This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json) Hash identifier: OntZk0zSq1bKyhW8IrAeQfF3u5ejLM+DPPC5PM3yPEU= Subject key identifier: D1:CE:1C:E7:39:EA:25:04:42:3E:D7:79:80:C7:8F:5E:E0:A4:46:C1 Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Certificate serial: 019AF31CB078CAD0599328968AE1F571AAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft Manifest number: 15CC Signing time: Sat 06 Dec 2025 10:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:02:14 +0000 Manifest next update: Sun 07 Dec 2025 10:02:14 +0000 Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: obOLu/00QP1lVxkXUSGd1V1sba3pLT2NQksvOcfF8JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b0:78:ca:d0:59:93:28:96:8a:e1:f5:71:aa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Validity Not Before: Dec 6 10:02:14 2025 GMT Not After : Dec 7 10:02:14 2025 GMT Subject: CN=d1ce1ce739ea2504423ed77980c78f5ee0a446c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:df:a3:e5:82:0b:2d:1e:2b:ab:94:03:39:c5: 5e:5b:ac:29:1d:e1:70:3a:9f:90:ae:ea:16:bd:35: 5a:83:1e:39:0e:c6:63:24:8d:5e:d7:3b:98:04:63: 89:c1:d3:0f:54:57:35:6e:e3:76:69:f0:2f:3d:68: fa:15:95:f6:76:21:96:d7:e8:28:55:93:7e:8c:55: 93:2f:17:1d:76:a5:0c:47:8e:49:4b:69:32:5e:dd: f1:64:36:5f:4c:5d:55:9c:cb:de:80:d3:0a:68:5f: 56:d7:f2:2c:a7:a0:83:97:6f:ee:3c:cb:4c:68:4f: 81:43:23:4e:88:ee:ed:06:b8:db:e8:50:b4:88:f6: ba:d7:07:7f:69:03:fc:fc:46:4a:67:54:29:f8:87: 12:da:5b:53:55:9e:08:b9:0f:24:60:d4:be:49:01: 96:3d:a0:64:03:20:56:cf:12:ae:26:7b:8a:10:74: 35:f4:05:0a:ff:65:36:32:95:8b:99:d5:cc:f9:da: 95:4e:23:db:08:31:68:42:56:75:56:4c:ef:79:bd: 60:8e:fa:b5:ec:0e:5c:f0:dc:0f:88:e6:0a:c3:cf: ae:17:ed:c6:2d:da:87:46:5d:ad:c2:a2:c2:47:f1: 91:06:be:22:2f:e6:40:da:89:d0:24:97:7d:a3:22: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:1C:E7:39:EA:25:04:42:3E:D7:79:80:C7:8F:5E:E0:A4:46:C1 X509v3 Authority Key Identifier: keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:21:20:a8:f9:18:0f:22:2a:bf:c0:04:1e:3b:d1:90:1d:3c: 7e:d3:17:5d:6d:22:dd:47:90:55:db:2a:b2:68:98:48:7e:19: e5:d7:ae:06:57:24:29:33:90:a9:34:06:8d:6d:d6:a5:ba:b0: a7:6b:88:cd:6e:2b:f8:e6:ee:18:0b:ea:58:06:e1:7c:1a:a7: f6:d6:50:4a:e5:a4:07:48:ac:77:ff:0f:15:5e:fc:6e:67:d2: d8:cc:91:7b:2b:90:5a:0e:63:07:2b:59:36:b2:d5:15:85:7e: 52:6e:0f:06:36:96:55:be:a5:ed:ce:c7:88:74:a0:40:e8:67: 1c:ee:c3:16:52:85:e8:c8:f0:0a:7e:18:db:51:1c:96:55:cc: 9b:8f:78:77:41:4b:0a:ce:f9:c8:bd:c0:e0:96:8f:3e:46:f9: 3c:6e:b2:31:df:c9:ca:22:6d:68:a9:7d:72:12:37:c0:b8:4b: 63:70:13:78:00:b0:44:5b:6e:98:76:ab:2f:20:0c:6e:0d:35: 2c:68:2d:f8:c8:be:71:56:9e:a2:3f:51:54:5d:f2:9b:ac:0e: da:2e:c9:80:bf:ce:4a:39:d5:80:8c:4f:73:2c:d2:ed:b8:db: 17:e5:1a:c8:01:06:38:bd:40:b7:ea:65:72:54:ee:ee:1d:e7: e8:a7:44:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLB4ytBZkyiWiuH1caqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2 MjBjNTEwHhcNMjUxMjA2MTAwMjE0WhcNMjUxMjA3MTAwMjE0WjAzMTEwLwYDVQQD EyhkMWNlMWNlNzM5ZWEyNTA0NDIzZWQ3Nzk4MGM3OGY1ZWUwYTQ0NmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d+j5YILLR4rq5QDOcVeW6wpHeFw Op+QruoWvTVagx45DsZjJI1e1zuYBGOJwdMPVFc1buN2afAvPWj6FZX2diGW1+go VZN+jFWTLxcddqUMR45JS2kyXt3xZDZfTF1VnMvegNMKaF9W1/Isp6CDl2/uPMtM aE+BQyNOiO7tBrjb6FC0iPa61wd/aQP8/EZKZ1Qp+IcS2ltTVZ4IuQ8kYNS+SQGW PaBkAyBWzxKuJnuKEHQ19AUK/2U2MpWLmdXM+dqVTiPbCDFoQlZ1Vkzveb1gjvq1 7A5c8NwPiOYKw8+uF+3GLdqHRl2twqLCR/GRBr4iL+ZA2onQJJd9oyLjWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHOHOc56iUEQj7XeYDHj17gpEbBMB8GA1UdIwQY MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSEgqPkY DyIqv8AEHjvRkB08ftMXXW0i3UeQVdsqsmiYSH4Z5deuBlckKTOQqTQGjW3Wpbqw p2uIzW4r+ObuGAvqWAbhfBqn9tZQSuWkB0isd/8PFV78bmfS2MyReyuQWg5jBytZ NrLVFYV+Um4PBjaWVb6l7c7HiHSgQOhnHO7DFlKF6MjwCn4Y21EcllXMm494d0FL Cs75yL3A4JaPPkb5PG6yMd/JyiJtaKl9chI3wLhLY3ATeACwRFtumHarLyAMbg01 LGgt+Mi+cVaeoj9RVF3ym6wO2i7JgL/OSjnVgIxPcyzS7bjbF+UayAEGOL1At+pl clTu7h3n6KdE5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:38 2025 by rpki-client