This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json) Hash identifier: 1G9dPMegDcoUeonSM3iN+xr9U38HK3cLCMjgDcc73dQ= Subject key identifier: 3A:C9:26:4D:38:C3:21:FA:F7:87:F0:42:1F:D8:74:43:48:FF:15:FC Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65 Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165 Certificate serial: 019B597712AB50B89D4E660E13823B3F1A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft Manifest number: 10FD Signing time: Fri 26 Dec 2025 07:02:14 +0000 Manifest this update: Fri 26 Dec 2025 07:02:14 +0000 Manifest next update: Sat 27 Dec 2025 07:02:14 +0000 Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: BrSh5Ie1+dnCgSnhHNUiAxQii5Nw9QC4IUopd4JdxtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:12:ab:50:b8:9d:4e:66:0e:13:82:3b:3f:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165 Validity Not Before: Dec 26 07:02:14 2025 GMT Not After : Dec 27 07:02:14 2025 GMT Subject: CN=3ac9264d38c321faf787f0421fd8744348ff15fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:d8:79:e1:58:6c:e9:58:5c:ee:84:30:83: 69:63:ff:04:6e:fe:ba:ed:3b:01:a6:77:4f:e4:26: ae:29:67:73:08:23:a5:4f:65:db:f7:78:08:50:3e: 50:7b:fd:aa:64:35:4a:c1:7c:b9:88:5d:93:83:a4: bb:da:f3:47:39:83:7a:3d:52:16:c1:c6:e1:75:c3: 54:0e:41:85:21:69:1d:20:11:3b:88:fc:3c:07:f3: 2b:75:50:9b:14:f0:01:db:d7:71:8b:28:3e:d5:a8: aa:4a:79:89:e5:10:64:c1:1d:40:4c:4e:39:8b:e7: de:fd:23:ce:0f:1e:c6:7e:82:26:b7:00:f1:82:89: fe:05:09:0d:b6:5d:7a:4a:c4:c2:48:a5:aa:47:0d: 5e:be:87:f3:98:0b:d2:66:3c:75:e2:1e:ea:45:68: 19:1c:de:be:90:80:11:24:bf:bb:28:a7:43:df:27: 59:65:b7:53:c4:fd:d2:c7:da:ea:83:b9:90:1f:d1: 06:63:7e:de:f9:d0:51:ed:df:45:e5:e0:65:93:b4: f9:72:a3:e3:e6:81:75:59:7f:27:31:72:03:ee:b1: 2e:95:c8:59:76:76:03:16:d3:2d:06:e2:8b:f0:34: 84:19:76:98:2d:69:84:d2:76:2c:1d:c6:1b:c3:16: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:26:4D:38:C3:21:FA:F7:87:F0:42:1F:D8:74:43:48:FF:15:FC X509v3 Authority Key Identifier: keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0d:ae:6b:f2:29:4c:16:0a:16:30:f9:94:8e:e5:21:29:00: 54:f5:22:b8:28:24:0d:d4:d2:66:b9:28:f7:b9:e1:4d:3f:cd: ad:a6:60:eb:db:5a:1d:40:52:25:ed:3e:43:4e:1b:4a:8c:75: 8e:80:ed:93:39:01:06:37:e8:3d:31:80:ea:ef:6c:4f:33:7d: 19:72:fd:89:ea:ff:d0:8a:57:75:fb:d5:c1:44:26:01:b1:4d: ab:ca:45:0a:14:f9:25:f5:21:8e:55:c1:bd:54:d1:e1:ca:91: c9:08:0c:5a:1c:65:bb:ba:0d:f7:a3:b4:b8:25:66:07:7e:41: 6a:f3:7a:5d:27:53:b8:cb:c9:5f:21:4f:6e:b4:27:bf:fa:16: 71:70:39:57:4e:99:56:1b:e8:ff:50:2f:f2:ca:2e:ba:25:9a: 65:4e:cd:ec:1d:f8:e8:ed:f9:d6:95:33:96:67:62:44:9c:0a: 9e:bc:00:29:0b:6a:fe:56:29:7d:74:c8:6a:70:99:93:6c:32: 0c:ff:fb:49:e6:0c:cc:c3:b0:f6:79:04:14:f8:b2:44:8f:66: 58:f8:7f:78:d3:39:e4:c3:84:db:b6:84:29:4f:c1:ce:44:08: a7:fc:b9:9b:3b:5b:0d:15:ee:1f:b0:1a:b0:d1:86:09:34:e8: 58:53:d5:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxKrULidTmYOE4I7Pxp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmN2Q0MjBiMjM0M2NkOTFlYzIzZjUwODlhODM0MmU4OWQ2 ZDkxNjUwHhcNMjUxMjI2MDcwMjE0WhcNMjUxMjI3MDcwMjE0WjAzMTEwLwYDVQQD EygzYWM5MjY0ZDM4YzMyMWZhZjc4N2YwNDIxZmQ4NzQ0MzQ4ZmYxNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zLYeeFYbOlYXO6EMINpY/8Ebv66 7TsBpndP5CauKWdzCCOlT2Xb93gIUD5Qe/2qZDVKwXy5iF2Tg6S72vNHOYN6PVIW wcbhdcNUDkGFIWkdIBE7iPw8B/MrdVCbFPAB29dxiyg+1aiqSnmJ5RBkwR1ATE45 i+fe/SPODx7GfoImtwDxgon+BQkNtl16SsTCSKWqRw1evofzmAvSZjx14h7qRWgZ HN6+kIARJL+7KKdD3ydZZbdTxP3Sx9rqg7mQH9EGY37e+dBR7d9F5eBlk7T5cqPj 5oF1WX8nMXID7rEulchZdnYDFtMtBuKL8DSEGXaYLWmE0nYsHcYbwxadiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrJJk04wyH694fwQh/YdENI/xX8MB8GA1UdIwQY MBaAFI99QgsjQ82R7CP1CJqDQuidbZFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEt YzVlMTcyMmEwYzY4LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9kMTc2NjUtNjhiNC00OTZiLTlkOWEtYzVlMTcyMmEwYzY4 LzEvajMxQ0N5TkR6WkhzSV9VSW1vTkM2SjF0a1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVg2ua/Ip TBYKFjD5lI7lISkAVPUiuCgkDdTSZrko97nhTT/NraZg69taHUBSJe0+Q04bSox1 joDtkzkBBjfoPTGA6u9sTzN9GXL9ier/0IpXdfvVwUQmAbFNq8pFChT5JfUhjlXB vVTR4cqRyQgMWhxlu7oN96O0uCVmB35BavN6XSdTuMvJXyFPbrQnv/oWcXA5V06Z Vhvo/1Av8souuiWaZU7N7B346O351pUzlmdiRJwKnrwAKQtq/lYpfXTIanCZk2wy DP/7SeYMzMOw9nkEFPiyRI9mWPh/eNM55MOE27aEKU/BzkQIp/y5mztbDRXuH7Aa sNGGCTToWFPV8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:03 2025 by rpki-client