This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json) Hash identifier: yHAeBZO+Dfai90dJ8KEJEMDJc0ak9jv+8cP7RWXeHTc= Subject key identifier: 35:72:A1:5F:D7:F7:E6:41:04:21:63:26:E0:13:7C:A8:B7:43:D9:9D Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d Certificate serial: 019B4814DE13C1BB6E735B82A448353B5FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft Manifest number: 0C45 Signing time: Mon 22 Dec 2025 22:01:25 +0000 Manifest this update: Mon 22 Dec 2025 22:01:25 +0000 Manifest next update: Tue 23 Dec 2025 22:01:25 +0000 Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: Ta55kSMtRvX9b5UptbXskgBwFzLKUCBk+ZfTX6xzIVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:de:13:c1:bb:6e:73:5b:82:a4:48:35:3b:5f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d Validity Not Before: Dec 22 22:01:25 2025 GMT Not After : Dec 23 22:01:25 2025 GMT Subject: CN=3572a15fd7f7e64104216326e0137ca8b743d99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:a1:52:9c:07:00:a9:64:3d:74:e8:2c:7c: 54:8d:b2:9e:04:62:6c:fd:4e:d7:a8:53:35:ad:0f: 17:74:3f:d2:02:74:71:d8:2a:0d:15:5a:17:3f:32: b9:db:51:2e:b0:49:e1:7c:af:e9:f3:1f:cf:57:ac: 19:cc:d3:5b:fa:46:17:8a:44:18:8d:bd:96:cb:a8: 12:3e:d6:0f:fa:6b:7f:2f:8e:c4:4c:dd:7d:a4:d3: 72:64:a9:aa:f8:9b:f5:e0:d5:ad:89:fe:9c:80:90: 20:ae:fd:b8:dd:43:25:32:a4:96:63:69:0a:1f:d3: e0:98:ab:a7:be:8b:0c:1b:dd:19:36:ae:ef:d6:4d: ab:d0:0e:3e:6c:c1:e8:7d:0c:a9:f6:88:e0:50:7e: 9a:a6:71:86:37:13:7f:50:78:6c:ed:df:a4:11:7d: 79:65:72:72:fa:da:a0:43:86:32:d4:62:52:95:39: 39:b7:d9:b0:0c:9d:02:40:e6:81:22:ee:d3:3e:92: 1d:c1:10:18:64:1b:56:fe:70:c0:79:4f:84:aa:7d: 49:d6:c1:1e:12:68:3c:30:e9:e3:14:7e:72:e5:e4: 01:5a:f5:91:fe:0c:05:3b:3d:20:95:3b:9c:62:09: 03:20:b3:2d:4e:c6:ab:43:40:b5:e0:fb:8f:b3:dd: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:A1:5F:D7:F7:E6:41:04:21:63:26:E0:13:7C:A8:B7:43:D9:9D X509v3 Authority Key Identifier: keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:32:76:15:74:9e:2d:74:0e:8f:91:32:cd:20:48:e4:9d:24: 02:58:e3:ee:4e:8e:86:11:25:e5:49:91:62:15:59:a8:8b:d6: 46:e8:e1:0a:2b:4f:c5:d9:0b:ab:54:9f:4f:52:fc:7b:b4:04: 5e:04:af:65:22:d3:00:c1:84:c1:78:7e:13:51:25:3f:d0:d0: 24:b5:34:ee:60:7e:e1:89:eb:42:de:8b:64:b4:15:62:42:6d: 90:bc:3b:96:58:2e:d1:ef:2c:fd:ad:e9:15:58:83:95:fa:2a: ae:3b:6b:a2:30:c0:e9:46:2b:15:bc:ee:2e:57:dc:76:43:03: d1:b3:bd:67:50:5f:ab:a2:db:29:6b:fa:3d:0e:2e:68:a2:c1: ce:aa:cf:fe:60:d4:f6:b0:42:c6:34:a1:c4:0e:ba:b2:13:57: 34:2c:74:52:5e:57:c8:9a:48:5c:3c:8f:1f:19:17:e1:77:a1: 68:76:b1:c7:11:df:30:a2:2c:98:f7:c9:d3:d1:f9:e4:bc:a8: b2:17:e1:b7:03:ac:cb:70:f1:a7:a4:02:44:e2:69:28:a4:05: 18:8a:a2:b3:1d:c9:2a:36:01:c7:f0:4c:b4:7e:8d:aa:b3:19: 96:40:4d:e1:66:0b:45:7b:6c:ce:a4:0c:2c:03:83:d9:c5:ea: 93:11:a7:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFN4Twbtuc1uCpEg1O1/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNGVlYTcyZTQ1MzFjOTJhNmUwMGVmNGYxOTFhNjEyN2U5 NTZkMmQwHhcNMjUxMjIyMjIwMTI1WhcNMjUxMjIzMjIwMTI1WjAzMTEwLwYDVQQD EygzNTcyYTE1ZmQ3ZjdlNjQxMDQyMTYzMjZlMDEzN2NhOGI3NDNkOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojyhUpwHAKlkPXToLHxUjbKeBGJs /U7XqFM1rQ8XdD/SAnRx2CoNFVoXPzK521EusEnhfK/p8x/PV6wZzNNb+kYXikQY jb2Wy6gSPtYP+mt/L47ETN19pNNyZKmq+Jv14NWtif6cgJAgrv243UMlMqSWY2kK H9PgmKunvosMG90ZNq7v1k2r0A4+bMHofQyp9ojgUH6apnGGNxN/UHhs7d+kEX15 ZXJy+tqgQ4Yy1GJSlTk5t9mwDJ0CQOaBIu7TPpIdwRAYZBtW/nDAeU+Eqn1J1sEe Emg8MOnjFH5y5eQBWvWR/gwFOz0glTucYgkDILMtTsarQ0C14PuPs932MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVyoV/X9+ZBBCFjJuATfKi3Q9mdMB8GA1UdIwQY MBaAFI9O6nLkUxySpuAO9PGRphJ+lW0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzIt NDYxOGZiZmE0Yzg5LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzItNDYxOGZiZmE0Yzg5 LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjJ2FXSe LXQOj5EyzSBI5J0kAljj7k6OhhEl5UmRYhVZqIvWRujhCitPxdkLq1SfT1L8e7QE XgSvZSLTAMGEwXh+E1ElP9DQJLU07mB+4YnrQt6LZLQVYkJtkLw7llgu0e8s/a3p FViDlfoqrjtrojDA6UYrFbzuLlfcdkMD0bO9Z1Bfq6LbKWv6PQ4uaKLBzqrP/mDU 9rBCxjShxA66shNXNCx0Ul5XyJpIXDyPHxkX4XehaHaxxxHfMKIsmPfJ09H55Lyo shfhtwOsy3Dxp6QCROJpKKQFGIqisx3JKjYBx/BMtH6NqrMZlkBN4WYLRXtszqQM LAOD2cXqkxGnVA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:23 2025 by rpki-client