This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json) Hash identifier: blpFbKJWSpWuDQ6+JlMA4u5KlcFShhgRjxGaPGJoKIo= Subject key identifier: 11:4E:21:FD:AE:63:16:D5:73:11:D3:D7:A8:08:BB:ED:87:47:E7:84 Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14 Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114 Certificate serial: 019B2776E1778007DE698E44DAFABD254A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft Manifest number: 06B5 Signing time: Tue 16 Dec 2025 14:01:00 +0000 Manifest this update: Tue 16 Dec 2025 14:01:00 +0000 Manifest next update: Wed 17 Dec 2025 14:01:00 +0000 Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: 7+OPa9xDv3Ak7na4eEGMwrIrO+cBTOkU5ILSfJZco8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:e1:77:80:07:de:69:8e:44:da:fa:bd:25:4a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114 Validity Not Before: Dec 16 14:01:00 2025 GMT Not After : Dec 17 14:01:00 2025 GMT Subject: CN=114e21fdae6316d57311d3d7a808bbed8747e784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:71:98:a4:82:48:ce:13:d3:f8:2b:4a:35: b3:5b:60:22:e4:f1:1e:da:e7:b9:d4:bd:82:aa:40: f6:b5:67:0a:5e:8a:d0:6f:de:a7:65:9d:fa:a7:7a: f3:cc:ea:0a:79:40:67:8e:bf:3d:39:6f:dd:e3:2e: d1:52:b1:b1:7d:e7:7d:34:9a:16:2f:84:b9:7e:d6: 60:a1:80:bb:9f:bc:c1:d7:c2:a1:00:f5:b4:a4:26: a3:dc:8c:40:d9:e2:da:e2:0c:52:26:a7:cc:1a:9a: 4e:b1:41:48:0c:09:fe:f3:2f:ea:79:18:02:09:ac: d4:2b:89:b4:84:51:7b:61:14:fe:19:c9:45:32:1a: df:6b:e1:1f:a2:84:98:30:f0:38:15:2f:4a:6f:c3: ce:71:58:46:e1:08:d9:6d:09:36:a7:53:bf:77:ee: f1:91:d5:9b:01:f7:fa:69:df:a0:1a:b1:58:d6:75: 14:97:eb:90:d0:94:35:aa:28:63:94:f9:f5:ef:a6: 70:62:2e:77:f8:13:6e:3b:e0:6b:4a:91:2d:18:a3: 40:a0:5b:ac:08:4a:a3:32:d6:de:60:32:4c:6f:e8: 77:1d:da:41:c9:92:b0:dc:42:b9:a1:c8:1c:fc:d7: c0:7b:7a:22:49:81:cb:3e:d3:43:1b:ac:48:d0:46: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:21:FD:AE:63:16:D5:73:11:D3:D7:A8:08:BB:ED:87:47:E7:84 X509v3 Authority Key Identifier: keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:22:c8:09:95:df:46:45:89:2c:3c:2f:db:07:23:45:ba:c0: 4d:a5:eb:bc:4d:49:0d:d1:59:34:45:38:23:b7:5d:97:4d:77: 40:15:b6:11:db:04:14:0a:76:72:1e:67:a7:26:46:4d:dd:9d: 85:8a:88:07:c5:00:b2:59:7e:06:d1:64:6b:e7:12:b9:a9:48: 3b:16:dc:2f:b6:f5:9b:08:b4:06:dc:08:3d:31:bb:62:0e:87: d2:b5:11:d3:6b:af:55:47:02:82:7d:18:1d:15:3e:05:a2:1f: a2:41:10:76:e2:f8:31:4e:2e:af:ae:6c:b0:24:36:72:12:3b: 90:16:da:f8:37:be:d4:8a:7b:31:19:f1:ab:c5:68:ac:59:53: 25:4b:bb:1c:13:e3:cd:af:0b:89:85:cd:48:7b:88:4f:44:48: de:b3:3b:92:0b:6a:e0:4a:8b:bc:36:92:16:1c:92:5b:6f:c9: 98:0e:ad:24:65:03:ba:df:31:80:1e:38:cd:33:ba:66:44:f4: f9:56:ac:b5:74:ab:4c:ab:9c:59:b7:73:24:9c:e5:51:99:08: 5c:11:74:38:88:46:d9:30:58:e7:10:34:f9:a8:1a:51:e8:b0: 9d:7a:05:2b:55:60:07:37:28:dc:b0:cd:88:68:2c:c7:7a:a1: c1:8c:9a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnduF3gAfeaY5E2vq9JUqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGVhZWZmNzYzNGVlOGRmZTgwNTRhZDg1ZjhhMTVlODQ3 NTkxMTQwHhcNMjUxMjE2MTQwMTAwWhcNMjUxMjE3MTQwMTAwWjAzMTEwLwYDVQQD EygxMTRlMjFmZGFlNjMxNmQ1NzMxMWQzZDdhODA4YmJlZDg3NDdlNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArilxmKSCSM4T0/grSjWzW2Ai5PEe 2ue51L2CqkD2tWcKXorQb96nZZ36p3rzzOoKeUBnjr89OW/d4y7RUrGxfed9NJoW L4S5ftZgoYC7n7zB18KhAPW0pCaj3IxA2eLa4gxSJqfMGppOsUFIDAn+8y/qeRgC CazUK4m0hFF7YRT+GclFMhrfa+EfooSYMPA4FS9Kb8POcVhG4QjZbQk2p1O/d+7x kdWbAff6ad+gGrFY1nUUl+uQ0JQ1qihjlPn176ZwYi53+BNuO+BrSpEtGKNAoFus CEqjMtbeYDJMb+h3HdpByZKw3EK5ocgc/NfAe3oiSYHLPtNDG6xI0EZtgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFOIf2uYxbVcxHT16gIu+2HR+eEMB8GA1UdIwQY MBaAFI8Orv92NO6N/oBUrYX4oV6EdZEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUt YjNiNGVlZmU3MGE1LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUtYjNiNGVlZmU3MGE1 LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyLICZXf RkWJLDwv2wcjRbrATaXrvE1JDdFZNEU4I7ddl013QBW2EdsEFAp2ch5npyZGTd2d hYqIB8UAsll+BtFka+cSualIOxbcL7b1mwi0BtwIPTG7Yg6H0rUR02uvVUcCgn0Y HRU+BaIfokEQduL4MU4ur65ssCQ2chI7kBba+De+1Ip7MRnxq8VorFlTJUu7HBPj za8LiYXNSHuIT0RI3rM7kgtq4EqLvDaSFhySW2/JmA6tJGUDut8xgB44zTO6ZkT0 +VastXSrTKucWbdzJJzlUZkIXBF0OIhG2TBY5xA0+agaUeiwnXoFK1VgBzco3LDN iGgsx3qhwYya5A== -----END CERTIFICATE-----Generated at Tue Dec 16 22:44:51 2025 by rpki-client