This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft File: A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json) Hash identifier: tZG8dQcIHfHd934tynOtoeXHGjqwCXBxeeMTwGWp8V8= Subject key identifier: F8:C5:65:33:CC:EB:3E:78:93:14:5E:95:3C:35:3B:9B:78:27:06:05 Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63 Certificate issuer: /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63 Certificate serial: 019B4DDF526F00E5701316F64A813A5B3C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft Manifest number: 0D40 Signing time: Wed 24 Dec 2025 01:00:39 +0000 Manifest this update: Wed 24 Dec 2025 01:00:39 +0000 Manifest next update: Thu 25 Dec 2025 01:00:39 +0000 Files and hashes: 1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: ykYR5YEDrP74w6ICHUMXEo3Dherr9UfU8Pm3SwwXYxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:52:6f:00:e5:70:13:16:f6:4a:81:3a:5b:3c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63 Validity Not Before: Dec 24 01:00:39 2025 GMT Not After : Dec 25 01:00:39 2025 GMT Subject: CN=f8c56533cceb3e7893145e953c353b9b78270605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:a6:94:cb:21:58:fa:a5:b9:fa:7c:8e:f3: 33:de:5f:3f:ae:b6:2c:7d:e5:d3:29:1e:94:65:45: 36:07:3a:7b:07:ec:c9:1e:cc:bf:f6:28:0c:b8:f7: aa:ef:7c:71:3b:67:4a:af:41:87:61:9a:39:7a:e5: ae:cc:ae:7b:49:80:96:be:54:22:af:07:d5:fa:7a: 4b:e6:05:35:70:ff:ac:12:3d:bd:4a:8b:de:47:d9: 1d:74:42:61:76:57:ef:44:f4:71:99:78:f5:a2:32: 0d:02:72:3f:7e:57:32:40:23:93:5a:77:9c:8f:35: fc:ab:f0:f3:60:ca:0e:c0:53:b7:55:98:32:bf:83: 9d:f6:22:0b:8d:d5:f4:f1:d7:d4:e4:4a:87:5b:41: d8:3a:c7:f8:24:22:cd:d8:e4:ce:62:f6:da:7c:a0: 1d:9b:b5:f0:4a:4b:65:79:c1:c7:e6:63:c1:ae:03: 57:f2:92:a6:5c:61:00:70:24:81:c0:64:3e:a6:54: 7c:97:f1:cd:fe:a9:1c:d5:41:f5:99:16:fd:51:3c: 81:15:d8:84:ed:5e:7f:42:76:83:74:2d:57:a2:fa: 5c:df:99:91:95:24:b4:b2:2a:1b:36:e3:d2:ad:6e: be:fa:bd:b0:95:0a:f5:4c:59:bd:c4:c3:c9:72:35: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C5:65:33:CC:EB:3E:78:93:14:5E:95:3C:35:3B:9B:78:27:06:05 X509v3 Authority Key Identifier: keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ee:79:5b:ab:50:17:bb:bf:66:ba:97:b7:b4:c8:22:b4:e9: 6f:9a:10:ea:20:4a:28:a3:83:50:9b:50:80:ef:de:3b:15:3f: c6:19:ce:fc:99:32:9c:c3:2b:74:3b:fb:96:bb:c3:c6:1d:aa: bc:9d:88:25:81:d5:45:dc:fd:52:92:65:5a:c4:63:f8:03:73: f2:ac:2f:5b:ec:03:f5:01:6a:d5:3a:ed:f2:66:39:60:b8:f9: a8:bd:1c:19:b0:5c:0a:67:01:b1:54:a1:31:5d:22:94:34:20: 3a:b8:53:80:11:94:cc:ee:e3:69:84:00:0b:25:6b:08:85:1d: b8:a2:f1:e8:a0:5f:08:d0:58:35:c6:2c:1e:5b:9f:1f:17:44: 2e:21:30:6d:f6:40:cf:b6:0b:e8:0d:64:6c:79:ff:90:99:77: ba:c1:7f:4b:71:12:16:41:fd:f5:d8:7b:5a:e8:47:5f:95:df: 86:4d:08:c8:61:0f:c0:35:7c:43:b7:57:75:51:81:f0:58:30: ac:9a:da:14:45:4b:e6:9b:7d:b8:4e:b1:d2:5d:bb:9d:be:69: d1:95:57:e6:e0:02:ac:42:4f:36:86:5d:6e:3d:7e:b6:f8:da: 87:f4:8a:83:b7:ef:b9:4b:28:d5:a4:c8:bb:0e:b1:b9:69:ea: a5:e6:d6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN31JvAOVwExb2SoE6Wzx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjI2ZjI1N2ZjY2YwNzUzMWNkN2U3ZmU4NDE2MWI0ZmY1 ZTlhNjMwHhcNMjUxMjI0MDEwMDM5WhcNMjUxMjI1MDEwMDM5WjAzMTEwLwYDVQQD EyhmOGM1NjUzM2NjZWIzZTc4OTMxNDVlOTUzYzM1M2I5Yjc4MjcwNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfymlMshWPqlufp8jvMz3l8/rrYs feXTKR6UZUU2Bzp7B+zJHsy/9igMuPeq73xxO2dKr0GHYZo5euWuzK57SYCWvlQi rwfV+npL5gU1cP+sEj29SoveR9kddEJhdlfvRPRxmXj1ojINAnI/flcyQCOTWnec jzX8q/DzYMoOwFO3VZgyv4Od9iILjdX08dfU5EqHW0HYOsf4JCLN2OTOYvbafKAd m7XwSktlecHH5mPBrgNX8pKmXGEAcCSBwGQ+plR8l/HN/qkc1UH1mRb9UTyBFdiE 7V5/QnaDdC1Xovpc35mRlSS0siobNuPSrW6++r2wlQr1TFm9xMPJcjVs6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjFZTPM6z54kxRelTw1O5t4JwYFMB8GA1UdIwQY MBaAFAPybyV/zPB1Mc1+f+hBYbT/XppjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYt NGE5OTQwZTAwMzY2LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81NDE3ZTQtZDBiOC00MzA0LWFiMjYtNGE5OTQwZTAwMzY2 LzEvQV9KdkpYX004SFV4elg1XzZFRmh0UDllbW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu55W6tQ F7u/ZrqXt7TIIrTpb5oQ6iBKKKODUJtQgO/eOxU/xhnO/JkynMMrdDv7lrvDxh2q vJ2IJYHVRdz9UpJlWsRj+ANz8qwvW+wD9QFq1Trt8mY5YLj5qL0cGbBcCmcBsVSh MV0ilDQgOrhTgBGUzO7jaYQACyVrCIUduKLx6KBfCNBYNcYsHlufHxdELiEwbfZA z7YL6A1kbHn/kJl3usF/S3ESFkH99dh7WuhHX5Xfhk0IyGEPwDV8Q7dXdVGB8Fgw rJraFEVL5pt9uE6x0l27nb5p0ZVX5uACrEJPNoZdbj1+tvjah/SKg7fvuUso1aTI uw6xuWnqpebWnA== -----END CERTIFICATE-----Generated at Wed Dec 24 09:21:21 2025 by rpki-client