This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json) Hash identifier: jHC5VRBmsvdgRD8JeAtVGCg9JbQleT2i3MEacNRkYTE= Subject key identifier: 98:20:65:52:83:04:7A:B3:79:1B:7E:C5:2F:74:89:98:45:B0:0A:8D Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Certificate serial: 019B3CEC51D374EE034A8497D0B9482ED10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft Manifest number: 065B Signing time: Sat 20 Dec 2025 18:01:18 +0000 Manifest this update: Sat 20 Dec 2025 18:01:18 +0000 Manifest next update: Sun 21 Dec 2025 18:01:18 +0000 Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: fpy6wvLMfZj9zAp7FW0XWg9rbTePqKfm7IoN1T5WIpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:51:d3:74:ee:03:4a:84:97:d0:b9:48:2e:d1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377 Validity Not Before: Dec 20 18:01:18 2025 GMT Not After : Dec 21 18:01:18 2025 GMT Subject: CN=9820655283047ab3791b7ec52f74899845b00a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:7b:ba:d8:61:c0:c0:61:38:85:e6:be:d0: fe:8c:a2:0c:6c:fd:92:e6:a0:ea:fa:b3:6b:d7:2a: 2e:da:5e:de:35:80:0c:c7:de:ab:c8:b4:06:f4:e7: 01:99:f6:f5:46:12:39:ca:76:05:82:3a:74:77:fc: 4c:5e:88:51:f0:e2:60:81:e2:aa:7f:7f:d7:25:f7: 18:11:6d:26:5a:be:b8:ea:34:fa:dc:a7:c9:58:11: b8:b4:55:9f:92:cc:19:5b:de:3e:97:05:15:cf:04: 46:25:e7:84:c5:20:3f:69:75:2f:2e:b8:32:ee:f9: 35:99:7f:66:84:04:16:cf:aa:29:2b:a1:5d:65:78: 09:17:c7:c0:a0:8f:97:dd:00:43:93:ff:40:36:fb: 60:a7:3a:4e:67:e1:d9:9d:be:93:6a:15:31:75:a6: 64:64:63:c0:5c:e6:b7:20:68:96:68:aa:0c:cc:6f: ed:13:22:c9:ae:3e:cb:98:e6:44:19:85:ee:43:6d: cc:09:9d:72:49:05:62:26:0d:79:a0:55:18:4b:9f: 6a:60:2b:08:47:ab:21:ee:da:90:d6:34:05:7b:6f: 18:e7:3f:d2:da:24:ee:af:03:30:21:12:2b:e5:7f: 68:24:7c:54:89:93:8e:17:4b:59:9c:eb:eb:29:d2: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:65:52:83:04:7A:B3:79:1B:7E:C5:2F:74:89:98:45:B0:0A:8D X509v3 Authority Key Identifier: keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7c:87:45:03:63:68:e0:12:f7:0c:aa:0a:fb:0d:0d:53:55: b7:18:a7:2f:57:b8:f6:1a:de:1f:3a:d3:11:c2:6e:05:71:b1: ba:eb:5e:41:b9:39:31:e8:85:3b:62:c6:0c:a7:f5:0e:4d:d4: 63:5e:6e:6f:80:3e:5b:40:fe:f6:48:22:6b:50:ff:49:e3:2c: f0:9d:d3:85:06:d4:05:d3:55:46:81:32:6a:54:21:a0:0a:ec: e2:eb:c5:bb:59:71:6c:df:09:ad:2c:09:d9:06:e2:b5:cc:b8: 8f:70:13:22:8f:62:30:3e:5a:6d:3e:77:90:fe:03:65:5a:51: 9c:cb:d4:8e:0b:82:75:02:a3:4e:e7:c1:df:a5:48:aa:c9:3e: ec:f0:b5:47:1e:03:01:84:2c:ea:12:8b:01:d4:32:e6:3b:dc: 1d:98:4a:8d:5d:be:ab:83:82:3a:a7:8a:d8:0d:1c:b8:17:3a: 7a:9e:d0:a9:58:5d:e8:13:3e:10:2b:2a:9b:59:cb:0a:85:da: 64:62:57:da:b9:9d:e9:7a:d9:18:2c:60:70:13:b7:0f:44:b8: cd:c8:ea:a4:78:4d:94:27:f5:76:5a:6b:bd:ef:0e:07:91:6a: 75:40:df:e4:01:ee:ba:de:1e:d1:26:41:ef:74:94:76:94:36: fa:e7:1e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FHTdO4DSoSX0LlILtEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGI0NTc2M2VmMGExOTYyOTNiMzM4MGM4ODhmODNhOGM3 Y2QzNzcwHhcNMjUxMjIwMTgwMTE4WhcNMjUxMjIxMTgwMTE4WjAzMTEwLwYDVQQD Eyg5ODIwNjU1MjgzMDQ3YWIzNzkxYjdlYzUyZjc0ODk5ODQ1YjAwYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kx7uthhwMBhOIXmvtD+jKIMbP2S 5qDq+rNr1you2l7eNYAMx96ryLQG9OcBmfb1RhI5ynYFgjp0d/xMXohR8OJggeKq f3/XJfcYEW0mWr646jT63KfJWBG4tFWfkswZW94+lwUVzwRGJeeExSA/aXUvLrgy 7vk1mX9mhAQWz6opK6FdZXgJF8fAoI+X3QBDk/9ANvtgpzpOZ+HZnb6TahUxdaZk ZGPAXOa3IGiWaKoMzG/tEyLJrj7LmOZEGYXuQ23MCZ1ySQViJg15oFUYS59qYCsI R6sh7tqQ1jQFe28Y5z/S2iTurwMwIRIr5X9oJHxUiZOOF0tZnOvrKdIK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJggZVKDBHqzeRt+xS90iZhFsAqNMB8GA1UdIwQY MBaAFIzbRXY+8KGWKTszgMiI+DqMfNN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUt NTNkM2I5ODc0ZWRkLzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUtNTNkM2I5ODc0ZWRk LzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3yHRQNj aOAS9wyqCvsNDVNVtxinL1e49hreHzrTEcJuBXGxuuteQbk5MeiFO2LGDKf1Dk3U Y15ub4A+W0D+9kgia1D/SeMs8J3ThQbUBdNVRoEyalQhoArs4uvFu1lxbN8JrSwJ 2Qbitcy4j3ATIo9iMD5abT53kP4DZVpRnMvUjguCdQKjTufB36VIqsk+7PC1Rx4D AYQs6hKLAdQy5jvcHZhKjV2+q4OCOqeK2A0cuBc6ep7QqVhd6BM+ECsqm1nLCoXa ZGJX2rmd6XrZGCxgcBO3D0S4zcjqpHhNlCf1dlprve8OB5FqdUDf5AHuut4e0SZB 73SUdpQ2+uceuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:45 2025 by rpki-client