This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft File: jRHN6i8zL8ztMzil3x-y30Uh-OI.mft (raw, json) Hash identifier: kFLT3McW57GHPXQMb7m6qFGnZxqSKih9jzYzxsRoNmM= Subject key identifier: F5:CE:12:4F:4C:46:F7:62:5F:F4:56:D9:83:85:72:A1:57:3F:A8:22 Authority key identifier: 8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2 Certificate issuer: /CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2 Certificate serial: 019B3A9169337B47A510700E5302CEF5F362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft Manifest number: 129B Signing time: Sat 20 Dec 2025 07:02:46 +0000 Manifest this update: Sat 20 Dec 2025 07:02:46 +0000 Manifest next update: Sun 21 Dec 2025 07:02:46 +0000 Files and hashes: 1: jRHN6i8zL8ztMzil3x-y30Uh-OI.crl (hash: ljCBqBQciXPGQe2UEvKwMtjoIJEEQf6Tlkllw0cb0x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:69:33:7b:47:a5:10:70:0e:53:02:ce:f5:f3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2 Validity Not Before: Dec 20 07:02:46 2025 GMT Not After : Dec 21 07:02:46 2025 GMT Subject: CN=f5ce124f4c46f7625ff456d9838572a1573fa822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:f1:c0:b6:c5:78:dd:b9:1c:bb:04:4a:fa: bb:dd:6f:d8:19:b5:f5:4e:75:24:8e:ec:b2:c0:04: 5b:6f:c4:48:34:bf:1a:98:c6:52:72:6d:46:db:f1: b1:7d:11:29:d6:a0:a7:6b:96:53:10:6f:e7:b3:02: 9d:38:3e:86:b5:6c:5d:45:22:5a:76:3d:16:ba:05: 9a:bc:3d:65:9a:a2:78:49:4c:9f:0c:ff:20:4f:35: 12:4f:1e:12:a2:b2:3c:85:4c:1b:f4:99:23:29:c6: c1:40:c5:29:61:9a:ff:29:34:e8:18:7f:6f:7c:89: c4:27:f0:55:96:dc:e5:a8:98:3d:4a:c7:4c:41:08: d5:50:61:df:3d:40:7f:7c:fe:22:d9:60:d5:f0:12: 2d:54:f1:d8:0f:5e:ec:26:ac:df:e3:c3:54:d5:35: 2e:8f:ad:47:fe:f5:14:0c:04:1d:a9:f4:71:c8:89: 3c:db:4c:34:8e:8f:0f:a1:74:fd:0b:2b:2c:c0:00: 7a:37:de:6e:5e:55:c0:7e:2a:7f:f7:50:83:ab:92: 85:20:2c:9a:c0:de:b2:b3:00:7b:a6:10:56:4d:42: b4:79:cc:b8:80:2d:86:69:34:e7:44:08:6d:af:3a: 25:e8:70:12:fc:9f:85:f1:7a:0e:9a:2d:d8:42:18: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:12:4F:4C:46:F7:62:5F:F4:56:D9:83:85:72:A1:57:3F:A8:22 X509v3 Authority Key Identifier: keyid:8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:17:2c:e1:c3:bf:96:10:0c:e4:fe:4c:22:cd:a9:26:b5: 4e:68:a3:65:16:93:c5:3c:c3:dd:2a:4d:e4:b4:5a:4d:e5:9c: 97:6b:31:8a:4d:5f:38:78:68:c6:1c:ce:c6:a2:42:de:0d:85: ad:0e:9c:66:de:88:b7:ec:bd:f0:38:f2:b4:ed:ae:0e:1d:3b: ba:4a:8a:a5:7a:85:39:db:4e:58:ba:ae:dc:b6:01:cb:53:77: cc:51:c6:dc:e9:fa:84:04:50:e4:31:89:1c:31:17:2b:e4:5a: f6:7e:56:5f:dc:42:29:67:7f:17:a4:ec:27:31:13:fb:9f:34: cd:55:2d:0f:73:be:0a:e6:a0:75:8f:f9:37:93:78:5d:d3:ee: 3e:4c:16:38:3f:84:9a:b6:5b:6a:23:f1:59:e4:21:97:11:8d: a0:24:61:ec:e2:a0:ec:59:28:a7:1b:5f:1b:7c:61:57:97:c1: d6:91:ab:c3:25:49:5b:34:b3:7c:2a:31:bb:07:94:25:88:cd: 7b:4e:1e:81:0c:32:46:99:3f:4e:85:d0:51:16:76:2a:07:49: 4b:4b:d0:73:f4:55:6f:a7:67:a2:c8:f9:79:de:8e:21:50:bf: 44:e3:09:0b:c5:a3:5f:88:64:5c:f8:21:8d:13:38:3b:22:18: a9:f8:90:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kWkze0elEHAOUwLO9fNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjZGVhMmYzMzJmY2NlZDMzMzhhNWRmMWZiMmRmNDUy MWY4ZTIwHhcNMjUxMjIwMDcwMjQ2WhcNMjUxMjIxMDcwMjQ2WjAzMTEwLwYDVQQD EyhmNWNlMTI0ZjRjNDZmNzYyNWZmNDU2ZDk4Mzg1NzJhMTU3M2ZhODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kLxwLbFeN25HLsESvq73W/YGbX1 TnUkjuyywARbb8RINL8amMZScm1G2/GxfREp1qCna5ZTEG/nswKdOD6GtWxdRSJa dj0WugWavD1lmqJ4SUyfDP8gTzUSTx4SorI8hUwb9JkjKcbBQMUpYZr/KTToGH9v fInEJ/BVltzlqJg9SsdMQQjVUGHfPUB/fP4i2WDV8BItVPHYD17sJqzf48NU1TUu j61H/vUUDAQdqfRxyIk820w0jo8PoXT9CysswAB6N95uXlXAfip/91CDq5KFICya wN6yswB7phBWTUK0ecy4gC2GaTTnRAhtrzol6HAS/J+F8XoOmi3YQhiAlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXOEk9MRvdiX/RW2YOFcqFXP6giMB8GA1UdIwQY MBaAFI0RzeovMy/M7TM4pd8fst9FIfjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITjZpOHpMOHp0TXppbDN4LXkzMFVoLU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83ZGFkZDMtM2U1NS00NmJlLTk0ZTEt YzkwNjU4ZWJkNjk3LzEvalJITjZpOHpMOHp0TXppbDN4LXkzMFVoLU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83ZGFkZDMtM2U1NS00NmJlLTk0ZTEtYzkwNjU4ZWJkNjk3 LzEvalJITjZpOHpMOHp0TXppbDN4LXkzMFVoLU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWsXLOHD v5YQDOT+TCLNqSa1TmijZRaTxTzD3SpN5LRaTeWcl2sxik1fOHhoxhzOxqJC3g2F rQ6cZt6It+y98DjytO2uDh07ukqKpXqFOdtOWLqu3LYBy1N3zFHG3On6hARQ5DGJ HDEXK+Ra9n5WX9xCKWd/F6TsJzET+580zVUtD3O+CuagdY/5N5N4XdPuPkwWOD+E mrZbaiPxWeQhlxGNoCRh7OKg7FkopxtfG3xhV5fB1pGrwyVJWzSzfCoxuweUJYjN e04egQwyRpk/ToXQURZ2KgdJS0vQc/RVb6dnosj5ed6OIVC/ROMJC8WjX4hkXPgh jRM4OyIYqfiQgA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:13:22 2025 by rpki-client