This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json) Hash identifier: vx/MUhjUo3toTvhFxYYWReZfzhF7KIM/MVcDix+PXlk= Subject key identifier: BF:70:74:B0:B3:A0:79:7A:77:76:45:40:3E:45:A8:52:10:CB:8D:9F Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a Certificate serial: 019AF087EE75C6DDB8C95B073662C813B88B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft Manifest number: 0857 Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: EPYAhSk66A4F+sneESurRkf8LL9Dz1VujHrfRK/tZJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ee:75:c6:dd:b8:c9:5b:07:36:62:c8:13:b8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=bf7074b0b3a0797a777645403e45a85210cb8d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:a3:42:20:3c:32:d7:26:27:65:b9:17:7e: 4f:47:de:da:21:09:f7:c3:89:c6:19:14:4c:2a:ba: dc:08:d2:ca:89:8f:12:82:15:06:07:53:58:79:bb: 50:c4:83:7d:23:aa:df:96:0c:56:b2:f9:46:c4:2a: 08:2f:a7:51:5d:c6:0a:87:1f:b1:7f:c3:81:2c:9f: d0:5d:c8:05:56:69:bf:42:5f:0f:20:9c:32:9a:0f: 13:49:4f:9a:71:5f:f2:5c:b1:f0:b0:6d:b0:94:09: 08:5b:a6:c6:df:33:0e:39:ba:ce:f3:eb:46:1c:03: a9:7e:10:93:9d:ec:e4:3c:d3:e7:79:18:80:bc:3d: 2d:05:ae:af:67:05:a1:8e:21:71:58:5c:c3:0f:d0: a9:90:12:a3:33:6c:62:b3:b6:14:dd:01:5d:86:a1: 75:69:b3:16:6e:10:da:2e:cb:5c:27:04:fa:c0:33: 73:60:2a:ca:fe:f0:81:eb:58:00:4c:b1:c2:9a:ba: 26:4a:0c:8d:73:ce:4e:2c:7f:e3:4f:b1:77:d9:bb: 82:11:fc:e3:4e:d6:a5:ab:5a:9c:58:1c:dc:a7:41: 8f:c0:32:2d:f6:a3:d3:a0:ed:d4:15:e8:73:c5:22: 12:44:19:17:e2:41:06:fa:1d:7f:4e:07:80:22:73: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:70:74:B0:B3:A0:79:7A:77:76:45:40:3E:45:A8:52:10:CB:8D:9F X509v3 Authority Key Identifier: keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2d:0b:29:d4:4c:75:2a:1e:2b:7b:ed:86:61:9d:d6:4c:bc: 53:9a:24:d4:05:15:6b:0f:7c:73:6c:94:19:40:e1:11:c2:dd: 7b:84:81:62:fd:33:19:df:30:e3:56:a6:63:33:3b:97:ab:c1: 6c:af:c8:5d:33:95:5f:31:99:73:36:81:10:1f:a5:5e:91:55: 22:c5:7d:c1:7a:01:9b:52:23:bf:b7:c8:4c:1c:bf:76:7e:44: bd:d4:13:b6:14:b9:51:93:eb:0a:24:9b:4e:02:32:55:af:69: c5:a4:e0:bc:f2:38:6a:4a:0c:06:4e:59:99:3a:4d:03:2d:a1: fb:7e:45:0d:df:8d:ab:c2:fd:b7:0a:c9:da:fc:a9:b7:58:7d: 8c:02:28:ce:74:e7:39:5d:24:0c:c2:12:0d:9f:67:91:e3:eb: 57:9d:3d:f8:ad:6a:10:a0:52:99:db:36:70:f6:76:68:34:f9: 98:5e:07:e1:48:d5:18:54:20:28:bf:2f:68:3f:59:67:f1:8e: 22:66:21:25:24:3a:63:b7:72:9f:7b:13:7d:34:b3:82:7f:29: 60:a9:34:aa:5e:d6:7c:cd:62:b5:37:de:01:7c:cb:c6:0d:b2: fb:55:f1:fe:3d:73:ff:db:87:c7:16:2a:48:92:c1:5f:d8:23: ed:35:ca:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+51xt24yVsHNmLIE7iLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODQ2NGNkN2Q1NjQ3ZGI1YTAzYjY2OWJkYzZiMGZmNzNi MGRmOGEwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD EyhiZjcwNzRiMGIzYTA3OTdhNzc3NjQ1NDAzZTQ1YTg1MjEwY2I4ZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUujQiA8MtcmJ2W5F35PR97aIQn3 w4nGGRRMKrrcCNLKiY8SghUGB1NYebtQxIN9I6rflgxWsvlGxCoIL6dRXcYKhx+x f8OBLJ/QXcgFVmm/Ql8PIJwymg8TSU+acV/yXLHwsG2wlAkIW6bG3zMOObrO8+tG HAOpfhCTnezkPNPneRiAvD0tBa6vZwWhjiFxWFzDD9CpkBKjM2xis7YU3QFdhqF1 abMWbhDaLstcJwT6wDNzYCrK/vCB61gATLHCmromSgyNc85OLH/jT7F32buCEfzj Ttalq1qcWBzcp0GPwDIt9qPToO3UFehzxSISRBkX4kEG+h1/TgeAInNjewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9wdLCzoHl6d3ZFQD5FqFIQy42fMB8GA1UdIwQY MBaAFCWEZM19VkfbWgO2ab3GsP9zsN+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQt ZDYyMzAyMmM5ZTk3LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MDQyYjYtYTg5OS00YzlmLThmZmQtZDYyMzAyMmM5ZTk3 LzEvSllSa3pYMVdSOXRhQTdacHZjYXdfM093MzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC0LKdRM dSoeK3vthmGd1ky8U5ok1AUVaw98c2yUGUDhEcLde4SBYv0zGd8w41amYzM7l6vB bK/IXTOVXzGZczaBEB+lXpFVIsV9wXoBm1Ijv7fITBy/dn5EvdQTthS5UZPrCiSb TgIyVa9pxaTgvPI4akoMBk5ZmTpNAy2h+35FDd+Nq8L9twrJ2vypt1h9jAIoznTn OV0kDMISDZ9nkePrV509+K1qEKBSmds2cPZ2aDT5mF4H4UjVGFQgKL8vaD9ZZ/GO ImYhJSQ6Y7dyn3sTfTSzgn8pYKk0ql7WfM1itTfeAXzLxg2y+1Xx/j1z/9uHxxYq SJLBX9gj7TXKkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:16 2025 by rpki-client