This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json) Hash identifier: xmHsFQoJrgqIjm72sPDZeP825gm9djY3GdAhZX2PZ5c= Subject key identifier: 0F:3A:45:EF:2E:C0:84:88:89:AE:17:F2:EE:B9:3B:C3:36:2E:D6:4A Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2 Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2 Certificate serial: 019B337B314713CD07AAC8354BFE9077589D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 22:01:09 +0000 Manifest this update: Thu 18 Dec 2025 22:01:09 +0000 Manifest next update: Fri 19 Dec 2025 22:01:09 +0000 Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: 8sVkEfbtDfJaacXIcsWQ9SyYzpjh0kITX9+VUwcjIAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:31:47:13:cd:07:aa:c8:35:4b:fe:90:77:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2 Validity Not Before: Dec 18 22:01:09 2025 GMT Not After : Dec 19 22:01:09 2025 GMT Subject: CN=0f3a45ef2ec0848889ae17f2eeb93bc3362ed64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:1d:6d:6c:8c:30:92:bc:75:4b:e7:f5:af: 2b:60:e8:fc:0d:17:cf:e7:d9:5f:71:1d:e1:9f:4e: 5a:88:a6:63:14:d4:41:e6:fc:c3:ae:02:bd:e6:2d: 72:b3:b5:5c:67:1a:8b:80:54:1d:0d:88:14:04:d2: 5c:fe:fe:2f:b3:3d:1f:7a:82:03:97:35:7f:6a:30: c5:c4:e5:2d:9c:0c:b8:41:f8:70:89:3b:e7:96:2a: fc:95:7d:c8:0e:85:16:69:5a:58:26:f4:59:7c:5a: f2:f8:ee:03:8a:62:10:e1:2a:de:ad:73:73:b9:6a: 8f:85:1a:2d:cb:1a:59:57:5d:81:78:3e:01:87:d7: 05:47:75:73:65:9b:f6:3a:fc:6d:a1:34:3a:d4:1b: 02:63:df:ce:81:e0:ab:19:86:05:2f:20:4f:18:09: 83:b1:e8:57:d1:21:f6:c7:68:85:34:42:b5:d9:c7: d7:05:da:ee:6d:94:8a:d6:a7:c0:d6:36:a6:9d:d3: 47:8a:4d:3b:f6:96:2c:b2:1a:8e:fb:01:af:be:9a: 51:a3:ff:f6:ff:14:d3:f7:63:91:a5:ca:01:a7:30: d0:66:e4:68:90:98:b8:3c:12:37:37:be:a8:0c:97: eb:94:a2:71:c2:2b:a7:33:45:8e:c6:fd:73:e0:4d: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:45:EF:2E:C0:84:88:89:AE:17:F2:EE:B9:3B:C3:36:2E:D6:4A X509v3 Authority Key Identifier: keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:63:54:b8:69:a5:c2:78:17:e1:44:63:a7:61:d6:f2:a3:b2: 53:81:49:85:ba:43:cc:fd:ec:2f:b1:c8:0b:e8:a9:60:32:6a: fc:f4:f1:67:e6:0b:0e:1b:72:1d:68:b4:5e:4d:11:f4:40:ce: a9:7d:a9:53:61:46:d4:11:d8:77:95:f0:4f:77:b2:f4:38:72: bc:e3:3e:7c:3e:e5:1a:0b:a9:8f:b2:ed:41:c7:cf:67:01:58: 4c:27:2c:ad:c9:08:df:bb:34:96:3a:a7:b8:45:16:89:20:96: c0:50:c2:c3:e2:50:39:29:5b:80:93:ab:ce:05:be:7b:2b:a8: ed:cf:58:ce:17:3e:f6:70:9e:4b:fe:b7:92:39:24:4e:e5:79: e3:7b:3d:b4:15:0c:09:72:12:55:51:b9:63:81:08:39:3f:45: e1:98:aa:e4:f3:76:5a:af:32:54:27:44:a3:2f:01:b3:37:56: e6:bd:73:c8:df:61:10:cf:a7:2e:af:31:7f:53:8f:5f:59:a9: f2:0a:5a:a4:24:db:38:6a:aa:c6:da:37:88:91:d9:0d:31:ec: 30:b3:83:92:98:81:50:cf:a8:59:a3:95:4d:67:09:03:28:4b: 8f:64:65:07:63:d1:1d:0e:f8:db:73:b0:95:98:e4:c2:d2:fe: 47:4f:3b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezFHE80Hqsg1S/6Qd1idMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGU5NzdjMWNkMmE0ZDdlYzI5MGEwMWY5YmVjMzdkZThk YzljZTIwHhcNMjUxMjE4MjIwMTA5WhcNMjUxMjE5MjIwMTA5WjAzMTEwLwYDVQQD EygwZjNhNDVlZjJlYzA4NDg4ODlhZTE3ZjJlZWI5M2JjMzM2MmVkNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr8dbWyMMJK8dUvn9a8rYOj8DRfP 59lfcR3hn05aiKZjFNRB5vzDrgK95i1ys7VcZxqLgFQdDYgUBNJc/v4vsz0feoID lzV/ajDFxOUtnAy4QfhwiTvnlir8lX3IDoUWaVpYJvRZfFry+O4DimIQ4SrerXNz uWqPhRotyxpZV12BeD4Bh9cFR3VzZZv2OvxtoTQ61BsCY9/OgeCrGYYFLyBPGAmD sehX0SH2x2iFNEK12cfXBdrubZSK1qfA1jamndNHik079pYsshqO+wGvvppRo//2 /xTT92ORpcoBpzDQZuRokJi4PBI3N76oDJfrlKJxwiunM0WOxv1z4E06xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA86Re8uwISIia4X8u65O8M2LtZKMB8GA1UdIwQY MBaAFI1Ol3wc0qTX7CkKAfm+w33o3JziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDIt M2UwNjMzMDJjYjA5LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDItM2UwNjMzMDJjYjA5 LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2NUuGml wngX4URjp2HW8qOyU4FJhbpDzP3sL7HIC+ipYDJq/PTxZ+YLDhtyHWi0Xk0R9EDO qX2pU2FG1BHYd5XwT3ey9DhyvOM+fD7lGgupj7LtQcfPZwFYTCcsrckI37s0ljqn uEUWiSCWwFDCw+JQOSlbgJOrzgW+eyuo7c9Yzhc+9nCeS/63kjkkTuV543s9tBUM CXISVVG5Y4EIOT9F4Ziq5PN2Wq8yVCdEoy8BszdW5r1zyN9hEM+nLq8xf1OPX1mp 8gpapCTbOGqqxto3iJHZDTHsMLODkpiBUM+oWaOVTWcJAyhLj2RlB2PRHQ7423Ow lZjkwtL+R0877g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:59:35 2025 by rpki-client