This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json) Hash identifier: rJiKUoTTtCT6RFsIyg4oOO1N1sb+pTV9ZHhpfOTPKWk= Subject key identifier: B6:94:85:43:B8:F3:73:68:9D:3B:84:DB:43:A6:F1:82:5D:51:F3:12 Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32 Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32 Certificate serial: 019AF31BD18824ACED3178B6944AEF96A2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 10:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:01:17 +0000 Manifest next update: Sun 07 Dec 2025 10:01:17 +0000 Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: HxSZiHz1CTENeOXR5SkzLY2w8wVAJ25LebzNfzFVB3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d1:88:24:ac:ed:31:78:b6:94:4a:ef:96:a2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32 Validity Not Before: Dec 6 10:01:17 2025 GMT Not After : Dec 7 10:01:17 2025 GMT Subject: CN=b6948543b8f373689d3b84db43a6f1825d51f312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:15:96:9e:25:0c:59:36:53:cf:6d:14:43: af:f6:73:a4:34:c8:04:07:70:bd:c5:89:a7:4a:c3: 6e:02:0b:c9:88:21:4e:18:21:3a:8e:b5:1b:6e:1f: fd:6e:27:8c:bc:cc:e8:a3:7e:72:11:8f:97:8e:29: 3d:c7:b2:ec:a8:4f:27:af:7c:71:09:0a:4e:7d:7b: 55:09:52:50:83:be:29:ae:9d:18:f0:61:14:a5:2b: 57:9a:fb:98:ca:7e:6d:f0:16:f6:b7:a0:c9:d3:6a: 8e:37:38:c2:23:9b:82:5b:63:f7:e8:d2:15:cf:38: 14:c8:b2:8c:2e:a1:52:92:c4:54:a7:9f:aa:be:d5: b6:54:a7:29:72:c2:c6:63:1a:ad:0e:2c:0f:42:a4: a1:b6:cd:8f:3c:e0:b5:0e:f6:6c:0f:e1:fb:ac:be: 5b:ec:36:14:32:1f:5d:46:94:56:1f:4e:af:66:16: 82:8b:53:dc:a6:93:8a:af:00:bf:61:4e:76:a8:df: a3:d2:c8:78:7c:06:ba:8c:14:55:f6:d7:a7:32:1a: 36:4f:b6:a9:27:9a:07:2d:23:5a:de:ce:89:d1:1c: 4f:16:77:af:a4:74:39:80:64:d5:14:c4:fe:d8:9f: bd:82:a0:16:ce:9d:5f:98:a1:b4:1f:e0:86:56:67: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:85:43:B8:F3:73:68:9D:3B:84:DB:43:A6:F1:82:5D:51:F3:12 X509v3 Authority Key Identifier: keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:db:50:2d:82:d6:bf:b9:0f:ae:b9:bb:ca:f5:d6:cb:a1:92: 75:28:b0:97:77:d4:93:e3:1e:b8:22:3f:4b:b0:a9:62:3e:28: 72:6f:6f:42:41:1a:3e:b9:14:95:70:f2:8b:8c:fc:b2:af:ea: 58:c2:bb:98:ce:54:f6:01:d9:b4:02:43:be:57:67:c4:86:56: 7c:02:66:0c:16:34:43:d9:d8:65:eb:32:b2:fb:97:fd:ab:64: 64:81:16:aa:8e:aa:bf:cc:dc:8b:2c:46:d5:e4:0d:2a:c9:8e: fa:c2:4e:61:77:e1:70:9b:10:55:80:99:3b:30:68:da:41:91: 83:23:f2:5e:6d:0a:60:48:08:a1:6a:7d:ab:3b:80:41:10:ff: 7f:b8:e6:93:2e:30:25:fe:cf:03:81:aa:55:45:a2:2c:79:08: 53:db:3c:be:38:cb:9c:8c:ce:62:e6:c0:9c:cd:a5:58:1e:59: 75:31:e5:1d:00:a9:1f:ec:f9:e0:cb:e3:cd:fc:28:3a:a9:bc: b0:52:28:e3:58:82:50:85:d9:45:b8:4f:28:10:33:6a:25:b6: 9a:9d:55:21:aa:9d:2e:77:11:11:06:7b:78:5b:d2:72:fe:c1: 59:42:df:d9:eb:70:9b:9b:e9:cd:1e:ca:93:4c:60:28:7c:d1: f9:b3:ae:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9GIJKztMXi2lErvlqLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzIwYzVmZjBjZGJlMmQ1MWIwOGI4ZjYwMWU0ZjBhNDQ1 NTBmMzIwHhcNMjUxMjA2MTAwMTE3WhcNMjUxMjA3MTAwMTE3WjAzMTEwLwYDVQQD EyhiNjk0ODU0M2I4ZjM3MzY4OWQzYjg0ZGI0M2E2ZjE4MjVkNTFmMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/gVlp4lDFk2U89tFEOv9nOkNMgE B3C9xYmnSsNuAgvJiCFOGCE6jrUbbh/9bieMvMzoo35yEY+Xjik9x7LsqE8nr3xx CQpOfXtVCVJQg74prp0Y8GEUpStXmvuYyn5t8Bb2t6DJ02qONzjCI5uCW2P36NIV zzgUyLKMLqFSksRUp5+qvtW2VKcpcsLGYxqtDiwPQqShts2PPOC1DvZsD+H7rL5b 7DYUMh9dRpRWH06vZhaCi1PcppOKrwC/YU52qN+j0sh4fAa6jBRV9tenMho2T7ap J5oHLSNa3s6J0RxPFnevpHQ5gGTVFMT+2J+9gqAWzp1fmKG0H+CGVmdPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaUhUO483NonTuE20Om8YJdUfMSMB8GA1UdIwQY MBaAFI0yDF/wzb4tUbCLj2AeTwpEVQ8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQt MWI1MTNlYmQ0MzMwLzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQtMWI1MTNlYmQ0MzMw LzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdtQLYLW v7kPrrm7yvXWy6GSdSiwl3fUk+MeuCI/S7CpYj4ocm9vQkEaPrkUlXDyi4z8sq/q WMK7mM5U9gHZtAJDvldnxIZWfAJmDBY0Q9nYZesysvuX/atkZIEWqo6qv8zciyxG 1eQNKsmO+sJOYXfhcJsQVYCZOzBo2kGRgyPyXm0KYEgIoWp9qzuAQRD/f7jmky4w Jf7PA4GqVUWiLHkIU9s8vjjLnIzOYubAnM2lWB5ZdTHlHQCpH+z54MvjzfwoOqm8 sFIo41iCUIXZRbhPKBAzaiW2mp1VIaqdLncREQZ7eFvScv7BWULf2etwm5vpzR7K k0xgKHzR+bOujw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:18 2025 by rpki-client