This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json) Hash identifier: /6QASH+JvYxr0IuexAS4rCvwNNjcTNvkyUPC83lDWXA= Subject key identifier: A7:2C:42:EE:51:B6:1B:49:4E:E5:4F:4A:6D:6A:3A:40:B9:20:8C:71 Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28 Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28 Certificate serial: 019B337AE0B78BEA61445437C7A956C968C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft Manifest number: 0BE3 Signing time: Thu 18 Dec 2025 22:00:49 +0000 Manifest this update: Thu 18 Dec 2025 22:00:49 +0000 Manifest next update: Fri 19 Dec 2025 22:00:49 +0000 Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: Mji3GP487bJ3leCjdDlEIVO7gDS8HXed2dMhZYDW4Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e0:b7:8b:ea:61:44:54:37:c7:a9:56:c9:68:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28 Validity Not Before: Dec 18 22:00:49 2025 GMT Not After : Dec 19 22:00:49 2025 GMT Subject: CN=a72c42ee51b61b494ee54f4a6d6a3a40b9208c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:4c:a5:9e:69:25:d8:00:17:a4:16:b6:90: b9:15:32:f5:1c:c4:09:3b:19:e5:c2:1d:80:61:94: d3:f5:08:de:29:23:19:e0:e5:9a:af:60:94:61:9d: f1:24:b3:07:55:a3:94:cc:03:af:31:15:90:20:fc: 85:f3:90:9b:0a:e4:3a:b6:61:9e:a3:b1:7f:d2:7f: e0:f3:aa:ff:ac:f6:06:90:d1:fc:d5:34:3f:5c:d6: 5c:c8:af:69:50:9f:aa:42:1c:a8:2e:9c:d3:b6:97: e0:80:0d:00:89:26:98:ec:65:5d:d7:bd:81:7b:b4: ad:49:e6:af:ec:11:a9:64:d1:99:92:f4:c1:3e:de: 9c:e3:76:12:3d:f3:7f:86:c9:c9:6b:ef:35:fb:fa: a8:f8:cd:9d:85:6c:4b:34:d7:06:b6:06:31:bc:d7: b5:ce:ee:66:d8:bc:cc:97:36:c8:31:f6:69:ac:28: 79:55:09:03:c5:c2:00:a8:30:b5:aa:3f:d9:8c:1c: 59:d5:f5:e4:bb:53:05:23:13:fa:de:45:b7:49:b8: 5d:b8:de:73:99:c4:75:22:65:fa:01:b6:29:ad:43: 91:6d:2b:64:3d:0e:5e:3e:6d:fa:00:e9:b7:9b:d8: f8:f5:41:43:5b:86:d2:68:57:e2:08:fa:25:dc:61: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:42:EE:51:B6:1B:49:4E:E5:4F:4A:6D:6A:3A:40:B9:20:8C:71 X509v3 Authority Key Identifier: keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d7:17:59:7c:96:06:b7:60:8f:3f:a4:b2:1b:88:3d:0c:a5: 94:58:f7:15:89:82:04:94:3e:f9:ee:02:91:42:c7:02:9e:87: 9b:2e:09:2c:67:92:61:22:31:9e:1f:f6:ed:ca:60:67:ee:6c: 87:48:11:2e:7c:f6:9e:0b:be:44:40:21:80:95:60:33:cf:e2: cd:42:bb:86:ac:05:08:1b:fa:c7:48:10:7a:d8:68:b7:d0:b9: 4d:bb:06:59:18:ef:70:1a:64:61:e8:9f:93:9c:c3:f5:2a:8f: b4:40:1a:7e:14:75:d9:1a:a8:dd:e8:8b:3b:e4:d5:7b:8d:5e: 48:92:08:98:80:20:04:bd:6c:aa:7b:db:1d:f0:4a:bd:8c:8a: b7:6e:9f:56:26:0c:5c:95:97:b7:cb:74:11:e0:f8:24:1c:9d: 51:17:45:30:96:43:02:4b:7c:4f:4a:e7:55:3b:46:1a:49:cc: 92:64:11:66:21:dd:1d:ad:f4:fd:bb:85:09:b6:29:8e:c1:2d: 0b:9b:0c:94:3f:51:7c:23:be:03:84:a3:a6:4e:48:0f:cd:db: 46:cb:d4:2d:71:0b:54:90:d5:65:b8:e3:09:61:c8:8a:2f:28: 9e:0a:14:76:84:9e:c5:70:25:e9:6f:00:a5:b5:33:b1:31:3b: 97:ff:2a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeuC3i+phRFQ3x6lWyWjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWRlZTk2NGFhMjZmODliZDEwMjI3NmQ0NjU2MzNmYjgy ZWFhMjgwHhcNMjUxMjE4MjIwMDQ5WhcNMjUxMjE5MjIwMDQ5WjAzMTEwLwYDVQQD EyhhNzJjNDJlZTUxYjYxYjQ5NGVlNTRmNGE2ZDZhM2E0MGI5MjA4YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIVMpZ5pJdgAF6QWtpC5FTL1HMQJ Oxnlwh2AYZTT9QjeKSMZ4OWar2CUYZ3xJLMHVaOUzAOvMRWQIPyF85CbCuQ6tmGe o7F/0n/g86r/rPYGkNH81TQ/XNZcyK9pUJ+qQhyoLpzTtpfggA0AiSaY7GVd172B e7StSeav7BGpZNGZkvTBPt6c43YSPfN/hsnJa+81+/qo+M2dhWxLNNcGtgYxvNe1 zu5m2LzMlzbIMfZprCh5VQkDxcIAqDC1qj/ZjBxZ1fXku1MFIxP63kW3SbhduN5z mcR1ImX6AbYprUORbStkPQ5ePm36AOm3m9j49UFDW4bSaFfiCPol3GHGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcsQu5RthtJTuVPSm1qOkC5IIxxMB8GA1UdIwQY MBaAFI0d7pZKom+JvRAidtRlYz+4LqooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalIzdWxrcWliNG05RUNKMjFHVmpQN2d1cWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NDkzNjMtMTIyOS00MTE0LWE5OTYt MjU5NDIwZDMyNDcyLzEvalIzdWxrcWliNG05RUNKMjFHVmpQN2d1cWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81NDkzNjMtMTIyOS00MTE0LWE5OTYtMjU5NDIwZDMyNDcy LzEvalIzdWxrcWliNG05RUNKMjFHVmpQN2d1cWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtcXWXyW Brdgjz+kshuIPQyllFj3FYmCBJQ++e4CkULHAp6Hmy4JLGeSYSIxnh/27cpgZ+5s h0gRLnz2ngu+REAhgJVgM8/izUK7hqwFCBv6x0gQethot9C5TbsGWRjvcBpkYeif k5zD9SqPtEAafhR12Rqo3eiLO+TVe41eSJIImIAgBL1sqnvbHfBKvYyKt26fViYM XJWXt8t0EeD4JBydURdFMJZDAkt8T0rnVTtGGknMkmQRZiHdHa30/buFCbYpjsEt C5sMlD9RfCO+A4Sjpk5ID83bRsvULXELVJDVZbjjCWHIii8ongoUdoSexXAl6W8A pbUzsTE7l/8qLg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:42 2025 by rpki-client