This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json) Hash identifier: 5X5E0BKZaOVXQErE9ymFHJZkiG6QJTeKa2YhCfQcGkA= Subject key identifier: 0E:D0:30:F8:46:EE:F5:0F:F6:0F:C6:4F:32:31:F4:7F:85:2B:80:7B Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2 Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2 Certificate serial: 019AF23FBCF1A67E745DB276266EA6650B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft Manifest number: 0869 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: ppCltATqdZytlGRf+Kc9/Bm6eUw/Zg/mAQdPh1HZnNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bc:f1:a6:7e:74:5d:b2:76:26:6e:a6:65:0b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=0ed030f846eef50ff60fc64f3231f47f852b807b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:13:74:29:fa:e7:04:73:37:7b:e4:95:81: 69:f7:9f:2f:25:a5:f4:f5:3a:36:fa:6a:c6:a1:d0: b4:f7:74:b7:1a:0d:76:6a:94:2d:70:3a:88:df:0f: da:06:b9:14:e8:f8:41:03:3b:80:c4:cc:04:9d:fb: 56:df:e8:d0:44:86:2a:84:38:ce:8b:4d:05:44:f4: 88:c6:31:31:ab:5d:54:15:ab:73:2f:ce:31:62:11: 53:3b:b1:9b:2c:ff:56:70:ca:2e:ca:60:6c:9f:16: bb:28:02:c7:f4:ae:7f:70:7c:ee:18:46:42:83:0b: 36:ad:82:68:8e:99:60:8b:a9:dc:6a:e7:ae:ae:d9: 67:52:7e:13:ee:2e:32:bb:00:39:59:a4:7c:c2:4d: 9d:74:a0:61:f8:b3:72:e7:d4:13:2b:17:de:94:f7: d1:b0:d9:a3:59:5d:a1:37:f0:0f:11:6a:69:e4:a2: 1a:27:5b:6e:cd:85:eb:4b:01:f8:14:be:97:4d:71: 11:71:71:d9:0b:fd:7c:56:4c:0b:88:3a:db:de:d5: 02:2e:8d:92:31:8c:6c:d1:21:2b:ea:e2:36:cd:7f: 9e:89:65:e1:0a:e3:37:60:f4:62:5f:d3:fb:63:ad: 2d:5d:53:1f:13:f6:59:d7:0a:0b:63:ff:39:03:c4: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:30:F8:46:EE:F5:0F:F6:0F:C6:4F:32:31:F4:7F:85:2B:80:7B X509v3 Authority Key Identifier: keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:ee:cc:2f:22:cb:5d:1f:a8:2e:4a:b9:21:ba:5a:96:ca: d3:45:59:24:d1:8c:9e:f2:5e:86:75:1b:71:4a:9d:16:d8:ca: d0:56:5d:17:50:a1:f2:70:c0:9d:1a:a3:b6:f2:ab:f3:f5:5f: d0:ae:58:44:82:c3:21:f9:d0:77:00:b5:04:06:04:ad:ca:13: 26:2b:33:82:a7:b8:eb:a7:61:9a:ef:83:3e:f3:5c:c8:26:d9: d7:10:ad:9f:2c:ed:67:62:7f:66:c2:63:0d:08:66:ff:be:b8: 90:db:73:6e:d2:61:34:f3:47:5c:21:19:40:22:02:10:c1:f2: 82:94:26:24:55:71:28:c3:aa:e6:90:e1:c7:10:e7:df:af:27: 29:b1:d0:29:95:fc:f4:eb:19:7f:38:8b:9b:49:61:5e:d1:0a: dd:71:8a:11:88:b3:ff:5a:d4:29:b1:da:78:67:96:0d:7a:83: 45:03:72:92:42:69:c6:a8:35:aa:e0:89:5f:fd:65:9b:a3:c0: bc:ba:40:c4:39:d3:30:79:f7:26:74:87:52:b0:c5:0c:08:4f: cb:17:3f:06:54:1c:ba:bc:26:81:da:6f:39:57:8f:04:5c:3c: a0:2c:cc:16:3f:84:8b:bf:a4:0a:c2:e8:a6:6e:49:d9:e8:1e: a8:2a:14:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7zxpn50XbJ2Jm6mZQuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGIyOTM1ZDlkZDBkNTg1YjY1NTExODc2NGMwMWM2ZDc2 Zjc0YzIwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EygwZWQwMzBmODQ2ZWVmNTBmZjYwZmM2NGYzMjMxZjQ3Zjg1MmI4MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6ITdCn65wRzN3vklYFp958vJaX0 9To2+mrGodC093S3Gg12apQtcDqI3w/aBrkU6PhBAzuAxMwEnftW3+jQRIYqhDjO i00FRPSIxjExq11UFatzL84xYhFTO7GbLP9WcMouymBsnxa7KALH9K5/cHzuGEZC gws2rYJojplgi6ncaueurtlnUn4T7i4yuwA5WaR8wk2ddKBh+LNy59QTKxfelPfR sNmjWV2hN/APEWpp5KIaJ1tuzYXrSwH4FL6XTXERcXHZC/18VkwLiDrb3tUCLo2S MYxs0SEr6uI2zX+eiWXhCuM3YPRiX9P7Y60tXVMfE/ZZ1woLY/85A8RTfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7QMPhG7vUP9g/GTzIx9H+FK4B7MB8GA1UdIwQY MBaAFIzbKTXZ3Q1YW2VRGHZMAcbXb3TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEt NTQ1NmUxNWQ0NjcxLzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEtNTQ1NmUxNWQ0Njcx LzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6XuzC8i y10fqC5KuSG6WpbK00VZJNGMnvJehnUbcUqdFtjK0FZdF1Ch8nDAnRqjtvKr8/Vf 0K5YRILDIfnQdwC1BAYErcoTJiszgqe466dhmu+DPvNcyCbZ1xCtnyztZ2J/ZsJj DQhm/764kNtzbtJhNPNHXCEZQCICEMHygpQmJFVxKMOq5pDhxxDn368nKbHQKZX8 9OsZfziLm0lhXtEK3XGKEYiz/1rUKbHaeGeWDXqDRQNykkJpxqg1quCJX/1lm6PA vLpAxDnTMHn3JnSHUrDFDAhPyxc/BlQcurwmgdpvOVePBFw8oCzMFj+Ei7+kCsLo pm5J2egeqCoU+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:57 2025 by rpki-client