This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json) Hash identifier: jNXclQihfhdFwfglx8qawu01bg4PZdRd8j8zLFCTCv0= Subject key identifier: F3:F9:A5:6F:FD:44:7D:D7:06:64:18:6C:45:F6:D9:67:5A:24:C6:F2 Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e Certificate serial: 019B32D6E1623F02547A7C36098E2E36B8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft Manifest number: 0DB0 Signing time: Thu 18 Dec 2025 19:01:41 +0000 Manifest this update: Thu 18 Dec 2025 19:01:41 +0000 Manifest next update: Fri 19 Dec 2025 19:01:41 +0000 Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: I1OQykgtj4BKAL+9VBerm1VRKtvVvw4rN5oMeNJOGYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e1:62:3f:02:54:7a:7c:36:09:8e:2e:36:b8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e Validity Not Before: Dec 18 19:01:41 2025 GMT Not After : Dec 19 19:01:41 2025 GMT Subject: CN=f3f9a56ffd447dd70664186c45f6d9675a24c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:62:a1:f7:2a:af:e1:c0:f6:7e:d6:5f:76: 2d:6b:bf:57:d0:60:fc:c9:e9:68:3b:3f:00:de:78: d3:c5:92:9b:64:3b:6b:c4:e2:28:95:4e:27:ff:af: 7f:57:61:ed:31:63:a7:50:cb:c1:e5:05:26:80:ff: a3:42:be:b9:2b:ac:a1:c1:30:28:7e:76:a8:72:28: 4c:72:b6:6d:48:98:e5:30:c6:38:97:11:a9:e1:54: a5:84:e6:de:59:44:77:30:d3:05:84:d8:eb:66:7b: 5a:dd:28:5f:16:bd:11:8a:a6:d4:a5:4f:28:a8:80: 3f:4d:69:b3:d9:d3:57:c3:0c:da:14:c3:1b:c5:6a: f6:00:fb:fb:8d:41:9b:be:21:02:e1:f2:76:35:60: 51:82:36:17:9f:00:e4:0f:21:49:67:31:18:f1:64: 44:3d:fc:af:72:cd:b3:b0:ba:f3:2c:1c:4a:f8:43: 29:f2:62:dc:6c:b7:e0:91:78:e6:10:44:3a:11:0f: 4f:21:d8:8a:c0:ed:98:7a:fb:03:d7:0e:dd:ec:18: 9e:5e:fa:cb:d7:18:22:a3:56:cd:7a:55:28:1c:40: c7:fb:5e:10:26:97:b4:a1:6e:a2:e9:69:2f:f2:8c: 7f:3c:fb:32:cb:f9:9a:41:9a:d4:ea:b7:31:3c:87: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F9:A5:6F:FD:44:7D:D7:06:64:18:6C:45:F6:D9:67:5A:24:C6:F2 X509v3 Authority Key Identifier: keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c8:8b:ab:08:a1:25:25:44:48:95:4e:09:bd:13:39:0d:e5: f3:c5:ad:a6:f3:a2:b9:f5:38:94:8e:9a:5d:71:e4:ff:a2:33: 60:b9:42:af:d4:9b:29:56:f0:4e:46:ee:62:fa:6c:a1:d8:cf: a4:36:5c:7c:f0:8c:17:48:5e:91:3c:52:7a:82:04:a7:d7:f4: e2:3e:45:92:5b:5c:9d:45:13:48:ea:c8:83:14:ba:f4:7e:53: d7:c1:5b:f2:28:97:1b:e2:b3:4e:7f:00:a1:8b:9c:22:1b:91: a1:91:44:08:51:07:f0:f2:11:99:8c:0e:97:36:23:1c:fe:fa: 3a:7d:63:f2:3f:1a:0c:5c:0d:d6:29:0e:94:b8:81:dc:66:98: ed:5e:2c:04:69:64:f0:b2:e5:57:b7:6f:bb:67:3a:25:79:7d: c4:a4:f1:38:4f:5e:d9:66:80:45:89:c5:6d:02:de:77:3d:83: c1:72:da:c3:81:d0:7e:05:7b:f4:e6:22:70:d2:41:2a:27:fc: 60:ea:e9:1d:ec:d8:12:f8:5e:94:09:23:af:43:9a:b8:c1:28: d5:6e:66:b5:f7:58:e6:f8:6c:41:94:4b:cc:5f:58:fd:82:25: f9:d3:39:e2:df:f9:07:83:e3:dd:20:c5:85:24:a8:24:39:fd: 73:0d:4d:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uFiPwJUenw2CY4uNriyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzBkNjQwNzUyODUzODY0MmZiMGQzZDQzNDY2MTVmZWE3 MWRjMmUwHhcNMjUxMjE4MTkwMTQxWhcNMjUxMjE5MTkwMTQxWjAzMTEwLwYDVQQD EyhmM2Y5YTU2ZmZkNDQ3ZGQ3MDY2NDE4NmM0NWY2ZDk2NzVhMjRjNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWdiofcqr+HA9n7WX3Yta79X0GD8 yeloOz8A3njTxZKbZDtrxOIolU4n/69/V2HtMWOnUMvB5QUmgP+jQr65K6yhwTAo fnaocihMcrZtSJjlMMY4lxGp4VSlhObeWUR3MNMFhNjrZnta3ShfFr0RiqbUpU8o qIA/TWmz2dNXwwzaFMMbxWr2APv7jUGbviEC4fJ2NWBRgjYXnwDkDyFJZzEY8WRE Pfyvcs2zsLrzLBxK+EMp8mLcbLfgkXjmEEQ6EQ9PIdiKwO2YevsD1w7d7BieXvrL 1xgio1bNelUoHEDH+14QJpe0oW6i6Wkv8ox/PPsyy/maQZrU6rcxPIdV9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP5pW/9RH3XBmQYbEX22WdaJMbyMB8GA1UdIwQY MBaAFI/A1kB1KFOGQvsNPUNGYV/qcdwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYt NDVmNTc3OWQ4Y2I0LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYtNDVmNTc3OWQ4Y2I0 LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8iLqwih JSVESJVOCb0TOQ3l88WtpvOiufU4lI6aXXHk/6IzYLlCr9SbKVbwTkbuYvpsodjP pDZcfPCMF0hekTxSeoIEp9f04j5FkltcnUUTSOrIgxS69H5T18Fb8iiXG+KzTn8A oYucIhuRoZFECFEH8PIRmYwOlzYjHP76On1j8j8aDFwN1ikOlLiB3GaY7V4sBGlk 8LLlV7dvu2c6JXl9xKTxOE9e2WaARYnFbQLedz2DwXLaw4HQfgV79OYicNJBKif8 YOrpHezYEvhelAkjr0OauMEo1W5mtfdY5vhsQZRLzF9Y/YIl+dM54t/5B4Pj3SDF hSSoJDn9cw1NMA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:03 2025 by rpki-client