This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json) Hash identifier: +z5dO8kJx45hdPJ42lCTl/Ak49NzD7LOVHLUyv/npHk= Subject key identifier: DA:85:7C:2A:F4:CD:00:40:E4:67:83:CA:9C:D0:AF:96:FE:D8:5C:E5 Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32 Certificate serial: 019B2E54A297D4792FA974B09E00FDC54F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft Manifest number: 080A Signing time: Wed 17 Dec 2025 22:00:57 +0000 Manifest this update: Wed 17 Dec 2025 22:00:57 +0000 Manifest next update: Thu 18 Dec 2025 22:00:57 +0000 Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: +7EpE6Bk4sDLZBzVTMKt9zmQO0sLdSWmkN2AnkCFgKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:a2:97:d4:79:2f:a9:74:b0:9e:00:fd:c5:4f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fac851d9982896a765876d311b97b509357ec32 Validity Not Before: Dec 17 22:00:57 2025 GMT Not After : Dec 18 22:00:57 2025 GMT Subject: CN=da857c2af4cd0040e46783ca9cd0af96fed85ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:79:83:e7:61:d4:ae:4a:64:2c:b0:46:4e: 4d:dc:d8:20:22:77:f6:a9:3b:73:45:bf:6d:ea:e6: 4d:8f:42:8f:c6:70:e2:1a:7f:62:14:19:9b:7a:da: 47:3a:9e:80:37:de:28:ec:f3:a7:e5:dd:66:5a:cc: 3b:ed:4e:2c:ce:71:5b:c8:0d:55:5d:28:57:ba:1e: a9:8c:3e:5c:da:5a:ae:d6:2c:6e:e0:99:b2:df:92: 93:f4:ec:45:8c:93:18:91:6b:91:62:f5:75:fb:2b: 55:53:40:83:02:51:6c:e2:91:15:48:02:09:c7:0f: 16:3d:8d:95:05:0a:7d:01:d6:2d:80:4f:38:e2:65: 27:10:fa:a2:84:0e:20:53:55:58:89:59:26:f5:8a: a8:d1:31:bb:70:1c:18:ea:d2:46:6d:ff:6b:c2:ee: ef:a8:be:af:2b:28:3a:68:84:6e:a2:d2:cf:82:b9: 56:a6:d8:c5:7f:67:ae:be:1f:61:02:aa:57:7d:d0: b6:3f:d9:ca:48:2a:45:3f:3f:f5:ae:f1:39:7c:45: 2b:70:db:64:52:f1:b1:74:15:2b:38:a7:1e:75:51: 9b:e9:bc:8a:9c:8a:53:9a:41:6d:49:9f:dd:93:f1: 16:4c:bc:ca:c8:92:61:8a:a8:4c:21:66:73:0b:47: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:7C:2A:F4:CD:00:40:E4:67:83:CA:9C:D0:AF:96:FE:D8:5C:E5 X509v3 Authority Key Identifier: keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:53:57:0d:01:aa:9a:fd:f4:7e:62:e4:53:a0:b6:15:c0:3b: 53:e6:6a:9b:f3:91:0a:fc:aa:b9:5a:e6:54:0b:68:c6:68:10: c0:10:43:6a:dc:fc:39:67:5a:1f:35:c3:2b:88:ce:c3:f4:81: 4b:26:5f:0a:17:3f:a9:81:5c:4f:c2:d1:cc:2d:ef:bc:4e:50: d9:27:a7:71:c2:be:28:96:50:70:69:9c:08:8c:79:74:d8:81: 00:cb:5b:32:72:ee:46:5f:be:d4:91:04:b2:3c:cf:59:f0:f7: 0b:30:95:07:fd:1d:1f:ec:d5:3f:a9:ba:f1:37:0c:cd:a3:50: 68:bc:47:c7:7f:fb:27:b0:6c:27:fa:a7:0e:c4:8b:19:04:07: ac:f0:9d:03:2b:9b:dc:0f:c1:35:2a:d6:d9:6a:36:9b:df:ec: 3a:44:9d:7a:f4:7b:fd:11:f3:2a:b5:b5:72:ad:5b:26:1b:66: ed:46:d7:0c:4f:98:ba:bc:cd:0c:ea:12:33:d4:6e:f5:ad:5f: 4c:85:57:3c:91:41:03:1f:16:c6:88:28:83:79:a2:20:52:91: 06:c9:50:62:b2:1c:b9:a6:32:44:4a:43:9b:47:7d:b6:06:c7: 4b:d2:73:72:0e:c8:9f:1e:ef:09:81:28:b9:a0:b4:5a:5b:75: 5d:42:91:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVKKX1HkvqXSwngD9xU8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYWM4NTFkOTk4Mjg5NmE3NjU4NzZkMzExYjk3YjUwOTM1 N2VjMzIwHhcNMjUxMjE3MjIwMDU3WhcNMjUxMjE4MjIwMDU3WjAzMTEwLwYDVQQD EyhkYTg1N2MyYWY0Y2QwMDQwZTQ2NzgzY2E5Y2QwYWY5NmZlZDg1Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5t5g+dh1K5KZCywRk5N3NggInf2 qTtzRb9t6uZNj0KPxnDiGn9iFBmbetpHOp6AN94o7POn5d1mWsw77U4sznFbyA1V XShXuh6pjD5c2lqu1ixu4Jmy35KT9OxFjJMYkWuRYvV1+ytVU0CDAlFs4pEVSAIJ xw8WPY2VBQp9AdYtgE844mUnEPqihA4gU1VYiVkm9Yqo0TG7cBwY6tJGbf9rwu7v qL6vKyg6aIRuotLPgrlWptjFf2euvh9hAqpXfdC2P9nKSCpFPz/1rvE5fEUrcNtk UvGxdBUrOKcedVGb6byKnIpTmkFtSZ/dk/EWTLzKyJJhiqhMIWZzC0dNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqFfCr0zQBA5GeDypzQr5b+2FzlMB8GA1UdIwQY MBaAFI+shR2Zgolqdlh20xG5e1CTV+wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAt MmRmYzRhNmY1ZDBkLzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAtMmRmYzRhNmY1ZDBk LzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFNXDQGq mv30fmLkU6C2FcA7U+Zqm/ORCvyquVrmVAtoxmgQwBBDatz8OWdaHzXDK4jOw/SB SyZfChc/qYFcT8LRzC3vvE5Q2SenccK+KJZQcGmcCIx5dNiBAMtbMnLuRl++1JEE sjzPWfD3CzCVB/0dH+zVP6m68TcMzaNQaLxHx3/7J7BsJ/qnDsSLGQQHrPCdAyub 3A/BNSrW2Wo2m9/sOkSdevR7/RHzKrW1cq1bJhtm7UbXDE+YurzNDOoSM9Ru9a1f TIVXPJFBAx8Wxogog3miIFKRBslQYrIcuaYyREpDm0d9tgbHS9Jzcg7Inx7vCYEo uaC0Wlt1XUKRpg== -----END CERTIFICATE-----Generated at Thu Dec 18 04:58:54 2025 by rpki-client