This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json) Hash identifier: ITEL3jNs4KdxbdFVMRll8UMPbv/ORGOKJ0V+5IOuUmQ= Subject key identifier: 89:0C:A1:23:60:EC:6E:23:2D:89:20:1A:57:CD:2B:AA:45:F2:86:21 Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4 Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4 Certificate serial: 019AF352D91007732979E351755B9687FAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 11:01:24 +0000 Manifest this update: Sat 06 Dec 2025 11:01:24 +0000 Manifest next update: Sun 07 Dec 2025 11:01:24 +0000 Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: AseBdrPgWs2BnthbIx0ifwn9YLICzTTms4kh7mUA+lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d9:10:07:73:29:79:e3:51:75:5b:96:87:fa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4 Validity Not Before: Dec 6 11:01:24 2025 GMT Not After : Dec 7 11:01:24 2025 GMT Subject: CN=890ca12360ec6e232d89201a57cd2baa45f28621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:1c:8f:50:2a:d6:b1:ee:a0:78:21:f2:86: ae:f9:ba:62:fc:51:26:3a:16:db:ec:7c:a0:83:ac: ab:e0:30:1a:dd:75:87:96:1a:ab:f0:33:4e:87:d1: 0d:e7:92:b3:63:fa:5d:a4:bd:e0:2f:24:7c:52:56: f6:66:db:fe:79:f6:02:4c:c2:ba:c5:d3:02:16:aa: 40:08:8a:ab:9f:4f:d3:8c:10:c7:4a:12:b1:b1:bf: ff:a7:fd:93:c9:d1:28:dd:2c:3a:bf:a9:e6:78:c7: 06:42:4d:2d:be:d5:69:2a:c4:52:9c:da:d8:35:b6: 92:24:bc:90:c5:47:d8:dd:ee:3c:c1:dc:81:ba:6c: 3a:04:c0:8c:43:90:e5:21:ed:c3:3c:cb:8e:2f:0a: 74:4f:c6:03:08:a8:f2:b7:34:09:74:7d:13:24:61: 6a:0f:65:24:4f:9d:b3:55:fc:54:0f:38:dc:32:41: 47:06:d8:42:2f:3e:30:29:2d:e6:91:91:db:e4:d9: 78:6e:fe:fa:d4:cc:65:17:ba:46:2b:46:e2:e8:eb: d9:c1:e0:e7:b4:9d:37:ae:78:58:b0:db:fe:61:67: c7:6d:f3:70:dc:fb:58:a5:a4:47:92:5f:cc:17:f0: c6:39:9f:12:bd:48:f1:29:e9:cf:4c:b8:cb:54:83: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0C:A1:23:60:EC:6E:23:2D:89:20:1A:57:CD:2B:AA:45:F2:86:21 X509v3 Authority Key Identifier: keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b9:5e:2f:ba:13:d4:d9:56:d7:91:2c:2a:f3:73:8a:b7:d4: 5b:08:24:1c:e5:b2:b2:f8:08:10:09:1c:e6:69:f7:6b:b6:85: 8f:2f:5c:a1:2a:07:c6:17:5e:90:f1:9f:33:a5:24:01:c6:23: 19:c3:42:84:69:c1:2a:bb:01:2a:95:3e:bf:d7:63:bb:34:f0: a7:a8:01:e4:4f:94:13:36:62:b7:ab:5a:3f:66:ca:2b:04:17: 30:ad:58:81:84:8e:da:e9:88:35:34:0c:48:1d:92:f8:1f:32: ef:17:79:39:8d:e4:26:9f:d5:21:d0:88:39:54:11:3b:a8:bf: 5f:b0:44:19:06:b7:d7:6e:d4:27:9e:b1:b2:e2:57:91:f1:c3: bd:f6:d4:39:dd:22:e2:10:ab:a7:0d:df:45:e4:7b:bb:8a:27: 92:db:e3:0f:ed:16:c1:26:0c:67:4c:f1:fa:3d:f2:58:e4:71: 12:20:3c:b2:63:b1:94:1d:6a:9c:5e:26:7e:c8:69:ae:37:ba: 65:b4:8f:99:a3:e9:ed:4f:b8:fc:30:30:7a:cb:fd:0a:87:16: 31:bc:ea:b8:54:b0:c8:d2:fc:dc:cf:16:3f:78:8c:55:e4:8a: f3:d9:87:1d:bd:90:b5:6f:2a:b9:ee:33:d7:31:49:fb:9b:cb: fc:93:fe:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtkQB3MpeeNRdVuWh/rjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2QwY2M1YmQ4NmQ1NjgzNjY2NTdhZWYwMzEwZDQ5M2E3 MTc2ZTQwHhcNMjUxMjA2MTEwMTI0WhcNMjUxMjA3MTEwMTI0WjAzMTEwLwYDVQQD Eyg4OTBjYTEyMzYwZWM2ZTIzMmQ4OTIwMWE1N2NkMmJhYTQ1ZjI4NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOgcj1Aq1rHuoHgh8oau+bpi/FEm Ohbb7Hygg6yr4DAa3XWHlhqr8DNOh9EN55KzY/pdpL3gLyR8Ulb2Ztv+efYCTMK6 xdMCFqpACIqrn0/TjBDHShKxsb//p/2TydEo3Sw6v6nmeMcGQk0tvtVpKsRSnNrY NbaSJLyQxUfY3e48wdyBumw6BMCMQ5DlIe3DPMuOLwp0T8YDCKjytzQJdH0TJGFq D2UkT52zVfxUDzjcMkFHBthCLz4wKS3mkZHb5Nl4bv761MxlF7pGK0bi6OvZweDn tJ03rnhYsNv+YWfHbfNw3PtYpaRHkl/MF/DGOZ8SvUjxKenPTLjLVIMdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkMoSNg7G4jLYkgGlfNK6pF8oYhMB8GA1UdIwQY MBaAFCZ9DMW9htVoNmZXrvAxDUk6cXbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGIwNzQtN2Q1Ny00NjE2LWE4NWUt ODgwYWI3OTQ4NzI4LzEvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNGIwNzQtN2Q1Ny00NjE2LWE4NWUtODgwYWI3OTQ4NzI4 LzEvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbleL7oT 1NlW15EsKvNzirfUWwgkHOWysvgIEAkc5mn3a7aFjy9coSoHxhdekPGfM6UkAcYj GcNChGnBKrsBKpU+v9djuzTwp6gB5E+UEzZit6taP2bKKwQXMK1YgYSO2umINTQM SB2S+B8y7xd5OY3kJp/VIdCIOVQRO6i/X7BEGQa3127UJ56xsuJXkfHDvfbUOd0i 4hCrpw3fReR7u4onktvjD+0WwSYMZ0zx+j3yWORxEiA8smOxlB1qnF4mfshprje6 ZbSPmaPp7U+4/DAwesv9CocWMbzquFSwyNL83M8WP3iMVeSK89mHHb2QtW8que4z 1zFJ+5vL/JP+IA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:46 2025 by rpki-client