This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json) Hash identifier: pe8i+EzQSVcJvTUCR+6rjIMGtDrubgauJo7oQ1s7AAc= Subject key identifier: 66:4F:FC:99:DF:8F:1A:F8:28:05:B5:F4:44:36:DD:9C:68:18:BA:A6 Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Certificate serial: 019B3C7F1C917DE552F16F516A6FD3560E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:01 +0000 Manifest this update: Sat 20 Dec 2025 16:02:01 +0000 Manifest next update: Sun 21 Dec 2025 16:02:01 +0000 Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: 2JSvJJSAAnho5MWtGRjjWqGJNJSKsmzeZCcN2UEBfSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:1c:91:7d:e5:52:f1:6f:51:6a:6f:d3:56:0e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Validity Not Before: Dec 20 16:02:01 2025 GMT Not After : Dec 21 16:02:01 2025 GMT Subject: CN=664ffc99df8f1af82805b5f44436dd9c6818baa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:dc:5d:fb:e1:3e:58:69:92:ef:21:c1:0a: a0:02:23:ab:78:f6:e6:4d:87:c3:c2:e4:ba:cc:1c: 12:ed:e7:6d:3d:e1:67:dc:af:8a:c9:b1:33:3f:fb: e7:64:8c:8c:24:99:09:7a:cb:9a:8b:d3:4f:17:63: dc:b4:bd:89:a3:1a:87:39:e6:dc:00:a5:a7:df:7f: db:46:d5:09:e4:f8:ab:fe:3f:a8:43:f3:d1:37:d8: b2:52:93:c0:ab:69:ba:30:68:14:fd:5e:87:9a:53: 3e:28:e1:86:ea:74:47:99:76:99:fe:d3:23:b0:3a: 0f:ca:b6:1b:e7:8f:bf:6f:45:df:8f:1a:6d:83:33: 64:ed:89:bc:7d:7f:a0:fd:f9:62:25:10:45:a6:08: b6:12:c2:ed:c8:ff:e2:3c:cf:09:5c:27:16:95:ad: 2d:eb:51:e1:49:f3:0a:45:2e:96:cb:c1:98:20:b6: eb:76:da:f7:23:75:17:51:c1:3a:14:48:f1:db:ae: 9b:af:74:c8:58:94:db:dc:94:85:01:c1:2e:e6:06: b1:86:67:75:da:80:0c:38:8f:14:39:4a:53:21:80: 22:3c:a9:57:68:61:b4:60:ef:50:b5:03:77:27:5b: 16:0c:18:4d:71:b3:b7:45:01:c9:6f:fe:4e:1a:8c: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4F:FC:99:DF:8F:1A:F8:28:05:B5:F4:44:36:DD:9C:68:18:BA:A6 X509v3 Authority Key Identifier: keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ea:35:e8:5d:f7:ed:f6:eb:2d:cd:c4:44:db:48:51:18:f9: 6d:08:02:c6:58:d0:d7:f8:75:93:f6:ad:22:c2:ef:7b:55:e2: 28:70:b5:4e:d3:bc:b2:9a:16:74:73:36:ad:38:1f:73:c7:ea: e4:90:36:c8:21:fd:88:f6:f5:a8:a2:62:5f:0e:f3:a2:83:51: b4:68:63:68:73:f4:4f:dd:6f:ad:f0:18:79:f8:cb:21:e5:d7: ce:fd:d3:b8:9b:ec:39:2d:a1:42:eb:2d:00:e5:21:92:b1:37: 3f:d7:e9:e5:72:af:fc:8e:ca:e1:dd:a3:1c:00:b4:f4:65:76: 03:10:05:c8:2f:cd:bb:18:23:67:d6:30:32:c2:b5:4a:ae:07: a4:25:43:c8:56:9a:aa:ac:7f:31:36:f7:69:10:fa:67:2a:d0: 78:4e:ef:bd:29:3a:db:be:2f:fe:31:85:2b:ed:b0:71:cd:19: 25:12:08:8f:67:b9:56:35:aa:f6:5a:bb:15:a4:a3:41:03:66: a6:8a:a6:92:29:1d:99:f7:a7:5e:50:07:1b:b0:42:13:27:7a: de:c1:8c:59:83:6a:8c:ff:2b:3e:59:c4:44:8a:bd:a1:d7:c2: ea:24:30:c6:f2:f6:ff:85:b6:96:45:19:41:72:35:cf:f0:4f: 11:2f:1d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxyRfeVS8W9Ram/TVg5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDk5ZjNiZmU5OTI3MzZhMzg4NWM3OTYzMjRkYjMzOTc3 ZmE3ZTkwHhcNMjUxMjIwMTYwMjAxWhcNMjUxMjIxMTYwMjAxWjAzMTEwLwYDVQQD Eyg2NjRmZmM5OWRmOGYxYWY4MjgwNWI1ZjQ0NDM2ZGQ5YzY4MThiYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPncXfvhPlhpku8hwQqgAiOrePbm TYfDwuS6zBwS7edtPeFn3K+KybEzP/vnZIyMJJkJesuai9NPF2PctL2JoxqHOebc AKWn33/bRtUJ5Pir/j+oQ/PRN9iyUpPAq2m6MGgU/V6HmlM+KOGG6nRHmXaZ/tMj sDoPyrYb54+/b0XfjxptgzNk7Ym8fX+g/fliJRBFpgi2EsLtyP/iPM8JXCcWla0t 61HhSfMKRS6Wy8GYILbrdtr3I3UXUcE6FEjx266br3TIWJTb3JSFAcEu5gaxhmd1 2oAMOI8UOUpTIYAiPKlXaGG0YO9QtQN3J1sWDBhNcbO3RQHJb/5OGoxcCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZP/Jnfjxr4KAW19EQ23ZxoGLqmMB8GA1UdIwQY MBaAFIzZnzv+mSc2o4hceWMk2zOXf6fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmIt YTYwNDY0NDA5ZDMyLzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmItYTYwNDY0NDA5ZDMy LzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOo16F33 7fbrLc3ERNtIURj5bQgCxljQ1/h1k/atIsLve1XiKHC1TtO8spoWdHM2rTgfc8fq 5JA2yCH9iPb1qKJiXw7zooNRtGhjaHP0T91vrfAYefjLIeXXzv3TuJvsOS2hQust AOUhkrE3P9fp5XKv/I7K4d2jHAC09GV2AxAFyC/NuxgjZ9YwMsK1Sq4HpCVDyFaa qqx/MTb3aRD6ZyrQeE7vvSk6274v/jGFK+2wcc0ZJRIIj2e5VjWq9lq7FaSjQQNm poqmkikdmfenXlAHG7BCEyd63sGMWYNqjP8rPlnERIq9odfC6iQwxvL2/4W2lkUZ QXI1z/BPES8dqg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:13 2025 by rpki-client