This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json) Hash identifier: JvWO3cTPUunvPxoxx26stbmBjdWaRXfTQR3WbqADjss= Subject key identifier: D7:EA:1F:E5:85:E1:9E:7C:9A:8C:EA:EB:06:5B:AF:15:9F:72:E9:88 Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25 Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25 Certificate serial: 019B31C395DD4CE4290B4DBA5624462487FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 14:01:00 +0000 Manifest this update: Thu 18 Dec 2025 14:01:00 +0000 Manifest next update: Fri 19 Dec 2025 14:01:00 +0000 Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: 6V0950VK7CjH1qiYUl52RUReTkrvbzPDooQ+WlczITA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:95:dd:4c:e4:29:0b:4d:ba:56:24:46:24:87:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25 Validity Not Before: Dec 18 14:01:00 2025 GMT Not After : Dec 19 14:01:00 2025 GMT Subject: CN=d7ea1fe585e19e7c9a8ceaeb065baf159f72e988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:7c:d8:b1:68:b2:b6:03:19:ab:78:62:b2: 24:c2:2e:03:fb:03:d3:0d:04:33:e2:a5:af:b3:f2: 87:35:5f:f4:c6:87:7a:2c:ed:b5:0a:58:86:a2:a9: 8d:05:79:89:8b:8c:ec:2c:96:53:d8:77:55:f7:5b: 04:c6:c5:cd:b0:af:25:07:2b:37:71:b5:c1:46:14: 7d:d7:66:41:be:59:f2:7e:97:0c:6f:f3:b7:3c:ff: 5b:6e:bd:cb:5d:b7:4f:88:df:9e:36:20:f4:aa:0e: cb:ec:c7:b9:8c:43:05:66:68:42:36:d3:51:e0:6e: 0d:8a:d8:6f:e3:a1:a2:6e:a7:73:41:fa:f5:36:b2: a5:21:34:f3:6f:39:16:21:0f:7c:7a:d7:a8:a2:39: 38:01:65:1a:2c:2d:78:2e:ef:94:e8:4d:08:e8:88: cb:46:da:bb:18:1d:e1:9e:48:3e:3e:76:e2:8f:8d: 28:ca:1a:a8:e7:ba:c3:1b:8a:06:18:bd:4e:e1:f2: b8:69:e2:5d:af:a4:e3:8a:ee:e9:ec:39:14:01:f5: 94:71:30:1d:51:e6:3f:62:0d:15:4b:57:06:93:ec: de:a4:6f:06:c7:c2:d9:14:6f:7f:64:4f:9c:9c:13: 56:e1:d8:99:91:c3:ee:13:8e:b9:eb:e4:8d:cd:ad: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:1F:E5:85:E1:9E:7C:9A:8C:EA:EB:06:5B:AF:15:9F:72:E9:88 X509v3 Authority Key Identifier: keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a9:6e:c2:4d:be:cf:20:99:be:b8:cc:17:bf:bc:56:3b:26: 22:23:44:e7:f2:bf:5b:89:54:a1:96:98:ed:8b:78:a8:28:22: 6a:aa:4a:8e:35:4d:30:8a:e3:92:59:f6:da:19:a9:28:76:f5: a0:63:a8:1e:51:ea:9f:45:2a:a2:67:4b:e6:b6:79:4c:90:72: 25:45:29:a6:9c:14:4a:49:2f:13:eb:89:c7:f1:3f:ee:38:f9: a3:62:70:24:03:9c:51:eb:8b:4b:a6:4e:81:af:43:dc:82:a6: 79:9d:73:a4:f3:1b:d9:a5:4a:f2:ee:1d:17:3d:b9:02:1a:9f: 7f:f1:95:f2:79:32:7d:27:5a:82:c2:2d:d5:56:35:68:8f:30: 47:55:32:4b:0d:6c:f5:a2:9e:72:35:d6:14:14:6f:84:8e:9d: bf:c1:10:e3:54:62:a3:db:d3:90:d6:35:98:64:f9:b8:a5:c1: 95:a0:a9:00:31:1d:0c:8b:dc:bd:36:fd:10:76:48:70:d6:63: 1e:b4:3c:8f:51:15:6b:46:a4:6f:5b:8e:70:f8:19:a7:6b:e9: f2:2d:b7:b9:d6:ce:40:f0:2d:4a:bd:b6:9e:e5:cb:f2:75:3e: eb:22:2c:e9:52:47:e8:3c:19:cb:b1:3c:c6:c2:c7:97:43:4f: cd:dd:9c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5XdTOQpC026ViRGJIf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDlmNGE0Y2Q4MjkzNDQ1MTlmNDUyYTNiMGUxZTY2ZmU4 ZDNlMjUwHhcNMjUxMjE4MTQwMTAwWhcNMjUxMjE5MTQwMTAwWjAzMTEwLwYDVQQD EyhkN2VhMWZlNTg1ZTE5ZTdjOWE4Y2VhZWIwNjViYWYxNTlmNzJlOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVx82LFosrYDGat4YrIkwi4D+wPT DQQz4qWvs/KHNV/0xod6LO21CliGoqmNBXmJi4zsLJZT2HdV91sExsXNsK8lBys3 cbXBRhR912ZBvlnyfpcMb/O3PP9bbr3LXbdPiN+eNiD0qg7L7Me5jEMFZmhCNtNR 4G4Nithv46GibqdzQfr1NrKlITTzbzkWIQ98eteoojk4AWUaLC14Lu+U6E0I6IjL Rtq7GB3hnkg+Pnbij40oyhqo57rDG4oGGL1O4fK4aeJdr6Tjiu7p7DkUAfWUcTAd UeY/Yg0VS1cGk+zepG8Gx8LZFG9/ZE+cnBNW4diZkcPuE4656+SNza1SdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfqH+WF4Z58mozq6wZbrxWfcumIMB8GA1UdIwQY MBaAFI9J9KTNgpNEUZ9FKjsOHmb+jT4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgt MTQwYWFkYTU0YjYxLzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgtMTQwYWFkYTU0YjYx LzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKluwk2+ zyCZvrjMF7+8VjsmIiNE5/K/W4lUoZaY7Yt4qCgiaqpKjjVNMIrjkln22hmpKHb1 oGOoHlHqn0UqomdL5rZ5TJByJUUpppwUSkkvE+uJx/E/7jj5o2JwJAOcUeuLS6ZO ga9D3IKmeZ1zpPMb2aVK8u4dFz25Ahqff/GV8nkyfSdagsIt1VY1aI8wR1UySw1s 9aKecjXWFBRvhI6dv8EQ41Rio9vTkNY1mGT5uKXBlaCpADEdDIvcvTb9EHZIcNZj HrQ8j1EVa0akb1uOcPgZp2vp8i23udbOQPAtSr22nuXL8nU+6yIs6VJH6DwZy7E8 xsLHl0NPzd2cLQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:48 2025 by rpki-client