This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json) Hash identifier: 4ycHWzih/h1M5v+7r5Fxk0Oi2ovdWoujkdBwnQfQVoY= Subject key identifier: EE:19:95:B1:D5:1B:6D:62:0C:88:44:49:DF:9C:56:1E:F5:2C:9E:B8 Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58 Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58 Certificate serial: 019AF209927111673FD793E574094F5D71C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft Manifest number: 0157 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: qb7gkxVbsBgbq4BLsDxrXsXb75OIB4J6fmajfAlbQDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:92:71:11:67:3f:d7:93:e5:74:09:4f:5d:71:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=ee1995b1d51b6d620c884449df9c561ef52c9eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:9a:b3:d7:4d:56:ea:e0:6c:50:5c:2f:4f: 57:70:43:0d:2d:52:3a:39:cd:9d:64:1c:21:79:b9: 52:03:75:8c:3c:c9:f0:c4:c6:44:fa:1c:af:13:a0: 20:c0:83:28:d5:d0:a4:ae:d3:7f:af:e9:79:ca:85: 47:3e:19:8a:11:dc:b3:7d:ff:0c:68:f3:52:eb:e3: b2:0c:a2:92:4e:83:a7:92:92:f3:d0:74:5d:f7:87: 1f:08:36:f8:f2:f6:ef:95:d0:40:f6:08:40:57:43: 20:f5:a5:1d:52:c0:bc:62:89:82:17:3e:da:f8:2c: 85:39:74:f7:5e:cc:c1:b7:0d:e8:fd:ca:3e:fb:0b: 2d:47:43:ba:01:66:fa:b2:7b:08:24:4d:50:db:74: 3a:e7:3f:89:d3:34:b0:83:84:e5:84:64:f3:93:b6: 26:fb:d4:17:95:8c:86:b7:b4:dc:25:de:11:07:5d: 42:ca:62:84:a4:b5:e9:8d:6c:08:47:2c:64:d3:9a: af:7d:ee:0c:67:ef:c2:29:b2:e5:e1:b6:9d:12:06: 30:a9:29:53:25:50:3d:32:69:c3:cb:c0:bf:e8:a7: 81:e8:07:e8:90:65:0c:57:9e:7a:2c:66:44:80:ba: fe:6e:52:b7:ad:d9:4e:f3:62:21:b1:be:1d:c4:df: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:19:95:B1:D5:1B:6D:62:0C:88:44:49:DF:9C:56:1E:F5:2C:9E:B8 X509v3 Authority Key Identifier: keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:81:3c:71:b9:ef:af:aa:54:11:3b:f9:d4:01:cb:df:88:69: 0c:f8:e5:8f:ce:fd:6f:48:08:d4:18:40:a5:01:38:67:ad:2e: 71:b1:f4:92:2a:ab:c2:d2:92:79:aa:fa:54:e3:8a:dc:6b:6b: 49:31:2a:b7:47:2d:30:9f:1b:b8:c3:2e:22:13:1c:56:2d:45: cc:06:fb:af:f5:cc:b9:06:16:bb:66:79:a5:e3:df:f4:98:8f: fa:54:1c:fa:f7:72:55:d8:c9:f0:86:08:31:bb:ed:4d:15:75: 1f:0d:f9:6b:5f:fd:94:1e:05:7c:8b:9d:97:1e:02:b7:09:52: 06:12:85:fe:b1:83:7c:6d:45:4b:a3:d8:c8:a0:2a:d0:17:53: cf:64:41:ff:e1:e2:ee:69:77:3e:91:f7:62:8e:8b:f0:8a:4c: 4f:01:f9:29:72:e6:53:a8:8f:a6:3e:f2:32:0b:0b:3a:30:09: 83:6a:39:eb:6d:fb:1d:9d:25:48:16:2b:83:12:9b:d0:f1:2c: 9b:ed:f3:a1:5c:2b:20:3c:e5:4b:06:65:f7:93:5e:1a:a5:cc: 43:29:bf:ae:00:22:88:81:43:23:25:43:38:0b:12:dc:0e:72: 4b:d3:81:21:53:32:c6:cc:b5:d7:37:de:a8:fb:bb:56:cc:86: db:b5:75:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZJxEWc/15PldAlPXXHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWI1OThjMWIyYjk3YTBlM2E5YWE2MDkzODAzMDkyY2Ex YjdiNTgwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD EyhlZTE5OTViMWQ1MWI2ZDYyMGM4ODQ0NDlkZjljNTYxZWY1MmM5ZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rCas9dNVurgbFBcL09XcEMNLVI6 Oc2dZBwheblSA3WMPMnwxMZE+hyvE6AgwIMo1dCkrtN/r+l5yoVHPhmKEdyzff8M aPNS6+OyDKKSToOnkpLz0HRd94cfCDb48vbvldBA9ghAV0Mg9aUdUsC8YomCFz7a +CyFOXT3XszBtw3o/co++wstR0O6AWb6snsIJE1Q23Q65z+J0zSwg4TlhGTzk7Ym +9QXlYyGt7TcJd4RB11CymKEpLXpjWwIRyxk05qvfe4MZ+/CKbLl4badEgYwqSlT JVA9MmnDy8C/6KeB6AfokGUMV556LGZEgLr+blK3rdlO82Ihsb4dxN+bfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4ZlbHVG21iDIhESd+cVh71LJ64MB8GA1UdIwQY MBaAFI2bWYwbK5eg46mqYJOAMJLKG3tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMt NzQ1ZWNhNmQ5NThmLzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMtNzQ1ZWNhNmQ5NThm LzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoE8cbnv r6pUETv51AHL34hpDPjlj879b0gI1BhApQE4Z60ucbH0kiqrwtKSear6VOOK3Gtr STEqt0ctMJ8buMMuIhMcVi1FzAb7r/XMuQYWu2Z5pePf9JiP+lQc+vdyVdjJ8IYI MbvtTRV1Hw35a1/9lB4FfIudlx4CtwlSBhKF/rGDfG1FS6PYyKAq0BdTz2RB/+Hi 7ml3PpH3Yo6L8IpMTwH5KXLmU6iPpj7yMgsLOjAJg2o56237HZ0lSBYrgxKb0PEs m+3zoVwrIDzlSwZl95NeGqXMQym/rgAiiIFDIyVDOAsS3A5yS9OBIVMyxsy11zfe qPu7VsyG27V1TA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:56 2025 by rpki-client