This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json) Hash identifier: BwF43HMPBkX6PKOEzUueMgvG5c4LHGFaNnJ8WzBrApA= Subject key identifier: 3A:64:D2:2D:03:DB:32:9E:E8:C7:76:47:87:0D:E5:85:33:ED:3D:3B Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9 Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9 Certificate serial: 019AF1D17FABF5C17FE60BDEC51B8798D11D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: VdtHJV/WnwoM1u1nBRFdTdx+woIbRk+GW2DD/Qpa6cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7f:ab:f5:c1:7f:e6:0b:de:c5:1b:87:98:d1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=3a64d22d03db329ee8c77647870de58533ed3d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:5b:10:f3:d0:bb:96:e6:c7:fb:7d:6c:82: 56:8b:03:96:bf:f3:4f:a2:c2:bd:e9:97:90:c7:00: 23:13:a4:74:72:4a:51:a8:3c:02:ce:dd:bf:92:30: 73:9f:b4:bf:08:1a:ad:88:16:27:30:4c:5e:f3:5c: e6:2a:45:6b:38:e5:15:9e:83:a3:a0:a7:48:0d:e6: c6:af:9e:e3:ac:86:c5:81:12:d1:b3:bd:8f:18:82: 9b:d2:46:b9:4f:a2:e1:43:23:7f:f1:b5:ff:a2:24: 28:8c:6d:eb:e0:a4:d8:5c:45:d2:44:4f:61:53:cd: b2:a7:a4:c7:5a:0d:88:c2:10:b3:c0:97:dc:73:f2: 07:c2:d6:75:6d:36:1e:73:ea:43:ac:e2:b2:8f:fc: 7b:1a:92:fc:2f:d7:3a:45:5b:1f:63:55:b0:57:79: 76:0b:51:8d:e4:fc:f8:b0:63:9b:69:2f:85:98:31: 15:86:c3:c2:45:da:71:0f:46:7c:1a:ef:b0:43:5e: c1:0d:82:b5:4a:f0:1e:6d:4b:7c:81:6c:d5:d8:50: e1:07:3e:c0:99:3e:00:c6:08:ad:4e:35:e0:9f:fb: 33:44:d5:05:d5:ee:8e:b1:d9:90:e6:e2:04:3a:34: e4:80:df:a0:d6:fa:48:9e:44:2a:d0:37:d0:62:ae: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:D2:2D:03:DB:32:9E:E8:C7:76:47:87:0D:E5:85:33:ED:3D:3B X509v3 Authority Key Identifier: keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cb:97:37:6b:a1:88:cc:24:e8:3a:b6:5d:aa:d5:83:1f:87: 7e:32:ff:3e:89:23:96:81:42:7b:97:25:a6:c3:c1:01:f0:1e: 1c:ad:aa:a5:38:e4:6e:25:f3:9e:f8:85:5c:6c:88:54:a7:fe: 04:0a:9a:bd:85:21:ba:67:6d:a0:ed:21:98:86:56:04:50:ae: e2:cc:a6:6b:0a:ba:e1:c2:dd:c9:70:8f:e8:a9:fa:04:43:85: c6:a7:55:c2:6e:5d:75:b7:b5:84:7f:d1:dd:48:71:46:2d:b8: a9:3b:84:cf:93:87:6a:3b:ac:f5:fc:91:b0:e8:75:2a:cd:0e: 7a:7c:aa:f7:36:97:c8:1a:f2:ec:12:dd:fa:03:c6:f5:5c:09: 4c:49:60:80:df:28:80:4e:85:19:95:bf:f0:7d:c2:d2:e6:74: 89:81:3f:7f:62:a5:f9:cb:3c:42:ff:b1:dd:e2:63:c8:47:88: ec:6a:2a:5f:cd:74:2e:20:38:c7:73:39:a6:f6:5f:45:67:13: 88:eb:35:99:15:15:c8:39:16:64:bc:fa:92:fd:28:07:51:a3: 5e:20:d4:a3:e3:63:fe:1e:23:36:95:31:05:9c:ca:07:c9:d4: 7f:6d:11:00:60:01:f9:fc:b5:83:86:0e:36:6b:b6:92:e7:10: 85:ca:87:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X+r9cF/5gvexRuHmNEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk Yzc1ZjkwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EygzYTY0ZDIyZDAzZGIzMjllZThjNzc2NDc4NzBkZTU4NTMzZWQzZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7NbEPPQu5bmx/t9bIJWiwOWv/NP osK96ZeQxwAjE6R0ckpRqDwCzt2/kjBzn7S/CBqtiBYnMExe81zmKkVrOOUVnoOj oKdIDebGr57jrIbFgRLRs72PGIKb0ka5T6LhQyN/8bX/oiQojG3r4KTYXEXSRE9h U82yp6THWg2IwhCzwJfcc/IHwtZ1bTYec+pDrOKyj/x7GpL8L9c6RVsfY1WwV3l2 C1GN5Pz4sGObaS+FmDEVhsPCRdpxD0Z8Gu+wQ17BDYK1SvAebUt8gWzV2FDhBz7A mT4AxgitTjXgn/szRNUF1e6OsdmQ5uIEOjTkgN+g1vpInkQq0DfQYq4ORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpk0i0D2zKe6Md2R4cN5YUz7T07MB8GA1UdIwQY MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsuXN2uh iMwk6Dq2XarVgx+HfjL/PokjloFCe5clpsPBAfAeHK2qpTjkbiXznviFXGyIVKf+ BAqavYUhumdtoO0hmIZWBFCu4symawq64cLdyXCP6Kn6BEOFxqdVwm5ddbe1hH/R 3UhxRi24qTuEz5OHajus9fyRsOh1Ks0Oenyq9zaXyBry7BLd+gPG9VwJTElggN8o gE6FGZW/8H3C0uZ0iYE/f2Kl+cs8Qv+x3eJjyEeI7GoqX810LiA4x3M5pvZfRWcT iOs1mRUVyDkWZLz6kv0oB1GjXiDUo+Nj/h4jNpUxBZzKB8nUf20RAGAB+fy1g4YO Nmu2kucQhcqH/g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:05 2025 by rpki-client