This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json) Hash identifier: JcUapsBUkX2j9iPJVMi2q6fFPFJ8vaELm0en4w7ajTc= Subject key identifier: 1F:4F:0F:BB:6D:9B:DC:7D:CE:F0:E0:0E:0A:BE:29:9B:CA:BB:46:92 Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Certificate serial: 019B2F67A2152AB1696373FC7163DD219F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft Manifest number: 0654 Signing time: Thu 18 Dec 2025 03:01:19 +0000 Manifest this update: Thu 18 Dec 2025 03:01:19 +0000 Manifest next update: Fri 19 Dec 2025 03:01:19 +0000 Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: S5JyaiYkcYKR/eTYSDM2ZuGn3bh/ifJClzB3liA1aUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:a2:15:2a:b1:69:63:73:fc:71:63:dd:21:9f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Validity Not Before: Dec 18 03:01:19 2025 GMT Not After : Dec 19 03:01:19 2025 GMT Subject: CN=1f4f0fbb6d9bdc7dcef0e00e0abe299bcabb4692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:ce:da:52:58:a3:87:d4:82:d2:42:91:28: 34:2e:ad:da:7e:79:b9:35:84:e5:39:f5:7e:22:2a: cd:aa:42:b0:7d:4a:99:f6:b5:69:c0:23:bd:9d:0c: 15:10:b0:f3:2f:a3:a0:2b:84:c1:d8:2c:de:aa:fd: 38:87:f4:ff:da:fe:4b:d6:10:58:d7:cf:5e:f8:dd: ab:55:9e:aa:b0:6c:12:8d:b4:63:22:42:2a:1b:96: e4:ae:fa:73:bc:89:b1:b0:96:14:a6:89:69:b9:0a: 61:c6:6d:9f:3f:9a:32:c4:ca:69:07:2e:71:d0:1d: 57:02:13:1a:90:57:c8:5b:6a:9d:e3:de:c8:9e:6d: 59:ac:f0:2c:f6:d8:43:f5:2f:cd:6c:a5:fe:88:bd: 2c:12:ff:7e:5f:ef:23:a7:7f:2c:5d:94:61:65:54: d7:5b:a1:d3:9e:78:7d:4e:6b:7a:3b:67:37:c4:12: 71:a4:62:ab:ff:9a:1b:08:74:75:5c:43:fb:41:47: 75:03:90:c5:9a:1b:9b:4e:24:5a:52:5b:d3:23:4a: 95:02:1f:ff:5d:0c:1b:3f:3d:4f:50:c1:38:84:4a: 2f:78:a2:6a:00:a7:f7:35:63:c0:ac:83:a9:7c:20: 18:45:ff:a8:0c:f4:43:f9:01:c4:83:b9:f8:c1:82: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:0F:BB:6D:9B:DC:7D:CE:F0:E0:0E:0A:BE:29:9B:CA:BB:46:92 X509v3 Authority Key Identifier: keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f1:12:fe:0c:a2:dd:50:9e:91:3a:22:86:81:74:3a:d4:42: f4:90:be:25:eb:96:f1:a9:37:3b:a6:bd:ab:77:21:12:b3:f6: a0:c7:24:dc:a9:4b:55:07:8c:2e:b0:41:20:1a:92:11:85:81: c4:c3:4e:49:9e:1b:2a:df:04:b9:d3:70:87:87:b6:ff:26:59: e8:74:b5:11:3e:c7:22:d7:c7:5f:02:0b:c9:cd:f5:c5:6a:d3: d3:93:e5:1b:ae:3f:c8:6d:7a:ae:00:ea:51:05:9c:98:71:39: ad:61:94:c5:98:fc:3b:c3:44:88:0b:db:02:31:a1:ef:b0:09: 98:7f:fe:f7:c3:89:97:ad:35:e8:fe:85:c7:f2:57:24:4f:11: a4:1d:2b:e7:ce:bb:97:f9:ef:66:37:a5:9b:3b:00:80:88:4b: 77:fc:7d:99:6f:42:88:55:72:00:f6:0a:35:6e:e9:fe:8d:97: 69:f5:24:55:a3:85:3c:b8:96:66:85:f7:78:a8:e6:d5:99:55: 8a:7b:bb:bb:94:7f:e0:b5:11:90:58:c8:9c:e9:91:9d:cc:17: 9c:39:e8:6a:83:d5:5a:7c:6f:5f:f2:ed:58:b0:9a:b6:a1:5f: 2f:d1:c8:9a:8e:74:62:cb:f2:92:05:e2:3b:c2:34:a5:02:1f: b3:84:4c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ6IVKrFpY3P8cWPdIZ84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGI0NTc2M2VmMGExOTYyOTNiMzM4MGM4ODhmODNhOGM3 Y2QzNzcwHhcNMjUxMjE4MDMwMTE5WhcNMjUxMjE5MDMwMTE5WjAzMTEwLwYDVQQD EygxZjRmMGZiYjZkOWJkYzdkY2VmMGUwMGUwYWJlMjk5YmNhYmI0NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz87O2lJYo4fUgtJCkSg0Lq3afnm5 NYTlOfV+IirNqkKwfUqZ9rVpwCO9nQwVELDzL6OgK4TB2Czeqv04h/T/2v5L1hBY 189e+N2rVZ6qsGwSjbRjIkIqG5bkrvpzvImxsJYUpolpuQphxm2fP5oyxMppBy5x 0B1XAhMakFfIW2qd497Inm1ZrPAs9thD9S/NbKX+iL0sEv9+X+8jp38sXZRhZVTX W6HTnnh9Tmt6O2c3xBJxpGKr/5obCHR1XEP7QUd1A5DFmhubTiRaUlvTI0qVAh// XQwbPz1PUME4hEoveKJqAKf3NWPArIOpfCAYRf+oDPRD+QHEg7n4wYKeqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9PD7ttm9x9zvDgDgq+KZvKu0aSMB8GA1UdIwQY MBaAFIzbRXY+8KGWKTszgMiI+DqMfNN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUt NTNkM2I5ODc0ZWRkLzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUtNTNkM2I5ODc0ZWRk LzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/ES/gyi 3VCekToihoF0OtRC9JC+JeuW8ak3O6a9q3chErP2oMck3KlLVQeMLrBBIBqSEYWB xMNOSZ4bKt8EudNwh4e2/yZZ6HS1ET7HItfHXwILyc31xWrT05PlG64/yG16rgDq UQWcmHE5rWGUxZj8O8NEiAvbAjGh77AJmH/+98OJl6016P6Fx/JXJE8RpB0r5867 l/nvZjelmzsAgIhLd/x9mW9CiFVyAPYKNW7p/o2XafUkVaOFPLiWZoX3eKjm1ZlV inu7u5R/4LURkFjInOmRncwXnDnoaoPVWnxvX/LtWLCatqFfL9HImo50YsvykgXi O8I0pQIfs4RMWw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:51 2025 by rpki-client