This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json) Hash identifier: yyIOueHT+Fc2YJawaUX3wYTxQ0cVHGNYPDpcLG/yOU4= Subject key identifier: 7E:79:F2:B0:A8:C5:46:F4:5F:93:B4:F0:52:28:9B:B4:46:C5:63:80 Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Certificate serial: 019AF163FD63F058BF00008EA7003345DF97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft Manifest number: 04B1 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: gCs5xY6y75w6y6gbKgdMRJ4uJO6AvRH4jQ4I+gsuKvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fd:63:f0:58:bf:00:00:8e:a7:00:33:45:df:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=7e79f2b0a8c546f45f93b4f052289bb446c56380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:32:a5:f6:1c:f6:48:57:1f:1b:6f:86:83:ae: 30:76:98:47:68:09:67:de:fa:dd:f2:81:4e:1f:7b: c8:09:aa:33:df:b4:86:f2:53:5b:31:80:43:11:20: 2c:7e:c5:02:53:0b:19:47:43:94:8f:46:b6:df:e2: 81:4a:92:63:a0:47:14:00:98:96:f5:f4:17:08:b7: 9e:9e:73:62:b6:48:53:55:cb:f0:46:21:46:2c:fc: b6:7e:70:f0:6f:06:55:15:af:f4:3f:8c:c0:c7:52: 30:18:85:68:f4:69:32:a6:90:42:88:c5:44:bc:13: 3b:e1:93:80:94:1d:07:85:4a:14:6a:84:3b:a7:53: f6:52:60:84:30:8c:f9:12:e8:90:dc:5e:04:9a:75: 08:e4:ca:f5:c0:41:7f:4b:a3:a2:e7:53:78:97:c0: cc:7b:78:df:e2:7b:e9:42:a8:3e:3e:a4:4c:e7:b9: 84:33:64:fc:87:21:7d:d1:85:c2:cb:7e:bf:86:e4: 30:bb:ac:c5:61:c8:96:19:76:84:ca:e3:aa:09:97: 8e:b7:b3:47:8f:f2:eb:d7:28:de:58:de:9e:03:f7: 90:52:b2:3b:16:a0:83:b0:c7:ea:0e:8a:8d:3d:bd: b9:56:66:2d:28:db:6e:01:11:a4:44:67:53:9c:74: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:F2:B0:A8:C5:46:F4:5F:93:B4:F0:52:28:9B:B4:46:C5:63:80 X509v3 Authority Key Identifier: keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:97:14:7f:e2:9a:bb:9a:7d:df:d9:c3:9e:46:fb:51:24:6a: 39:ba:29:d1:4c:52:da:21:c1:30:26:ae:d0:7a:f9:42:73:6e: 4c:98:49:fd:f9:42:ec:c2:40:68:2f:ad:70:4c:ef:7c:a0:8b: 3e:94:cb:8d:55:2d:f6:4c:0c:49:2b:72:91:49:f8:0f:28:9b: 1b:55:38:0b:77:44:87:e1:3c:63:f8:d6:04:d5:bf:7e:83:cb: 38:ef:11:6e:92:0e:5c:6f:7f:f7:3f:57:2e:86:fb:39:64:9d: 93:24:75:d3:8f:85:a8:eb:05:b5:ba:25:8b:30:bb:8f:c6:7c: e3:bf:ae:aa:25:ab:82:7c:35:e8:1d:1f:5d:3c:ab:94:1e:de: ac:7c:5d:93:9a:a2:cf:4b:41:57:84:f7:6c:a3:54:cf:9e:7e: 4b:c8:ab:58:7d:88:90:df:63:64:e9:e1:28:9f:59:98:13:71: 64:9d:14:76:6b:86:98:1c:7c:ca:19:43:aa:72:b6:18:47:8c: 85:d5:14:19:15:0d:f1:45:5d:12:2f:20:07:55:86:5e:ed:93: 89:3d:b5:ab:50:1f:e5:f4:d0:93:6d:52:d9:96:bf:d5:5e:bd: 66:b7:19:e0:4c:06:4c:20:de:f1:6d:b2:fe:23:82:a5:c0:22: fe:81:31:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/1j8Fi/AACOpwAzRd+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTI2OTJiMWJjZTdiMDMyN2MxZmU3NWM4OTI5OWUyZjg2 MjE3ZmMwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD Eyg3ZTc5ZjJiMGE4YzU0NmY0NWY5M2I0ZjA1MjI4OWJiNDQ2YzU2MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizKl9hz2SFcfG2+Gg64wdphHaAln 3vrd8oFOH3vICaoz37SG8lNbMYBDESAsfsUCUwsZR0OUj0a23+KBSpJjoEcUAJiW 9fQXCLeennNitkhTVcvwRiFGLPy2fnDwbwZVFa/0P4zAx1IwGIVo9GkyppBCiMVE vBM74ZOAlB0HhUoUaoQ7p1P2UmCEMIz5EuiQ3F4EmnUI5Mr1wEF/S6Oi51N4l8DM e3jf4nvpQqg+PqRM57mEM2T8hyF90YXCy36/huQwu6zFYciWGXaEyuOqCZeOt7NH j/Lr1yjeWN6eA/eQUrI7FqCDsMfqDoqNPb25VmYtKNtuARGkRGdTnHRMhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH558rCoxUb0X5O08FIom7RGxWOAMB8GA1UdIwQY MBaAFJ/iaSsbznsDJ8H+dciSmeL4Yhf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzIt NzBmYzFlYWI1NGMxLzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzItNzBmYzFlYWI1NGMx LzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJcUf+Ka u5p939nDnkb7USRqObop0UxS2iHBMCau0Hr5QnNuTJhJ/flC7MJAaC+tcEzvfKCL PpTLjVUt9kwMSStykUn4DyibG1U4C3dEh+E8Y/jWBNW/foPLOO8RbpIOXG9/9z9X Lob7OWSdkyR104+FqOsFtbolizC7j8Z847+uqiWrgnw16B0fXTyrlB7erHxdk5qi z0tBV4T3bKNUz55+S8irWH2IkN9jZOnhKJ9ZmBNxZJ0UdmuGmBx8yhlDqnK2GEeM hdUUGRUN8UVdEi8gB1WGXu2TiT21q1Af5fTQk21S2Za/1V69ZrcZ4EwGTCDe8W2y /iOCpcAi/oExjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:27 2025 by rpki-client