This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json) Hash identifier: DFDK28Ni/6pjDfw/cxVop3I4g649yCmPZmact1iNb/I= Subject key identifier: 3B:15:FB:67:22:16:8F:93:12:5F:56:45:43:8A:A2:2C:45:94:02:2B Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56 Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756 Certificate serial: 019AF509D6F6681E66CFB2B817C4E83CFCFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft Manifest number: 0882 Signing time: Sat 06 Dec 2025 19:00:54 +0000 Manifest this update: Sat 06 Dec 2025 19:00:54 +0000 Manifest next update: Sun 07 Dec 2025 19:00:54 +0000 Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: ClvglkVvtusGCwsPFHbwWVncj6WglKrRDtQn82Wa/ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d6:f6:68:1e:66:cf:b2:b8:17:c4:e8:3c:fc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756 Validity Not Before: Dec 6 19:00:54 2025 GMT Not After : Dec 7 19:00:54 2025 GMT Subject: CN=3b15fb6722168f93125f5645438aa22c4594022b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:4e:5b:f9:28:9a:02:e2:98:87:3e:17:d8: 7c:0c:a9:e4:5e:1d:1d:58:4a:66:bd:f8:e1:bb:1f: 9d:91:a5:06:dd:74:ed:3f:23:fe:c3:86:60:1d:7c: 21:fe:82:50:30:51:91:f3:09:15:2b:d5:c1:53:d8: a8:2c:54:7d:d1:1a:8f:30:70:92:9f:65:95:43:d0: 8e:a6:b5:8d:83:05:c7:f6:75:b6:a6:92:84:dd:0b: 0a:e1:ec:3a:b2:8f:62:5c:b3:45:c2:fb:ec:d5:bc: 6c:9b:40:d1:d5:e5:e4:76:42:d7:61:d2:81:73:4c: d8:bc:d4:f9:07:ea:ac:7e:6b:1a:d5:81:6f:01:55: 97:52:59:23:e9:2c:4f:0c:d8:35:a8:fb:8e:87:af: 05:02:cd:ad:7b:92:58:ba:44:b4:af:5b:01:47:16: 3e:49:60:86:b9:0f:a6:f1:a2:17:b4:12:30:48:68: 2c:bd:58:75:a1:e7:50:4b:92:c6:63:ef:91:7e:53: ac:69:a9:5a:8a:da:bf:a7:09:14:df:46:3e:12:7c: bb:c9:c4:a3:cd:73:5e:6d:96:84:cc:a7:fb:d6:f3: b6:06:02:1a:f8:dd:29:d7:48:d7:cb:f3:c1:78:97: 96:d4:80:94:1e:db:88:b8:04:23:94:12:5c:b4:3f: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:FB:67:22:16:8F:93:12:5F:56:45:43:8A:A2:2C:45:94:02:2B X509v3 Authority Key Identifier: keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ec:42:47:d6:ab:f1:c1:d0:8f:f4:5a:30:f2:b6:09:3a:a7: be:9d:a1:bb:60:4c:39:15:6b:9e:d6:52:be:1e:36:48:ca:49: 08:8c:de:94:3f:95:27:cd:3c:8a:2e:f9:59:b4:0f:31:da:06: d3:a6:85:94:b8:c6:56:6f:36:9d:27:21:48:54:92:93:a6:f3: b5:17:1b:54:58:89:4a:6a:05:8d:7c:6f:81:95:c6:c7:94:fb: 8b:b2:7a:c6:94:08:14:d3:1a:8b:21:09:42:9e:5a:18:c5:f4: 18:14:08:03:7e:ac:d2:2d:c7:62:8c:2c:f7:c7:a6:32:22:6f: e2:fa:71:de:6c:0b:c9:fa:35:17:63:fe:90:c0:74:da:7f:1a: 17:29:b4:ae:a0:56:0b:8a:85:ae:18:c8:6a:44:f8:a8:ad:f2: 2e:20:5a:aa:ee:2e:3f:0c:a3:02:b5:69:a7:99:d1:d4:0d:13: f8:85:f9:04:21:b5:58:a3:07:3d:55:a8:24:bb:db:6f:d6:dd: aa:c6:b6:8e:82:2e:5f:99:68:4e:c7:b7:ca:0d:9a:a3:bf:93: 07:ca:2a:fb:10:91:fd:81:4a:ed:aa:a6:98:69:06:a1:54:51: fe:c8:e9:40:af:45:60:82:c3:d2:76:c1:26:0e:90:9c:0f:a1: 0b:2c:44:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cdb2aB5mz7K4F8ToPPz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjIyODg1YjA5NGNjYWJhNmJkY2U2ZmMzYWFmZGQ4ZmFh N2U3NTYwHhcNMjUxMjA2MTkwMDU0WhcNMjUxMjA3MTkwMDU0WjAzMTEwLwYDVQQD EygzYjE1ZmI2NzIyMTY4ZjkzMTI1ZjU2NDU0MzhhYTIyYzQ1OTQwMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YhOW/komgLimIc+F9h8DKnkXh0d WEpmvfjhux+dkaUG3XTtPyP+w4ZgHXwh/oJQMFGR8wkVK9XBU9ioLFR90RqPMHCS n2WVQ9COprWNgwXH9nW2ppKE3QsK4ew6so9iXLNFwvvs1bxsm0DR1eXkdkLXYdKB c0zYvNT5B+qsfmsa1YFvAVWXUlkj6SxPDNg1qPuOh68FAs2te5JYukS0r1sBRxY+ SWCGuQ+m8aIXtBIwSGgsvVh1oedQS5LGY++RflOsaalaitq/pwkU30Y+Eny7ycSj zXNebZaEzKf71vO2BgIa+N0p10jXy/PBeJeW1ICUHtuIuAQjlBJctD/9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsV+2ciFo+TEl9WRUOKoixFlAIrMB8GA1UdIwQY MBaAFI1iKIWwlMyrpr3Ob8Oq/dj6p+dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAt Nzg5ZDJiNWE4NmJjLzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAtNzg5ZDJiNWE4NmJj LzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuxCR9ar 8cHQj/RaMPK2CTqnvp2hu2BMORVrntZSvh42SMpJCIzelD+VJ808ii75WbQPMdoG 06aFlLjGVm82nSchSFSSk6bztRcbVFiJSmoFjXxvgZXGx5T7i7J6xpQIFNMaiyEJ Qp5aGMX0GBQIA36s0i3HYows98emMiJv4vpx3mwLyfo1F2P+kMB02n8aFym0rqBW C4qFrhjIakT4qK3yLiBaqu4uPwyjArVpp5nR1A0T+IX5BCG1WKMHPVWoJLvbb9bd qsa2joIuX5loTse3yg2ao7+TB8oq+xCR/YFK7aqmmGkGoVRR/sjpQK9FYILD0nbB Jg6QnA+hCyxEJg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:19 2025 by rpki-client