This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft File: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft (raw, json) Hash identifier: QzeyKqdKlduvyFEZuOmdVsN3L4VFY7gQIo98Q+UoH2o= Subject key identifier: 64:AB:E1:39:99:C2:10:25:17:FD:B2:61:19:E8:A1:79:D2:DB:1B:B6 Authority key identifier: 8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89 Certificate issuer: /CN=8c23849b89238d95a6f4c175a34637fe3ff80489 Certificate serial: 019AF276785B3D0EF15D67BDED382EB8924D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft Manifest number: 31 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl (hash: t+9blxWWwC1ectHAXvF0SB4OM6yR9cqnqG8ioX3kEY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:78:5b:3d:0e:f1:5d:67:bd:ed:38:2e:b8:92:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c23849b89238d95a6f4c175a34637fe3ff80489 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=64abe13999c2102517fdb26119e8a179d2db1bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:df:95:b0:db:2f:24:92:d0:3b:00:56:ec: 2c:51:f4:d3:1b:e6:5f:3d:b7:f6:ed:e8:a0:aa:5c: bb:f1:81:3e:9b:f8:ab:23:4f:a1:62:8a:58:b1:71: 39:09:d5:fa:44:12:94:0b:75:fa:57:26:e1:5b:3b: c2:a3:3a:3b:18:5e:17:90:86:ff:2e:9d:4c:cb:81: 0b:76:ca:0a:6e:32:ee:0d:23:fa:6d:17:07:f8:73: 8d:77:04:45:78:8f:2a:36:85:0b:2a:f9:3b:c0:29: 59:70:7e:7b:50:97:ed:21:77:e0:bd:9c:d6:ad:0e: 6a:c6:3f:b3:52:a4:e2:fc:39:20:34:2a:8b:1d:81: 0c:1e:fd:c3:9d:08:0a:57:af:d7:0c:e1:f0:09:8e: ca:f6:e1:5d:75:be:c7:2b:dd:0c:3a:39:d8:e3:b0: fb:ea:a4:7c:38:93:b7:12:cf:36:70:0c:ca:37:38: 95:8b:51:12:9c:5c:b8:e1:62:00:3b:3a:9e:9b:32: 92:05:1f:ce:4d:d4:a1:10:4a:9a:62:53:c9:6e:ce: 39:cb:74:a9:51:5d:8c:f2:7e:7d:84:b6:bb:02:a4: 6f:f6:3d:9f:bb:a4:27:75:55:d0:fb:99:c2:34:8c: a9:04:2e:c9:2f:70:d3:e4:c1:b7:fa:12:5d:18:04: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:E1:39:99:C2:10:25:17:FD:B2:61:19:E8:A1:79:D2:DB:1B:B6 X509v3 Authority Key Identifier: keyid:8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:32:2a:37:50:0c:0d:bb:33:88:c1:30:e0:e3:26:5d:a0:15: 47:48:d0:23:f6:51:4b:71:59:a1:50:27:36:0a:73:45:d9:43: 25:c4:63:83:50:27:cf:72:41:0e:ab:8f:dd:aa:69:cc:d6:47: b6:b5:f6:3e:3d:c4:f4:d3:d7:09:e7:f6:42:d8:c6:dc:a2:1b: b2:92:99:eb:80:7d:16:da:89:7d:07:9b:0f:9b:7b:3b:25:34: 23:5a:31:e6:20:a0:c6:e8:c0:8d:02:1b:d3:0c:f3:f1:74:75: 8b:a6:e1:44:e0:d6:2b:22:f9:6f:7a:4c:f3:d3:ec:d7:43:d3: 64:b2:c1:4d:f1:9f:2b:d0:1e:5b:d6:2c:0b:b0:ed:c6:b9:98: a2:8f:4d:3a:82:10:43:20:01:99:5d:18:8c:97:fe:d4:4b:21: e2:55:97:43:ca:49:5d:69:19:bf:1f:a8:37:2d:9d:08:7c:ee: 7c:70:04:51:12:79:06:d7:f5:55:04:4f:85:31:ea:71:69:40: da:f9:2f:94:15:b7:aa:ee:d4:e9:93:73:5c:d0:dd:1e:27:b1: c6:75:21:2c:20:cd:9e:32:8f:0e:d3:74:38:84:ad:50:3b:a6: 5c:10:f8:09:87:69:33:db:6c:64:29:cf:fe:43:3a:c8:18:b3: 0c:8d:26:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnhbPQ7xXWe97TguuJJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjM4NDliODkyMzhkOTVhNmY0YzE3NWEzNDYzN2ZlM2Zm ODA0ODkwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD Eyg2NGFiZTEzOTk5YzIxMDI1MTdmZGIyNjExOWU4YTE3OWQyZGIxYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdbflbDbLySS0DsAVuwsUfTTG+Zf Pbf27eigqly78YE+m/irI0+hYopYsXE5CdX6RBKUC3X6VybhWzvCozo7GF4XkIb/ Lp1My4ELdsoKbjLuDSP6bRcH+HONdwRFeI8qNoULKvk7wClZcH57UJftIXfgvZzW rQ5qxj+zUqTi/DkgNCqLHYEMHv3DnQgKV6/XDOHwCY7K9uFddb7HK90MOjnY47D7 6qR8OJO3Es82cAzKNziVi1ESnFy44WIAOzqemzKSBR/OTdShEEqaYlPJbs45y3Sp UV2M8n59hLa7AqRv9j2fu6QndVXQ+5nCNIypBC7JL3DT5MG3+hJdGAQXCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSr4TmZwhAlF/2yYRnooXnS2xu2MB8GA1UdIwQY MBaAFIwjhJuJI42VpvTBdaNGN/4/+ASJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNPRW00a2pqWldtOU1GMW8wWTNfal80QklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83YThhMDktYWMxMy00NjIwLWFhYTEt N2ExMTMzNDg5MmEzLzEvakNPRW00a2pqWldtOU1GMW8wWTNfal80QklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83YThhMDktYWMxMy00NjIwLWFhYTEtN2ExMTMzNDg5MmEz LzEvakNPRW00a2pqWldtOU1GMW8wWTNfal80QklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjIqN1AM DbsziMEw4OMmXaAVR0jQI/ZRS3FZoVAnNgpzRdlDJcRjg1Anz3JBDquP3appzNZH trX2Pj3E9NPXCef2QtjG3KIbspKZ64B9FtqJfQebD5t7OyU0I1ox5iCgxujAjQIb 0wzz8XR1i6bhRODWKyL5b3pM89Ps10PTZLLBTfGfK9AeW9YsC7DtxrmYoo9NOoIQ QyABmV0YjJf+1Esh4lWXQ8pJXWkZvx+oNy2dCHzufHAEURJ5Btf1VQRPhTHqcWlA 2vkvlBW3qu7U6ZNzXNDdHiexxnUhLCDNnjKPDtN0OIStUDumXBD4CYdpM9tsZCnP /kM6yBizDI0mVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:45 2025 by rpki-client