This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json) Hash identifier: bC4V/GmJItr8DOpLDp8yNfLHdB3S5iGHKLWx6uFH5Zg= Subject key identifier: 74:E3:24:5B:7F:C9:68:1F:1A:45:A1:C5:53:C4:9F:59:BE:B2:BD:5F Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39 Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039 Certificate serial: 019B8015A7713822778AE31CF273C9B72BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft Manifest number: 0F7F Signing time: Fri 02 Jan 2026 19:01:01 +0000 Manifest this update: Fri 02 Jan 2026 19:01:01 +0000 Manifest next update: Sat 03 Jan 2026 19:01:01 +0000 Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: 0h7pagHGEycXeROJm0FDiH60SE3Xd7WVZNhwAPHoWWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:15:a7:71:38:22:77:8a:e3:1c:f2:73:c9:b7:2b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039 Validity Not Before: Jan 2 19:01:01 2026 GMT Not After : Jan 3 19:01:01 2026 GMT Subject: CN=74e3245b7fc9681f1a45a1c553c49f59beb2bd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:79:1e:a8:7e:3f:5e:51:fc:3b:27:0e:20: 38:f8:71:e7:b8:e5:65:c1:72:61:e6:2c:c9:ab:5a: 7a:16:07:86:7c:c3:ce:ad:b1:06:eb:3f:1e:3e:80: 2f:da:3b:29:84:18:1d:5f:70:3b:d1:94:27:d8:19: 8c:ec:ed:8c:a1:3c:c4:d3:e7:6f:ad:b3:80:14:d6: 26:5e:c0:0a:3d:8b:09:a0:9b:f9:cb:45:e3:61:2f: d1:32:34:11:b7:6b:df:d3:6a:9b:6c:75:2f:57:94: 7a:a2:36:6e:00:ce:39:0c:a1:c1:ef:fa:b3:09:57: 85:e9:fc:3c:4b:07:a2:7d:6a:a7:8a:4b:e2:2b:eb: a2:db:00:51:61:7e:68:be:4e:60:7d:d8:df:4e:da: 51:c1:6e:a9:af:92:16:90:31:54:99:10:61:be:c6: 89:b2:16:d0:e1:0f:fa:fc:29:6e:f2:5b:18:26:25: c8:0d:92:1d:ed:9b:9c:f9:5b:42:b6:56:00:e4:bb: 62:03:97:f9:e8:d4:ec:96:f2:98:8f:65:45:27:ac: ea:51:bc:87:38:39:a1:0d:8e:4e:46:48:0e:d7:42: 9a:7e:b6:6e:82:4c:17:84:94:ee:6b:12:df:d7:9a: 9a:80:dd:ce:d4:2c:d2:80:21:2f:47:f1:b8:69:f6: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:24:5B:7F:C9:68:1F:1A:45:A1:C5:53:C4:9F:59:BE:B2:BD:5F X509v3 Authority Key Identifier: keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e8:c0:57:1e:df:25:0f:04:90:0c:8a:f2:3b:2c:fe:ed:6c: 9a:93:c3:d1:bd:0b:7a:ee:b9:aa:4e:a0:f2:bc:c0:84:9b:7f: d4:3c:66:80:d7:71:ab:46:26:46:f6:1b:ba:44:07:55:58:9f: 4a:79:e9:66:a4:39:de:9b:84:ca:1a:a0:f3:1b:ee:39:06:ee: a3:a9:62:94:29:8f:80:5a:bf:dc:eb:e0:88:9d:86:66:b0:6d: e2:a8:28:3e:c8:b8:67:a6:53:cf:69:47:fa:85:96:b9:66:c3: 88:f7:08:30:8b:dd:10:e3:d1:5d:96:95:cf:11:67:af:b8:fe: 90:2d:67:a8:af:61:6f:df:23:14:ef:b3:d1:e9:b0:9f:f9:2b: 7c:d6:dd:36:24:ec:84:5a:c3:05:88:fd:23:f4:1f:68:6c:97: 91:7c:cd:0f:a2:7f:fd:5d:e8:18:c3:7e:30:16:a3:22:ee:6d: ca:d3:ec:5f:3d:2a:22:a2:ca:6d:99:10:00:6c:ec:83:c3:59: 49:34:8a:9d:f9:ee:c5:48:e1:06:cb:e1:c8:52:dc:8c:27:48: e4:37:50:75:6e:a7:04:6a:e6:f8:8e:c1:9e:67:9b:28:0a:21: 95:a4:d6:97:96:2d:6b:5c:b6:42:17:96:94:6e:12:1c:8a:34: 41:15:65:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAFadxOCJ3iuMc8nPJtyuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNmJkNzk5OWI5MTU3YWE0ZmRjNDcxNzQxNDU4MGQ0ZmNl MjQwMzkwHhcNMjYwMTAyMTkwMTAxWhcNMjYwMTAzMTkwMTAxWjAzMTEwLwYDVQQD Eyg3NGUzMjQ1YjdmYzk2ODFmMWE0NWExYzU1M2M0OWY1OWJlYjJiZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK95Hqh+P15R/DsnDiA4+HHnuOVl wXJh5izJq1p6FgeGfMPOrbEG6z8ePoAv2jsphBgdX3A70ZQn2BmM7O2MoTzE0+dv rbOAFNYmXsAKPYsJoJv5y0XjYS/RMjQRt2vf02qbbHUvV5R6ojZuAM45DKHB7/qz CVeF6fw8SweifWqnikviK+ui2wBRYX5ovk5gfdjfTtpRwW6pr5IWkDFUmRBhvsaJ shbQ4Q/6/Clu8lsYJiXIDZId7Zuc+VtCtlYA5LtiA5f56NTslvKYj2VFJ6zqUbyH ODmhDY5ORkgO10KafrZugkwXhJTuaxLf15qagN3O1CzSgCEvR/G4afaaiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTjJFt/yWgfGkWhxVPEn1m+sr1fMB8GA1UdIwQY MBaAFI1r15mbkVeqT9xHF0FFgNT84kA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQt NjlmYTRmYjAyMWFmLzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQtNjlmYTRmYjAyMWFm LzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOjAVx7f JQ8EkAyK8jss/u1smpPD0b0Leu65qk6g8rzAhJt/1DxmgNdxq0YmRvYbukQHVVif SnnpZqQ53puEyhqg8xvuOQbuo6lilCmPgFq/3OvgiJ2GZrBt4qgoPsi4Z6ZTz2lH +oWWuWbDiPcIMIvdEOPRXZaVzxFnr7j+kC1nqK9hb98jFO+z0emwn/krfNbdNiTs hFrDBYj9I/QfaGyXkXzND6J//V3oGMN+MBajIu5tytPsXz0qIqLKbZkQAGzsg8NZ STSKnfnuxUjhBsvhyFLcjCdI5DdQdW6nBGrm+I7BnmebKAohlaTWl5Yta1y2QheW lG4SHIo0QRVl/g== -----END CERTIFICATE-----Generated at Sat Jan 3 03:56:39 2026 by rpki-client