This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft File: jVdu0oonfliyPcAiWVHJyH9yxlc.mft (raw, json) Hash identifier: bYTwZGwVtv7qvdwe7AtkDZhyIjgFSlQHNLWb3P5C7aw= Subject key identifier: 74:16:E4:87:5A:3C:AF:6C:8A:D5:84:35:E0:05:C9:73:CB:7D:BF:65 Authority key identifier: 8D:57:6E:D2:8A:27:7E:58:B2:3D:C0:22:59:51:C9:C8:7F:72:C6:57 Certificate issuer: /CN=8d576ed28a277e58b23dc0225951c9c87f72c657 Certificate serial: 019AF352B2CCABEA3224E8BA84831456A51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdu0oonfliyPcAiWVHJyH9yxlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft Manifest number: 06 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: jVdu0oonfliyPcAiWVHJyH9yxlc.crl (hash: 3Gl7IxVjJg+rLWATq1J0HHUWsbMu/oW0/GauwmrmRs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdu0oonfliyPcAiWVHJyH9yxlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b2:cc:ab:ea:32:24:e8:ba:84:83:14:56:a5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576ed28a277e58b23dc0225951c9c87f72c657 Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=7416e4875a3caf6c8ad58435e005c973cb7dbf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:3e:f2:54:c2:d4:a4:63:44:c6:02:0f:34: aa:40:38:23:4c:7e:8f:b9:b1:75:a1:8d:a0:52:b2: 52:96:5d:13:32:f6:e3:9e:48:7c:4e:9e:40:19:a3: 88:2b:77:50:78:51:3f:58:61:b1:cc:68:24:c2:40: 58:58:9e:01:96:f5:c2:3e:48:b1:f6:1c:2d:e6:f5: 50:ae:ab:eb:f5:2e:55:01:ef:12:f1:ad:2b:72:a5: 4e:a3:1a:d1:12:01:98:0b:81:29:6a:93:cf:2e:5b: a4:16:a8:92:33:b0:65:ea:c2:42:0b:01:96:9d:b0: 1f:89:6e:56:bd:e6:ec:b0:ac:d0:fb:02:07:65:57: 9d:e8:90:d5:bb:6c:05:35:7d:70:fe:9f:7e:a9:11: 16:ba:10:ab:21:ca:d1:05:4c:95:2f:d0:cb:8f:74: 28:26:86:31:03:86:e5:c9:a8:d2:10:93:0b:4a:1b: 58:a9:8d:65:62:1c:7a:b7:3e:21:cc:d4:36:11:1c: 08:ea:ee:8b:34:86:0d:2c:40:22:92:4d:4c:2e:2c: f4:35:54:c4:11:b5:f4:77:b3:c6:d1:52:41:39:5f: 29:71:f6:91:55:b0:63:a3:a5:34:ef:aa:cb:cc:b1: d1:c9:4e:d7:3e:ed:e6:95:cd:92:d3:6e:6f:e2:e0: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:16:E4:87:5A:3C:AF:6C:8A:D5:84:35:E0:05:C9:73:CB:7D:BF:65 X509v3 Authority Key Identifier: keyid:8D:57:6E:D2:8A:27:7E:58:B2:3D:C0:22:59:51:C9:C8:7F:72:C6:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdu0oonfliyPcAiWVHJyH9yxlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0984f-1aad-46e4-857f-e43576add6fb/1/jVdu0oonfliyPcAiWVHJyH9yxlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:60:ff:5d:b8:28:8b:b9:ae:1a:4c:58:02:05:2b:5d:ae:c9: