This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json) Hash identifier: lZHvupVN18x57R4rQSVNbXFWpxxB5FXqGuSykhGEhXo= Subject key identifier: 77:40:FB:C9:61:30:09:8C:60:24:86:E4:50:B1:B5:E0:A6:0C:5C:65 Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f Certificate serial: 019AF1D27672B1180753FFE1C3E577DC0EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:33 +0000 Manifest this update: Sat 06 Dec 2025 04:01:33 +0000 Manifest next update: Sun 07 Dec 2025 04:01:33 +0000 Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: E09CFAtDbAbASahC/pTP8oV5wh5RMTbHBDZsVxOq7l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:76:72:b1:18:07:53:ff:e1:c3:e5:77:dc:0e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f Validity Not Before: Dec 6 04:01:33 2025 GMT Not After : Dec 7 04:01:33 2025 GMT Subject: CN=7740fbc96130098c602486e450b1b5e0a60c5c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:4d:d2:4f:72:18:0d:06:db:c6:f4:11:68: dc:e3:90:63:a8:89:35:a2:ad:34:9b:f9:a4:6f:a0: 35:96:45:23:12:f7:0a:c0:55:05:5d:53:01:33:50: d5:64:a2:f6:cf:6e:70:e9:54:17:c7:5c:80:4b:cd: 9d:b0:d7:c0:7d:3c:9f:f7:a7:0f:82:4d:be:03:63: de:61:3a:ec:95:7d:18:80:4e:3f:f4:d8:b9:0f:be: 43:e2:6a:cb:eb:3e:97:3f:8c:3d:f3:fe:96:f1:3b: f3:af:ce:70:1f:f8:ea:5b:b0:c6:ad:e7:9a:23:3a: 87:7c:fa:c6:90:c1:68:4f:bb:c7:64:0f:85:5e:28: a5:e2:ff:af:56:75:2f:59:88:1c:15:84:f5:e7:ce: 0c:77:a3:4c:3f:5b:97:5e:2c:83:ba:d3:9b:e3:2e: 95:21:cc:95:72:da:3d:0f:dd:0f:b5:cf:e6:f5:09: 26:92:f2:ab:46:c2:65:bf:c2:ee:0e:c2:30:c8:93: 4c:90:84:c5:ff:f6:0a:0b:fc:d1:ec:50:4b:54:55: 54:2a:43:e4:74:2e:8d:a0:0a:a7:ea:8b:95:8f:10: 9c:7d:49:38:5a:5d:c7:46:7f:6d:1d:07:19:db:d6: d0:d5:0a:da:43:49:93:54:85:2d:51:9a:be:c1:ef: 85:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:40:FB:C9:61:30:09:8C:60:24:86:E4:50:B1:B5:E0:A6:0C:5C:65 X509v3 Authority Key Identifier: keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4a:41:90:1b:cf:13:ed:aa:0c:57:9e:38:7a:21:5b:a4:0f: b0:76:35:61:db:fd:33:bf:04:f3:31:c4:eb:f8:a3:fa:c2:7a: 4a:7e:79:5c:a8:ba:36:68:b9:6f:b4:b1:11:06:b0:ad:c5:46: e0:7e:3f:df:ea:f7:3f:0a:0d:08:75:22:76:24:f1:80:e1:cf: 00:0a:cb:96:c6:4d:68:f5:a6:ea:7f:ca:b2:66:20:d2:10:3a: 53:80:bb:e6:80:85:1e:e8:38:dc:03:23:39:c4:2c:d7:e8:6e: 9d:7f:af:62:a4:81:f3:ae:8a:09:9a:12:68:25:29:8c:2e:98: 3f:7d:13:61:a7:a5:31:16:3b:96:dc:07:65:75:03:6d:95:bf: 0c:53:7b:7b:5e:6d:73:ff:7f:9a:4b:06:24:ce:77:fb:88:cb: c8:da:20:b4:20:f7:74:86:c2:fe:98:31:80:0e:5d:d9:ea:04: ea:a5:0b:f9:06:1a:4a:ae:58:f0:53:54:a4:8a:6e:fd:6f:be: 7d:0a:05:78:87:67:c0:7a:b5:68:db:c2:5b:fe:bb:b3:87:88: 0e:29:a0:f9:30:3c:75:bd:61:c7:02:c9:30:b2:2d:65:af:a2: d5:97:01:3c:eb:25:8d:62:9e:71:47:dc:50:8c:4b:cf:08:01: 82:b7:3c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0nZysRgHU//hw+V33A6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzhjMzlmMWUyMTRjN2VjZGYyZjBlYzk1Nzg0NzAxZjJk MTI4OGYwHhcNMjUxMjA2MDQwMTMzWhcNMjUxMjA3MDQwMTMzWjAzMTEwLwYDVQQD Eyg3NzQwZmJjOTYxMzAwOThjNjAyNDg2ZTQ1MGIxYjVlMGE2MGM1YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJN0k9yGA0G28b0EWjc45BjqIk1 oq00m/mkb6A1lkUjEvcKwFUFXVMBM1DVZKL2z25w6VQXx1yAS82dsNfAfTyf96cP gk2+A2PeYTrslX0YgE4/9Ni5D75D4mrL6z6XP4w98/6W8Tvzr85wH/jqW7DGreea IzqHfPrGkMFoT7vHZA+FXiil4v+vVnUvWYgcFYT1584Md6NMP1uXXiyDutOb4y6V IcyVcto9D90Ptc/m9QkmkvKrRsJlv8LuDsIwyJNMkITF//YKC/zR7FBLVFVUKkPk dC6NoAqn6ouVjxCcfUk4Wl3HRn9tHQcZ29bQ1QraQ0mTVIUtUZq+we+FSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdA+8lhMAmMYCSG5FCxteCmDFxlMB8GA1UdIwQY MBaAFK44w58eIUx+zfLw7JV4RwHy0SiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjIt MTAxYmFiMGRmMmRmLzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjItMTAxYmFiMGRmMmRm LzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEpBkBvP E+2qDFeeOHohW6QPsHY1Ydv9M78E8zHE6/ij+sJ6Sn55XKi6Nmi5b7SxEQawrcVG 4H4/3+r3PwoNCHUidiTxgOHPAArLlsZNaPWm6n/KsmYg0hA6U4C75oCFHug43AMj OcQs1+hunX+vYqSB866KCZoSaCUpjC6YP30TYaelMRY7ltwHZXUDbZW/DFN7e15t c/9/mksGJM53+4jLyNogtCD3dIbC/pgxgA5d2eoE6qUL+QYaSq5Y8FNUpIpu/W++ fQoFeIdnwHq1aNvCW/67s4eIDimg+TA8db1hxwLJMLItZa+i1ZcBPOsljWKecUfc UIxLzwgBgrc8ng== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:53 2025 by rpki-client