This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json) Hash identifier: diapRePIiUf3is/jddR1uC5J5cszFmyU7BSHS6kfJLM= Subject key identifier: EB:CD:4F:79:BF:5C:5F:57:1B:68:1D:FC:3E:FF:99:00:65:69:DF:E0 Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6 Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6 Certificate serial: 019AF208A4C8E8771D461744DAC9427536D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft Manifest number: 1332 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: 8vKM1oW+ZhT33L1zp2mjAqW72g/5GtDXXxpBg72RQZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a4:c8:e8:77:1d:46:17:44:da:c9:42:75:36:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6 Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=ebcd4f79bf5c5f571b681dfc3eff99006569dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:78:d2:1e:8b:99:c2:88:82:67:3f:7d:77: 54:84:63:f8:bd:eb:d4:2a:02:4f:4d:cd:70:19:d4: a1:a5:22:a9:47:a1:2e:97:21:dc:66:fc:51:78:a8: d3:9e:31:34:53:27:df:f1:7d:26:e2:c9:4a:53:29: ac:cd:1c:6b:cd:a9:39:c8:cf:d6:20:37:a5:10:3b: c0:36:81:ab:fb:d6:52:34:96:70:2c:c9:0f:c8:49: ae:f1:5a:63:e8:0f:8a:18:c2:fe:05:b3:fd:27:4e: fc:ea:02:f9:69:9d:d1:54:0a:b7:00:6e:44:30:2a: d4:e9:5a:b3:52:c3:00:64:4e:f6:86:d4:4c:8b:35: cb:ed:b4:60:52:54:39:cc:7d:00:22:ff:80:f6:bf: b9:e2:ad:8a:c2:bb:bc:39:da:a7:37:89:45:7b:5f: 0a:f2:8e:d3:14:ea:01:08:bb:9d:89:a2:35:c3:95: da:64:85:a0:ba:d9:13:17:e6:29:20:2e:4f:89:46: c9:eb:d1:2c:74:8d:0d:1b:20:e0:82:3b:96:4e:73: bc:e9:6d:1b:fd:b2:41:21:e9:9c:c8:42:51:db:97: aa:66:4c:ea:ee:26:f3:4f:c4:d6:41:64:7d:ec:f6: 30:58:00:b1:a8:4c:1b:94:5c:a2:ad:92:01:1d:d4: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CD:4F:79:BF:5C:5F:57:1B:68:1D:FC:3E:FF:99:00:65:69:DF:E0 X509v3 Authority Key Identifier: keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8e:f3:4f:f3:12:94:84:07:30:6a:c2:ae:62:3c:61:4d:60: cb:98:a9:db:93:3d:b6:e4:05:80:ef:5e:61:88:86:2b:44:9f: dd:12:b5:77:e5:71:f2:dd:c4:da:4b:bb:8a:4e:b6:14:5b:f8: 69:b5:43:17:13:ee:c3:0e:34:80:e6:ad:68:0b:f0:3b:49:34: 4d:b4:09:be:ba:2d:68:a4:de:a0:9e:f6:77:a4:af:2d:f0:35: e5:05:94:3a:12:4e:3f:c9:21:13:3e:e8:61:a2:bc:07:d4:1b: 47:08:7c:48:ab:29:a7:a3:19:10:2a:83:ad:9d:e7:84:41:24: a7:31:af:3b:c7:1a:f9:19:28:75:9a:de:74:1e:9b:94:bf:90: d3:33:87:24:df:92:ea:3f:b9:98:54:87:fc:0b:5d:a4:99:27: cf:75:25:fe:6c:0a:7b:b8:8d:06:2a:a1:b4:9d:47:76:62:ea: 99:36:5a:f0:28:05:d2:56:e5:95:87:10:b9:72:dd:ef:65:80: 98:67:0e:a8:0c:9f:c8:25:72:1c:18:07:32:3e:16:f9:82:b7: 27:b5:5f:9c:6c:b5:72:b4:3f:a0:31:cc:67:3a:c9:d4:71:17: 3d:e3:d4:41:81:9c:62:b6:2a:37:9a:a8:f9:87:54:2f:e3:56: bf:9c:64:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKTI6HcdRhdE2slCdTbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm NmViYjYwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhlYmNkNGY3OWJmNWM1ZjU3MWI2ODFkZmMzZWZmOTkwMDY1NjlkZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqex40h6LmcKIgmc/fXdUhGP4vevU KgJPTc1wGdShpSKpR6EulyHcZvxReKjTnjE0Uyff8X0m4slKUymszRxrzak5yM/W IDelEDvANoGr+9ZSNJZwLMkPyEmu8Vpj6A+KGML+BbP9J0786gL5aZ3RVAq3AG5E MCrU6VqzUsMAZE72htRMizXL7bRgUlQ5zH0AIv+A9r+54q2Kwru8OdqnN4lFe18K 8o7TFOoBCLudiaI1w5XaZIWgutkTF+YpIC5PiUbJ69EsdI0NGyDggjuWTnO86W0b /bJBIemcyEJR25eqZkzq7ibzT8TWQWR97PYwWACxqEwblFyirZIBHdQcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvNT3m/XF9XG2gd/D7/mQBlad/gMB8GA1UdIwQY MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2 LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC47zT/MS lIQHMGrCrmI8YU1gy5ip25M9tuQFgO9eYYiGK0Sf3RK1d+Vx8t3E2ku7ik62FFv4 abVDFxPuww40gOataAvwO0k0TbQJvrotaKTeoJ72d6SvLfA15QWUOhJOP8khEz7o YaK8B9QbRwh8SKspp6MZECqDrZ3nhEEkpzGvO8ca+RkodZredB6blL+Q0zOHJN+S 6j+5mFSH/AtdpJknz3Ul/mwKe7iNBiqhtJ1HdmLqmTZa8CgF0lbllYcQuXLd72WA mGcOqAyfyCVyHBgHMj4W+YK3J7VfnGy1crQ/oDHMZzrJ1HEXPePUQYGcYrYqN5qo +YdUL+NWv5xkGg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:30 2025 by rpki-client