This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json) Hash identifier: EIsoP+VR61dTcWSKVnVqcGWm77Mg0V2J1lX0TjCquyQ= Subject key identifier: 82:6B:68:5D:5E:04:F9:77:15:74:FC:73:DC:C3:43:4D:BD:22:6F:A2 Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76 Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476 Certificate serial: 019AF12E3A6A5C7BFF515162FABF642EE40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: yI2CLY8EDWXbvqKT5CnBKWokyG+S1v0Dxg59eBxYqhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3a:6a:5c:7b:ff:51:51:62:fa:bf:64:2e:e4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476 Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=826b685d5e04f9771574fc73dcc3434dbd226fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:c3:e8:e6:80:a3:1c:20:c0:4f:5a:0a:6f: a6:3a:c5:3a:75:80:60:a0:1d:40:a2:af:89:9d:20: 57:73:5b:65:21:f6:ce:15:b0:86:d8:1f:ff:b1:9a: a6:d6:d9:1c:39:7d:6e:6f:3e:a5:0f:d8:2c:1c:99: 35:1c:f4:83:fc:90:20:6b:02:41:64:7a:66:32:6f: 95:64:48:0f:96:5a:88:9e:36:51:4d:55:b4:67:52: 12:fa:6e:4b:93:79:9b:6f:d7:25:14:2c:09:44:a1: bf:a4:bb:86:bc:a4:e3:8d:ea:7f:d2:3c:71:06:48: 1f:d4:25:27:6c:2c:ac:ba:b2:cb:ff:a1:eb:7a:cd: e0:4a:ae:96:d1:31:0e:4b:87:6e:59:34:cd:c5:a7: d0:ec:5c:b2:cc:c4:b2:e7:f2:9c:13:2b:92:5c:35: 9e:8a:62:34:1c:4a:82:1d:68:46:c3:b5:de:a8:08: 9d:87:77:89:e6:63:17:16:8f:85:97:b8:a3:17:79: 3c:f2:a6:20:62:69:0b:34:cb:6e:e7:c0:3a:e0:37: b1:7e:43:0c:e2:df:79:0f:0d:a2:3c:06:fd:bb:78: b1:1f:e1:b6:94:6e:97:3f:ed:5a:28:9a:53:b0:56: 11:d7:56:1f:88:7b:d9:f1:d6:0d:a2:c4:a6:be:63: a2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6B:68:5D:5E:04:F9:77:15:74:FC:73:DC:C3:43:4D:BD:22:6F:A2 X509v3 Authority Key Identifier: keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:98:c5:c8:fc:18:29:58:d7:da:86:c2:4c:23:5c:cb:7c:92: 37:a3:d9:bf:98:4f:8f:b0:6a:e9:ab:19:42:4d:ed:6b:70:df: 1d:65:4a:80:a7:0f:8b:28:56:58:c4:36:09:17:52:dc:8f:51: 7a:fa:79:23:64:89:e7:ba:42:84:97:d4:99:1a:3b:48:d3:30: 9b:20:e9:ba:7b:19:cd:32:84:56:ca:8e:42:72:b1:d4:c3:3d: c3:70:b2:ea:e0:68:57:50:29:34:94:43:22:80:a8:2f:c1:d2: 1b:70:c0:5f:2e:fb:eb:0a:89:09:14:cd:fa:77:08:60:b2:b3: b7:d6:84:cb:7a:99:99:ff:dc:93:41:a3:f6:2c:a9:58:cb:d4: 50:a5:b1:43:6b:a9:58:cb:5a:bf:59:8e:62:2e:68:06:f9:2e: 74:ad:24:7c:b8:0d:65:ac:d7:7d:93:9d:5e:37:ec:44:b6:9f: a3:69:9b:85:8c:73:7b:fa:2d:06:82:34:a8:a8:7c:8a:ec:0b: d9:72:bf:10:16:73:bd:f0:12:93:f6:b6:90:e1:c7:96:ad:a0: 1d:24:bf:44:2b:af:fb:b8:e5:83:01:43:a2:35:77:24:59:30: 42:b2:5d:13:d0:5f:8c:f4:58:90:24:e2:c4:c0:ee:9e:8d:22: 17:f7:f1:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjpqXHv/UVFi+r9kLuQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmM2YTk1NGVkMDA1MjExNmNhMjllZTBmY2Y1NWY3NTJk OGU0NzYwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD Eyg4MjZiNjg1ZDVlMDRmOTc3MTU3NGZjNzNkY2MzNDM0ZGJkMjI2ZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBTD6OaAoxwgwE9aCm+mOsU6dYBg oB1Aoq+JnSBXc1tlIfbOFbCG2B//sZqm1tkcOX1ubz6lD9gsHJk1HPSD/JAgawJB ZHpmMm+VZEgPllqInjZRTVW0Z1IS+m5Lk3mbb9clFCwJRKG/pLuGvKTjjep/0jxx Bkgf1CUnbCysurLL/6Hres3gSq6W0TEOS4duWTTNxafQ7FyyzMSy5/KcEyuSXDWe imI0HEqCHWhGw7XeqAidh3eJ5mMXFo+Fl7ijF3k88qYgYmkLNMtu58A64DexfkMM 4t95Dw2iPAb9u3ixH+G2lG6XP+1aKJpTsFYR11YfiHvZ8dYNosSmvmOihwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJraF1eBPl3FXT8c9zDQ029Im+iMB8GA1UdIwQY MBaAFI4sapVO0AUhFsop7g/PVfdS2OR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iMmU1NmMtZWVjNy00MDZiLTk1MTYt MzRlOGE5Y2RmMjE4LzEvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iMmU1NmMtZWVjNy00MDZiLTk1MTYtMzRlOGE5Y2RmMjE4 LzEvaml4cWxVN1FCU0VXeWludUQ4OVY5MUxZNUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZjFyPwY KVjX2obCTCNcy3ySN6PZv5hPj7Bq6asZQk3ta3DfHWVKgKcPiyhWWMQ2CRdS3I9R evp5I2SJ57pChJfUmRo7SNMwmyDpunsZzTKEVsqOQnKx1MM9w3Cy6uBoV1ApNJRD IoCoL8HSG3DAXy776wqJCRTN+ncIYLKzt9aEy3qZmf/ck0Gj9iypWMvUUKWxQ2up WMtav1mOYi5oBvkudK0kfLgNZazXfZOdXjfsRLafo2mbhYxze/otBoI0qKh8iuwL 2XK/EBZzvfASk/a2kOHHlq2gHSS/RCuv+7jlgwFDojV3JFkwQrJdE9BfjPRYkCTi xMDuno0iF/fxRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:29 2025 by rpki-client