This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json) Hash identifier: byBWdOXLQrXyqMfcqmNdkhvOff+4VSs5Xg0ujeeg14I= Subject key identifier: B6:82:E1:32:1B:82:F5:1B:65:FE:C3:BB:DA:D7:FC:A7:F5:22:B1:DD Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b Certificate serial: 019AF1D1DBD3E0059F4A63B71BFF6E836F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft Manifest number: 0849 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: Rl0Q4m6aF8MTyBlq/XVVCOkyMeiqsAizs7WSWOTrtyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:db:d3:e0:05:9f:4a:63:b7:1b:ff:6e:83:6f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=b682e1321b82f51b65fec3bbdad7fca7f522b1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:6f:15:74:f5:fc:bd:2e:51:c0:b1:33:75: e5:1f:c6:69:50:0a:a4:99:eb:49:04:04:85:66:2f: 24:3f:fe:46:19:1d:a8:2e:9d:bb:08:cb:cb:86:af: e4:01:6d:a1:2f:75:27:8f:23:64:e0:d6:68:25:71: f2:ff:5f:eb:68:41:c7:57:2d:23:bf:03:c6:fa:4b: 8b:b4:25:50:f8:97:96:f2:02:e0:7f:d3:7b:ac:c3: 22:48:bf:4c:42:bc:4d:7b:fc:e1:68:3b:e9:43:c3: 8f:00:99:ab:ba:f8:8d:eb:a1:23:fc:a1:89:3b:e2: 6c:f2:ef:8b:52:4d:cb:22:c0:af:c1:a6:8b:96:6c: be:fe:7e:ee:53:cf:be:ca:bc:6b:0d:3c:65:73:61: 2d:c0:56:e6:5e:ef:99:00:47:0e:2b:1f:56:a9:f2: b5:3c:a4:49:3c:45:d5:dc:14:8d:27:b5:e4:26:e8: 8c:fa:d3:53:98:0b:ff:98:fe:cc:08:cf:9b:cb:90: 01:79:eb:e7:be:08:2d:77:91:86:8c:96:7c:35:3f: 90:45:cf:51:bd:59:76:19:11:b4:85:48:3c:c9:3b: 43:4b:ca:37:89:21:e7:c7:7e:0c:98:5e:7f:d5:ba: 6e:93:25:35:d4:83:77:07:a8:83:6b:45:70:ad:84: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:82:E1:32:1B:82:F5:1B:65:FE:C3:BB:DA:D7:FC:A7:F5:22:B1:DD X509v3 Authority Key Identifier: keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:1f:7d:44:24:eb:75:23:6b:c3:c3:27:9c:53:90:35:70: 89:f0:30:83:ca:75:a7:c1:23:fa:60:71:c4:f2:55:7b:77:38: 78:63:4f:f7:62:ba:ca:15:3c:a8:c9:fc:f3:0a:17:15:f9:3c: a6:0f:16:e6:da:e9:40:1f:39:78:05:dc:ae:36:96:56:b6:95: 22:d7:6c:61:3d:c8:1f:f4:ff:15:ee:ca:b0:1e:f0:af:cb:a8: ee:f9:bd:e7:19:35:62:84:61:1a:fe:1c:fa:e3:22:de:c9:83: 1f:cc:5e:fa:ad:86:66:a7:d3:54:35:ed:ad:a4:ea:2f:27:0f: 0b:e3:3c:5d:32:44:ac:99:f3:00:f6:d9:24:ac:08:57:67:88: 39:1a:d5:72:7d:4f:c7:65:0c:27:3d:82:59:01:33:d6:31:23: 60:e4:69:cf:da:8b:d0:2d:cf:5d:70:ab:f2:05:4d:df:ea:b0: ff:a1:6e:2c:ee:14:df:79:60:09:b2:f2:f8:d8:16:e3:5b:e2: 1e:b5:04:33:ca:8a:24:f0:69:42:83:29:68:4a:d5:1c:cd:79: c0:ea:cf:8c:37:65:01:11:05:34:70:b8:a1:3f:4c:58:08:c6: 7e:03:11:e5:90:1a:2a:1c:69:6e:1a:6e:6c:86:81:91:5e:a1: 1f:99:3d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dvT4AWfSmO3G/9ug29tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDk5NmI3NGRjZmQxYmJiODY2ZjJlYmFkNGUxNmZkY2M5 MmI2M2IwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EyhiNjgyZTEzMjFiODJmNTFiNjVmZWMzYmJkYWQ3ZmNhN2Y1MjJiMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ZvFXT1/L0uUcCxM3XlH8ZpUAqk metJBASFZi8kP/5GGR2oLp27CMvLhq/kAW2hL3UnjyNk4NZoJXHy/1/raEHHVy0j vwPG+kuLtCVQ+JeW8gLgf9N7rMMiSL9MQrxNe/zhaDvpQ8OPAJmruviN66Ej/KGJ O+Js8u+LUk3LIsCvwaaLlmy+/n7uU8++yrxrDTxlc2EtwFbmXu+ZAEcOKx9WqfK1 PKRJPEXV3BSNJ7XkJuiM+tNTmAv/mP7MCM+by5ABeevnvggtd5GGjJZ8NT+QRc9R vVl2GRG0hUg8yTtDS8o3iSHnx34MmF5/1bpukyU11IN3B6iDa0VwrYQtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaC4TIbgvUbZf7Du9rX/Kf1IrHdMB8GA1UdIwQY MBaAFIwJlrdNz9G7uGby661OFv3MkrY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZDdlZjEtYjIyOC00MTM1LThlMzkt YjFhYzg5ZjMxZDQ2LzEvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZDdlZjEtYjIyOC00MTM1LThlMzktYjFhYzg5ZjMxZDQ2 LzEvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv8ffUQk 63Uja8PDJ5xTkDVwifAwg8p1p8Ej+mBxxPJVe3c4eGNP92K6yhU8qMn88woXFfk8 pg8W5trpQB85eAXcrjaWVraVItdsYT3IH/T/Fe7KsB7wr8uo7vm95xk1YoRhGv4c +uMi3smDH8xe+q2GZqfTVDXtraTqLycPC+M8XTJErJnzAPbZJKwIV2eIORrVcn1P x2UMJz2CWQEz1jEjYORpz9qL0C3PXXCr8gVN3+qw/6FuLO4U33lgCbLy+NgW41vi HrUEM8qKJPBpQoMpaErVHM15wOrPjDdlAREFNHC4oT9MWAjGfgMR5ZAaKhxpbhpu bIaBkV6hH5k95Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:38 2025 by rpki-client