This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json) Hash identifier: a1NEvEDHzTiZQg0/etPLR9FGLHpEqlEhiuN75lDtO0Q= Subject key identifier: 6C:FC:1A:C7:3C:EA:67:D8:78:42:70:6D:18:8B:6E:86:65:F9:F7:5A Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e Certificate serial: 019AF31C87B3677D6609AFA4C3FE75B35C13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: 7DIDmh55v6qZDXilm19PDYVAXYz5RMG/zzewodddCJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:87:b3:67:7d:66:09:af:a4:c3:fe:75:b3:5c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=6cfc1ac73cea67d87842706d188b6e8665f9f75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:b8:fc:c6:d8:98:8b:f9:14:68:4a:23:20: da:5e:b6:cc:2a:6d:0a:09:b1:80:dc:65:5c:d1:63: 0c:10:11:db:d7:be:2b:50:ee:63:20:75:da:c5:e7: a9:b6:2b:a7:7c:5a:89:5b:26:8e:77:45:ad:08:bd: b4:4a:2d:fa:bf:0e:8e:b0:5a:ce:ce:8e:e1:95:e2: 3f:5f:52:8a:a4:ee:fb:0c:b2:d3:02:14:94:ed:33: 33:3a:f2:64:7c:1f:0f:b7:dd:d8:03:59:47:71:d9: dd:09:66:f2:33:d9:e6:5a:cb:23:6a:f9:59:74:70: 3f:22:42:14:27:69:1f:f4:b4:2c:f3:72:5b:c6:d8: 6c:13:0e:2f:0f:62:69:69:22:1f:05:4e:db:95:fa: 46:86:33:4a:5c:59:1b:15:44:fa:d9:3f:02:fc:d8: 3b:74:55:58:ac:ef:50:0f:82:09:9f:3b:a3:98:8a: 74:d3:51:3b:57:a2:df:ef:12:dd:44:e3:54:4a:5a: 0e:22:f1:64:db:e1:7a:bb:98:ce:8c:0b:41:d2:04: 85:07:59:6f:0e:63:56:5d:78:a5:c7:b0:f4:86:0a: 9b:a0:02:c3:77:ac:a7:3c:65:e5:1b:9b:9e:aa:db: 9d:2a:22:d2:37:ba:f6:67:d3:86:90:00:1a:1c:59: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:1A:C7:3C:EA:67:D8:78:42:70:6D:18:8B:6E:86:65:F9:F7:5A X509v3 Authority Key Identifier: keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:95:f9:d2:45:06:18:6b:d0:9f:b2:09:be:b8:fd:67:5e: 53:aa:1e:46:33:d2:ed:df:28:4f:f1:cb:01:fa:59:6f:27:5d: c7:6b:b6:db:23:33:e9:ce:01:31:5b:d4:6b:e9:c6:79:6e:e8: fd:1a:9d:bc:73:8b:bf:a7:6c:4c:3c:b5:45:a7:06:0d:a4:f3: 66:32:a1:c8:8d:5c:98:aa:60:47:1b:d4:f7:9d:a9:c7:ca:cc: 9e:7b:a3:df:dd:eb:27:82:48:3f:e3:8a:b9:30:a5:e4:9a:c5: 91:ca:61:04:4f:8a:a1:48:01:42:19:66:d4:b5:18:ca:6a:37: 3d:c3:5b:8b:3e:80:47:45:87:2d:f0:4b:f7:0e:8c:d6:79:31: 13:12:d6:c2:46:13:c7:47:af:e5:f6:67:14:b9:d7:73:5e:dc: 36:8d:ab:12:5b:bb:50:a9:34:0b:64:61:7d:43:bb:b1:6d:f8: 1f:e1:0d:18:18:c4:19:1a:0d:d0:d0:63:d7:74:fc:21:b0:d5: 80:99:34:6d:d2:a2:9c:5a:2e:dd:ad:0b:2f:86:48:84:c1:60: 52:4f:8d:47:c9:4a:b0:56:49:0b:f0:e5:66:21:7d:15:95:d0: d9:28:1a:63:25:f1:d7:a1:c5:8b:1a:20:a2:22:f5:86:6b:e9: 53:94:6b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIezZ31mCa+kw/51s1wTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjU0NmRjYTM2YmMwYzRiNWIzNGNlNThkODA3MWU4NzVj M2E0NmUwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD Eyg2Y2ZjMWFjNzNjZWE2N2Q4Nzg0MjcwNmQxODhiNmU4NjY1ZjlmNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhm4/MbYmIv5FGhKIyDaXrbMKm0K CbGA3GVc0WMMEBHb174rUO5jIHXaxeeptiunfFqJWyaOd0WtCL20Si36vw6OsFrO zo7hleI/X1KKpO77DLLTAhSU7TMzOvJkfB8Pt93YA1lHcdndCWbyM9nmWssjavlZ dHA/IkIUJ2kf9LQs83JbxthsEw4vD2JpaSIfBU7blfpGhjNKXFkbFUT62T8C/Ng7 dFVYrO9QD4IJnzujmIp001E7V6Lf7xLdRONUSloOIvFk2+F6u5jOjAtB0gSFB1lv DmNWXXilx7D0hgqboALDd6ynPGXlG5ueqtudKiLSN7r2Z9OGkAAaHFlj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz8Gsc86mfYeEJwbRiLboZl+fdaMB8GA1UdIwQY MBaAFI21Rtyja8DEtbNM5Y2Aceh1w6RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZTY3M2MtMjUzNC00NTU1LTk0MmUt ODAwYWZhOWJiZmRlLzEvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wZTY3M2MtMjUzNC00NTU1LTk0MmUtODAwYWZhOWJiZmRl LzEvamJWRzNLTnJ3TVMxczB6bGpZQng2SFhEcEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKKV+dJF Bhhr0J+yCb64/WdeU6oeRjPS7d8oT/HLAfpZbyddx2u22yMz6c4BMVvUa+nGeW7o /RqdvHOLv6dsTDy1RacGDaTzZjKhyI1cmKpgRxvU952px8rMnnuj393rJ4JIP+OK uTCl5JrFkcphBE+KoUgBQhlm1LUYymo3PcNbiz6AR0WHLfBL9w6M1nkxExLWwkYT x0ev5fZnFLnXc17cNo2rElu7UKk0C2RhfUO7sW34H+ENGBjEGRoN0NBj13T8IbDV gJk0bdKinFou3a0LL4ZIhMFgUk+NR8lKsFZJC/DlZiF9FZXQ2SgaYyXx16HFixog oiL1hmvpU5Rrhw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:27 2025 by rpki-client