This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json) Hash identifier: r64mSh3u8ysJ35A0Ig/CSli7u1f+VODpnXnGx4dq/4g= Subject key identifier: 0F:C8:3B:5D:65:38:86:1C:46:27:AD:49:03:B3:F1:43:FC:ED:6A:65 Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d Certificate serial: 019AF3528C8F0983493ED136575720DA66E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft Manifest number: 1003 Signing time: Sat 06 Dec 2025 11:01:04 +0000 Manifest this update: Sat 06 Dec 2025 11:01:04 +0000 Manifest next update: Sun 07 Dec 2025 11:01:04 +0000 Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: ADQunq2Hl071bEBG2vnxsUnTUCKEtnnWhXFPxuM7Ldo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8c:8f:09:83:49:3e:d1:36:57:57:20:da:66:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d Validity Not Before: Dec 6 11:01:04 2025 GMT Not After : Dec 7 11:01:04 2025 GMT Subject: CN=0fc83b5d6538861c4627ad4903b3f143fced6a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:15:8a:fc:df:5f:23:d7:7c:50:ff:7d:ab: ab:bb:cb:a8:78:33:19:d1:24:11:79:43:ed:7d:5b: 84:97:f6:97:84:e3:2a:19:f8:4f:b9:76:54:84:16: 94:49:8e:77:84:54:08:5e:14:1c:e6:b9:c3:ac:02: 47:c4:fd:fb:fa:f3:73:75:e7:7d:b1:26:8b:99:e3: 55:f1:7b:f1:63:06:27:05:c9:f3:b4:e8:15:46:c6: 29:9c:ca:61:f0:e5:87:f8:10:12:55:90:07:66:06: 28:28:a2:43:05:21:d1:19:92:e5:73:99:fe:11:1c: e4:0b:e8:83:87:69:6e:6e:d9:5b:f1:b4:70:bd:c4: 4c:90:d4:68:d0:66:4c:de:9b:3a:9c:d3:7c:51:ca: 60:e1:20:7f:0c:36:8f:24:de:08:a9:af:d7:0d:fb: 54:3a:86:e0:ac:8c:fd:3a:47:cd:6f:19:73:37:14: 8d:04:35:73:88:d7:13:07:0c:92:61:cd:bc:b3:e8: c6:ec:ad:57:fa:77:dc:6a:bc:4d:85:2e:f2:20:b6: 6a:cd:55:cd:93:a3:be:c1:2d:76:00:dd:3c:5d:ee: 7c:84:21:89:22:ee:0f:18:a0:61:22:6a:20:69:35: d8:26:f0:3e:53:47:21:3a:a3:9e:10:f3:d9:5f:d4: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:3B:5D:65:38:86:1C:46:27:AD:49:03:B3:F1:43:FC:ED:6A:65 X509v3 Authority Key Identifier: keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:80:94:8a:83:87:2c:94:a7:87:67:96:e6:e0:a2:be:37:a2: 0a:bd:32:46:fc:c1:9a:cb:40:61:cd:4f:b0:59:32:08:16:ec: 7f:9a:51:d3:62:42:d5:88:33:2e:f1:3f:24:2d:a9:06:f6:b6: f8:59:b3:d8:02:b0:4c:ef:fa:8d:d4:b9:6f:32:de:c7:69:c4: 6e:76:0e:f8:cc:5a:9b:3c:f6:dd:77:51:d9:0f:c6:1d:6f:42: 83:c6:cf:b1:71:3c:75:e3:5b:03:e6:b2:71:aa:b2:fb:bc:5a: 50:ab:3b:99:5c:a6:bf:96:b5:25:51:53:19:06:b5:3a:cd:e5: 62:37:f6:af:87:96:52:af:aa:a5:6e:6f:a1:d7:23:fd:67:08: fc:24:e4:5a:47:40:90:d9:9b:b5:10:c4:74:26:6d:80:87:bb: 27:75:6f:92:21:40:52:32:6d:ee:3c:b0:98:44:44:41:23:64: c8:7c:49:71:68:35:22:da:f5:8b:09:27:04:ed:e6:93:79:92: b5:6f:66:14:11:40:34:ec:3d:fb:2e:16:6c:56:85:9c:4e:a0: 55:dd:29:53:e9:5d:c1:6d:b2:21:a1:7b:59:ba:8e:d4:1f:39: 26:de:02:7c:03:1e:45:32:3a:2b:09:db:87:e8:2c:9d:6e:e9: da:1a:5f:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoyPCYNJPtE2V1cg2mbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzU1YWMxOWI2YTFjM2UzNTM0NjQ2N2ZlNzBlYjU1MWZk MmVlN2QwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD EygwZmM4M2I1ZDY1Mzg4NjFjNDYyN2FkNDkwM2IzZjE0M2ZjZWQ2YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfEVivzfXyPXfFD/fauru8uoeDMZ 0SQReUPtfVuEl/aXhOMqGfhPuXZUhBaUSY53hFQIXhQc5rnDrAJHxP37+vNzded9 sSaLmeNV8XvxYwYnBcnztOgVRsYpnMph8OWH+BASVZAHZgYoKKJDBSHRGZLlc5n+ ERzkC+iDh2lubtlb8bRwvcRMkNRo0GZM3ps6nNN8Ucpg4SB/DDaPJN4Iqa/XDftU OobgrIz9OkfNbxlzNxSNBDVziNcTBwySYc28s+jG7K1X+nfcarxNhS7yILZqzVXN k6O+wS12AN08Xe58hCGJIu4PGKBhImogaTXYJvA+U0chOqOeEPPZX9SfAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/IO11lOIYcRietSQOz8UP87WplMB8GA1UdIwQY MBaAFIx1WsGbahw+NTRkZ/5w61Uf0u59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi85ZWM0NzEtNWQwMy00NTQ4LWIzYjct YmQ5YzM2MGFlMDZlLzEvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi85ZWM0NzEtNWQwMy00NTQ4LWIzYjctYmQ5YzM2MGFlMDZl LzEvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4CUioOH LJSnh2eW5uCivjeiCr0yRvzBmstAYc1PsFkyCBbsf5pR02JC1YgzLvE/JC2pBva2 +Fmz2AKwTO/6jdS5bzLex2nEbnYO+Mxamzz23XdR2Q/GHW9Cg8bPsXE8deNbA+ay caqy+7xaUKs7mVymv5a1JVFTGQa1Os3lYjf2r4eWUq+qpW5vodcj/WcI/CTkWkdA kNmbtRDEdCZtgIe7J3VvkiFAUjJt7jywmEREQSNkyHxJcWg1Itr1iwknBO3mk3mS tW9mFBFANOw9+y4WbFaFnE6gVd0pU+ldwW2yIaF7WbqO1B85Jt4CfAMeRTI6Kwnb h+gsnW7p2hpfAg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:56 2025 by rpki-client