This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json) Hash identifier: 3GNAahYCOvswG8i9lYYvPQwhIcxf5x9BNcxElBG2nZg= Subject key identifier: 94:E1:4A:D7:FF:6D:84:E0:AE:83:44:5D:F4:D2:2C:69:39:43:0E:42 Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63 Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863 Certificate serial: 019AF509A3B0A1F7DE65E88CB4CE5BCF2FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:00:40 +0000 Manifest this update: Sat 06 Dec 2025 19:00:40 +0000 Manifest next update: Sun 07 Dec 2025 19:00:40 +0000 Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: r6cAHT1L161/iBjKYAhHlqb7/x5di2K+oKGN5mNHM8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a3:b0:a1:f7:de:65:e8:8c:b4:ce:5b:cf:2f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863 Validity Not Before: Dec 6 19:00:40 2025 GMT Not After : Dec 7 19:00:40 2025 GMT Subject: CN=94e14ad7ff6d84e0ae83445df4d22c6939430e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a6:7d:a5:60:b3:92:b4:21:21:f6:9a:3b:02: a0:7e:d8:66:ae:0f:49:a9:23:66:2d:39:31:1a:7c: 15:f8:76:6d:1a:72:dc:01:38:4e:a2:c6:79:da:c3: 9c:3e:c7:09:7d:3f:75:4f:4c:49:24:95:e9:39:c2: 62:5a:df:3d:b8:fe:f7:0f:43:b5:ba:be:1b:4a:3d: fb:20:84:97:05:30:0a:3c:fa:bd:c0:89:79:d2:ff: d7:d9:2f:0b:33:e0:f4:e6:af:f4:47:42:aa:44:cc: 4a:b8:59:8f:66:f5:44:ce:0e:f8:d0:3c:c3:24:6e: 8e:cb:db:cd:e7:99:af:8f:3c:b6:f7:4f:7f:54:90: 3a:c9:d2:43:f8:63:c5:5a:af:5f:e2:ff:6c:e8:fd: 99:4b:63:0f:6e:be:dd:34:f5:2f:65:0e:7b:ec:77: 52:43:df:ad:2a:50:ab:0b:29:cc:09:41:84:e5:d7: f6:63:28:9e:81:46:32:05:d5:03:c7:bf:7c:64:16: c4:f1:3b:ea:bb:2a:3c:83:3a:67:49:06:2f:1a:6a: a1:dc:0b:12:5d:02:e9:ac:2f:64:a8:05:c1:5e:9e: 8c:79:f7:e4:c3:d5:8f:c3:51:92:ec:ce:58:c5:c0: 49:89:2b:75:9c:2c:f1:d0:e0:b8:a7:53:7d:8b:62: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E1:4A:D7:FF:6D:84:E0:AE:83:44:5D:F4:D2:2C:69:39:43:0E:42 X509v3 Authority Key Identifier: keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:f7:43:e8:97:4f:f7:3b:12:23:6e:25:12:d9:15:75:19: 3a:bd:e8:c2:7b:42:ac:f2:b4:1e:45:81:2b:d6:58:d7:f5:29: 91:da:4c:d2:6a:4a:7c:62:31:d7:39:fa:3a:70:1d:94:3d:2a: 74:70:1d:44:5d:3d:e4:ae:d2:5e:f4:79:11:ea:6c:f6:20:10: e2:6a:1d:98:2b:4d:99:40:64:6b:9b:7d:01:bf:4a:47:a4:26: 0d:67:86:57:12:65:43:d9:61:21:eb:58:78:84:ec:90:50:b2: 22:5d:82:30:59:13:2b:f4:e3:9b:ae:77:68:45:16:bd:ee:51: 13:51:1d:db:f2:21:dc:93:e3:a1:e0:7f:a9:8e:f5:2a:76:a0: 88:ca:7d:94:0b:04:95:25:1d:bf:3e:72:d7:92:83:20:20:73: 29:3a:93:75:16:12:c1:59:a5:75:50:4b:2f:31:54:c6:5e:b1: f2:3f:29:4c:48:8c:57:f4:75:f2:bd:9f:f7:5d:86:19:b4:ad: d8:01:fb:93:78:c8:36:38:5f:4f:a0:c1:d1:9c:36:f7:bc:dd: 80:25:82:73:27:31:0a:f5:23:59:f0:52:53:75:e7:b0:cb:d4: 47:90:2e:e8:33:74:4e:b9:3c:11:86:9f:2b:52:77:35:2a:0b: 65:44:5d:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CaOwoffeZeiMtM5bzy+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw NzQ4NjMwHhcNMjUxMjA2MTkwMDQwWhcNMjUxMjA3MTkwMDQwWjAzMTEwLwYDVQQD Eyg5NGUxNGFkN2ZmNmQ4NGUwYWU4MzQ0NWRmNGQyMmM2OTM5NDMwZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaZ9pWCzkrQhIfaaOwKgfthmrg9J qSNmLTkxGnwV+HZtGnLcAThOosZ52sOcPscJfT91T0xJJJXpOcJiWt89uP73D0O1 ur4bSj37IISXBTAKPPq9wIl50v/X2S8LM+D05q/0R0KqRMxKuFmPZvVEzg740DzD JG6Oy9vN55mvjzy2909/VJA6ydJD+GPFWq9f4v9s6P2ZS2MPbr7dNPUvZQ577HdS Q9+tKlCrCynMCUGE5df2YyiegUYyBdUDx798ZBbE8Tvquyo8gzpnSQYvGmqh3AsS XQLprC9kqAXBXp6Meffkw9WPw1GS7M5YxcBJiSt1nCzx0OC4p1N9i2Ll5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJThStf/bYTgroNEXfTSLGk5Qw5CMB8GA1UdIwQY MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIln3Q+iX T/c7EiNuJRLZFXUZOr3owntCrPK0HkWBK9ZY1/UpkdpM0mpKfGIx1zn6OnAdlD0q dHAdRF095K7SXvR5Eeps9iAQ4modmCtNmUBka5t9Ab9KR6QmDWeGVxJlQ9lhIetY eITskFCyIl2CMFkTK/Tjm653aEUWve5RE1Ed2/Ih3JPjoeB/qY71KnagiMp9lAsE lSUdvz5y15KDICBzKTqTdRYSwVmldVBLLzFUxl6x8j8pTEiMV/R18r2f912GGbSt 2AH7k3jINjhfT6DB0Zw297zdgCWCcycxCvUjWfBSU3XnsMvUR5Au6DN0Trk8EYaf K1J3NSoLZURdKQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:49:30 2025 by rpki-client