This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json) Hash identifier: CPaxucJLuimLSkDyNKfM8ZPEcZn+sBJGfhOY6GF+D4Q= Subject key identifier: 65:9D:39:FE:53:D9:BA:4B:06:72:B6:FC:ED:B1:38:47:3E:F7:E0:27 Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4 Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4 Certificate serial: 019AF19A95D65D8DCCE6BACFAB0FBA496A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft Manifest number: 11E2 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: rGcMe+DwaF5LzwK1Jz0UT1YPL8fw2QhqnJiB4B3Tchs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:d6:5d:8d:cc:e6:ba:cf:ab:0f:ba:49:6a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=659d39fe53d9ba4b0672b6fcedb138473ef7e027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:07:1b:dd:f1:66:54:8e:9e:05:8e:65:7c: a0:ed:92:7c:68:e1:0e:10:e4:75:08:b6:8e:b0:1b: f6:1e:cf:9c:a5:14:37:d9:4e:7a:e1:ba:54:d1:d3: 1e:58:8e:70:d6:b4:ee:47:51:13:92:1a:07:68:b5: 72:a1:2e:a9:7c:63:e6:3a:3f:6f:6d:08:72:92:2d: b9:2f:53:e2:8e:f6:21:76:b8:f6:f5:54:e0:71:70: 83:83:e1:2f:4c:85:12:59:60:79:01:a1:d6:4c:7e: f3:8c:84:8e:40:03:0e:77:40:99:73:95:aa:9c:34: 20:fe:37:7a:c8:84:fe:4c:d0:62:07:16:a5:46:01: 9f:8f:a2:ef:d0:8b:7c:5c:c1:55:98:f0:8b:c8:76: 93:c3:69:52:05:48:cb:67:db:84:0e:21:4e:94:de: 5f:ee:a2:bb:dc:1e:ca:39:9c:96:05:4b:80:e8:9f: b9:ec:24:9f:1a:8b:10:bf:25:b1:d0:4d:61:c0:30: 9d:ba:a0:86:c7:67:0d:e5:94:67:6d:e7:89:cc:d6: 69:11:98:86:2b:84:43:06:47:33:5e:f4:38:66:26: 75:c0:69:5c:34:6d:86:b8:8d:73:bf:ed:95:bf:90: 9f:58:73:48:44:b6:41:1a:f0:cd:11:44:a1:b6:c3: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9D:39:FE:53:D9:BA:4B:06:72:B6:FC:ED:B1:38:47:3E:F7:E0:27 X509v3 Authority Key Identifier: keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:cd:7a:7b:9c:3f:ec:90:6e:8d:73:ec:ce:0f:08:0f:12:6f: cd:d1:52:2e:e5:fe:a2:f6:a9:ae:aa:1f:43:6d:d4:9e:0a:db: 4f:e2:b4:8e:29:2f:16:2d:c7:bd:37:23:68:20:0f:dc:3a:cc: a5:37:6b:28:4b:5a:11:bd:69:54:17:bd:eb:0e:2a:e9:b7:ae: b1:7c:2d:af:89:c0:39:f3:92:65:dd:7e:9f:e6:6f:72:2c:49: 71:c2:5b:db:f0:52:30:74:76:38:9a:d6:b1:8d:e1:bb:f5:73: 36:f6:6c:dc:5a:a7:50:5b:10:de:ea:71:42:27:c4:cf:f7:81: 16:14:3b:0e:51:e3:60:a1:f7:54:fa:85:73:6c:3f:68:52:b2: 87:56:42:1e:9f:b2:3b:20:2c:e3:9f:69:ef:63:97:98:d3:aa: 58:d3:df:1b:20:e7:00:05:16:8e:5a:cc:fd:2a:6c:ad:99:b4: 70:c9:e1:04:f4:dd:d6:b9:47:55:e2:96:56:70:82:13:57:46: 85:7d:d4:8d:90:5b:f3:3b:01:a8:05:df:7c:ee:05:b3:ac:c7: 21:64:a1:78:99:d4:45:e8:95:ef:ee:41:2b:23:8b:8f:c6:98: 06:2e:0c:02:27:f9:09:1c:96:88:53:aa:51:52:45:8e:04:b7: ec:90:ed:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpXWXY3M5rrPqw+6SWoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTM0N2ViNjNkYjBlNjEyMzBjNWMzMWU5ZTE5ZGZjZTdl OTQxYzQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD Eyg2NTlkMzlmZTUzZDliYTRiMDY3MmI2ZmNlZGIxMzg0NzNlZjdlMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H8HG93xZlSOngWOZXyg7ZJ8aOEO EOR1CLaOsBv2Hs+cpRQ32U564bpU0dMeWI5w1rTuR1ETkhoHaLVyoS6pfGPmOj9v bQhyki25L1PijvYhdrj29VTgcXCDg+EvTIUSWWB5AaHWTH7zjISOQAMOd0CZc5Wq nDQg/jd6yIT+TNBiBxalRgGfj6Lv0It8XMFVmPCLyHaTw2lSBUjLZ9uEDiFOlN5f 7qK73B7KOZyWBUuA6J+57CSfGosQvyWx0E1hwDCduqCGx2cN5ZRnbeeJzNZpEZiG K4RDBkczXvQ4ZiZ1wGlcNG2GuI1zv+2Vv5CfWHNIRLZBGvDNEUShtsOlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWdOf5T2bpLBnK2/O2xOEc+9+AnMB8GA1UdIwQY MBaAFIiTR+tj2w5hIwxcMenhnfzn6UHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYt ZDVlYjYyMWZjM2FjLzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82OWRhYTctY2ZhZi00ZWY5LThmNWYtZDVlYjYyMWZjM2Fj LzEvaUpOSDYyUGJEbUVqREZ3eDZlR2RfT2ZwUWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc16e5w/ 7JBujXPszg8IDxJvzdFSLuX+ovaprqofQ23UngrbT+K0jikvFi3HvTcjaCAP3DrM pTdrKEtaEb1pVBe96w4q6beusXwtr4nAOfOSZd1+n+ZvcixJccJb2/BSMHR2OJrW sY3hu/VzNvZs3FqnUFsQ3upxQifEz/eBFhQ7DlHjYKH3VPqFc2w/aFKyh1ZCHp+y OyAs459p72OXmNOqWNPfGyDnAAUWjlrM/SpsrZm0cMnhBPTd1rlHVeKWVnCCE1dG hX3UjZBb8zsBqAXffO4Fs6zHIWSheJnUReiV7+5BKyOLj8aYBi4MAif5CRyWiFOq UVJFjgS37JDtkA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:47 2025 by rpki-client