This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json) Hash identifier: F4dDUWOQYPcVPxu/+3vwuyHxl2g3ITDTxu+dx/qriec= Subject key identifier: 03:89:17:1A:18:F7:3D:10:52:9D:A9:4E:94:E0:19:43:0D:88:36:49 Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78 Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78 Certificate serial: 019AF12EB336DCF3F14B056B20F233245789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft Manifest number: 0657 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: n5g6fDypYInqdUerabqkEyEPiRtuOVQvBsEiSmnyPi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b3:36:dc:f3:f1:4b:05:6b:20:f2:33:24:57:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c4378b571682d34773b463752701c9405fbed78 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=0389171a18f73d10529da94e94e019430d883649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:1e:42:82:bc:fe:26:26:31:41:ec:29:e7: dc:d7:89:83:bf:54:f2:17:1b:db:64:8d:b3:4e:e3: 00:f2:0b:c4:a9:ca:2f:ae:64:56:0c:66:09:54:72: cd:17:13:16:99:20:68:6c:6b:a0:74:9c:d1:d3:d4: 48:a8:32:98:4e:d9:57:5a:29:c3:b6:95:d6:79:11: 29:74:4c:59:85:38:e4:ce:44:b4:e8:a8:5f:af:d9: 6e:7e:84:19:2c:7a:b2:dd:b7:c8:3e:d5:b4:49:a7: 13:6e:98:27:16:43:ea:cb:ca:4e:f2:fc:21:4b:1f: c9:a6:3e:89:15:59:3c:93:a7:7b:be:52:ea:4c:89: 27:d3:ed:f8:f0:45:0f:23:08:5d:61:74:22:e2:b3: 77:5c:67:54:a0:2e:06:a2:54:e3:67:6b:19:bf:23: 6b:74:8d:09:87:cb:6d:4c:8e:df:c1:72:57:c4:e5: 0f:d4:ce:b0:9d:d5:d9:d3:04:1e:49:40:ec:e3:74: 71:33:ca:57:c0:3c:9c:a5:b7:22:5a:cd:d1:6e:40: aa:48:c5:d8:7b:8e:68:69:b8:81:86:22:52:0e:a4: 86:9c:5f:74:9a:de:38:70:61:d7:9f:7c:03:76:c8: 4d:17:cb:8b:b0:04:81:a9:96:b9:8b:0f:f9:0f:91: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:17:1A:18:F7:3D:10:52:9D:A9:4E:94:E0:19:43:0D:88:36:49 X509v3 Authority Key Identifier: keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:97:b8:6c:cf:4d:18:09:6c:25:5a:3d:d9:6f:88:e9:41:7b: c4:1d:03:6e:f5:20:76:0d:9b:10:eb:c1:a8:34:7a:84:e1:a0: 7c:3f:28:4c:c2:2f:c9:79:5a:dd:c0:b6:1d:88:0c:1a:28:15: a4:04:b8:40:0d:42:bc:24:e2:23:5d:0a:b0:43:9f:80:e6:01: 1a:57:f5:e1:9f:70:89:a4:01:d6:c1:29:5c:2b:8a:3b:50:11: 04:05:0b:30:7e:e9:cc:1e:ce:35:aa:02:66:f4:ae:79:db:48: fd:fd:29:b0:d3:b0:19:6c:a3:7c:28:e5:57:f8:16:1d:21:1e: 71:6f:26:e5:ad:90:af:4f:b1:28:ce:b5:0f:9b:51:0e:85:0a: 00:10:7e:70:a1:db:38:5a:eb:dc:83:2d:aa:a9:8f:fb:6b:65: 8f:78:de:43:63:16:1d:ae:8a:9e:03:60:f8:4b:cb:38:9b:76: 01:21:5d:ff:00:c7:82:e3:71:25:73:55:ca:aa:68:cf:9f:10: aa:db:da:53:21:16:90:28:e7:4f:76:d9:1a:b8:ee:bb:af:d8: 32:71:2d:70:25:8f:fe:1c:91:4a:e2:41:0a:0a:10:15:bc:9f: 34:70:c1:26:b0:84:a7:44:c4:98:60:e8:d2:f3:af:81:72:cd: 69:d7:01:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrM23PPxSwVrIPIzJFeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNDM3OGI1NzE2ODJkMzQ3NzNiNDYzNzUyNzAxYzk0MDVm YmVkNzgwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD EygwMzg5MTcxYTE4ZjczZDEwNTI5ZGE5NGU5NGUwMTk0MzBkODgzNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkweQoK8/iYmMUHsKefc14mDv1Ty FxvbZI2zTuMA8gvEqcovrmRWDGYJVHLNFxMWmSBobGugdJzR09RIqDKYTtlXWinD tpXWeREpdExZhTjkzkS06Khfr9lufoQZLHqy3bfIPtW0SacTbpgnFkPqy8pO8vwh Sx/Jpj6JFVk8k6d7vlLqTIkn0+348EUPIwhdYXQi4rN3XGdUoC4GolTjZ2sZvyNr dI0Jh8ttTI7fwXJXxOUP1M6wndXZ0wQeSUDs43RxM8pXwDycpbciWs3RbkCqSMXY e45oabiBhiJSDqSGnF90mt44cGHXn3wDdshNF8uLsASBqZa5iw/5D5G/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOJFxoY9z0QUp2pTpTgGUMNiDZJMB8GA1UdIwQY MBaAFIxDeLVxaC00dztGN1JwHJQF++14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakVONHRYRm9MVFIzTzBZM1VuQWNsQVg3N1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmI0NDUtMzQ2MS00ZjRmLTliNDIt NzRmMDFiMjU4NmY1LzEvakVONHRYRm9MVFIzTzBZM1VuQWNsQVg3N1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83NmI0NDUtMzQ2MS00ZjRmLTliNDItNzRmMDFiMjU4NmY1 LzEvakVONHRYRm9MVFIzTzBZM1VuQWNsQVg3N1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZe4bM9N GAlsJVo92W+I6UF7xB0DbvUgdg2bEOvBqDR6hOGgfD8oTMIvyXla3cC2HYgMGigV pAS4QA1CvCTiI10KsEOfgOYBGlf14Z9wiaQB1sEpXCuKO1ARBAULMH7pzB7ONaoC ZvSuedtI/f0psNOwGWyjfCjlV/gWHSEecW8m5a2Qr0+xKM61D5tRDoUKABB+cKHb OFrr3IMtqqmP+2tlj3jeQ2MWHa6KngNg+EvLOJt2ASFd/wDHguNxJXNVyqpoz58Q qtvaUyEWkCjnT3bZGrjuu6/YMnEtcCWP/hyRSuJBCgoQFbyfNHDBJrCEp0TEmGDo 0vOvgXLNadcB3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:15 2025 by rpki-client