This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json) Hash identifier: WmVEEaE3ZGp3RuNj1hCkDmeHayu59v8AmIeGbRqXpKE= Subject key identifier: 74:9A:45:0C:4F:BF:B7:18:62:CA:CA:F7:5B:6C:30:AD:62:EE:94:ED Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0 Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0 Certificate serial: 019AF23FE113EB76A59220ACEA2313F850A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: C1TtG+v0W/Q5GiL0/F2n9Rv0d8fnYYIQTM38NAb7BIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e1:13:eb:76:a5:92:20:ac:ea:23:13:f8:50:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=749a450c4fbfb71862cacaf75b6c30ad62ee94ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:0f:38:29:9e:2f:52:df:7a:10:d5:58:1b: 02:fc:78:df:26:6a:f0:ee:56:32:4d:2e:e0:b1:f5: 0a:2d:52:d0:25:0b:c3:d2:fc:7e:43:20:fa:10:0c: dd:c9:91:00:1e:08:dc:23:10:51:00:7b:43:bb:74: 5c:f9:97:0d:43:76:ac:43:3f:4d:3e:36:2a:ed:16: 23:de:a5:b0:4f:f7:6b:2d:27:a1:87:3a:e4:43:91: 0d:d7:76:cf:b9:b8:87:a2:6d:d1:44:a8:04:fe:a8: 9f:ea:75:3d:27:ce:95:15:06:42:ea:fe:3b:7d:a8: d2:78:00:d4:76:cf:06:d2:b0:6b:ba:3f:f9:38:43: 7a:e4:0c:5f:b3:7b:b0:59:98:3a:bc:a6:9d:44:e1: ff:ca:4c:96:cc:0c:b8:b6:65:7d:a6:e7:b5:e9:ba: 77:46:0a:2a:66:33:8d:0f:26:03:8b:77:30:3a:e4: c7:2a:bc:49:a6:b8:66:7c:87:31:ee:e4:43:b0:22: ec:fc:55:c5:4e:41:c6:29:0f:2d:8b:39:b6:f7:f3: b8:91:68:57:ca:de:a6:d2:42:a4:27:60:75:8b:a3: e2:e6:66:41:4a:20:e3:0f:49:04:71:c3:f5:02:2e: 38:16:00:26:8a:23:63:ad:a9:bc:c1:98:b7:c8:98: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:45:0C:4F:BF:B7:18:62:CA:CA:F7:5B:6C:30:AD:62:EE:94:ED X509v3 Authority Key Identifier: keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:07:1d:1c:32:ec:7d:ce:ab:32:25:38:98:3c:39:56:80:72: a8:16:bf:27:10:bc:55:17:e0:42:f1:dd:e8:71:a0:7e:02:ec: 05:ee:33:03:91:59:18:84:a8:5b:02:93:60:78:19:97:23:6f: 44:78:fa:55:d5:83:5b:0d:d2:01:0c:a1:73:c5:d1:a4:25:24: d0:6e:1f:d9:a5:f6:a9:ab:d6:00:a5:27:4d:d7:1d:70:e2:86: 72:20:18:6e:a5:65:26:38:14:16:6b:3a:1a:c0:33:fe:12:5d: 68:cd:71:ef:dd:ac:87:32:99:67:b7:88:59:d9:6f:a9:63:53: e9:40:60:8f:64:9d:a2:62:95:93:6e:aa:c7:70:2e:58:3e:4b: d0:7d:48:32:4c:0a:9f:5d:3a:73:b7:01:aa:e5:70:2a:0f:ae: d3:18:c7:44:3f:31:7d:2e:16:fb:df:88:48:a8:52:de:87:e3: 18:3a:47:0d:2f:97:86:29:62:14:0a:7f:37:7d:cd:e5:f1:c2: 8b:83:30:45:28:17:dd:0c:89:57:a0:0a:ec:1f:56:9f:0e:65: 4b:c1:9f:65:76:0d:fc:85:f5:37:7b:63:d4:9e:8e:f1:68:70: 76:f1:d3:47:83:cc:12:4e:d6:32:a5:10:d0:c9:62:54:01:6e: 18:71:5f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+ET63alkiCs6iMT+FCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjgxMDkwYzQwMGE1NjE2NmZjODhiNGYzN2E1Y2JhZWQy MTg1ZjAwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg3NDlhNDUwYzRmYmZiNzE4NjJjYWNhZjc1YjZjMzBhZDYyZWU5NGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3gPOCmeL1LfehDVWBsC/HjfJmrw 7lYyTS7gsfUKLVLQJQvD0vx+QyD6EAzdyZEAHgjcIxBRAHtDu3Rc+ZcNQ3asQz9N PjYq7RYj3qWwT/drLSehhzrkQ5EN13bPubiHom3RRKgE/qif6nU9J86VFQZC6v47 fajSeADUds8G0rBruj/5OEN65Axfs3uwWZg6vKadROH/ykyWzAy4tmV9pue16bp3 RgoqZjONDyYDi3cwOuTHKrxJprhmfIcx7uRDsCLs/FXFTkHGKQ8tizm29/O4kWhX yt6m0kKkJ2B1i6Pi5mZBSiDjD0kEccP1Ai44FgAmiiNjram8wZi3yJhi+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSaRQxPv7cYYsrK91tsMK1i7pTtMB8GA1UdIwQY MBaAFI8oEJDEAKVhZvyItPN6XLrtIYXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTct MjA1ODk1OTYxNDkzLzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTctMjA1ODk1OTYxNDkz LzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAcdHDLs fc6rMiU4mDw5VoByqBa/JxC8VRfgQvHd6HGgfgLsBe4zA5FZGISoWwKTYHgZlyNv RHj6VdWDWw3SAQyhc8XRpCUk0G4f2aX2qavWAKUnTdcdcOKGciAYbqVlJjgUFms6 GsAz/hJdaM1x792shzKZZ7eIWdlvqWNT6UBgj2SdomKVk26qx3AuWD5L0H1IMkwK n106c7cBquVwKg+u0xjHRD8xfS4W+9+ISKhS3ofjGDpHDS+XhiliFAp/N33N5fHC i4MwRSgX3QyJV6AK7B9Wnw5lS8GfZXYN/IX1N3tj1J6O8WhwdvHTR4PMEk7WMqUQ 0MliVAFuGHFffQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:12 2025 by rpki-client