This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json) Hash identifier: OEx0Rh/N49pCBM2NDygIhKMOwhtWaji6FQw4gyXDeI4= Subject key identifier: 53:85:8D:CA:F7:0C:D9:88:92:A4:AC:D5:2B:55:CA:5E:26:31:28:06 Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a Certificate serial: 019B40FFC5673D2965433E96ED5E07456E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 13:01:02 +0000 Manifest this update: Sun 21 Dec 2025 13:01:02 +0000 Manifest next update: Mon 22 Dec 2025 13:01:02 +0000 Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: Wi4ut8jdDFwJZ1Uwq3pyo/Ps1nmqQoF5ogAm5YqLKbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:c5:67:3d:29:65:43:3e:96:ed:5e:07:45:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a Validity Not Before: Dec 21 13:01:02 2025 GMT Not After : Dec 22 13:01:02 2025 GMT Subject: CN=53858dcaf70cd98892a4acd52b55ca5e26312806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:3a:af:8e:bc:06:ba:46:4b:f0:70:d7:26: 0c:41:0e:a2:c5:e6:5f:5e:e3:36:7f:ea:7f:92:8b: 91:f4:f0:c7:9f:8a:55:25:1e:df:7c:0f:dd:2f:24: 55:bd:75:53:66:43:23:3b:ec:ee:6d:85:46:15:8f: 00:bc:5c:05:63:88:01:98:83:fe:05:c1:73:8e:4c: 89:3b:00:20:3a:1c:9d:f6:7c:86:19:5a:a3:4c:8b: 6e:49:ae:02:ca:79:5d:33:b8:4f:8d:80:3c:c2:ec: d0:ff:57:37:8e:53:30:7b:32:71:f9:e1:b5:d2:64: 76:ed:f8:cd:25:26:70:a7:14:f7:e0:05:03:31:08: 49:aa:da:43:c8:27:2e:94:8b:a7:e9:0a:5a:ea:72: 65:61:18:0b:f7:06:8a:b4:2f:6b:bc:3d:14:7c:8c: ce:ea:a4:e3:67:62:8a:f4:f1:5e:23:3c:c6:6d:db: 11:71:d2:80:e8:a1:4d:d6:61:4e:44:96:8a:64:ce: be:e9:0e:4f:b0:9a:45:df:7c:c5:37:72:93:3c:83: 8e:e4:47:71:5f:2c:94:2f:f3:51:9a:0c:d5:5b:56: 49:03:d1:52:7f:07:9b:6f:b5:88:07:2b:d3:31:81: e8:13:80:cb:6b:8c:58:1c:1f:21:1b:db:b5:00:1c: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:8D:CA:F7:0C:D9:88:92:A4:AC:D5:2B:55:CA:5E:26:31:28:06 X509v3 Authority Key Identifier: keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:f7:3e:24:8d:59:3c:dd:fe:21:5e:af:14:0c:c0:41:b7: 35:d8:64:3a:3f:51:c3:62:9a:69:86:7c:2b:fc:4d:a7:2d:8a: 28:63:1f:24:7c:b2:96:6c:25:35:fd:eb:68:c2:62:d4:4c:39: 25:ff:ff:6d:43:c2:69:87:cd:57:33:7f:86:33:53:96:13:61: f4:2a:33:3a:db:c6:1e:a4:24:ab:35:a8:7c:e9:b1:08:d7:da: dc:0c:f2:1e:1c:8f:96:50:aa:21:2b:7e:5d:a5:b6:48:46:06: f7:86:db:53:58:fe:d5:a3:d4:b8:9b:74:22:df:a4:57:38:d5: 08:8a:38:60:81:b8:5c:eb:d9:9d:3b:48:4a:4b:dc:51:df:74: 1c:3a:d6:1f:9e:bf:73:48:c1:f4:90:de:d7:71:f8:ff:87:58: 6a:b2:5b:e3:05:0d:9c:f5:20:b5:b6:10:78:e9:08:36:c3:4a: fe:47:55:c4:96:93:f7:49:bc:61:9d:b8:b5:5d:44:68:45:8f: a8:44:51:89:db:8b:47:f6:2a:27:1a:70:f7:62:92:ba:be:98: 42:05:a6:c1:ba:e9:7d:ad:5f:5b:f8:c6:a6:6b:19:e1:ac:bb: 1c:32:2e:29:51:d9:bd:37:5b:22:b1:0c:1d:19:f6:14:3e:09: c0:7b:e3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/8VnPSllQz6W7V4HRW6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGE5M2E3MDJmMDNkNjAzNGIwMmM0NjM3MjEyYTc0M2E0 NzJjOGEwHhcNMjUxMjIxMTMwMTAyWhcNMjUxMjIyMTMwMTAyWjAzMTEwLwYDVQQD Eyg1Mzg1OGRjYWY3MGNkOTg4OTJhNGFjZDUyYjU1Y2E1ZTI2MzEyODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXM6r468BrpGS/Bw1yYMQQ6ixeZf XuM2f+p/kouR9PDHn4pVJR7ffA/dLyRVvXVTZkMjO+zubYVGFY8AvFwFY4gBmIP+ BcFzjkyJOwAgOhyd9nyGGVqjTItuSa4CynldM7hPjYA8wuzQ/1c3jlMwezJx+eG1 0mR27fjNJSZwpxT34AUDMQhJqtpDyCculIun6Qpa6nJlYRgL9waKtC9rvD0UfIzO 6qTjZ2KK9PFeIzzGbdsRcdKA6KFN1mFORJaKZM6+6Q5PsJpF33zFN3KTPIOO5Edx XyyUL/NRmgzVW1ZJA9FSfwebb7WIByvTMYHoE4DLa4xYHB8hG9u1ABx/qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOFjcr3DNmIkqSs1StVyl4mMSgGMB8GA1UdIwQY MBaAFIzak6cC8D1gNLAsRjchKnQ6RyyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAt YTQ2NjFlZTNjOWE2LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAtYTQ2NjFlZTNjOWE2 LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM33PiSN WTzd/iFerxQMwEG3NdhkOj9Rw2KaaYZ8K/xNpy2KKGMfJHyylmwlNf3raMJi1Ew5 Jf//bUPCaYfNVzN/hjNTlhNh9CozOtvGHqQkqzWofOmxCNfa3AzyHhyPllCqISt+ XaW2SEYG94bbU1j+1aPUuJt0It+kVzjVCIo4YIG4XOvZnTtISkvcUd90HDrWH56/ c0jB9JDe13H4/4dYarJb4wUNnPUgtbYQeOkINsNK/kdVxJaT90m8YZ24tV1EaEWP qERRiduLR/YqJxpw92KSur6YQgWmwbrpfa1fW/jGpmsZ4ay7HDIuKVHZvTdbIrEM HRn2FD4JwHvjSg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:27 2025 by rpki-client