This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json) Hash identifier: 5j8QZGJtH2DxdIL2iexdu6UW2ajcpsYWp96gMsjWBtE= Subject key identifier: 07:CA:3F:05:B5:2D:2B:6E:80:D8:9B:EB:D3:8B:E6:63:B2:57:2B:85 Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Certificate serial: 019AF12CBF841F67D4BE7260D82FFD113A2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: oXoiqqKuiTCqPJvAYBiaNtzXYnQjAsCjAIB9QlJflBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bf:84:1f:67:d4:be:72:60:d8:2f:fd:11:3a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=07ca3f05b52d2b6e80d89bebd38be663b2572b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:e4:0c:b6:59:9b:e5:ab:98:01:69:f2:0b: f5:6b:9e:c2:73:50:3f:87:ea:de:2a:df:33:97:46: c2:9c:6c:1b:5e:39:0e:d3:47:cb:94:38:eb:fc:86: 5d:4b:03:bb:bc:2b:1d:d2:ae:26:57:70:46:3d:74: fa:ce:34:86:89:db:3e:03:1a:81:eb:ab:f7:3b:bd: 2b:d7:ad:fe:f3:d6:bd:12:95:4c:c2:37:f3:4f:eb: 9e:01:55:de:00:14:be:21:ff:0f:63:5a:61:04:48: 0c:34:a0:77:37:f1:4c:b6:cd:4e:6c:95:70:99:da: 9c:ab:92:65:a9:7e:2c:70:90:5c:23:1d:a2:3e:9e: e6:03:69:82:e5:11:8c:51:96:a0:b1:62:a3:b7:fb: 95:f6:f0:fc:ef:86:fa:f4:62:a3:b0:ea:f5:85:bf: 74:01:c1:28:88:c8:fe:9a:27:3e:48:c8:0f:93:60: 4e:6e:10:66:59:5a:55:c0:db:1d:a6:e8:2e:21:3a: dd:b4:b8:94:6a:29:4a:38:7e:12:2b:6c:ea:4e:b3: ba:b8:ec:db:d0:e6:96:b6:89:4c:69:84:0a:c5:2f: 9d:33:c2:49:30:51:72:aa:27:e8:e6:d3:86:e1:78: c9:10:fd:42:41:c2:2b:a5:76:43:11:43:31:b6:85: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CA:3F:05:B5:2D:2B:6E:80:D8:9B:EB:D3:8B:E6:63:B2:57:2B:85 X509v3 Authority Key Identifier: keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:11:df:6a:ed:59:36:eb:c1:31:bc:44:5d:f4:91:64:a6:2b: f3:7e:00:ec:83:aa:63:a8:98:06:a6:98:95:21:05:c1:bd:08: a6:04:ea:db:47:af:73:23:e5:96:8f:e2:08:c3:b9:b2:b8:f4: 8c:89:ae:03:f2:b3:72:d9:68:e6:9e:57:19:4c:87:71:ee:0c: ab:56:69:9c:7f:5a:05:6c:23:57:0d:03:25:0d:8c:c0:ce:0c: 80:e8:24:8d:b3:17:66:6f:ca:8d:51:24:91:4e:92:f2:8f:f7: 34:71:e4:55:2b:93:62:0f:aa:3d:58:b2:01:aa:ec:8b:40:e7: 8b:22:70:09:ff:ef:8c:24:78:e2:eb:f1:2e:d8:d2:2e:94:20: 63:0c:8b:72:63:45:b5:28:e1:51:7c:76:10:6a:a3:ee:78:2f: f1:7e:26:47:ed:21:a8:0a:1c:2a:3b:11:86:f1:2a:c5:a4:1e: fc:b5:a7:34:43:b8:09:81:89:77:6a:3d:9f:05:f0:fc:09:63: 75:5b:a4:f3:d1:14:a0:1b:84:c8:61:82:23:60:ef:88:33:07: e6:d0:70:3f:71:82:d7:91:1a:d1:29:83:e7:aa:6d:87:af:39: 79:5f:71:a8:7c:f5:6e:e8:58:11:b3:a5:2d:fb:d5:d6:76:ec: 07:f6:0a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLL+EH2fUvnJg2C/9ETorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDk5ZjNiZmU5OTI3MzZhMzg4NWM3OTYzMjRkYjMzOTc3 ZmE3ZTkwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD EygwN2NhM2YwNWI1MmQyYjZlODBkODliZWJkMzhiZTY2M2IyNTcyYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3kDLZZm+WrmAFp8gv1a57Cc1A/ h+reKt8zl0bCnGwbXjkO00fLlDjr/IZdSwO7vCsd0q4mV3BGPXT6zjSGids+AxqB 66v3O70r163+89a9EpVMwjfzT+ueAVXeABS+If8PY1phBEgMNKB3N/FMts1ObJVw mdqcq5JlqX4scJBcIx2iPp7mA2mC5RGMUZagsWKjt/uV9vD874b69GKjsOr1hb90 AcEoiMj+mic+SMgPk2BObhBmWVpVwNsdpuguITrdtLiUailKOH4SK2zqTrO6uOzb 0OaWtolMaYQKxS+dM8JJMFFyqifo5tOG4XjJEP1CQcIrpXZDEUMxtoXeTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfKPwW1LStugNib69OL5mOyVyuFMB8GA1UdIwQY MBaAFIzZnzv+mSc2o4hceWMk2zOXf6fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmIt YTYwNDY0NDA5ZDMyLzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmItYTYwNDY0NDA5ZDMy LzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRHfau1Z NuvBMbxEXfSRZKYr834A7IOqY6iYBqaYlSEFwb0IpgTq20evcyPllo/iCMO5srj0 jImuA/Kzctlo5p5XGUyHce4Mq1ZpnH9aBWwjVw0DJQ2MwM4MgOgkjbMXZm/KjVEk kU6S8o/3NHHkVSuTYg+qPViyAarsi0DniyJwCf/vjCR44uvxLtjSLpQgYwyLcmNF tSjhUXx2EGqj7ngv8X4mR+0hqAocKjsRhvEqxaQe/LWnNEO4CYGJd2o9nwXw/Alj dVuk89EUoBuEyGGCI2DviDMH5tBwP3GC15Ea0SmD56pth685eV9xqHz1buhYEbOl LfvV1nbsB/YKwg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:09 2025 by rpki-client