This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json) Hash identifier: btNtDtKNXGIZR6Z3Z0LHC8C0zg83Fp3PaaEbjcdaX7M= Subject key identifier: 1E:D8:4B:48:34:5D:2E:CA:BC:AD:02:91:79:F5:CF:00:F5:DC:C3:9C Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef Certificate serial: 019AF12D58AB508CB690EE5AF90C8AAA82EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft Manifest number: 0D09 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: OpCLwG33bOV/BiKrdwnC46ZLiGyTWudd1qNIV7CZqPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:58:ab:50:8c:b6:90:ee:5a:f9:0c:8a:aa:82:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=1ed84b48345d2ecabcad029179f5cf00f5dcc39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:7c:ef:98:61:0e:47:31:da:e0:7b:11:7b: 3b:d4:23:10:59:9a:6f:e7:23:8c:a0:a5:fa:ba:2e: a3:e2:78:11:d2:19:c3:5a:8d:12:99:54:f9:66:7f: 4e:28:3f:d5:8d:ff:ad:c0:6f:5b:55:0b:59:47:ec: 2a:e6:64:8a:d9:e9:95:99:f0:c4:3a:b8:56:5f:c6: f9:29:1c:6d:39:24:04:62:51:d1:fe:20:68:12:0c: 60:18:0d:7d:22:27:bc:e0:c4:ae:d0:64:af:dd:23: c4:ed:20:3b:fa:dc:fe:5f:2d:86:b4:12:65:20:72: 88:33:4d:6c:49:c0:94:3b:3a:b3:1d:49:03:28:c8: 19:6a:07:bf:e9:50:bd:d5:78:7f:1b:c3:da:b7:f4: 69:bd:58:0c:e1:05:1a:ce:1e:55:94:02:06:ff:7f: 53:59:4b:35:5b:87:82:03:f0:41:4b:8a:33:cd:f0: 9b:91:8a:01:8c:af:9e:53:4c:8d:d8:29:3b:e9:a6: 1a:e5:c8:b1:d2:8a:71:df:a1:b5:65:7e:ec:da:ac: 42:a8:93:bd:ae:a9:cf:b9:c2:a8:87:8a:74:4c:c2: 51:68:0c:6b:f0:9b:e4:67:f2:5f:da:27:88:6e:16: c7:99:15:b8:7d:4c:fd:a2:bc:ff:a9:02:a0:81:06: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D8:4B:48:34:5D:2E:CA:BC:AD:02:91:79:F5:CF:00:F5:DC:C3:9C X509v3 Authority Key Identifier: keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:65:b2:27:e7:b5:cb:2b:b1:0f:0c:a9:df:fb:41:25:68:dd: 13:d9:f2:a1:f3:17:98:c4:f1:aa:8f:c6:9d:2c:1b:68:ac:6c: ea:89:d5:51:a6:b9:ff:36:e0:72:e5:35:2d:56:b1:2b:88:c4: 0b:1a:a5:bf:1b:3f:0b:43:9a:37:b3:6d:64:65:12:66:e8:de: 69:48:21:1d:f1:35:65:1f:2f:f6:fc:62:cd:e5:ee:04:2f:dc: 33:72:1a:a6:af:3e:4e:5f:bf:19:cd:b8:d9:c0:5d:1b:5c:ba: b8:65:7f:1d:d7:47:1d:83:1a:e4:25:5a:c2:69:14:4a:8e:1c: b1:39:b6:b5:6a:df:c0:39:cf:d1:89:29:12:2e:1f:60:3c:c0: a4:1a:eb:e3:42:54:6c:2c:aa:e5:ae:fe:44:ce:b5:05:44:eb: ab:59:7d:48:0f:42:fa:de:5d:65:42:65:9b:6a:d6:d5:aa:67: 28:43:b0:7f:11:b0:48:f4:dd:58:07:aa:f0:50:b4:34:0f:e0: f3:9f:e0:f5:2a:25:93:ce:80:1f:d4:32:8e:bf:56:33:5b:c4: 79:95:28:3e:e4:3b:40:96:f8:85:15:3b:15:4e:ad:a8:67:41: 78:a8:71:f5:85:44:9b:c4:a8:78:59:64:fd:29:de:34:b3:a3: 90:a0:bd:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVirUIy2kO5a+QyKqoLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5 OTcwZWYwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygxZWQ4NGI0ODM0NWQyZWNhYmNhZDAyOTE3OWY1Y2YwMGY1ZGNjMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCd875hhDkcx2uB7EXs71CMQWZpv 5yOMoKX6ui6j4ngR0hnDWo0SmVT5Zn9OKD/Vjf+twG9bVQtZR+wq5mSK2emVmfDE OrhWX8b5KRxtOSQEYlHR/iBoEgxgGA19Iie84MSu0GSv3SPE7SA7+tz+Xy2GtBJl IHKIM01sScCUOzqzHUkDKMgZage/6VC91Xh/G8Pat/RpvVgM4QUazh5VlAIG/39T WUs1W4eCA/BBS4ozzfCbkYoBjK+eU0yN2Ck76aYa5cix0opx36G1ZX7s2qxCqJO9 rqnPucKoh4p0TMJRaAxr8JvkZ/Jf2ieIbhbHmRW4fUz9orz/qQKggQa6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7YS0g0XS7KvK0CkXn1zwD13MOcMB8GA1UdIwQY MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWWyJ+e1 yyuxDwyp3/tBJWjdE9nyofMXmMTxqo/GnSwbaKxs6onVUaa5/zbgcuU1LVaxK4jE Cxqlvxs/C0OaN7NtZGUSZujeaUghHfE1ZR8v9vxizeXuBC/cM3Iapq8+Tl+/Gc24 2cBdG1y6uGV/HddHHYMa5CVawmkUSo4csTm2tWrfwDnP0YkpEi4fYDzApBrr40JU bCyq5a7+RM61BUTrq1l9SA9C+t5dZUJlm2rW1apnKEOwfxGwSPTdWAeq8FC0NA/g 85/g9Solk86AH9Qyjr9WM1vEeZUoPuQ7QJb4hRU7FU6tqGdBeKhx9YVEm8SoeFlk /SneNLOjkKC98Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:48 2025 by rpki-client