This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json) Hash identifier: oVGzmAPDF5mcL439iedUDQmHbW5ZKr6Q6m/dVjmPiRU= Subject key identifier: 9B:5E:AE:43:E1:BA:A7:1D:82:7E:6F:DA:9F:E1:0A:9C:B2:1A:36:3D Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Certificate serial: 019AF19B007CC4F5694B1C4CF674338EFE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: K+jUPPj6OmjP36rfve9XPH71WZqHTwVHnzpbPZG2e5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:00:7c:c4:f5:69:4b:1c:4c:f6:74:33:8e:fe:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=9b5eae43e1baa71d827e6fda9fe10a9cb21a363d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:43:ca:a7:42:3f:c1:ea:90:89:cf:8b:56: 20:ce:ff:a0:65:7f:49:b2:d4:61:d1:6d:b0:30:8f: 72:2f:f6:18:d9:66:13:06:10:b5:fe:80:99:76:6f: 6a:df:01:32:d5:e0:12:38:ad:8b:00:0e:82:b5:ae: 48:df:2c:ef:20:bc:dd:8a:9b:11:7a:37:55:ce:7c: 32:e3:7b:87:bd:d9:70:5b:f9:91:b3:a9:2a:9e:28: 1c:d2:44:98:3f:61:92:90:4f:cf:7c:3a:d7:11:c9: 4f:60:11:44:b2:00:51:94:72:7b:47:c0:b4:1c:a7: 36:7c:f3:c7:a6:30:48:09:c7:f7:01:91:7f:03:8e: 99:a4:08:35:c2:43:e5:dd:d2:a9:7f:27:33:dd:a9: f3:c7:98:c3:66:37:0e:9c:0b:c5:92:74:de:49:ac: 73:51:e3:a1:46:41:bd:bf:b5:9d:02:7c:bc:a6:70: dd:91:d1:f5:68:83:42:6f:68:3e:fb:18:e3:96:1a: 47:43:8f:8c:be:cc:48:e2:c1:04:11:79:9f:db:e3: 6f:3d:61:ad:a8:1b:ee:66:a6:48:ad:18:c2:41:09: e6:42:ec:cf:db:ce:e4:ac:3a:42:f3:d9:d2:95:79: f4:69:43:8a:b4:66:47:e9:24:3e:ab:dd:20:e2:1a: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5E:AE:43:E1:BA:A7:1D:82:7E:6F:DA:9F:E1:0A:9C:B2:1A:36:3D X509v3 Authority Key Identifier: keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6a:9e:cd:91:ae:79:8f:94:71:d6:db:18:22:fb:89:7c:f0: 0d:d5:4f:1b:b2:eb:bb:f6:07:44:8b:64:86:b2:cd:f2:24:7c: a0:84:6b:6d:78:c0:f4:a5:67:9e:8b:8f:04:a3:01:a2:66:d6: f7:7e:b4:4c:0b:fb:27:bb:75:18:34:0a:0a:71:df:e7:ce:1b: 17:28:2f:bf:98:b9:50:cb:47:5c:2a:75:19:64:21:3d:e2:9f: 2c:69:96:bc:4d:1a:d6:26:e7:40:26:71:bb:9f:ad:4c:fb:0f: a1:3a:18:20:ad:ad:7f:85:b8:8b:7d:97:a6:fb:63:64:3a:b8: cb:da:9b:7d:c0:4a:3e:a8:13:52:6d:f5:81:36:e0:d3:40:e5: 0d:32:8a:3f:46:4f:33:12:3b:0f:66:8c:8b:e7:5a:cb:b1:9a: d8:b7:47:90:c9:9f:38:c5:ce:dd:a0:8a:de:9f:71:64:c1:6b: ef:c8:6b:e4:57:27:47:ad:9a:31:8f:dd:76:66:e6:8c:a4:27: 5f:4b:3f:9f:39:3d:85:5e:15:e5:df:eb:73:3f:2d:2b:2d:ca: 5f:0f:4a:50:2c:46:07:d0:73:ec:ee:c4:ab:3f:e7:94:74:1a: 79:80:cb:05:66:eb:c0:98:de:7f:4a:6b:5e:43:6d:7c:24:dc: cc:88:12:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwB8xPVpSxxM9nQzjv6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGI1MzY0N2FkNjQ1YTk0MjBmNjBiODZkNmU5Mzc1ZmNm ODVhMjcwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg5YjVlYWU0M2UxYmFhNzFkODI3ZTZmZGE5ZmUxMGE5Y2IyMWEzNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDFDyqdCP8HqkInPi1Ygzv+gZX9J stRh0W2wMI9yL/YY2WYTBhC1/oCZdm9q3wEy1eASOK2LAA6Cta5I3yzvILzdipsR ejdVznwy43uHvdlwW/mRs6kqnigc0kSYP2GSkE/PfDrXEclPYBFEsgBRlHJ7R8C0 HKc2fPPHpjBICcf3AZF/A46ZpAg1wkPl3dKpfycz3anzx5jDZjcOnAvFknTeSaxz UeOhRkG9v7WdAny8pnDdkdH1aINCb2g++xjjlhpHQ4+MvsxI4sEEEXmf2+NvPWGt qBvuZqZIrRjCQQnmQuzP287krDpC89nSlXn0aUOKtGZH6SQ+q90g4hoixQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJterkPhuqcdgn5v2p/hCpyyGjY9MB8GA1UdIwQY MBaAFCTbU2R61kWpQg9guG1uk3X8+FonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEt NDYxMDcyYmY4YWVmLzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEtNDYxMDcyYmY4YWVm LzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2qezZGu eY+UcdbbGCL7iXzwDdVPG7Lru/YHRItkhrLN8iR8oIRrbXjA9KVnnouPBKMBombW 9360TAv7J7t1GDQKCnHf584bFygvv5i5UMtHXCp1GWQhPeKfLGmWvE0a1ibnQCZx u5+tTPsPoToYIK2tf4W4i32XpvtjZDq4y9qbfcBKPqgTUm31gTbg00DlDTKKP0ZP MxI7D2aMi+day7Ga2LdHkMmfOMXO3aCK3p9xZMFr78hr5FcnR62aMY/ddmbmjKQn X0s/nzk9hV4V5d/rcz8tKy3KXw9KUCxGB9Bz7O7Eqz/nlHQaeYDLBWbrwJjef0pr XkNtfCTczIgSzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:46 2025 by rpki-client