This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json) Hash identifier: S0U1Rz5OrQ98kxRMC339pMte2NprR2nLtv7KgJfw2sk= Subject key identifier: FA:C2:A5:63:5E:97:45:9E:39:95:F0:8C:E4:D2:F5:EB:8E:B4:30:66 Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Certificate serial: 019B66FB5AC7C04F59C38138A8997C3C3771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft Manifest number: 09B8 Signing time: Sun 28 Dec 2025 22:01:47 +0000 Manifest this update: Sun 28 Dec 2025 22:01:47 +0000 Manifest next update: Mon 29 Dec 2025 22:01:47 +0000 Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: CK3lo2DZk3lhkD9mh1qrUgXdjP8/+ckVTVVVlJr86RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:5a:c7:c0:4f:59:c3:81:38:a8:99:7c:3c:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291 Validity Not Before: Dec 28 22:01:47 2025 GMT Not After : Dec 29 22:01:47 2025 GMT Subject: CN=fac2a5635e97459e3995f08ce4d2f5eb8eb43066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:21:87:e5:0e:87:44:40:c6:f7:3f:03:5a: 8d:c4:70:a5:6d:50:a3:ee:77:ed:df:3a:d3:58:c0: 42:d1:d0:e3:c7:30:eb:8f:9d:69:4f:e6:7e:81:f2: 6c:1e:c1:47:44:a8:34:92:7c:f1:bf:9c:16:52:52: 60:91:83:1d:13:89:53:ba:c7:d5:07:5f:40:19:3d: 17:f2:25:1c:48:a6:03:63:56:b4:7b:7d:40:77:b2: b8:0d:9c:f5:19:b0:40:f6:19:a3:03:a7:8e:ca:5c: b3:45:c1:42:e5:c8:da:64:88:5b:31:a0:a7:56:d4: f0:9a:cb:42:85:2a:ee:8f:9e:2b:c1:71:bc:77:6b: 3f:5a:6f:e3:06:33:28:3e:c0:ca:74:cf:80:ff:18: 97:b7:54:9d:e5:74:a5:35:ca:90:ff:7c:6a:9e:1c: bd:e3:5e:8e:01:ba:16:09:eb:e7:5a:50:b7:de:2b: d1:0f:48:45:16:6e:ad:9a:31:d1:17:55:1b:b9:a3: 54:c7:b0:15:b2:fb:00:43:c4:30:83:05:9f:e9:53: fc:95:b2:d0:19:e6:00:28:c4:f3:32:32:f4:b3:2a: eb:fd:c3:3f:d0:a7:53:ca:c7:44:80:d2:68:e5:ee: 47:80:2e:6d:e5:80:b3:02:33:9e:d8:2d:14:64:be: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:A5:63:5E:97:45:9E:39:95:F0:8C:E4:D2:F5:EB:8E:B4:30:66 X509v3 Authority Key Identifier: keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:87:2a:6d:17:7d:0d:4d:ab:47:1a:79:cf:04:32:b5:b8:e8: fe:7b:27:6c:77:d2:2f:c7:6c:81:68:7a:e7:4b:a2:fa:3f:50: 51:1d:24:b9:97:f1:b6:4c:6f:c7:6b:da:a8:01:aa:ac:b0:c8: e5:b7:43:e5:6c:d7:00:93:ba:57:a1:34:6a:0a:5f:31:b5:3e: de:b8:41:d3:ac:49:81:c6:82:8f:ad:15:97:63:f2:10:59:76: 89:59:5d:67:10:74:94:7a:a8:8b:cd:11:2a:4f:63:33:17:fa: 9b:6d:d9:03:65:f8:8a:88:56:4e:57:a2:70:32:29:d8:b0:36: f6:37:5c:00:d7:82:09:0c:10:ec:99:c9:cf:06:ff:1a:c9:41: 6b:42:f2:1f:57:88:c8:73:35:1c:16:25:93:3a:2d:f4:54:f2: e7:92:e9:2e:68:e3:55:84:61:8c:ed:67:e7:58:32:f2:48:43: fa:43:a7:84:16:72:e3:d6:94:6e:25:70:44:32:86:a9:1b:97: 30:a4:b4:41:2e:09:b6:73:67:15:14:4b:5b:65:f2:b5:41:93: 69:b5:be:bb:5d:4a:30:4f:84:f6:2a:99:35:f4:59:31:0d:8d: 8e:35:d5:b1:63:bb:3f:98:c6:db:a4:81:f2:e3:0d:e3:af:bf: b6:10:b1:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+1rHwE9Zw4E4qJl8PDdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNTdkY2M3ZTUyZjU4YjM0MmI3MGM4M2RhYTIxYTEwNmFj NTkyOTEwHhcNMjUxMjI4MjIwMTQ3WhcNMjUxMjI5MjIwMTQ3WjAzMTEwLwYDVQQD EyhmYWMyYTU2MzVlOTc0NTllMzk5NWYwOGNlNGQyZjVlYjhlYjQzMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQhh+UOh0RAxvc/A1qNxHClbVCj 7nft3zrTWMBC0dDjxzDrj51pT+Z+gfJsHsFHRKg0knzxv5wWUlJgkYMdE4lTusfV B19AGT0X8iUcSKYDY1a0e31Ad7K4DZz1GbBA9hmjA6eOylyzRcFC5cjaZIhbMaCn VtTwmstChSruj54rwXG8d2s/Wm/jBjMoPsDKdM+A/xiXt1Sd5XSlNcqQ/3xqnhy9 416OAboWCevnWlC33ivRD0hFFm6tmjHRF1UbuaNUx7AVsvsAQ8QwgwWf6VP8lbLQ GeYAKMTzMjL0syrr/cM/0KdTysdEgNJo5e5HgC5t5YCzAjOe2C0UZL7+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrCpWNel0WeOZXwjOTS9euOtDBmMB8GA1UdIwQY MBaAFIxX3MflL1izQrcMg9qiGhBqxZKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYt NDEzMDZjMjdkNmYwLzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYtNDEzMDZjMjdkNmYw LzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQocqbRd9 DU2rRxp5zwQytbjo/nsnbHfSL8dsgWh650ui+j9QUR0kuZfxtkxvx2vaqAGqrLDI 5bdD5WzXAJO6V6E0agpfMbU+3rhB06xJgcaCj60Vl2PyEFl2iVldZxB0lHqoi80R Kk9jMxf6m23ZA2X4iohWTleicDIp2LA29jdcANeCCQwQ7JnJzwb/GslBa0LyH1eI yHM1HBYlkzot9FTy55LpLmjjVYRhjO1n51gy8khD+kOnhBZy49aUbiVwRDKGqRuX MKS0QS4JtnNnFRRLW2XytUGTabW+u11KME+E9iqZNfRZMQ2NjjXVsWO7P5jG26SB 8uMN46+/thCxBQ== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:56 2025 by rpki-client