This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json) Hash identifier: iWHAhR4jJDWqsN3A5jFWUx/aLRPpdTTBPmtuHRPhwiE= Subject key identifier: BC:95:C6:9B:BC:36:45:6F:76:01:66:4E:E9:FE:5F:33:49:EC:00:7C Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab Certificate serial: 019AF12D544BC7C9C5557E3FCA7B73FFE94E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft Manifest number: 1116 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: K9hFuoOH6KAV+NYnrj7+UkH5H3138g0ytcxv7c5KkII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:54:4b:c7:c9:c5:55:7e:3f:ca:7b:73:ff:e9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=bc95c69bbc36456f7601664ee9fe5f3349ec007c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:61:ce:fb:f4:f6:00:0d:d9:66:50:12:ff: b4:66:f0:bf:f7:30:ca:48:d8:60:0a:ec:47:da:d9: 93:ec:f1:d1:78:3c:7c:68:ed:78:96:42:af:d7:08: 39:c6:b8:95:98:b6:9b:dc:31:34:0d:04:12:48:c7: 87:f6:b1:90:24:8b:79:c6:63:50:d2:ea:9a:79:14: f2:5e:f2:eb:57:0b:e2:7a:e7:c0:91:82:a4:76:df: 03:9e:dd:74:0e:46:fd:e5:05:de:ac:e6:56:a5:69: 18:84:31:dc:fb:10:18:cd:d5:57:c6:12:03:a7:22: c2:61:61:02:68:cc:87:f2:89:30:46:6f:dc:b1:48: c1:81:36:15:00:ae:6c:f5:a9:a9:42:9d:fa:38:0a: 34:ee:b8:3d:76:01:90:38:cd:2f:2c:bf:de:5e:ee: c9:62:0b:99:73:95:67:67:7c:5c:b3:72:05:0b:f9: 5e:a8:e5:a2:d2:a9:40:14:5b:55:ae:4f:a1:b4:a2: 71:ab:6c:d8:b5:e1:bd:aa:85:b1:57:e8:d2:4f:92: 9c:4f:f5:0c:1e:38:db:56:b6:39:22:3e:24:44:95: f1:0a:f2:d3:42:6f:9c:e0:72:7f:14:2e:31:33:a8: 23:16:72:6e:5f:45:df:fa:9e:d8:16:7e:88:b4:35: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:95:C6:9B:BC:36:45:6F:76:01:66:4E:E9:FE:5F:33:49:EC:00:7C X509v3 Authority Key Identifier: keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d3:11:16:37:61:6c:5e:0d:dc:62:07:2e:1e:c3:cd:52:fa: 7e:af:5d:e9:84:10:59:4e:fd:15:8e:ff:9a:f8:ff:7b:b9:ac: b2:b9:22:68:0f:a6:de:f9:99:2c:22:a2:d4:a4:1c:71:05:f4: a8:cf:59:54:8a:41:d4:22:e5:aa:b5:5a:a0:21:5a:c7:9c:2b: 92:24:8f:c3:2f:87:44:31:7f:d8:2f:09:a9:c1:82:ed:9c:cf: 4a:f9:5b:0b:29:d0:7d:7a:e7:1e:fa:39:80:94:67:da:85:30: 12:ca:52:cc:1e:3f:36:cb:ea:bf:1d:88:19:a6:c9:8f:b2:87: ab:cc:94:b3:17:fa:32:9d:44:44:c4:b7:0b:88:ad:b0:8c:6d: 39:fb:b0:01:9b:73:d2:a1:f6:6b:16:94:02:e9:8f:f7:ed:e6: 1b:ff:3e:4c:cd:65:d3:9b:33:7d:87:da:7f:e3:cb:e2:79:a1: dd:da:e0:39:85:67:a6:3b:56:b2:7c:ff:54:b7:46:a3:cd:e5: 16:d9:fd:bb:a6:a7:a7:95:86:fc:0a:83:2c:8c:87:ea:6f:83: e6:1b:15:8c:b2:5c:ec:30:6f:96:9e:07:0f:e7:7d:b7:d4:64: b8:98:f4:89:ef:f8:1a:65:d8:91:9c:55:ab:d8:08:75:ca:b9: c8:9d:78:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVRLx8nFVX4/yntz/+lOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWQ5Mjc3YmE5MTgxOWViNzM0OTI0YzEyNWY4NzZhNDE2 NTllYWIwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EyhiYzk1YzY5YmJjMzY0NTZmNzYwMTY2NGVlOWZlNWYzMzQ5ZWMwMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvphzvv09gAN2WZQEv+0ZvC/9zDK SNhgCuxH2tmT7PHReDx8aO14lkKv1wg5xriVmLab3DE0DQQSSMeH9rGQJIt5xmNQ 0uqaeRTyXvLrVwvieufAkYKkdt8Dnt10Dkb95QXerOZWpWkYhDHc+xAYzdVXxhID pyLCYWECaMyH8okwRm/csUjBgTYVAK5s9ampQp36OAo07rg9dgGQOM0vLL/eXu7J YguZc5VnZ3xcs3IFC/leqOWi0qlAFFtVrk+htKJxq2zYteG9qoWxV+jST5KcT/UM HjjbVrY5Ij4kRJXxCvLTQm+c4HJ/FC4xM6gjFnJuX0Xf+p7YFn6ItDWj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyVxpu8NkVvdgFmTun+XzNJ7AB8MB8GA1UdIwQY MBaAFI2tkne6kYGetzSSTBJfh2pBZZ6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDIt OTE0OWQzNDhhNmM3LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDItOTE0OWQzNDhhNmM3 LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatMRFjdh bF4N3GIHLh7DzVL6fq9d6YQQWU79FY7/mvj/e7mssrkiaA+m3vmZLCKi1KQccQX0 qM9ZVIpB1CLlqrVaoCFax5wrkiSPwy+HRDF/2C8JqcGC7ZzPSvlbCynQfXrnHvo5 gJRn2oUwEspSzB4/Nsvqvx2IGabJj7KHq8yUsxf6Mp1ERMS3C4itsIxtOfuwAZtz 0qH2axaUAumP9+3mG/8+TM1l05szfYfaf+PL4nmh3drgOYVnpjtWsnz/VLdGo83l Ftn9u6anp5WG/AqDLIyH6m+D5hsVjLJc7DBvlp4HD+d9t9RkuJj0ie/4GmXYkZxV q9gIdcq5yJ14xA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:55 2025 by rpki-client