This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json) Hash identifier: v6No90X6mAdKYACC4gqvf3yAagwHB5XsJlFANw8Daog= Subject key identifier: 99:FF:59:9D:94:3D:FA:53:58:0A:67:41:81:F4:99:E7:02:A0:77:26 Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc Certificate serial: 019AF208C0117C2B753DFB3DCEF837681BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft Manifest number: 0974 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: 0/4tb8Lk0Rzlts8pcVb2EPBOk7IFDthozjeg3BnNnFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c0:11:7c:2b:75:3d:fb:3d:ce:f8:37:68:1b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=99ff599d943dfa53580a674181f499e702a07726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:3a:df:51:5f:62:48:38:87:62:06:53:c1: d4:63:bd:14:f2:27:6f:ea:ab:1b:57:00:e8:8c:7f: 58:53:12:b9:05:a9:f2:26:ed:0f:31:55:6a:c6:33: b6:49:37:6c:b6:cb:b0:eb:fb:fb:d2:de:1f:cd:ab: 02:15:d2:3a:2e:e3:35:6d:6e:34:fa:08:2a:67:44: 4e:ef:99:fa:5d:ff:67:28:c5:ef:41:06:8e:7f:0c: 58:bd:60:99:8a:df:98:f0:f5:98:f4:1e:fb:44:7a: 48:35:45:c0:cc:7e:b6:b1:55:d1:e9:79:9e:53:ac: c2:5c:eb:85:c0:f3:70:51:49:76:07:32:1e:ad:3e: e1:51:75:ba:1d:4d:9b:10:01:96:a7:d9:f3:8d:e5: 7b:72:97:8a:c9:dd:12:24:a6:90:95:6e:19:9b:7a: 82:4e:f4:ca:a7:05:3c:fd:fd:90:f1:0d:1a:88:5e: 8d:fb:4e:d8:4c:58:3f:fa:bf:82:fd:af:f9:7c:b0: d4:74:cd:d7:4b:9f:8a:1d:88:39:fa:6b:7e:40:b2: 94:52:d3:8c:07:8e:62:2a:de:a2:37:a7:17:50:65: 67:cd:04:48:e4:d7:ee:ba:8a:66:63:36:b1:d1:51: 7e:07:31:41:2a:41:9a:a6:c7:18:d5:3e:8f:ca:40: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FF:59:9D:94:3D:FA:53:58:0A:67:41:81:F4:99:E7:02:A0:77:26 X509v3 Authority Key Identifier: keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:14:99:45:b6:82:d2:63:ac:99:19:21:4f:d7:1a:f8:29:5c: db:52:d4:2a:c5:95:8d:c0:06:3d:c1:8d:b5:8f:16:a8:fa:f1: 84:8f:b4:d5:ac:76:dc:d4:8b:55:99:13:ab:9d:a7:b6:b4:6b: ff:c3:cf:8e:34:d4:45:aa:05:19:e3:22:a4:b8:b1:fe:83:76: b0:85:c8:e4:e4:e9:06:8c:26:1e:1c:36:d2:3e:45:e2:98:79: 08:16:1b:4d:42:cf:04:1a:e5:2e:ce:1b:ca:26:ce:e9:0a:c2: e9:75:b7:2f:44:73:c4:59:c2:dc:da:7e:b6:7e:e6:04:ff:9c: 05:9d:d8:24:e4:70:52:ed:7f:42:bc:bb:df:3a:44:f3:37:20: d1:55:67:47:0f:0c:38:be:25:6e:38:ec:02:06:9e:97:93:d6: 86:34:6c:72:0a:2f:2a:68:05:e1:75:bc:dc:73:1e:56:29:ea: 9e:41:9d:8f:36:72:59:14:97:1e:cd:8b:d3:e6:e7:d4:04:a4: e7:fe:25:99:b1:a3:cd:25:03:8e:22:e7:0e:71:b0:b6:99:65: 2a:a2:1f:1c:ac:1a:80:d6:be:33:7c:6e:3f:7d:f8:83:ae:66: cd:79:c2:19:f6:94:55:29:3a:e8:03:a1:70:2d:72:73:5a:4a: fc:51:ef:70 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCMARfCt1Pfs9zvg3aBvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx MDI3YmMwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg5OWZmNTk5ZDk0M2RmYTUzNTgwYTY3NDE4MWY0OTllNzAyYTA3NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lY631FfYkg4h2IGU8HUY70U8idv 6qsbVwDojH9YUxK5BanyJu0PMVVqxjO2STdstsuw6/v70t4fzasCFdI6LuM1bW40 +ggqZ0RO75n6Xf9nKMXvQQaOfwxYvWCZit+Y8PWY9B77RHpINUXAzH62sVXR6Xme U6zCXOuFwPNwUUl2BzIerT7hUXW6HU2bEAGWp9nzjeV7cpeKyd0SJKaQlW4Zm3qC TvTKpwU8/f2Q8Q0aiF6N+07YTFg/+r+C/a/5fLDUdM3XS5+KHYg5+mt+QLKUUtOM B45iKt6iN6cXUGVnzQRI5NfuuopmYzax0VF+BzFBKkGapscY1T6PykD+twIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJn/WZ2UPfpTWApnQYH0mecCoHcmMB8GA1UdIwQY MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0 LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxSZ RbaC0mOsmRkhT9ca+Clc21LUKsWVjcAGPcGNtY8WqPrxhI+01ax23NSLVZkTq52n trRr/8PPjjTURaoFGeMipLix/oN2sIXI5OTpBowmHhw20j5F4ph5CBYbTULPBBrl Ls4byibO6QrC6XW3L0RzxFnC3Np+tn7mBP+cBZ3YJORwUu1/Qry73zpE8zcg0VVn Rw8MOL4lbjjsAgael5PWhjRscgovKmgF4XW83HMeVinqnkGdjzZyWRSXHs2L0+bn 1ASk5/4lmbGjzSUDjiLnDnGwtpllKqIfHKwagNa+M3xuP334g65mzXnCGfaUVSk6 6AOhcC1yc1pK/FHvcA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:46 2025 by rpki-client