This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json) Hash identifier: k0jnM/WJANfB9ly8BiiG78Re73z08jxSGwqaGLMuaBw= Subject key identifier: 37:D0:50:58:1B:38:E5:A4:0E:E1:DB:02:3D:2A:C5:31:9A:A6:2C:0D Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa Certificate serial: 019B34FB63FEF5D85F80818575C3B119C619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft Manifest number: 12B8 Signing time: Fri 19 Dec 2025 05:00:48 +0000 Manifest this update: Fri 19 Dec 2025 05:00:48 +0000 Manifest next update: Sat 20 Dec 2025 05:00:48 +0000 Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: hrh+QMUbUibVB7sv4vDoFj6sFogyrj+f1/i/0BVDNNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:63:fe:f5:d8:5f:80:81:85:75:c3:b1:19:c6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa Validity Not Before: Dec 19 05:00:48 2025 GMT Not After : Dec 20 05:00:48 2025 GMT Subject: CN=37d050581b38e5a40ee1db023d2ac5319aa62c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:a2:0c:83:6b:75:ca:9c:08:25:3f:27:5e: 68:9a:90:82:8d:a3:97:16:81:05:41:9a:cd:46:0a: 60:e7:39:28:f9:ec:9c:4d:88:4c:73:0e:a4:a4:4f: ac:53:50:c5:54:6a:a6:d2:9a:27:d5:b9:e9:80:2a: f9:b0:99:2c:4c:27:a1:d0:f5:e8:08:1c:a4:14:15: ac:59:79:8a:f5:ca:03:96:95:af:a2:fa:4b:7e:1a: af:c1:52:9f:08:12:51:cf:dc:f5:77:d4:9a:62:ea: c2:c7:c4:8b:ab:82:1b:ff:97:7c:06:9a:26:4f:d2: aa:17:75:09:2e:f3:80:3b:47:76:dc:e3:50:c6:e1: 4a:30:21:de:8b:48:3e:80:07:a3:0d:37:54:fb:0a: 3b:64:7d:98:54:44:e4:38:f0:83:1a:9d:8f:f9:50: 78:4c:92:85:d8:b4:2e:96:39:89:28:68:25:fb:f9: cb:d7:51:bf:ad:43:44:35:3b:2a:ab:0c:d5:c1:47: 33:7e:3d:39:83:bd:ca:19:6c:78:0f:c5:49:9f:db: 2f:e8:d0:77:c5:d1:2e:e2:04:2f:ce:27:40:e8:9f: d5:83:1a:3e:37:6e:06:a6:c6:18:b3:9c:4b:a7:0d: 02:78:d5:13:b9:09:e0:60:f3:da:e8:e6:ea:8b:e9: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:50:58:1B:38:E5:A4:0E:E1:DB:02:3D:2A:C5:31:9A:A6:2C:0D X509v3 Authority Key Identifier: keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c9:07:e4:30:49:a7:46:72:ff:f0:e5:d6:6e:60:22:6f:3d: b2:23:a8:26:5a:ee:14:00:6e:1f:26:63:1f:2c:f8:4d:74:1e: 7d:b2:9f:80:6a:d9:43:d4:12:dc:e8:7a:53:93:22:27:9c:3b: 85:a4:03:28:5a:4a:46:b6:62:55:f7:c7:be:5a:06:0e:e4:04: f3:90:d9:1a:fb:fb:3f:30:08:d5:46:67:3b:97:9e:0d:7c:20: 0b:11:3a:e4:eb:2a:c1:78:cf:f9:ee:94:7f:73:63:9c:c3:ea: 58:60:87:31:af:01:fe:62:bc:9d:11:02:58:92:49:64:b9:c2: d2:a4:0d:b7:80:93:01:49:2d:14:b8:f8:ee:3d:14:ff:e0:e3: a3:af:c7:79:43:ce:a1:c5:47:5a:ba:60:35:8a:7e:96:49:4f: 28:83:d3:7a:3b:96:b9:8a:80:75:9e:c1:55:c4:d5:83:3d:e0: c0:dc:f0:95:bc:59:5c:5d:c8:3d:b9:50:37:26:b0:15:e2:fd: 0d:e9:dc:62:81:9d:98:16:d9:eb:32:89:2e:51:c9:f8:3e:2b: 45:94:5e:5d:23:6a:16:30:8e:9a:c7:81:b5:ce:14:16:15:fd: b0:f8:28:77:8f:05:24:e0:d5:8c:de:4f:d4:41:cc:9f:87:88: d3:93:3d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2P+9dhfgIGFdcOxGcYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzdjNmFlNDg4YzNhNjk3ODAzN2I3NzBhYTUyM2NiMjUx YzlmZmEwHhcNMjUxMjE5MDUwMDQ4WhcNMjUxMjIwMDUwMDQ4WjAzMTEwLwYDVQQD EygzN2QwNTA1ODFiMzhlNWE0MGVlMWRiMDIzZDJhYzUzMTlhYTYyYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyyiDINrdcqcCCU/J15ompCCjaOX FoEFQZrNRgpg5zko+eycTYhMcw6kpE+sU1DFVGqm0pon1bnpgCr5sJksTCeh0PXo CBykFBWsWXmK9coDlpWvovpLfhqvwVKfCBJRz9z1d9SaYurCx8SLq4Ib/5d8Bpom T9KqF3UJLvOAO0d23ONQxuFKMCHei0g+gAejDTdU+wo7ZH2YVETkOPCDGp2P+VB4 TJKF2LQuljmJKGgl+/nL11G/rUNENTsqqwzVwUczfj05g73KGWx4D8VJn9sv6NB3 xdEu4gQvzidA6J/Vgxo+N24GpsYYs5xLpw0CeNUTuQngYPPa6Obqi+nBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfQUFgbOOWkDuHbAj0qxTGapiwNMB8GA1UdIwQY MBaAFI53xq5IjDppeAN7dwqlI8slHJ/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEt NGE0NzFlNmMwZWYyLzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEtNGE0NzFlNmMwZWYy LzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8kH5DBJ p0Zy//Dl1m5gIm89siOoJlruFABuHyZjHyz4TXQefbKfgGrZQ9QS3Oh6U5MiJ5w7 haQDKFpKRrZiVffHvloGDuQE85DZGvv7PzAI1UZnO5eeDXwgCxE65OsqwXjP+e6U f3NjnMPqWGCHMa8B/mK8nRECWJJJZLnC0qQNt4CTAUktFLj47j0U/+Djo6/HeUPO ocVHWrpgNYp+lklPKIPTejuWuYqAdZ7BVcTVgz3gwNzwlbxZXF3IPblQNyawFeL9 DencYoGdmBbZ6zKJLlHJ+D4rRZReXSNqFjCOmseBtc4UFhX9sPgod48FJODVjN5P 1EHMn4eI05M9TA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:51 2025 by rpki-client