61:e9:50:40:d6:08:90:4d:91:46: 53:6e:32:dc:2e:3c:86:e4:b6:14:40:cd:ff:62:85: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:C3:28:86:F0:BF:50:53:B7:DD:BB:DC:04:2C:31:65:70:1D:45 X509v3 Authority Key Identifier: keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2e:d0:8d:28:d6:53:75:22:40:d9:27:c3:34:17:cb:df:6d: fe:14:07:da:69:9b:83:b7:93:4f:64:62:84:1c:a7:f5:28:ae: c3:64:46:0a:33:41:41:91:0b:c8:39:e1:f2:57:8f:29:07:50: 2d:ca:d6:2e:c0:43:32:dd:2a:63:73:43:78:fd:68:e6:c7:9b: 45:cc:78:d8:3c:8e:77:e6:6f:28:44:05:ff:52:f7:66:a5:69: 77:dd:a7:8b:ea:f1:af:f9:21:a4:2d:d0:e6:91:ca:aa:cd:bf: 5d:b2:60:e8:28:e6:d4:c3:42:35:06:ec:c6:da:c6:df:76:a3: bf:0a:c2:a0:e9:58:0b:55:44:b5:95:25:f0:da:9f:64:47:48: 4a:95:be:3e:78:40:b5:db:9c:e4:66:4c:78:0f:d0:1b:4c:24: 65:80:e0:f2:2c:c4:a1:25:23:02:4c:86:16:5d:d3:ff:04:32: 2f:16:d6:85:2c:7f:53:aa:d2:66:f4:2b:a6:31:40:71:4c:19: 07:6c:78:99:eb:11:49:35:a4:25:ad:53:c7:c9:fd:d9:2d:ac: 2b:41:aa:88:92:b0:c4:5e:9b:f2:7e:84:17:ce:22:12:cf:1a: 78:69:06:f9:ba:a5:b8:26:4e:79:f2:ea:08:cb:1a:99:8e:86: fc:71:2f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIkLZnP+K8N3Vt/dZnXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2E2MTczOWVmNjdlYzQ3YTVmZDEwZTU2ZmM3YTM0ZGNi NzNjNzAwHhcNMjUxMjA2MTMwMTEyWhcNMjUxMjA3MTMwMTEyWjAzMTEwLwYDVQQD Eyg4MmE5YzMyODg2ZjBiZjUwNTNiN2RkYmJkYzA0MmMzMTY1NzAxZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmNYSUgwGhoTLBR/Rx9PCLntPvMp newlmyHWyrtQUEi4WyAscNFHw1OSLa+QPOiltjLtlzQHGpC+bbPhJ2mNyEJL6f5F 7hT1RTJsWx09C/rMVE90XCCSiVpzZcrnP3HSRUz22q9RXZ11qCUAxsxXU6wSED/M 6wX6gOSMA+9+tk6LLQfWd7JHJqXIdzDYWYLE3NkDPlUh8+WsQyd1PpGLWh7PZWOS 5YCwgkb8kkyp2hNTRLFqVZmIQQtPgpxVWVyZ4DercvAV5Rnehq5xn2qvxudwr2Mr lO9JimgRPQavOMxx5xvHJmHpUEDWCJBNkUZTbjLcLjyG5LYUQM3/YoXI8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKpwyiG8L9QU7fdu9wELDFlcB1FMB8GA1UdIwQY MBaAFI96YXOe9n7Eel/RDlb8ejTctzxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUt NzM4OTQwODEwYWRmLzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUtNzM4OTQwODEwYWRm LzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy7QjSjW U3UiQNknwzQXy99t/hQH2mmbg7eTT2RihByn9Siuw2RGCjNBQZELyDnh8lePKQdQ LcrWLsBDMt0qY3NDeP1o5sebRcx42DyOd+ZvKEQF/1L3ZqVpd92ni+rxr/khpC3Q 5pHKqs2/XbJg6Cjm1MNCNQbsxtrG33ajvwrCoOlYC1VEtZUl8NqfZEdISpW+PnhA tduc5GZMeA/QG0wkZYDg8izEoSUjAkyGFl3T/wQyLxbWhSx/U6rSZvQrpjFAcUwZ B2x4mesRSTWkJa1Tx8n92S2sK0GqiJKwxF6b8n6EF84iEs8aeGkG+bqluCZOefLq CMsamY6G/HEv1A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:01 2025 by rpki-client