This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json) Hash identifier: 5f8ofsnpqX3H35RrCrWahr1ryCYaCk69mnfJ//JBiUg= Subject key identifier: DF:15:48:AC:F1:56:E5:19:8A:73:38:17:5F:7A:12:5C:01:8B:2E:37 Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Certificate serial: 019AF12D5A4682E04A578703B348632D5D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft Manifest number: 097B Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: XrM5Ji4y504simh8F2AGhkbxtrow6sfS2TpnC0sKEXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5a:46:82:e0:4a:57:87:03:b3:48:63:2d:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=df1548acf156e5198a7338175f7a125c018b2e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:fd:3e:56:98:00:1c:5e:a7:27:a6:f2:81: 46:6f:db:87:96:ef:82:64:1d:4e:f6:60:f1:f4:c8: 46:f2:c3:d7:8b:07:ea:ab:10:9b:23:83:df:5e:64: 31:3a:21:c6:fe:2b:4d:29:d1:5a:c4:c1:4b:86:60: bc:d4:17:ee:01:b4:cc:33:0a:98:3a:9d:3e:1c:f6: 22:24:a1:3d:f4:d2:c3:e7:49:53:f9:1b:72:e8:c4: 20:34:58:ce:e7:2c:a6:c6:97:4e:55:f5:3e:c2:ac: 77:99:59:de:4d:da:30:b1:b7:45:c7:9d:6f:c0:d4: 28:82:07:47:39:36:57:f5:d6:86:d4:65:e6:8b:bf: 90:2e:70:98:7d:81:99:5b:a1:56:b8:b1:1b:33:29: 5a:4d:a0:63:6a:af:ab:ef:2d:3c:33:ee:81:33:93: ee:2f:de:ed:eb:77:37:48:1d:66:34:1a:ff:6d:b7: 29:63:a6:2b:e5:9b:05:a5:9d:f9:de:aa:d0:6e:68: c5:86:26:c4:53:b1:47:6d:ec:55:71:2f:13:4e:43: 72:48:17:e6:76:04:2b:62:92:44:9a:02:41:3e:2b: ab:06:e5:9e:ab:ac:cc:34:ae:75:01:30:9f:82:65: 90:32:e8:ce:75:95:6d:bc:b8:d6:f3:ab:d5:60:0d: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:48:AC:F1:56:E5:19:8A:73:38:17:5F:7A:12:5C:01:8B:2E:37 X509v3 Authority Key Identifier: keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:be:48:c4:b5:4b:f0:46:12:65:c6:00:09:66:1d:b8:a8: a3:0c:a7:b9:a9:c1:69:f3:5b:23:f5:c0:ad:86:35:0c:4a:5a: 1e:91:85:a3:63:47:49:6f:82:06:b5:3d:dc:3b:7d:8d:95:6c: 76:ca:7d:cf:fb:83:d4:9e:fa:6c:b5:c5:11:94:4e:f2:1c:46: 46:3c:00:01:4d:31:ee:76:21:06:d3:0e:99:f7:89:c3:5a:85: 2b:db:03:06:42:e2:55:81:07:fd:41:0c:7f:d2:6c:56:ad:a4: 70:7e:1e:8c:aa:e9:ef:08:f3:ab:aa:99:1e:35:5d:81:35:3c: 15:9a:15:f1:5c:15:fb:a0:83:5c:e9:c8:69:53:69:fb:81:da: 7f:28:0d:83:92:a6:aa:79:25:dd:a7:a3:39:ab:ee:d5:44:ba: fe:30:01:35:0f:ee:9d:0e:61:5e:15:1d:b6:9f:df:93:19:d3: 40:45:27:e3:b1:6d:4e:39:9a:0a:b9:06:2e:48:7a:ff:18:01: d0:5d:24:8f:ce:dd:59:c1:cc:b6:ac:64:06:6a:0e:67:64:ed: 4f:83:be:32:25:72:0c:ea:d7:f2:0f:ad:07:2f:70:9f:60:cf: b7:be:11:85:dc:ec:18:d8:0f:ed:08:0e:13:36:0e:1c:fe:8b: e8:df:25:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVpGguBKV4cDs0hjLV0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTdkY2M3ZTUyZjU4YjM0MmI3MGM4M2RhYTIxYTEwNmFj NTkyOTEwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EyhkZjE1NDhhY2YxNTZlNTE5OGE3MzM4MTc1ZjdhMTI1YzAxOGIyZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIz9PlaYABxepyem8oFGb9uHlu+C ZB1O9mDx9MhG8sPXiwfqqxCbI4PfXmQxOiHG/itNKdFaxMFLhmC81BfuAbTMMwqY Op0+HPYiJKE99NLD50lT+Rty6MQgNFjO5yymxpdOVfU+wqx3mVneTdowsbdFx51v wNQoggdHOTZX9daG1GXmi7+QLnCYfYGZW6FWuLEbMylaTaBjaq+r7y08M+6BM5Pu L97t63c3SB1mNBr/bbcpY6Yr5ZsFpZ353qrQbmjFhibEU7FHbexVcS8TTkNySBfm dgQrYpJEmgJBPiurBuWeq6zMNK51ATCfgmWQMujOdZVtvLjW86vVYA0hqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8VSKzxVuUZinM4F196ElwBiy43MB8GA1UdIwQY MBaAFIxX3MflL1izQrcMg9qiGhBqxZKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYt NDEzMDZjMjdkNmYwLzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYtNDEzMDZjMjdkNmYw LzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY++SMS1 S/BGEmXGAAlmHbioowynuanBafNbI/XArYY1DEpaHpGFo2NHSW+CBrU93Dt9jZVs dsp9z/uD1J76bLXFEZRO8hxGRjwAAU0x7nYhBtMOmfeJw1qFK9sDBkLiVYEH/UEM f9JsVq2kcH4ejKrp7wjzq6qZHjVdgTU8FZoV8VwV+6CDXOnIaVNp+4HafygNg5Km qnkl3aejOavu1US6/jABNQ/unQ5hXhUdtp/fkxnTQEUn47FtTjmaCrkGLkh6/xgB 0F0kj87dWcHMtqxkBmoOZ2TtT4O+MiVyDOrX8g+tBy9wn2DPt74RhdzsGNgP7QgO EzYOHP6L6N8lrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:05 2025 by rpki-client