This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json) Hash identifier: 493fVtMCDlM7WmX0uiKn0BGspLD33yfmraJP/DdyDTE= Subject key identifier: 74:E8:98:6E:FF:DC:6E:62:9F:A9:CD:83:26:2D:A5:D6:D5:FD:6A:48 Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Certificate serial: 019AF19AC8EE486A955D729FC57D0F0F27DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft Manifest number: 0634 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: q6cY9pGbrUpeDY7CMzyXbGyFfx5u/SdvBVFdhEB/dxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c8:ee:48:6a:95:5d:72:9f:c5:7d:0f:0f:27:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=74e8986effdc6e629fa9cd83262da5d6d5fd6a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:f7:b0:45:77:99:04:35:41:75:dd:ab:8e: 0f:da:0c:c7:2b:74:d0:ff:6b:bd:91:cf:c5:40:e6: c8:6a:d0:24:3d:0d:c3:7a:86:48:02:eb:4b:8b:d4: 88:87:cc:7a:ec:ae:6a:bf:fd:5d:1e:0a:84:dd:35: 2d:6d:5f:21:c9:56:4b:09:bb:90:c4:85:7f:b0:62: 8d:d3:07:aa:a0:1a:9d:77:e1:65:d6:9a:ee:13:48: 00:9b:47:7d:2f:c4:9c:34:78:9a:9f:36:1b:bf:1c: 78:f9:c0:12:6e:83:da:d2:56:cf:fb:39:d9:e9:00: 05:2a:51:51:09:52:e1:04:39:15:09:86:d4:a7:ba: 13:6d:dc:bf:b3:02:1e:07:c7:f2:51:ee:a6:a9:14: 0f:85:84:07:a6:53:cd:fe:45:f3:bd:8a:92:7a:ac: c1:48:a4:98:e4:56:79:ef:aa:1b:90:13:e2:08:86: 15:5b:ba:89:a0:f6:65:ac:12:12:db:fa:81:41:db: a6:51:a8:0a:fc:ce:6e:25:5c:ac:28:86:ea:bb:dd: 0e:52:41:26:63:68:e1:0e:a2:49:e0:5d:7a:1b:9d: c4:f5:5d:0c:23:92:4b:a5:95:70:78:08:8b:54:67: 8e:2b:67:44:18:e7:7e:43:7c:19:6d:54:5a:bd:94: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:98:6E:FF:DC:6E:62:9F:A9:CD:83:26:2D:A5:D6:D5:FD:6A:48 X509v3 Authority Key Identifier: keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:78:5c:c5:e2:f9:1c:b8:fd:9c:ff:75:4d:f7:b7:c9:a9: f1:e0:8e:6a:7f:77:9d:0a:0a:2d:76:2b:3a:13:af:c6:9b:28: 91:45:f0:73:2b:58:36:da:84:cd:f0:af:af:1e:e2:3c:c6:93: aa:43:7a:1a:d9:80:03:0f:25:4b:c2:87:8e:e6:5d:1e:bd:2f: a1:35:3f:ad:e3:a6:45:70:7e:75:58:0d:40:2c:c3:e5:5d:3c: 93:fe:7d:71:13:58:9e:be:a7:fe:29:9b:20:bf:a1:16:77:a3: 48:81:df:ca:90:8a:65:19:dc:2c:d9:09:19:4d:5c:64:66:5e: 82:83:c7:a3:23:a8:0c:06:31:5a:5c:a8:2d:dc:80:24:69:40: 97:a4:9b:e7:3c:33:a1:d6:6f:c5:19:a0:f9:9b:1c:eb:d3:15: 09:52:35:91:60:25:ad:43:4f:4f:cd:a7:05:be:e5:d5:d4:7d: 86:2f:18:c5:e0:e8:38:45:c9:f9:59:03:5e:ee:43:07:23:d2: 67:41:cc:3f:ad:a0:ff:b7:77:eb:27:85:76:e4:6c:b2:8d:73: d5:99:d5:31:46:0a:3c:03:9e:02:97:ad:73:ce:e1:e3:2c:8e: a5:1f:5a:13:87:75:ba:38:30:0d:73:74:c9:95:7d:2d:ff:2e: 68:0b:d5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsjuSGqVXXKfxX0PDyfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGI0NTc2M2VmMGExOTYyOTNiMzM4MGM4ODhmODNhOGM3 Y2QzNzcwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD Eyg3NGU4OTg2ZWZmZGM2ZTYyOWZhOWNkODMyNjJkYTVkNmQ1ZmQ2YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeX3sEV3mQQ1QXXdq44P2gzHK3TQ /2u9kc/FQObIatAkPQ3DeoZIAutLi9SIh8x67K5qv/1dHgqE3TUtbV8hyVZLCbuQ xIV/sGKN0weqoBqdd+Fl1pruE0gAm0d9L8ScNHianzYbvxx4+cASboPa0lbP+znZ 6QAFKlFRCVLhBDkVCYbUp7oTbdy/swIeB8fyUe6mqRQPhYQHplPN/kXzvYqSeqzB SKSY5FZ576obkBPiCIYVW7qJoPZlrBIS2/qBQdumUagK/M5uJVysKIbqu90OUkEm Y2jhDqJJ4F16G53E9V0MI5JLpZVweAiLVGeOK2dEGOd+Q3wZbVRavZQt7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTomG7/3G5in6nNgyYtpdbV/WpIMB8GA1UdIwQY MBaAFIzbRXY+8KGWKTszgMiI+DqMfNN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUt NTNkM2I5ODc0ZWRkLzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUtNTNkM2I5ODc0ZWRk LzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4l4XMXi +Ry4/Zz/dU33t8mp8eCOan93nQoKLXYrOhOvxpsokUXwcytYNtqEzfCvrx7iPMaT qkN6GtmAAw8lS8KHjuZdHr0voTU/reOmRXB+dVgNQCzD5V08k/59cRNYnr6n/imb IL+hFnejSIHfypCKZRncLNkJGU1cZGZegoPHoyOoDAYxWlyoLdyAJGlAl6Sb5zwz odZvxRmg+Zsc69MVCVI1kWAlrUNPT82nBb7l1dR9hi8YxeDoOEXJ+VkDXu5DByPS Z0HMP62g/7d36yeFduRsso1z1ZnVMUYKPAOeApetc87h4yyOpR9aE4d1ujgwDXN0 yZV9Lf8uaAvVjw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:47 2025 by rpki-client