This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json) Hash identifier: +/xa5Tw6ChWLJBtejIDUEcgmhzCcDFYxmaKDrwBGsKQ= Subject key identifier: 14:C5:40:24:49:09:EC:A6:C5:E5:4C:75:C7:6C:DD:23:3C:21:9D:AE Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d Certificate serial: 019B53AB34170FB5541DD209D4C77A1F100C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft Manifest number: 0C4B Signing time: Thu 25 Dec 2025 04:01:27 +0000 Manifest this update: Thu 25 Dec 2025 04:01:27 +0000 Manifest next update: Fri 26 Dec 2025 04:01:27 +0000 Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: gjF5rQY2AwMnAPxjS20no2NQl5JA2UufcDsUdGgRUww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:34:17:0f:b5:54:1d:d2:09:d4:c7:7a:1f:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d Validity Not Before: Dec 25 04:01:27 2025 GMT Not After : Dec 26 04:01:27 2025 GMT Subject: CN=14c540244909eca6c5e54c75c76cdd233c219dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:37:59:00:77:8a:fc:7b:5c:96:f5:70:57: a6:60:a5:ab:92:22:27:17:44:31:05:e4:ba:ab:b1: e3:4b:65:c5:ed:ed:03:49:56:3d:ca:cb:e4:f1:ff: 69:e9:42:b0:66:1c:18:0b:04:0d:bb:c7:91:12:c1: 91:87:1a:29:a5:d5:63:04:89:61:f4:08:19:09:68: 3c:ab:8d:55:31:fd:35:73:71:d0:03:54:1d:eb:81: 1c:bf:39:eb:45:30:af:2d:7b:9e:98:75:67:d1:8f: 7d:85:a4:3c:04:87:29:60:3a:cd:0b:f2:77:1c:50: d3:b2:ef:0c:f5:24:26:1c:ac:22:71:81:2b:73:6e: 63:23:5e:8e:49:ed:ad:c0:50:57:40:51:20:2c:8c: f8:0c:7f:38:a4:58:31:c1:61:8c:8e:ea:5d:24:5f: f7:13:80:1e:90:20:20:8f:0c:3b:83:a8:cf:f3:e3: 00:2d:7b:fa:87:2c:ab:0d:24:f8:bc:fe:99:18:2d: a4:0f:7a:b6:4f:62:e7:e7:21:ee:fc:09:61:ee:f7: ca:91:85:a2:a5:29:83:de:60:b0:fd:71:b7:10:7e: bb:c9:ce:8a:b3:71:f3:62:81:2d:d4:be:5a:be:97: db:65:f4:1f:66:ec:43:d6:cb:d1:9f:0c:34:d7:5f: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:40:24:49:09:EC:A6:C5:E5:4C:75:C7:6C:DD:23:3C:21:9D:AE X509v3 Authority Key Identifier: keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:58:d1:d1:b5:4c:1d:90:81:ae:a4:fd:40:c4:cb:22:a5: e0:5f:52:ab:c4:58:0f:74:97:9d:ce:b9:42:41:04:96:d3:91: 5d:15:a4:29:65:31:fc:98:a1:0e:4f:50:2d:9f:9b:c0:5b:37: e6:77:31:63:de:f9:7a:3d:b1:15:ac:ae:56:57:2e:be:2f:b0: 30:a6:ab:a6:2e:a6:78:df:23:f7:a3:ef:7e:a3:d8:29:c6:d4: 80:08:ea:01:94:c9:72:86:ea:20:c1:12:0c:16:bc:11:15:e2: 77:ad:19:15:8d:5b:7f:01:62:52:95:b4:9e:84:d6:05:1e:5e: d1:e4:48:a3:a1:03:b4:6d:3b:90:b5:97:6e:be:bb:dc:f3:5f: 5b:48:cd:5b:b8:63:f4:0b:71:e8:71:d7:86:0e:ba:a0:7c:f0: e3:b1:0d:8d:52:09:5c:a6:4d:a8:2a:21:3d:c3:26:d4:e0:0a: 2c:4a:a0:2c:b0:86:d9:62:d5:36:7c:41:d9:7b:2d:db:11:21: 6e:9d:e7:2c:0a:6c:92:46:6a:85:4e:78:bb:ac:0d:60:88:c6: 0d:99:3e:2e:6b:04:56:ee:28:69:e6:6e:5a:79:58:8b:af:66: 47:40:54:e0:c1:ba:8c:81:96:84:34:ff:3b:c2:45:8b:51:b0: b2:72:cc:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqzQXD7VUHdIJ1Md6HxAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNGVlYTcyZTQ1MzFjOTJhNmUwMGVmNGYxOTFhNjEyN2U5 NTZkMmQwHhcNMjUxMjI1MDQwMTI3WhcNMjUxMjI2MDQwMTI3WjAzMTEwLwYDVQQD EygxNGM1NDAyNDQ5MDllY2E2YzVlNTRjNzVjNzZjZGQyMzNjMjE5ZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHg3WQB3ivx7XJb1cFemYKWrkiIn F0QxBeS6q7HjS2XF7e0DSVY9ysvk8f9p6UKwZhwYCwQNu8eREsGRhxoppdVjBIlh 9AgZCWg8q41VMf01c3HQA1Qd64EcvznrRTCvLXuemHVn0Y99haQ8BIcpYDrNC/J3 HFDTsu8M9SQmHKwicYErc25jI16OSe2twFBXQFEgLIz4DH84pFgxwWGMjupdJF/3 E4AekCAgjww7g6jP8+MALXv6hyyrDST4vP6ZGC2kD3q2T2Ln5yHu/Alh7vfKkYWi pSmD3mCw/XG3EH67yc6Ks3HzYoEt1L5avpfbZfQfZuxD1svRnww0119rkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTFQCRJCeymxeVMdcds3SM8IZ2uMB8GA1UdIwQY MBaAFI9O6nLkUxySpuAO9PGRphJ+lW0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzIt NDYxOGZiZmE0Yzg5LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzItNDYxOGZiZmE0Yzg5 LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0lY0dG1 TB2Qga6k/UDEyyKl4F9Sq8RYD3SXnc65QkEEltORXRWkKWUx/JihDk9QLZ+bwFs3 5ncxY975ej2xFayuVlcuvi+wMKarpi6meN8j96PvfqPYKcbUgAjqAZTJcobqIMES DBa8ERXid60ZFY1bfwFiUpW0noTWBR5e0eRIo6EDtG07kLWXbr673PNfW0jNW7hj 9Atx6HHXhg66oHzw47ENjVIJXKZNqCohPcMm1OAKLEqgLLCG2WLVNnxB2Xst2xEh bp3nLApskkZqhU54u6wNYIjGDZk+LmsEVu4oaeZuWnlYi69mR0BU4MG6jIGWhDT/ O8JFi1GwsnLMtA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:02:16 2025 by rpki-client