This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json) Hash identifier: kIHDWoKVBPRg+4mS/TANFpTDKgqNM+4q8FStxEOrhYM= Subject key identifier: BF:7B:3B:58:A5:42:EF:33:53:A0:E6:7C:6B:7B:E6:97:38:13:ED:87 Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d Certificate serial: 019B47A6D36B6F17DDA6DD62343B2CE99209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 20:01:14 +0000 Manifest this update: Mon 22 Dec 2025 20:01:14 +0000 Manifest next update: Tue 23 Dec 2025 20:01:14 +0000 Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: tWghbdyQE2CxJXfFEX+yXwaWzQZALU72J3AqQ2umdfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:d3:6b:6f:17:dd:a6:dd:62:34:3b:2c:e9:92:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d Validity Not Before: Dec 22 20:01:14 2025 GMT Not After : Dec 23 20:01:14 2025 GMT Subject: CN=bf7b3b58a542ef3353a0e67c6b7be6973813ed87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:c4:eb:b9:ed:a1:a3:e8:69:68:08:65:59: c0:3b:98:d7:b6:d4:89:57:f3:5c:8f:27:a3:62:9b: 51:76:9a:7b:df:c7:31:ab:33:b1:3f:8a:25:8d:e9: 3f:d2:71:2d:c4:fd:0f:e5:4a:33:50:90:1d:13:df: c3:26:2c:ea:63:40:2e:2b:32:eb:3d:b6:91:43:98: 25:2b:69:de:db:2c:33:4b:db:16:c5:4e:1b:53:9e: 1d:94:1a:65:93:e4:c7:f7:b7:36:6d:77:75:02:0f: 58:5c:f9:a5:f7:d5:07:ff:c5:1e:0e:b0:8b:fd:10: f6:47:62:cd:09:dd:e4:d2:e7:2b:97:d3:78:53:ae: 07:0f:6c:f1:0a:88:00:d1:11:9a:18:06:97:6f:af: 83:89:46:d4:1c:3a:51:ed:28:e4:5f:5a:b9:03:32: 8d:2e:9c:09:3e:29:e9:d9:39:be:8a:13:86:73:be: e8:ee:94:5e:43:27:84:9c:ea:5a:cf:83:8c:f6:bf: 9f:ec:51:bf:76:15:4c:7b:d2:5f:ef:f1:e6:62:76: c6:5b:03:ab:9f:06:7a:59:f0:20:b4:a5:ad:b9:75: 45:ec:58:d6:9f:f9:76:22:c8:41:6c:51:31:98:58: 65:8e:bb:79:4d:e9:1b:97:a9:27:d6:26:f9:69:2b: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:3B:58:A5:42:EF:33:53:A0:E6:7C:6B:7B:E6:97:38:13:ED:87 X509v3 Authority Key Identifier: keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:ea:3b:c7:c3:76:cf:1b:cb:14:0e:19:f1:03:75:31:e1: de:d9:41:54:55:89:74:94:44:d6:d8:68:c5:f3:fd:b0:ee:6f: eb:31:ad:12:72:d7:76:f2:23:c5:8a:10:a2:30:df:5b:e6:8f: 05:e4:21:4f:fe:99:f4:d6:36:2b:12:77:ef:79:fb:13:4f:08: e7:0f:5c:f5:e3:58:8d:de:74:56:90:44:ad:4a:0d:96:70:fb: 35:fd:7a:4b:74:f0:f8:53:1a:65:96:b0:1e:70:ec:a5:3f:dd: 07:ba:41:b6:f9:ac:72:84:1a:4a:fe:8b:ef:e8:68:52:06:15: 1c:77:19:c9:1a:c7:f7:88:f6:4b:36:d9:18:ca:19:0c:f5:08: 62:05:ff:e4:a9:fc:71:6f:07:58:41:39:b2:18:e6:b9:eb:97: 50:0c:fd:58:bf:8d:e8:d1:fa:96:79:e5:7a:36:c3:e3:8d:dc: 93:a8:74:34:a7:a0:1f:30:b5:42:86:2c:b7:7a:b8:ad:24:bf: c2:67:37:ad:20:91:17:de:70:54:7d:67:fb:2e:22:77:3b:fa: dd:35:71:41:02:03:99:94:e9:64:ed:73:5e:c9:41:cc:41:9c: 2c:99:a9:b8:70:6b:65:71:89:ff:4e:14:ed:b4:88:d8:93:7a: f0:2b:e0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHptNrbxfdpt1iNDss6ZIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2NmMWYzNGUyZjAxMGI5MDJkYzE0MjQ1NWI2YmI3MzI2 Y2YwOGQwHhcNMjUxMjIyMjAwMTE0WhcNMjUxMjIzMjAwMTE0WjAzMTEwLwYDVQQD EyhiZjdiM2I1OGE1NDJlZjMzNTNhMGU2N2M2YjdiZTY5NzM4MTNlZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlijE67ntoaPoaWgIZVnAO5jXttSJ V/NcjyejYptRdpp738cxqzOxP4oljek/0nEtxP0P5UozUJAdE9/DJizqY0AuKzLr PbaRQ5glK2ne2ywzS9sWxU4bU54dlBplk+TH97c2bXd1Ag9YXPml99UH/8UeDrCL /RD2R2LNCd3k0ucrl9N4U64HD2zxCogA0RGaGAaXb6+DiUbUHDpR7SjkX1q5AzKN LpwJPinp2Tm+ihOGc77o7pReQyeEnOpaz4OM9r+f7FG/dhVMe9Jf7/HmYnbGWwOr nwZ6WfAgtKWtuXVF7FjWn/l2IshBbFExmFhljrt5Tekbl6kn1ib5aSt38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL97O1ilQu8zU6DmfGt75pc4E+2HMB8GA1UdIwQY MBaAFCZ88fNOLwELkC3BQkVba7cybPCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85MWJjZDgtYTFmNy00ZmIxLWIyODgt MDExYjQ1MWI0NWI0LzEvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85MWJjZDgtYTFmNy00ZmIxLWIyODgtMDExYjQ1MWI0NWI0 LzEvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6fqO8fD ds8byxQOGfEDdTHh3tlBVFWJdJRE1thoxfP9sO5v6zGtEnLXdvIjxYoQojDfW+aP BeQhT/6Z9NY2KxJ373n7E08I5w9c9eNYjd50VpBErUoNlnD7Nf16S3Tw+FMaZZaw HnDspT/dB7pBtvmscoQaSv6L7+hoUgYVHHcZyRrH94j2SzbZGMoZDPUIYgX/5Kn8 cW8HWEE5shjmueuXUAz9WL+N6NH6lnnlejbD443ck6h0NKegHzC1QoYst3q4rSS/ wmc3rSCRF95wVH1n+y4idzv63TVxQQIDmZTpZO1zXslBzEGcLJmpuHBrZXGJ/04U 7bSI2JN68CvghA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:04 2025 by rpki-client