This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json) Hash identifier: 22aOYkSeFOtEv5K+jD/oWLBWm1i08OldGXuakM2k85M= Subject key identifier: 06:1D:2D:42:8D:41:F6:52:3D:BF:19:F0:35:E0:4E:BF:E8:A9:1D:22 Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25 Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25 Certificate serial: 019AF208FE6EDE70EC43DCC1B32830904360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: H0ywFMNRnSf0wBYVP1aVdpmYoXdd4b+7uJ7fmPxuCxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fe:6e:de:70:ec:43:dc:c1:b3:28:30:90:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=061d2d428d41f6523dbf19f035e04ebfe8a91d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:d8:69:c9:55:c1:07:1d:f5:d9:df:d7:f2: 63:39:e0:e6:e7:23:4c:8f:d7:36:bc:e4:93:bb:96: c1:c5:e6:a5:cf:74:16:13:84:70:34:34:d4:41:af: fb:3d:e4:b4:b2:a8:81:50:f4:e8:1d:21:ea:a3:7f: 02:f1:d8:49:84:2b:6e:db:2e:3e:53:0c:94:ba:3a: 21:ef:a9:8b:d5:fd:9a:38:ea:9b:d8:a5:6f:5e:7e: 3d:b8:61:03:d0:b2:b0:0d:3b:8d:3c:16:58:ec:8b: b7:91:64:f1:d3:4d:da:80:65:ae:02:bc:d8:f8:4f: d1:27:29:b5:b0:77:dd:45:2c:5a:47:ed:5f:14:44: cb:24:1f:9b:3f:31:7b:b8:bd:9e:2e:1e:8c:20:ef: 63:38:62:1a:93:49:2b:24:0a:a6:d6:b2:41:25:1a: 2e:72:ef:c6:aa:af:36:80:e6:5b:d3:93:93:fd:ed: 26:56:57:60:0d:82:76:4d:05:76:13:b6:8e:2e:d1: 62:24:a2:7d:bb:08:e2:a8:40:07:5a:0c:06:0d:58: fc:e7:18:98:e2:85:a7:bd:56:39:1c:ad:65:23:23: 87:a8:0a:ef:51:af:e1:de:0b:57:45:e8:61:99:d6: 90:25:ce:44:62:08:f0:a2:0d:60:f9:f9:72:36:92: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:2D:42:8D:41:F6:52:3D:BF:19:F0:35:E0:4E:BF:E8:A9:1D:22 X509v3 Authority Key Identifier: keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:87:db:86:44:96:18:32:6f:48:c2:4f:df:86:53:bb:62:79: f9:ff:8f:d0:50:f9:8d:35:a8:d9:e6:cc:5e:9b:a1:69:49:64: 65:5a:63:c2:ba:1a:9a:14:15:7a:07:50:bf:bf:68:79:4b:4b: 82:c8:f0:be:28:fc:a0:03:b2:9d:b8:23:12:c9:87:b3:34:70: 2b:a6:05:c4:a0:bf:97:8a:da:91:29:e9:44:d9:6f:b1:5a:f6: 4e:8c:86:1c:b3:22:57:99:04:cb:83:cd:de:1c:5e:21:0d:7a: 51:bd:07:de:65:6c:8f:f2:d3:af:a5:8e:0e:46:62:2c:6c:e3: e3:fa:8f:d2:7d:74:9b:c4:93:bd:e8:1d:b3:d9:6b:21:1c:5a: a3:7d:ae:6f:c0:89:55:8b:d9:6c:dc:22:83:c1:8a:42:f0:27: f7:25:16:8e:02:7b:8b:e5:81:0b:ab:2d:1a:de:30:7d:f6:de: 04:15:88:97:f5:dd:40:2f:e7:a3:f0:67:f8:89:2e:0e:16:b8: 1f:2f:9f:36:c8:68:46:74:da:69:4f:fa:8b:67:1f:2e:a2:2a: e0:af:ce:04:90:b2:21:7b:4a:18:89:aa:ca:85:46:04:c3:12: 1d:fe:8e:3d:55:9d:74:1c:d7:58:a0:c8:1d:00:01:1a:2c:54: d3:3c:74:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP5u3nDsQ9zBsygwkENgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDlmNGE0Y2Q4MjkzNDQ1MTlmNDUyYTNiMGUxZTY2ZmU4 ZDNlMjUwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygwNjFkMmQ0MjhkNDFmNjUyM2RiZjE5ZjAzNWUwNGViZmU4YTkxZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pvYaclVwQcd9dnf1/JjOeDm5yNM j9c2vOSTu5bBxealz3QWE4RwNDTUQa/7PeS0sqiBUPToHSHqo38C8dhJhCtu2y4+ UwyUujoh76mL1f2aOOqb2KVvXn49uGED0LKwDTuNPBZY7Iu3kWTx003agGWuArzY +E/RJym1sHfdRSxaR+1fFETLJB+bPzF7uL2eLh6MIO9jOGIak0krJAqm1rJBJRou cu/Gqq82gOZb05OT/e0mVldgDYJ2TQV2E7aOLtFiJKJ9uwjiqEAHWgwGDVj85xiY 4oWnvVY5HK1lIyOHqArvUa/h3gtXRehhmdaQJc5EYgjwog1g+flyNpLsZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYdLUKNQfZSPb8Z8DXgTr/oqR0iMB8GA1UdIwQY MBaAFI9J9KTNgpNEUZ9FKjsOHmb+jT4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgt MTQwYWFkYTU0YjYxLzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgtMTQwYWFkYTU0YjYx LzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVofbhkSW GDJvSMJP34ZTu2J5+f+P0FD5jTWo2ebMXpuhaUlkZVpjwroamhQVegdQv79oeUtL gsjwvij8oAOynbgjEsmHszRwK6YFxKC/l4rakSnpRNlvsVr2ToyGHLMiV5kEy4PN 3hxeIQ16Ub0H3mVsj/LTr6WODkZiLGzj4/qP0n10m8STvegds9lrIRxao32ub8CJ VYvZbNwig8GKQvAn9yUWjgJ7i+WBC6stGt4wffbeBBWIl/XdQC/no/Bn+IkuDha4 Hy+fNshoRnTaaU/6i2cfLqIq4K/OBJCyIXtKGImqyoVGBMMSHf6OPVWddBzXWKDI HQABGixU0zx09A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:50 2025 by rpki-client