This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft File: rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json) Hash identifier: ajvKp5/FAAYT87wV7EZ167FUox1Rn9oHEcIfgrGo0nk= Subject key identifier: 98:E6:FE:A1:C4:9F:2D:ED:32:93:5A:2C:4E:C1:EF:FB:C3:BA:78:2F Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01 Certificate issuer: /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001 Certificate serial: 019B5298CECC910D0A30037ECA716B0DFB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft Manifest number: 1424 Signing time: Wed 24 Dec 2025 23:01:44 +0000 Manifest this update: Wed 24 Dec 2025 23:01:44 +0000 Manifest next update: Thu 25 Dec 2025 23:01:44 +0000 Files and hashes: 1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: VhJ+D7+AZ1vXYRqKiTHdaI/kHB5Ko74e8e8IUVEt0pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:ce:cc:91:0d:0a:30:03:7e:ca:71:6b:0d:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001 Validity Not Before: Dec 24 23:01:44 2025 GMT Not After : Dec 25 23:01:44 2025 GMT Subject: CN=98e6fea1c49f2ded32935a2c4ec1effbc3ba782f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:ac:fb:17:ed:33:2a:6e:23:68:9d:e9:45: d5:45:84:6a:19:5d:fe:30:13:89:8a:ab:88:26:37: e2:62:fa:b7:e1:1b:a4:11:52:c8:1d:5b:9f:3d:f0: cd:37:af:59:81:5e:7b:b0:eb:0d:cf:10:c2:e4:ad: 53:e2:b2:95:b4:c8:37:12:72:8c:6c:e5:03:b7:1a: ea:96:9a:36:30:23:67:37:b6:2c:da:59:2f:26:cd: 09:75:1b:5b:6d:14:a2:f7:47:a8:37:f2:10:09:e4: 91:29:b4:2f:f4:9e:00:a4:dd:3a:dc:bc:60:96:fb: e8:eb:cf:0c:d3:e3:06:40:00:a1:59:25:8b:11:7b: 53:ec:cd:30:b8:c8:ee:02:5c:0f:d0:6f:e2:70:db: cf:cd:50:4c:e0:40:db:89:90:b1:8e:a6:38:69:20: 97:3a:0e:18:af:fb:81:0a:ae:34:ce:f8:45:a9:7f: f8:4b:06:00:93:66:b2:1c:1a:e2:78:d6:30:cb:ae: 55:2d:85:e1:92:11:1e:4b:1a:65:52:8c:9a:45:f4: bc:f8:a4:47:86:fb:93:f9:00:9c:4a:88:31:93:53: 46:57:47:48:1e:e7:d8:e9:c4:b3:66:69:6d:9e:ed: 5f:b3:a3:2f:36:c8:97:4c:ec:47:27:03:8d:2f:d4: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:FE:A1:C4:9F:2D:ED:32:93:5A:2C:4E:C1:EF:FB:C3:BA:78:2F X509v3 Authority Key Identifier: keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e0:be:e1:de:96:fa:72:b5:9d:87:29:af:ee:f1:11:1b:8b: 77:63:79:16:b5:8c:8e:29:6f:9a:8f:28:9b:34:41:5a:b5:15: 05:63:0c:7a:75:5e:79:24:df:72:98:b0:4f:89:ee:32:4f:7f: 75:d2:d1:f2:61:72:ae:4a:04:8e:d9:0d:16:31:75:db:ef:ee: 49:a3:4d:53:48:0a:fd:34:3a:7a:6a:d4:a3:16:ad:9e:6c:3b: c2:60:c8:ca:23:92:25:ff:d0:44:85:8a:cc:31:51:91:6c:11: 0e:74:b4:73:b4:f4:f8:b4:91:63:91:6d:15:0c:42:7d:76:2f: a9:58:19:19:96:fb:ea:21:83:44:b3:5b:15:87:f5:dc:7f:f6: 7f:48:13:0c:f3:a5:5a:0f:6a:a1:47:77:7b:54:6d:1e:79:ee: 32:5a:b8:27:58:27:5d:3b:28:f9:a8:11:e5:29:99:75:3d:8b: 46:11:67:8e:78:3c:9b:68:df:9c:33:4c:a0:2b:cd:d3:2e:ff: 22:71:e6:28:24:d2:15:17:e0:f7:95:9a:87:e9:ff:90:00:9c: e7:ea:bb:e8:a4:3b:5c:4d:a3:f4:02:7a:ba:e7:b0:22:82:88: 44:47:43:44:69:0a:ef:0e:39:c0:9e:66:3c:82:97:86:4e:7e: b0:7f:47:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmM7MkQ0KMAN+ynFrDft6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWJlMzcxNWUzYzI3YmE3MmVjYzY4ZDFlNWZmNWM5MzY3 N2QwMDEwHhcNMjUxMjI0MjMwMTQ0WhcNMjUxMjI1MjMwMTQ0WjAzMTEwLwYDVQQD Eyg5OGU2ZmVhMWM0OWYyZGVkMzI5MzVhMmM0ZWMxZWZmYmMzYmE3ODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YOs+xftMypuI2id6UXVRYRqGV3+ MBOJiquIJjfiYvq34RukEVLIHVufPfDNN69ZgV57sOsNzxDC5K1T4rKVtMg3EnKM bOUDtxrqlpo2MCNnN7Ys2lkvJs0JdRtbbRSi90eoN/IQCeSRKbQv9J4ApN063Lxg lvvo688M0+MGQAChWSWLEXtT7M0wuMjuAlwP0G/icNvPzVBM4EDbiZCxjqY4aSCX Og4Yr/uBCq40zvhFqX/4SwYAk2ayHBrieNYwy65VLYXhkhEeSxplUoyaRfS8+KRH hvuT+QCcSogxk1NGV0dIHufY6cSzZmltnu1fs6MvNsiXTOxHJwONL9QcuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjm/qHEny3tMpNaLE7B7/vDungvMB8GA1UdIwQY MBaAFKyb43FePCe6cuzGjR5f9ck2d9ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hZGZhNzktMjM3My00YmY1LTgzNmEt Y2EwY2E2N2E1ODZiLzEvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hZGZhNzktMjM3My00YmY1LTgzNmEtY2EwY2E2N2E1ODZi LzEvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuC+4d6W +nK1nYcpr+7xERuLd2N5FrWMjilvmo8omzRBWrUVBWMMenVeeSTfcpiwT4nuMk9/ ddLR8mFyrkoEjtkNFjF12+/uSaNNU0gK/TQ6emrUoxatnmw7wmDIyiOSJf/QRIWK zDFRkWwRDnS0c7T0+LSRY5FtFQxCfXYvqVgZGZb76iGDRLNbFYf13H/2f0gTDPOl Wg9qoUd3e1RtHnnuMlq4J1gnXTso+agR5SmZdT2LRhFnjng8m2jfnDNMoCvN0y7/ InHmKCTSFRfg95Wah+n/kACc5+q76KQ7XE2j9AJ6uuewIoKIREdDRGkK7w45wJ5m PIKXhk5+sH9HsA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:21:11 2025 by rpki-client