This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json) Hash identifier: nijrKzyjnWi67GvA6gSmJ1PoDbm5bKfOtc/C35PdYXU= Subject key identifier: 79:41:74:BB:D0:2B:BE:FD:02:37:98:CC:93:76:17:FD:15:58:E6:7D Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0 Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0 Certificate serial: 019AF50ACD289C48E3AC91C7E6E67F4D720C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft Manifest number: 105C Signing time: Sat 06 Dec 2025 19:01:56 +0000 Manifest this update: Sat 06 Dec 2025 19:01:56 +0000 Manifest next update: Sun 07 Dec 2025 19:01:56 +0000 Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: m8PQccdqxmobGO7iF6/Arc94+qzLVqbB79MEaael3Yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:cd:28:9c:48:e3:ac:91:c7:e6:e6:7f:4d:72:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0 Validity Not Before: Dec 6 19:01:56 2025 GMT Not After : Dec 7 19:01:56 2025 GMT Subject: CN=794174bbd02bbefd023798cc937617fd1558e67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:62:d3:05:55:57:7e:b0:05:df:c9:a6:f3: b6:34:61:34:ef:d0:a5:ab:08:3a:48:ec:92:91:a6: 1f:d5:65:ef:43:c4:d7:a5:05:48:05:4d:15:0f:3f: 9d:b5:25:7c:60:d1:46:42:b9:e4:2b:02:67:a0:ee: 19:60:fb:8f:dc:e6:c8:71:53:32:53:38:e6:71:a7: 65:68:88:44:38:60:41:dd:d2:ae:ad:dc:21:ee:ef: f4:a7:ae:06:aa:50:44:d8:fb:70:b0:47:0b:92:01: 66:79:dc:18:bd:79:d5:59:23:e2:91:62:ce:d1:3c: 51:3d:ff:ec:a5:03:d0:f6:fe:6e:27:d3:3b:12:41: b1:fa:42:aa:e7:d3:6a:c1:fd:04:d0:09:81:9d:e6: 43:11:c7:0b:59:5d:14:31:44:d7:df:f5:16:24:b3: 99:a2:26:35:df:a8:73:af:b3:17:36:fc:56:60:e5: 50:bc:26:62:ac:76:83:fb:90:52:cb:43:fb:cb:94: 9b:12:23:00:c1:c1:ba:1b:63:66:0b:ea:dc:cc:10: a8:45:1e:09:af:6c:fc:e5:d3:b3:5f:d0:a6:3f:04: e7:aa:d4:b2:a9:a7:27:73:29:20:e5:a3:42:c4:b2: 5e:36:6c:34:7e:b5:17:a5:49:6a:22:a0:b7:e8:9f: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:41:74:BB:D0:2B:BE:FD:02:37:98:CC:93:76:17:FD:15:58:E6:7D X509v3 Authority Key Identifier: keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c2:bb:99:57:8f:98:15:1f:ce:03:0b:56:88:8c:ee:38:42: 90:c2:a1:01:b8:1f:dc:c4:31:25:c7:2d:02:2f:9c:ec:2b:fa: 88:26:ef:7d:de:5b:1b:18:dc:c4:c8:f3:37:2c:c3:32:ec:08: 91:e2:1a:2a:f6:ae:09:e2:7c:3e:be:32:06:cf:b7:46:80:c0: a4:82:59:ac:04:bd:63:a2:0e:f0:b7:57:c7:ef:b5:f9:e0:57: f2:ad:9b:ec:03:14:df:d5:cd:15:15:74:ae:56:43:9e:27:2d: d3:25:86:ee:0d:a2:2d:82:48:1b:16:e7:29:9f:7c:0e:d6:2d: a4:41:90:42:b2:f5:89:6a:06:df:65:1f:09:8b:f7:1a:90:5c: dc:38:55:5a:c9:01:32:90:c2:b1:a4:ef:94:9c:cb:54:fd:50: b9:fd:14:92:90:3e:67:8b:14:59:24:3e:1b:e2:ed:e0:c6:2c: ae:51:6f:c0:1f:dd:36:a3:67:9a:44:8b:3b:25:a9:27:64:c4: 01:7e:f2:d9:f9:d8:19:b9:79:20:ba:15:c5:51:97:27:3d:5c: aa:9d:76:ab:c9:a4:35:d2:bc:68:6a:a5:24:1a:b8:98:19:8b: 3e:9d:64:47:64:07:ea:f2:f3:fe:85:ae:d1:87:b8:92:2b:4c: f8:e3:3c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cs0onEjjrJHH5uZ/TXIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTY2MTY5N2RhOTBiNTgwMGJjNDJhZGY5YjQ1OTUzMjE5 NzU1ZDAwHhcNMjUxMjA2MTkwMTU2WhcNMjUxMjA3MTkwMTU2WjAzMTEwLwYDVQQD Eyg3OTQxNzRiYmQwMmJiZWZkMDIzNzk4Y2M5Mzc2MTdmZDE1NThlNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eJi0wVVV36wBd/JpvO2NGE079Cl qwg6SOySkaYf1WXvQ8TXpQVIBU0VDz+dtSV8YNFGQrnkKwJnoO4ZYPuP3ObIcVMy UzjmcadlaIhEOGBB3dKurdwh7u/0p64GqlBE2PtwsEcLkgFmedwYvXnVWSPikWLO 0TxRPf/spQPQ9v5uJ9M7EkGx+kKq59Nqwf0E0AmBneZDEccLWV0UMUTX3/UWJLOZ oiY136hzr7MXNvxWYOVQvCZirHaD+5BSy0P7y5SbEiMAwcG6G2NmC+rczBCoRR4J r2z85dOzX9CmPwTnqtSyqacncykg5aNCxLJeNmw0frUXpUlqIqC36J9IhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlBdLvQK779AjeYzJN2F/0VWOZ9MB8GA1UdIwQY MBaAFI5WYWl9qQtYALxCrfm0WVMhl1XQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDIt YTFjOWQzZTVmYmJhLzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDItYTFjOWQzZTVmYmJh LzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMK7mVeP mBUfzgMLVoiM7jhCkMKhAbgf3MQxJcctAi+c7Cv6iCbvfd5bGxjcxMjzNyzDMuwI keIaKvauCeJ8Pr4yBs+3RoDApIJZrAS9Y6IO8LdXx++1+eBX8q2b7AMU39XNFRV0 rlZDnict0yWG7g2iLYJIGxbnKZ98DtYtpEGQQrL1iWoG32UfCYv3GpBc3DhVWskB MpDCsaTvlJzLVP1Quf0UkpA+Z4sUWSQ+G+Lt4MYsrlFvwB/dNqNnmkSLOyWpJ2TE AX7y2fnYGbl5ILoVxVGXJz1cqp12q8mkNdK8aGqlJBq4mBmLPp1kR2QH6vLz/oWu 0Ye4kitM+OM8TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:04 2025 by rpki-client