This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json) Hash identifier: 1i/1aWn2Kt0pJR6xz0SlNf/jftkyONeI5SfJvfEs6pk= Subject key identifier: 82:2A:32:E3:5A:7A:EA:02:64:90:33:69:DC:19:83:E8:EE:1D:4D:05 Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded Certificate serial: 019AF31BF6CFDC7CDADB617617FAAE5E9701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: vdX32Dp//BMwQkDW/6oMLWjE9pb53DO13Q1X3mjqd5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f6:cf:dc:7c:da:db:61:76:17:fa:ae:5e:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=822a32e35a7aea0264903369dc1983e8ee1d4d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:75:14:b5:62:d8:c7:c1:26:c7:ff:ee:56: f9:94:92:b5:56:7f:31:66:94:85:85:2b:b5:85:33: af:0c:4d:af:6c:52:bb:31:49:2d:ef:67:e7:a8:e2: 31:b1:d0:8f:39:e2:36:d2:d0:44:0e:f5:51:56:5f: 7a:fb:30:c5:3a:e7:cb:2d:c0:e4:6f:d3:cf:97:9b: 50:81:dd:53:d3:2b:46:90:ca:d2:22:3b:10:27:c1: a0:16:9b:de:79:c8:6e:a9:32:ea:20:c2:0e:5d:c5: 53:be:5f:c1:63:99:92:b3:61:23:51:db:17:04:aa: d2:d2:60:4c:a6:78:fd:4b:a9:36:b6:16:3a:34:24: 0e:00:46:26:d8:47:ad:ba:d6:62:7d:e1:7f:92:90: fc:7d:bc:40:4d:09:f3:0e:78:1a:85:3d:6a:16:93: 12:01:aa:0f:4f:95:02:0d:cc:64:0b:45:0e:f4:c5: e2:11:76:d8:9d:0a:a9:be:bb:d7:04:9a:44:bd:5d: 50:08:c6:e5:2b:c2:7b:f4:00:f7:38:7b:70:9c:d1: 64:5b:29:9f:ba:98:0a:9d:7d:ba:02:82:b3:e0:d8: ef:f9:4c:15:98:bb:06:ea:89:68:1f:1d:a7:44:36: b2:99:bb:82:cb:83:b1:79:54:e1:cc:6d:4e:0e:6c: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:32:E3:5A:7A:EA:02:64:90:33:69:DC:19:83:E8:EE:1D:4D:05 X509v3 Authority Key Identifier: keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:61:4d:6a:fb:f2:f1:07:45:4f:fc:f9:a2:04:46:dc:08:06: 3d:1b:0f:3f:c1:62:59:a9:05:f9:82:dd:d9:65:ca:c6:5c:d0: f7:69:7d:2f:d9:5e:17:71:c3:a5:95:af:6e:0b:a7:57:d8:26: e4:09:29:2e:29:ac:f0:8d:a2:7d:c8:df:9d:0c:16:14:de:d2: 88:72:f0:67:01:6a:b4:bb:89:3c:67:22:4e:0a:4f:85:cc:55: f4:1f:72:cd:26:3d:61:1e:51:c0:d0:43:0f:3c:fc:7d:d3:c0: 08:af:fe:d4:96:fc:3a:47:84:f1:75:94:39:3e:ff:b4:9d:63: f0:2e:d8:67:71:79:31:01:e7:b4:80:45:ae:2d:2d:43:e1:f6: 8b:fd:31:81:52:9e:27:49:20:50:73:69:d4:95:62:a5:5a:a5: 1e:66:6f:ae:8c:81:8c:43:3a:de:06:4d:f8:21:a0:f5:71:7b: e0:0c:e7:85:a1:cd:b6:c8:a9:da:59:14:0c:d3:73:68:89:ce: b5:b8:86:59:70:75:02:f1:2e:73:9d:85:1f:c1:9e:2a:0c:30: e2:cc:70:76:c2:4d:9c:59:5a:3b:6a:24:e6:d6:18:2b:0b:70: 38:92:5f:21:25:fb:66:7b:20:d3:cd:e4:60:8f:10:8c:b2:c0: b7:9a:98:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/bP3Hza22F2F/quXpcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZjI3YWY1ODYzMDQ1Y2ZhOGI1OGIxZTI3NzY5MmI5ZTFk MzhkZWQwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD Eyg4MjJhMzJlMzVhN2FlYTAyNjQ5MDMzNjlkYzE5ODNlOGVlMWQ0ZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysN1FLVi2MfBJsf/7lb5lJK1Vn8x ZpSFhSu1hTOvDE2vbFK7MUkt72fnqOIxsdCPOeI20tBEDvVRVl96+zDFOufLLcDk b9PPl5tQgd1T0ytGkMrSIjsQJ8GgFpveechuqTLqIMIOXcVTvl/BY5mSs2EjUdsX BKrS0mBMpnj9S6k2thY6NCQOAEYm2EetutZifeF/kpD8fbxATQnzDngahT1qFpMS AaoPT5UCDcxkC0UO9MXiEXbYnQqpvrvXBJpEvV1QCMblK8J79AD3OHtwnNFkWymf upgKnX26AoKz4Njv+UwVmLsG6oloHx2nRDaymbuCy4OxeVThzG1ODmyfkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIqMuNaeuoCZJAzadwZg+juHU0FMB8GA1UdIwQY MBaAFIzyevWGMEXPqLWLHid2krnh043tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYjdlZmItMmQ2MC00ZTY5LTllMDYt MDFjOTk2ZTBiN2U3LzEvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYjdlZmItMmQ2MC00ZTY5LTllMDYtMDFjOTk2ZTBiN2U3 LzEvalBKNjlZWXdSYy1vdFlzZUozYVN1ZUhUamUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGFNavvy 8QdFT/z5ogRG3AgGPRsPP8FiWakF+YLd2WXKxlzQ92l9L9leF3HDpZWvbgunV9gm 5AkpLims8I2ifcjfnQwWFN7SiHLwZwFqtLuJPGciTgpPhcxV9B9yzSY9YR5RwNBD Dzz8fdPACK/+1Jb8OkeE8XWUOT7/tJ1j8C7YZ3F5MQHntIBFri0tQ+H2i/0xgVKe J0kgUHNp1JVipVqlHmZvroyBjEM63gZN+CGg9XF74AznhaHNtsip2lkUDNNzaInO tbiGWXB1AvEuc52FH8GeKgww4sxwdsJNnFlaO2ok5tYYKwtwOJJfISX7Znsg083k YI8QjLLAt5qYqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:44 2025 by rpki-client