This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json) Hash identifier: xhsGYrv3A+rHB6Hk7zZ0OjaIjmDz6P/GpLMrj5nPvms= Subject key identifier: 84:5D:5B:59:23:38:AF:09:32:82:8E:61:00:8A:06:E5:5B:3D:47:C9 Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2 Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2 Certificate serial: 019AF1D185615BA19ACA3A4E6505F81A51CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: WKCHF7BzPU9++Ga5YL8DmXAaa/DoM1T3jHgqcOAtUMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:85:61:5b:a1:9a:ca:3a:4e:65:05:f8:1a:51:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=845d5b592338af0932828e61008a06e55b3d47c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:63:2f:ce:60:8d:2a:a6:33:5b:3f:d8:a6: 98:ed:1e:d8:05:22:05:8b:91:65:f6:88:57:5d:45: e7:73:c5:a5:f1:77:85:ed:1e:17:51:3f:a8:0d:4c: 9c:37:82:37:32:f8:a2:60:69:c6:fe:64:76:ab:de: c1:51:44:5e:7f:10:65:d4:cd:14:4e:b6:f9:2c:73: cd:52:c8:e4:c8:d5:c6:e1:9e:1a:6c:27:eb:ff:ab: a7:8d:51:1c:89:b1:9c:a8:7a:96:e6:fe:4b:33:33: a3:a4:88:51:24:bb:73:56:e0:aa:32:2e:f0:f8:7d: 30:85:17:4b:08:c9:6d:c1:a9:ea:55:f1:e3:15:04: ed:ee:70:dd:e6:e4:8f:80:4e:23:0c:56:b9:1d:a5: 98:41:c8:20:53:8a:a0:e6:41:bf:02:8b:dd:c8:9a: 10:c7:b6:8a:bc:2d:80:8d:26:8b:e2:6b:d4:ef:9c: 58:09:8d:03:73:8a:38:7c:86:a6:80:8c:7f:34:3d: f1:f9:64:32:24:36:5d:ab:fa:53:15:33:c4:02:cf: be:00:a3:c7:11:8b:5d:a5:46:f5:cc:9b:0b:19:97: 3e:43:3b:34:3f:ab:5a:41:62:4f:b3:d2:df:4c:c1: dd:f0:dd:04:49:4e:48:4e:2e:54:73:42:54:8b:c4: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:5B:59:23:38:AF:09:32:82:8E:61:00:8A:06:E5:5B:3D:47:C9 X509v3 Authority Key Identifier: keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:35:f1:b2:0e:4a:44:b6:64:5e:ea:19:e0:bb:9c:9e:79:0f: 5b:b5:2a:70:6f:fd:01:b7:50:fe:a2:54:c7:93:96:cf:de:dc: 7f:70:19:07:f4:12:7d:2a:ad:76:00:9a:a1:63:0f:cf:fd:f9: 06:6f:57:cf:7a:99:a6:9d:42:c1:ed:21:f2:a9:f0:ec:79:c4: 73:48:0e:23:6b:64:51:e1:ae:90:aa:46:6c:0a:49:b4:95:42: 39:4c:a9:0c:07:a2:23:ec:71:80:1f:f7:49:f0:b9:de:28:46: 36:4a:f7:0b:ed:86:b4:03:24:64:66:fc:0a:0b:ac:03:d1:4c: b6:b4:30:34:95:68:d4:4c:f5:ca:9b:07:ef:f5:ed:39:ca:9c: f4:c6:c0:ae:5e:71:cb:dd:9e:71:97:29:35:eb:77:9e:05:dd: 55:e5:2e:41:3e:78:e6:fc:98:12:b1:86:3b:ef:dc:b9:9e:09: 47:12:78:0b:be:34:80:45:31:7d:1d:f5:8f:f1:5a:1d:9c:3c: 7a:e5:dc:f2:62:82:c8:2b:5f:f1:ad:d9:a2:f2:17:90:ae:e7: 6f:50:fe:67:38:d4:ce:ba:f3:c5:ed:d0:43:41:4f:7e:b0:59: 73:03:82:aa:fd:d0:da:70:d2:a7:35:1f:9b:90:7f:24:59:24: 37:64:b9:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YVhW6GayjpOZQX4GlHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGU5NzdjMWNkMmE0ZDdlYzI5MGEwMWY5YmVjMzdkZThk YzljZTIwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg4NDVkNWI1OTIzMzhhZjA5MzI4MjhlNjEwMDhhMDZlNTViM2Q0N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJjL85gjSqmM1s/2KaY7R7YBSIF i5Fl9ohXXUXnc8Wl8XeF7R4XUT+oDUycN4I3MviiYGnG/mR2q97BUURefxBl1M0U Trb5LHPNUsjkyNXG4Z4abCfr/6unjVEcibGcqHqW5v5LMzOjpIhRJLtzVuCqMi7w +H0whRdLCMltwanqVfHjFQTt7nDd5uSPgE4jDFa5HaWYQcggU4qg5kG/AovdyJoQ x7aKvC2AjSaL4mvU75xYCY0Dc4o4fIamgIx/ND3x+WQyJDZdq/pTFTPEAs++AKPH EYtdpUb1zJsLGZc+Qzs0P6taQWJPs9LfTMHd8N0ESU5ITi5Uc0JUi8S/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRdW1kjOK8JMoKOYQCKBuVbPUfJMB8GA1UdIwQY MBaAFI1Ol3wc0qTX7CkKAfm+w33o3JziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDIt M2UwNjMzMDJjYjA5LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDItM2UwNjMzMDJjYjA5 LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDXxsg5K RLZkXuoZ4LucnnkPW7UqcG/9AbdQ/qJUx5OWz97cf3AZB/QSfSqtdgCaoWMPz/35 Bm9Xz3qZpp1Cwe0h8qnw7HnEc0gOI2tkUeGukKpGbApJtJVCOUypDAeiI+xxgB/3 SfC53ihGNkr3C+2GtAMkZGb8CgusA9FMtrQwNJVo1Ez1ypsH7/XtOcqc9MbArl5x y92ecZcpNet3ngXdVeUuQT545vyYErGGO+/cuZ4JRxJ4C740gEUxfR31j/FaHZw8 euXc8mKCyCtf8a3ZovIXkK7nb1D+ZzjUzrrzxe3QQ0FPfrBZcwOCqv3Q2nDSpzUf m5B/JFkkN2S5fw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:11 2025 by rpki-client