This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json) Hash identifier: smW7poY0Gp4QebCV30R4NMWzW2K/kCrnkHpzGCPNSyU= Subject key identifier: B4:E3:10:C1:A7:37:3E:83:26:28:B3:42:D0:10:72:F5:54:2E:B9:18 Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32 Certificate serial: 019AF2773FD1DAB0E5BD78C5C1862A923147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft Manifest number: 07EB Signing time: Sat 06 Dec 2025 07:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:01:32 +0000 Manifest next update: Sun 07 Dec 2025 07:01:32 +0000 Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: tuDd0gCF8G1fPxyU8dITiA1YcNlDEaMEI+CpIvwZ3JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3f:d1:da:b0:e5:bd:78:c5:c1:86:2a:92:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fac851d9982896a765876d311b97b509357ec32 Validity Not Before: Dec 6 07:01:32 2025 GMT Not After : Dec 7 07:01:32 2025 GMT Subject: CN=b4e310c1a7373e832628b342d01072f5542eb918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:5d:75:29:eb:f6:9a:35:8c:60:2a:ed:b2: 7a:db:37:f4:8a:cc:84:2c:6c:26:52:ee:70:35:3b: 9a:ed:d5:7d:c3:93:e0:f7:92:4b:64:d1:83:76:35: bb:51:e0:f9:b0:c3:84:6c:ae:f3:72:a3:3c:33:fc: 0c:09:76:43:66:d2:69:15:a4:cb:22:92:2c:a0:fc: 36:a8:ab:e2:19:bb:15:e3:7a:9c:76:9d:00:93:fc: f4:72:72:06:c5:54:b0:6c:31:8e:e2:7f:87:78:2e: e7:eb:e2:aa:57:47:31:f3:29:21:3b:f4:c5:03:f1: 40:82:6b:17:32:44:c8:ec:fb:4e:70:45:4e:5e:07: 81:91:3d:af:63:ed:4a:66:64:ac:e7:c8:b1:ab:99: 2a:7e:7d:cf:61:fc:f6:11:92:b2:53:c4:e9:1d:24: cd:d4:5e:d9:0d:85:4c:b4:f7:c3:56:80:8d:59:66: 8c:17:25:2c:b2:3f:7e:c3:f1:39:be:a2:f8:47:e4: af:43:c9:fd:3b:3c:70:d0:56:29:5f:9d:f4:88:f7: 18:27:b6:30:b1:e8:b4:63:0d:18:ce:0e:d9:81:4a: f5:64:df:9a:50:15:38:fd:91:f0:a8:b1:92:f9:61: 1a:89:fe:0f:3d:fb:3a:13:be:93:35:5e:7d:62:01: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E3:10:C1:A7:37:3E:83:26:28:B3:42:D0:10:72:F5:54:2E:B9:18 X509v3 Authority Key Identifier: keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a8:d1:d4:e7:64:cc:3a:57:cd:a9:88:05:ec:e4:a8:53:05: ce:f2:69:93:7c:85:e5:a2:43:22:aa:11:65:c5:b1:a2:8f:17: f0:c1:09:27:99:03:e2:c6:91:8f:c9:0c:11:33:9d:1a:1a:1b: 42:01:fe:81:1b:78:07:f3:b1:bd:81:c5:da:d1:80:f3:2a:ea: 42:2b:2b:96:12:b9:04:73:28:11:bf:1c:45:1b:a1:4f:a8:fa: 40:92:f5:81:43:75:e5:5b:ef:6c:a1:bc:25:3e:2c:25:8e:d6: 2c:66:c0:34:eb:38:57:57:5f:28:98:f0:19:58:6e:2a:c3:8c: 57:b5:d8:af:bd:09:18:a3:f1:87:1e:02:c5:b0:4d:05:7d:bf: e4:75:bc:a2:a2:0d:09:8a:1c:0f:e6:b8:c8:a3:b7:7f:6e:02: a1:ff:0a:53:48:a1:1d:da:cb:e0:5a:eb:73:da:0f:fc:95:6c: 95:1f:07:d5:bc:46:e1:31:ad:b5:78:21:e1:4d:09:a3:44:44: 8d:f4:02:14:0e:0d:ca:97:c8:5a:22:b6:21:50:05:20:8c:2e: 4d:cb:9c:6f:75:50:e4:bf:bc:ed:cb:48:b3:52:76:0e:36:d6: 32:a5:8f:7a:e1:2a:36:2f:f4:c0:76:35:a0:22:74:b4:53:85: 0b:00:11:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydz/R2rDlvXjFwYYqkjFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYWM4NTFkOTk4Mjg5NmE3NjU4NzZkMzExYjk3YjUwOTM1 N2VjMzIwHhcNMjUxMjA2MDcwMTMyWhcNMjUxMjA3MDcwMTMyWjAzMTEwLwYDVQQD EyhiNGUzMTBjMWE3MzczZTgzMjYyOGIzNDJkMDEwNzJmNTU0MmViOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBddSnr9po1jGAq7bJ62zf0isyE LGwmUu5wNTua7dV9w5Pg95JLZNGDdjW7UeD5sMOEbK7zcqM8M/wMCXZDZtJpFaTL IpIsoPw2qKviGbsV43qcdp0Ak/z0cnIGxVSwbDGO4n+HeC7n6+KqV0cx8ykhO/TF A/FAgmsXMkTI7PtOcEVOXgeBkT2vY+1KZmSs58ixq5kqfn3PYfz2EZKyU8TpHSTN 1F7ZDYVMtPfDVoCNWWaMFyUssj9+w/E5vqL4R+SvQ8n9Ozxw0FYpX530iPcYJ7Yw sei0Yw0Yzg7ZgUr1ZN+aUBU4/ZHwqLGS+WEaif4PPfs6E76TNV59YgFd+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTjEMGnNz6DJiizQtAQcvVULrkYMB8GA1UdIwQY MBaAFI+shR2Zgolqdlh20xG5e1CTV+wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAt MmRmYzRhNmY1ZDBkLzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAtMmRmYzRhNmY1ZDBk LzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6jR1Odk zDpXzamIBezkqFMFzvJpk3yF5aJDIqoRZcWxoo8X8MEJJ5kD4saRj8kMETOdGhob QgH+gRt4B/OxvYHF2tGA8yrqQisrlhK5BHMoEb8cRRuhT6j6QJL1gUN15VvvbKG8 JT4sJY7WLGbANOs4V1dfKJjwGVhuKsOMV7XYr70JGKPxhx4CxbBNBX2/5HW8oqIN CYocD+a4yKO3f24Cof8KU0ihHdrL4Frrc9oP/JVslR8H1bxG4TGttXgh4U0Jo0RE jfQCFA4NypfIWiK2IVAFIIwuTcucb3VQ5L+87ctIs1J2DjbWMqWPeuEqNi/0wHY1 oCJ0tFOFCwARwA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:09 2025 by rpki-client