This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json) Hash identifier: cOK3TdPEZT/3Ez2QN0bIRj+nxmGpednwVuiYc+8o+Gc= Subject key identifier: 4D:EF:AF:D3:65:A0:F6:85:5B:9D:7B:0C:67:D4:4C:92:37:2F:3C:45 Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Certificate serial: 019AF19B1E5B3D868D67BDDD2B0EFD490D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft Manifest number: 0A91 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: sp4/m+38VdKpUTpua3ij3OQhv2C6XVPsYtuoj7vfn7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1e:5b:3d:86:8d:67:bd:dd:2b:0e:fd:49:0d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=4defafd365a0f6855b9d7b0c67d44c92372f3c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:86:fd:70:31:bb:cf:f2:3a:d6:45:a3:e1: 68:25:ef:40:10:40:54:d1:23:66:2c:c5:c3:ac:2a: 1b:49:ed:1e:d5:57:e2:a3:35:1c:2e:e1:7e:6d:bb: 59:b8:91:06:1a:e3:54:46:90:be:5e:0f:9f:02:6e: 38:0b:f7:da:0a:9a:70:39:d3:c5:cc:42:f4:9e:c1: ee:0b:ed:9f:84:a8:59:4a:62:64:95:a1:04:57:46: ea:66:79:4e:bb:a3:3d:d1:49:7c:c2:d5:0a:3e:58: 91:33:61:72:fc:3d:e2:fc:6b:d8:36:ed:45:b5:c0: d8:ab:d9:68:1c:f1:ba:3c:bc:15:f8:56:32:32:63: dc:79:81:c5:36:b9:a5:1e:d1:26:2f:49:1d:76:c2: 3c:a0:1c:4d:a4:58:fd:d2:de:a6:4a:6d:71:b7:5c: b2:88:2a:4e:4b:d4:16:de:4b:0b:45:2b:15:02:21: 90:4c:1c:79:18:97:23:8c:71:e9:b1:25:18:20:d7: 3d:bd:8d:74:2e:53:51:a7:c3:da:c2:ff:fe:c1:ac: ec:a7:77:ec:7f:89:55:38:a0:09:fc:d3:32:7e:ee: ee:7e:fe:20:6e:b4:e5:a9:ba:69:2c:23:0a:df:66: 2d:23:76:8c:0f:fb:de:5d:57:74:f2:98:02:6c:09: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EF:AF:D3:65:A0:F6:85:5B:9D:7B:0C:67:D4:4C:92:37:2F:3C:45 X509v3 Authority Key Identifier: keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c8:ad:e5:0a:3a:3f:3f:b3:15:21:28:b9:cd:23:78:7f:43: 4e:99:c2:b5:17:76:dd:1e:e8:7e:47:6c:7e:94:3b:cd:55:0f: 09:92:3d:01:99:a4:2d:77:54:e1:db:27:5b:39:98:5a:c9:6b: d2:b9:db:c7:7f:6d:8f:00:22:2f:37:05:4b:30:6a:2a:f7:5b: cf:fa:ba:53:14:fe:2c:42:67:7c:38:e1:b7:71:b6:57:b5:73: d0:f0:dd:c4:3c:23:07:98:ec:45:1b:73:31:72:7f:68:c1:9f: 52:c3:71:47:4e:fc:c4:1b:fc:01:4c:1d:c7:03:44:cb:9c:25: 76:a8:41:bc:ac:28:1a:f8:fc:0d:62:35:13:54:63:d3:80:90: e0:02:04:e6:39:8c:41:1b:bd:98:93:85:01:48:a9:17:fe:b1: 48:29:cd:de:03:31:d1:06:88:21:ef:38:be:a8:82:9b:86:d6: f3:81:58:99:18:a4:0b:e1:89:b3:b8:40:74:d4:60:5f:69:e1: c1:fe:ec:cb:8c:4f:7c:5a:f3:18:ab:97:85:0b:e7:07:ae:95: b3:29:15:ed:51:d7:0b:eb:53:37:04:ff:d4:9a:a7:f2:2a:9f: ca:ee:9a:15:34:63:68:93:d3:65:aa:c0:86:95:de:c7:dd:ae: e3:d2:b5:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx5bPYaNZ73dKw79SQ1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmE2MTU3Y2I1MmQxMTY4ZjUwODQ2YzVlNTA3OTIyNDBl ZGYzZTAwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg0ZGVmYWZkMzY1YTBmNjg1NWI5ZDdiMGM2N2Q0NGM5MjM3MmYzYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KG/XAxu8/yOtZFo+FoJe9AEEBU 0SNmLMXDrCobSe0e1VfiozUcLuF+bbtZuJEGGuNURpC+Xg+fAm44C/faCppwOdPF zEL0nsHuC+2fhKhZSmJklaEEV0bqZnlOu6M90Ul8wtUKPliRM2Fy/D3i/GvYNu1F tcDYq9loHPG6PLwV+FYyMmPceYHFNrmlHtEmL0kddsI8oBxNpFj90t6mSm1xt1yy iCpOS9QW3ksLRSsVAiGQTBx5GJcjjHHpsSUYINc9vY10LlNRp8Pawv/+wazsp3fs f4lVOKAJ/NMyfu7ufv4gbrTlqbppLCMK32YtI3aMD/veXVd08pgCbAlpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3vr9NloPaFW517DGfUTJI3LzxFMB8GA1UdIwQY MBaAFI+6YVfLUtEWj1CEbF5QeSJA7fPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUt MjBmYWQ5NGNhYjE0LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUtMjBmYWQ5NGNhYjE0 LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8it5Qo6 Pz+zFSEouc0jeH9DTpnCtRd23R7ofkdsfpQ7zVUPCZI9AZmkLXdU4dsnWzmYWslr 0rnbx39tjwAiLzcFSzBqKvdbz/q6UxT+LEJnfDjht3G2V7Vz0PDdxDwjB5jsRRtz MXJ/aMGfUsNxR078xBv8AUwdxwNEy5wldqhBvKwoGvj8DWI1E1Rj04CQ4AIE5jmM QRu9mJOFAUipF/6xSCnN3gMx0QaIIe84vqiCm4bW84FYmRikC+GJs7hAdNRgX2nh wf7sy4xPfFrzGKuXhQvnB66VsykV7VHXC+tTNwT/1Jqn8iqfyu6aFTRjaJPTZarA hpXex92u49K1Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:09 2025 by rpki-client