This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json) Hash identifier: bx10xa+nwwj5w5CEJ7yLcdDBeZUhtOESgmtGwpNitv4= Subject key identifier: 78:6F:8A:71:3D:55:B2:07:B7:FF:88:A3:0B:34:35:6B:99:DC:92:3C Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Certificate serial: 019B33441486B810CD52A17C1C51FA0F375C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft Manifest number: 0AB3 Signing time: Thu 18 Dec 2025 21:00:58 +0000 Manifest this update: Thu 18 Dec 2025 21:00:58 +0000 Manifest next update: Fri 19 Dec 2025 21:00:58 +0000 Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: +yY/Q2uA4L1L3dTOwaMlaJ+Ed/ERlhyPflBnfrtcebw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:14:86:b8:10:cd:52:a1:7c:1c:51:fa:0f:37:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0 Validity Not Before: Dec 18 21:00:58 2025 GMT Not After : Dec 19 21:00:58 2025 GMT Subject: CN=786f8a713d55b207b7ff88a30b34356b99dc923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:ee:61:6e:dc:03:fb:46:4d:a8:6c:60:a2: 17:31:8c:bb:db:ff:6e:8d:23:b1:f1:03:a7:c4:24: 8b:16:63:8f:48:f3:92:a8:a3:b4:df:31:5c:6b:3d: 2d:f2:ee:31:2a:8b:74:28:5b:6c:a1:02:6a:45:8e: 8a:5f:65:44:05:ab:d9:17:ca:3b:23:99:25:fe:60: 00:c4:2d:fa:89:64:1e:f5:9e:87:5c:cf:06:3f:b2: 66:3a:93:60:e1:6a:17:ed:4c:81:d2:fb:88:28:44: 64:27:dc:85:5b:b9:96:e8:f0:8f:ab:58:06:a3:c4: a9:16:8b:bb:10:18:3b:57:99:13:44:6b:9f:1b:cd: c6:44:19:c4:c3:b6:8d:c2:49:a0:76:39:00:48:17: e6:00:d3:06:3a:fb:17:a4:6a:be:78:91:cd:1c:c0: 59:13:54:8b:bd:9b:bf:70:9b:d6:fa:cd:b2:be:44: 8f:fc:90:66:a8:c8:4f:48:f1:54:be:15:22:ef:d3: fb:4e:6b:f5:65:98:53:5b:a8:25:12:45:67:a5:d0: 62:38:cd:26:46:6f:92:c4:db:02:42:a2:d8:8b:d9: 9e:fa:4f:21:cc:45:03:95:37:8a:09:21:90:10:62: 69:ab:3a:ea:6b:d3:2f:f0:7e:0d:9a:9c:f0:75:5e: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:8A:71:3D:55:B2:07:B7:FF:88:A3:0B:34:35:6B:99:DC:92:3C X509v3 Authority Key Identifier: keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:e8:c2:f6:bc:82:42:93:10:80:dd:68:6b:b3:0c:03:92: 13:87:b3:10:df:5f:6e:77:91:c3:9b:c4:79:ef:c9:d9:71:93: c2:7f:ec:06:17:65:c9:27:07:b4:58:1d:30:fa:75:de:47:db: 3c:5f:3d:0b:1d:ef:4d:7e:ea:7d:17:b6:38:63:af:b4:9e:00: 65:6c:d7:2b:fa:fe:dd:12:8f:a0:44:c7:79:a5:f5:b7:5b:7a: 0e:17:03:d3:c5:88:ec:6c:a5:b8:2e:24:27:cd:a9:80:a9:4a: 01:49:bb:c0:f7:88:a0:66:65:06:3e:5d:d3:66:d1:0b:e4:cf: 1a:7e:ba:dd:da:76:7d:d0:f3:e0:4d:58:fb:a6:0c:b9:89:db: 08:26:cd:a4:22:48:d3:76:ae:cc:2f:86:15:4c:f7:cf:d9:22: 8f:b7:35:52:9b:cd:c0:43:6d:45:a9:cf:f3:83:e2:3c:2d:6a: 53:91:0d:9c:b3:c5:69:1f:a6:e7:56:d6:af:3a:fd:bd:dd:e4: be:3a:48:20:eb:7f:1f:76:9a:ec:ca:0a:35:90:f4:d8:b3:f9: 94:c1:f2:2b:b7:67:5e:76:55:8e:4f:b3:3f:35:1e:9d:3a:43: b2:e7:27:4a:a4:2d:95:ee:4f:c5:24:5a:bc:61:f7:c9:0e:f8: ee:08:60:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBSGuBDNUqF8HFH6DzdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmE2MTU3Y2I1MmQxMTY4ZjUwODQ2YzVlNTA3OTIyNDBl ZGYzZTAwHhcNMjUxMjE4MjEwMDU4WhcNMjUxMjE5MjEwMDU4WjAzMTEwLwYDVQQD Eyg3ODZmOGE3MTNkNTViMjA3YjdmZjg4YTMwYjM0MzU2Yjk5ZGM5MjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubzuYW7cA/tGTahsYKIXMYy72/9u jSOx8QOnxCSLFmOPSPOSqKO03zFcaz0t8u4xKot0KFtsoQJqRY6KX2VEBavZF8o7 I5kl/mAAxC36iWQe9Z6HXM8GP7JmOpNg4WoX7UyB0vuIKERkJ9yFW7mW6PCPq1gG o8SpFou7EBg7V5kTRGufG83GRBnEw7aNwkmgdjkASBfmANMGOvsXpGq+eJHNHMBZ E1SLvZu/cJvW+s2yvkSP/JBmqMhPSPFUvhUi79P7Tmv1ZZhTW6glEkVnpdBiOM0m Rm+SxNsCQqLYi9me+k8hzEUDlTeKCSGQEGJpqzrqa9Mv8H4NmpzwdV7KbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhvinE9VbIHt/+Iows0NWuZ3JI8MB8GA1UdIwQY MBaAFI+6YVfLUtEWj1CEbF5QeSJA7fPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUt MjBmYWQ5NGNhYjE0LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMjViNjMtN2I5NC00NzU5LTkxOTUtMjBmYWQ5NGNhYjE0 LzEvajdwaFY4dFMwUmFQVUlSc1hsQjVJa0R0OC1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV27owva8 gkKTEIDdaGuzDAOSE4ezEN9fbneRw5vEee/J2XGTwn/sBhdlyScHtFgdMPp13kfb PF89Cx3vTX7qfRe2OGOvtJ4AZWzXK/r+3RKPoETHeaX1t1t6DhcD08WI7GyluC4k J82pgKlKAUm7wPeIoGZlBj5d02bRC+TPGn663dp2fdDz4E1Y+6YMuYnbCCbNpCJI 03auzC+GFUz3z9kij7c1UpvNwENtRanP84PiPC1qU5ENnLPFaR+m51bWrzr9vd3k vjpIIOt/H3aa7MoKNZD02LP5lMHyK7dnXnZVjk+zPzUenTpDsucnSqQtle5PxSRa vGH3yQ747ghgeg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:12:22 2025 by rpki-client