This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json) Hash identifier: XkMcuBatSSZ6fAb2vNkCkWh3mz6lcoo9Nn+y1ESaiew= Subject key identifier: 86:75:89:E7:77:FC:B9:19:B1:C8:37:C3:35:17:1A:CE:51:E1:73:A0 Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32 Certificate serial: 019B3042F7AF834C241E6892647E2CFB48D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft Manifest number: 080B Signing time: Thu 18 Dec 2025 07:00:53 +0000 Manifest this update: Thu 18 Dec 2025 07:00:53 +0000 Manifest next update: Fri 19 Dec 2025 07:00:53 +0000 Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: rShLeP3GM1anwtV9efkVQIEVqPY9yOTvlWlkEQUAtk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:f7:af:83:4c:24:1e:68:92:64:7e:2c:fb:48:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fac851d9982896a765876d311b97b509357ec32 Validity Not Before: Dec 18 07:00:53 2025 GMT Not After : Dec 19 07:00:53 2025 GMT Subject: CN=867589e777fcb919b1c837c335171ace51e173a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:fc:9c:71:0a:7d:99:a8:8b:45:35:7c:a9: 92:a7:78:b3:68:bf:47:9e:7a:d6:27:af:ee:cd:04: 3e:91:12:19:22:f4:10:2d:48:15:bb:4a:e7:c7:1a: 49:e1:58:14:ab:37:f8:e8:87:93:f6:cf:08:6b:6e: 3c:5f:2b:ba:bd:93:3b:b7:61:67:98:8d:c4:ec:a6: 05:47:b4:73:66:07:f2:59:52:37:d6:ad:83:21:75: 1b:ab:8f:16:48:53:12:c2:7b:c4:46:d4:2a:1e:11: c9:a4:1b:75:1b:3c:e4:6b:0f:e5:4a:2b:4c:74:f9: 0f:74:e4:c0:83:19:46:ea:25:b8:20:57:d0:72:9c: 6f:07:5b:96:6a:e0:b6:ef:77:e8:ff:70:6d:70:f7: 18:cd:6b:ab:e0:e4:a6:5b:f7:9f:90:6a:d7:af:5f: b6:18:eb:60:27:e8:8f:c4:94:b0:23:83:51:80:8b: 20:83:37:f0:e8:7a:5a:b5:e0:ff:5d:9a:c6:ac:e1: 52:96:97:10:d3:c0:98:d7:a3:a8:e6:54:1b:36:fc: 58:1d:48:38:79:ba:eb:1f:75:ea:85:a2:96:80:83: f0:11:02:7f:bb:f0:88:a7:76:6e:ee:52:4f:f2:6d: 1b:03:83:43:f4:5a:42:07:64:58:5b:d3:5a:9e:2b: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:89:E7:77:FC:B9:19:B1:C8:37:C3:35:17:1A:CE:51:E1:73:A0 X509v3 Authority Key Identifier: keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c5:19:5f:5d:30:97:6e:b8:eb:92:64:3c:fa:50:83:7b:b8: b5:c3:5c:a1:ea:a1:2a:8a:e5:d7:ba:f5:2d:38:63:8d:c9:b4: 11:e2:96:81:8a:2e:58:79:71:f3:cd:76:10:fb:15:b8:fd:5f: 95:f8:0e:a3:f2:c1:fd:7a:a8:1f:04:66:7a:41:af:8e:eb:ec: 3f:d2:16:35:cb:2d:7c:ab:da:74:65:ee:05:c8:7f:41:94:86: 79:5c:b3:6d:20:96:54:ce:75:96:ba:cc:ca:6e:fb:6c:46:13: 38:43:39:e8:17:42:5a:9b:1a:11:35:bf:c4:b6:98:ec:97:80: 21:ee:44:6e:9e:22:42:cc:5e:74:54:9e:6f:2a:19:ba:ff:7c: 4d:cb:e0:bc:90:2b:ae:6f:c8:31:42:e2:bf:a8:dd:95:f3:29: 33:9d:96:e4:0c:95:4e:5c:7a:73:ec:28:21:07:2f:80:da:0c: 3b:86:5c:e0:0c:36:37:3a:3c:00:c1:e8:eb:a9:34:a9:18:b2: 56:9b:b4:bb:00:ce:ff:b8:6b:a2:7d:15:9b:90:74:17:aa:ec: fc:0e:b5:50:9a:7f:95:52:db:93:3a:70:6a:6b:71:6b:09:9b: c9:a5:c0:9d:a8:2c:b5:6c:0f:b3:d0:4c:4a:23:e5:9a:6d:cb: f5:9f:5f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQvevg0wkHmiSZH4s+0jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYWM4NTFkOTk4Mjg5NmE3NjU4NzZkMzExYjk3YjUwOTM1 N2VjMzIwHhcNMjUxMjE4MDcwMDUzWhcNMjUxMjE5MDcwMDUzWjAzMTEwLwYDVQQD Eyg4Njc1ODllNzc3ZmNiOTE5YjFjODM3YzMzNTE3MWFjZTUxZTE3M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgr8nHEKfZmoi0U1fKmSp3izaL9H nnrWJ6/uzQQ+kRIZIvQQLUgVu0rnxxpJ4VgUqzf46IeT9s8Ia248Xyu6vZM7t2Fn mI3E7KYFR7RzZgfyWVI31q2DIXUbq48WSFMSwnvERtQqHhHJpBt1Gzzkaw/lSitM dPkPdOTAgxlG6iW4IFfQcpxvB1uWauC273fo/3BtcPcYzWur4OSmW/efkGrXr1+2 GOtgJ+iPxJSwI4NRgIsggzfw6HpateD/XZrGrOFSlpcQ08CY16Oo5lQbNvxYHUg4 ebrrH3XqhaKWgIPwEQJ/u/CIp3Zu7lJP8m0bA4ND9FpCB2RYW9NaniuoFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZ1ied3/LkZscg3wzUXGs5R4XOgMB8GA1UdIwQY MBaAFI+shR2Zgolqdlh20xG5e1CTV+wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAt MmRmYzRhNmY1ZDBkLzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAtMmRmYzRhNmY1ZDBk LzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsUZX10w l26465JkPPpQg3u4tcNcoeqhKorl17r1LThjjcm0EeKWgYouWHlx8812EPsVuP1f lfgOo/LB/XqoHwRmekGvjuvsP9IWNcstfKvadGXuBch/QZSGeVyzbSCWVM51lrrM ym77bEYTOEM56BdCWpsaETW/xLaY7JeAIe5Ebp4iQsxedFSebyoZuv98TcvgvJAr rm/IMULiv6jdlfMpM52W5AyVTlx6c+woIQcvgNoMO4Zc4Aw2Nzo8AMHo66k0qRiy Vpu0uwDO/7hron0Vm5B0F6rs/A61UJp/lVLbkzpwamtxawmbyaXAnagstWwPs9BM SiPlmm3L9Z9fRA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:50 2025 by rpki-client