This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json) Hash identifier: RIOPfeFqKQdhgNDb9Wca/A0OCeHQqbzDnZia+XHw9Is= Subject key identifier: 2B:88:E2:1F:1C:85:CF:B2:DA:A3:A2:AB:AA:30:2B:32:40:51:35:F4 Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de Certificate serial: 019AF088D31B217FE43EA218F99D27EAEE91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft Manifest number: 175C Signing time: Fri 05 Dec 2025 22:01:29 +0000 Manifest this update: Fri 05 Dec 2025 22:01:29 +0000 Manifest next update: Sat 06 Dec 2025 22:01:29 +0000 Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: lf9fefJvmbVl8hWiet9Tnos4ejBTbwAOOyNUPKtYL5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:d3:1b:21:7f:e4:3e:a2:18:f9:9d:27:ea:ee:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de Validity Not Before: Dec 5 22:01:29 2025 GMT Not After : Dec 6 22:01:29 2025 GMT Subject: CN=2b88e21f1c85cfb2daa3a2abaa302b32405135f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:ea:9f:78:c3:3e:fb:bc:99:b1:10:de:d1: 11:71:86:a7:c0:ca:78:9c:f7:76:4e:24:c7:11:5b: 8c:6c:72:29:4e:d7:17:5f:20:d1:86:a6:32:3a:82: 37:16:40:4f:6d:d2:f8:26:86:88:a2:63:2d:b7:97: 6e:24:eb:f4:6f:51:94:0e:95:d7:ce:11:51:57:19: 39:47:44:bf:54:22:b3:c5:15:9b:e0:ae:99:9d:19: cd:93:e1:ea:94:11:ed:15:d0:88:aa:72:e2:20:4c: 50:92:2f:32:5c:7d:c0:98:bf:33:61:de:52:2d:a8: 9b:89:41:dd:02:72:bb:b6:31:76:2c:ab:f4:a2:d4: 83:e6:8d:e1:38:9a:1c:6e:6b:40:08:97:56:f7:a9: 9f:19:5d:ae:50:a9:03:ca:fe:66:8f:cd:d4:f7:ba: 6d:78:16:0e:e2:7a:4f:15:8f:19:02:6a:55:d2:b6: 1f:5d:96:17:32:46:20:24:58:1b:d6:98:72:8c:fe: 12:31:84:11:77:43:3c:c7:e4:12:91:cd:df:d9:b7: a5:93:87:7e:9f:8f:c5:9d:a5:72:be:7e:77:28:70: 50:e2:da:7d:1f:b6:7b:47:c0:21:39:ba:5b:8f:92: f6:0c:c0:e1:db:f7:10:7c:a5:4b:5a:42:22:82:48: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:88:E2:1F:1C:85:CF:B2:DA:A3:A2:AB:AA:30:2B:32:40:51:35:F4 X509v3 Authority Key Identifier: keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:50:38:06:7f:4d:f5:af:08:a8:f7:e3:ce:02:ed:30:a9:04: 97:20:61:c9:f9:eb:5e:53:c8:44:83:2d:5c:91:d5:76:27:c3: 68:95:0d:3c:74:9c:da:cf:5a:f4:17:9a:0d:cd:87:e8:d1:94: 4d:8a:38:e8:73:68:f3:fe:df:cf:f3:75:18:e8:4f:57:2e:1a: d2:53:d3:16:0f:b9:d6:49:58:62:ae:15:f2:df:44:3c:b6:c7: 2c:ad:90:7a:35:a9:42:f4:55:33:df:d8:ff:25:9d:07:3a:20: 57:c8:b6:aa:06:2e:5a:2a:7c:d1:17:ce:a1:12:63:9f:69:51: 2d:16:d8:67:b1:26:be:da:4c:32:c8:44:72:54:e6:b0:32:67: 65:e8:c6:f7:c5:ed:8a:79:ad:ab:d7:72:4a:9d:d5:4a:36:7d: ca:da:7d:c4:1d:15:bb:e2:50:03:94:ce:d4:3f:60:0c:89:a9: 59:a5:79:5c:d7:b0:b0:c4:63:14:5c:3c:7d:03:10:ae:50:a6: 9c:3b:70:f2:ea:ef:76:d1:db:b9:e4:51:45:b3:61:0f:fa:64: cb:ee:14:cb:95:bc:b4:ad:fd:fe:33:6b:0a:6b:65:c5:91:cc: 7c:19:a0:d9:d8:f1:93:aa:47:f0:6d:62:22:a7:47:47:b5:82: 25:72:ed:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiNMbIX/kPqIY+Z0n6u6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTAwMmY2MzllODE5NThkMGY5YjM1ODVhZWQ3NjcwN2Qy NjI1ZGUwHhcNMjUxMjA1MjIwMTI5WhcNMjUxMjA2MjIwMTI5WjAzMTEwLwYDVQQD EygyYjg4ZTIxZjFjODVjZmIyZGFhM2EyYWJhYTMwMmIzMjQwNTEzNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Pqn3jDPvu8mbEQ3tERcYanwMp4 nPd2TiTHEVuMbHIpTtcXXyDRhqYyOoI3FkBPbdL4JoaIomMtt5duJOv0b1GUDpXX zhFRVxk5R0S/VCKzxRWb4K6ZnRnNk+HqlBHtFdCIqnLiIExQki8yXH3AmL8zYd5S LaibiUHdAnK7tjF2LKv0otSD5o3hOJocbmtACJdW96mfGV2uUKkDyv5mj83U97pt eBYO4npPFY8ZAmpV0rYfXZYXMkYgJFgb1phyjP4SMYQRd0M8x+QSkc3f2belk4d+ n4/FnaVyvn53KHBQ4tp9H7Z7R8AhObpbj5L2DMDh2/cQfKVLWkIigki+vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuI4h8chc+y2qOiq6owKzJAUTX0MB8GA1UdIwQY MBaAFIxQAvY56BlY0PmzWFrtdnB9JiXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYt NmYwNjE5MTQ0NGFjLzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYtNmYwNjE5MTQ0NGFj LzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1A4Bn9N 9a8IqPfjzgLtMKkElyBhyfnrXlPIRIMtXJHVdifDaJUNPHSc2s9a9BeaDc2H6NGU TYo46HNo8/7fz/N1GOhPVy4a0lPTFg+51klYYq4V8t9EPLbHLK2QejWpQvRVM9/Y /yWdBzogV8i2qgYuWip80RfOoRJjn2lRLRbYZ7EmvtpMMshEclTmsDJnZejG98Xt inmtq9dySp3VSjZ9ytp9xB0Vu+JQA5TO1D9gDImpWaV5XNewsMRjFFw8fQMQrlCm nDtw8urvdtHbueRRRbNhD/pky+4Uy5W8tK39/jNrCmtlxZHMfBmg2djxk6pH8G1i IqdHR7WCJXLtDw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:17 2025 by rpki-client