This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json) Hash identifier: R11FbA8HiY7n2G0l0UzR6GbVOYSDM7NZFGmDICvELKg= Subject key identifier: 32:72:FE:E8:2D:4C:E2:4D:0B:41:11:A0:C8:87:F5:CE:7E:54:17:25 Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3 Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3 Certificate serial: 019B34C4B6596DE34F4E8462B470DAE45358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft Manifest number: 050A Signing time: Fri 19 Dec 2025 04:01:05 +0000 Manifest this update: Fri 19 Dec 2025 04:01:05 +0000 Manifest next update: Sat 20 Dec 2025 04:01:05 +0000 Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: CC3krTHlA2WrDOR1ANrcAI9ARtryCt/KcNs/ZKVqvQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:b6:59:6d:e3:4f:4e:84:62:b4:70:da:e4:53:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3 Validity Not Before: Dec 19 04:01:05 2025 GMT Not After : Dec 20 04:01:05 2025 GMT Subject: CN=3272fee82d4ce24d0b4111a0c887f5ce7e541725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:ac:38:f9:03:a6:0d:61:46:f4:3e:9a:d8: 58:af:e0:5d:38:d1:c1:ff:b2:bb:33:88:03:ce:97: 55:9a:0b:1b:af:ac:be:9f:d5:ff:d2:33:fd:17:8c: 1c:1e:e8:5b:8a:6b:e5:c6:d0:3f:28:34:e3:64:76: b7:68:92:40:53:ec:1e:eb:cd:ba:be:ba:1a:6c:78: fa:dc:84:2d:cc:14:38:d4:04:d7:6d:00:2a:54:a3: 55:5f:29:e6:85:4e:c2:6b:08:73:90:f4:a7:c9:46: b9:e6:70:42:9c:dd:be:57:01:6e:e8:48:2f:df:04: 07:dc:f3:47:e1:e5:9d:10:a2:05:86:03:5f:0b:7e: 44:9c:d5:fa:96:1a:e3:e9:98:05:5e:c2:52:ac:a4: 78:e3:6e:4f:97:85:5e:4f:5d:2d:be:ff:95:b7:8a: 99:ed:57:94:7a:22:89:33:c3:4c:d4:b7:e2:09:82: f6:6d:2b:22:42:49:53:95:cd:0c:c3:12:07:0a:8d: 33:9a:fe:74:24:4b:31:f7:8f:a1:1a:5f:dd:68:3f: 0e:66:c4:13:b8:09:c3:f1:24:58:58:bd:a5:44:38: 8e:9b:ea:dd:cd:56:75:5f:5e:76:7b:c2:77:3e:a8: fa:29:68:dc:80:c4:a4:e7:e4:8d:70:76:59:96:af: 32:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:FE:E8:2D:4C:E2:4D:0B:41:11:A0:C8:87:F5:CE:7E:54:17:25 X509v3 Authority Key Identifier: keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:fa:07:35:38:2e:33:ab:25:f7:f9:7a:f0:81:34:cc:a7: 29:af:f7:ab:57:0b:c0:44:0e:aa:a4:95:3d:76:67:3f:0c:6d: 79:27:e3:9c:43:08:17:c2:45:05:f6:86:85:40:ea:26:63:95: fc:cc:fc:42:a8:b5:3d:d1:5d:f0:76:d7:02:a3:77:30:b7:f1: 10:1c:9d:2b:bc:fe:9f:56:7e:96:11:56:94:b9:c1:50:b0:59: 3e:d4:a4:e6:45:f8:95:13:bd:07:18:9d:45:dd:0e:06:77:ea: c2:ab:3a:e0:bd:2c:ec:7f:83:17:4c:2c:38:d9:20:08:56:92: 12:a6:df:3c:74:e5:a2:ac:11:e2:0b:a9:79:a9:45:cb:47:5a: 4d:ff:0e:d6:f7:c1:b3:40:89:df:50:19:35:30:fc:ff:71:ce: 22:20:bb:81:ef:ac:15:5f:42:53:92:31:9e:29:0a:8b:f4:5e: f5:c6:b2:9f:ad:e4:44:de:54:1b:dc:3f:f4:d8:19:6d:e7:a9: cb:9e:9d:f5:c9:04:15:32:c2:73:37:dc:f0:b8:2d:06:cd:ec: e4:2d:a2:4d:11:24:e0:cb:39:3b:df:0c:a8:2d:8b:d9:8e:9c: 4e:73:17:d8:69:f9:48:98:c7:42:a0:4b:ff:dc:e8:03:a2:8e: f9:91:6e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xLZZbeNPToRitHDa5FNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzgxYzU3YjA5YjVlMjY3ZGQ1NDcxNTBkYjQ1NTgzOGVh YzhiYTMwHhcNMjUxMjE5MDQwMTA1WhcNMjUxMjIwMDQwMTA1WjAzMTEwLwYDVQQD EygzMjcyZmVlODJkNGNlMjRkMGI0MTExYTBjODg3ZjVjZTdlNTQxNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjCsOPkDpg1hRvQ+mthYr+BdONHB /7K7M4gDzpdVmgsbr6y+n9X/0jP9F4wcHuhbimvlxtA/KDTjZHa3aJJAU+we6826 vroabHj63IQtzBQ41ATXbQAqVKNVXynmhU7CawhzkPSnyUa55nBCnN2+VwFu6Egv 3wQH3PNH4eWdEKIFhgNfC35EnNX6lhrj6ZgFXsJSrKR4425Pl4VeT10tvv+Vt4qZ 7VeUeiKJM8NM1LfiCYL2bSsiQklTlc0MwxIHCo0zmv50JEsx94+hGl/daD8OZsQT uAnD8SRYWL2lRDiOm+rdzVZ1X152e8J3Pqj6KWjcgMSk5+SNcHZZlq8yDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJy/ugtTOJNC0ERoMiH9c5+VBclMB8GA1UdIwQY MBaAFI04HFewm14mfdVHFQ20VYOOrIujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAt NmY4MzAyNjk4OTliLzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAtNmY4MzAyNjk4OTli LzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBL6BzU4 LjOrJff5evCBNMynKa/3q1cLwEQOqqSVPXZnPwxteSfjnEMIF8JFBfaGhUDqJmOV /Mz8Qqi1PdFd8HbXAqN3MLfxEBydK7z+n1Z+lhFWlLnBULBZPtSk5kX4lRO9Bxid Rd0OBnfqwqs64L0s7H+DF0wsONkgCFaSEqbfPHTloqwR4gupealFy0daTf8O1vfB s0CJ31AZNTD8/3HOIiC7ge+sFV9CU5IxnikKi/Re9cayn63kRN5UG9w/9NgZbeep y56d9ckEFTLCczfc8LgtBs3s5C2iTREk4Ms5O98MqC2L2Y6cTnMX2Gn5SJjHQqBL /9zoA6KO+ZFuPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:00:24 2025 by rpki-client