ac:5c:41:7d:98:f9:ef:31:41:12:5c:0e:56:3d:c6:9b:75:73: 41:c0:64:b6:fb:c8:45:b1:89:80:ee:9b:08:b0:3b:b6:5e:e6: e4:57:2a:78:f0:47:11:e5:f8:89:86:7b:79:1b:a9:8c:1c:12: 48:fa:1d:cf:73:c9:94:fa:ee:62:16:16:6c:3c:31:0a:03:54: f1:e5:58:d1:82:b5:b3:a2:b0:26:c8:b3:fb:63:ea:57:c6:6f: 5b:68:41:35:65:68:a3:13:db:4b:4c:6a:11:c8:13:96:e7:1f: c5:cb:b4:7b:c6:19:05:69:60:3e:b8:17:32:e9:c6:9d:88:e5: 2e:2d:d1:5f:ac:c6:59:c7:6b:f9:b9:46:a9:db:4c:c3:47:6a: 38:21:bc:9e:79:f0:95:01:87:4e:b4:30:6b:2b:17:f4:21:91: ad:64:87:63:a5:a7:cf:55:93:3a:15:d6:8a:60:7d:c8:ad:dd: 2d:9b:44:d2:38:a3:c4:3f:e2:89:2e:fb:b7:de:bb:f0:fe:10: 64:5c:f8:61:29:14:bc:ea:81:aa:a8:a9:d8:17:5f:28:65:cd: 35:2a:8c:67:8a:e8:23:9f:c3:39:12:95:fc:bf:3a:92:88:11: 96:58:af:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrLMq+oyJOi6hIMUVqUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2ZWQyOGEyNzdlNThiMjNkYzAyMjU5NTFjOWM4N2Y3 MmM2NTcwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD Eyg3NDE2ZTQ4NzVhM2NhZjZjOGFkNTg0MzVlMDA1Yzk3M2NiN2RiZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSI+8lTC1KRjRMYCDzSqQDgjTH6P ubF1oY2gUrJSll0TMvbjnkh8Tp5AGaOIK3dQeFE/WGGxzGgkwkBYWJ4BlvXCPkix 9hwt5vVQrqvr9S5VAe8S8a0rcqVOoxrREgGYC4EpapPPLlukFqiSM7Bl6sJCCwGW nbAfiW5WvebssKzQ+wIHZVed6JDVu2wFNX1w/p9+qREWuhCrIcrRBUyVL9DLj3Qo JoYxA4blyajSEJMLShtYqY1lYhx6tz4hzNQ2ERwI6u6LNIYNLEAikk1MLiz0NVTE EbX0d7PG0VJBOV8pcfaRVbBjo6U076rLzLHRyU7XPu3mlc2S025v4uC7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQW5IdaPK9sitWENeAFyXPLfb9lMB8GA1UdIwQY MBaAFI1XbtKKJ35Ysj3AIllRych/csZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkdTBvb25mbGl5UGNBaVdWSEp5SDl5eGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lMDk4NGYtMWFhZC00NmU0LTg1N2Yt ZTQzNTc2YWRkNmZiLzEvalZkdTBvb25mbGl5UGNBaVdWSEp5SDl5eGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lMDk4NGYtMWFhZC00NmU0LTg1N2YtZTQzNTc2YWRkNmZi LzEvalZkdTBvb25mbGl5UGNBaVdWSEp5SDl5eGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmD/Xbgo i7muGkxYAgUrXa7JrFxBfZj57zFBElwOVj3Gm3VzQcBktvvIRbGJgO6bCLA7tl7m 5FcqePBHEeX4iYZ7eRupjBwSSPodz3PJlPruYhYWbDwxCgNU8eVY0YK1s6KwJsiz +2PqV8ZvW2hBNWVooxPbS0xqEcgTlucfxcu0e8YZBWlgPrgXMunGnYjlLi3RX6zG Wcdr+blGqdtMw0dqOCG8nnnwlQGHTrQwaysX9CGRrWSHY6Wnz1WTOhXWimB9yK3d LZtE0jijxD/iiS77t9678P4QZFz4YSkUvOqBqqip2BdfKGXNNSqMZ4roI5/DORKV /L86kogRlliv9A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:32 2025 by rpki-client