This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json) Hash identifier: jPdkNTDkiiyokK5UBg+xxlwaIwvCBe6YgpehmQ19yvk= Subject key identifier: D6:A3:41:DB:FC:51:CD:2E:F9:92:4E:20:11:0D:05:1D:C4:2E:D4:D5 Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Certificate serial: 019B59773912DBFB178F4D9AF6700AA94D31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:02:24 +0000 Manifest this update: Fri 26 Dec 2025 07:02:24 +0000 Manifest next update: Sat 27 Dec 2025 07:02:24 +0000 Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: nt6QT0ep+6yLOUw2aBYpxZvad1v64gN9MHP0FzI1mBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:39:12:db:fb:17:8f:4d:9a:f6:70:0a:a9:4d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9 Validity Not Before: Dec 26 07:02:24 2025 GMT Not After : Dec 27 07:02:24 2025 GMT Subject: CN=d6a341dbfc51cd2ef9924e20110d051dc42ed4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:c1:49:8d:df:57:8d:42:01:e1:92:ec:3b: 58:fe:90:f3:79:4b:88:75:7b:ff:14:a7:62:da:cb: 8e:8a:e5:c9:e9:0a:56:8b:1a:90:4c:ba:e2:8f:64: a4:31:a6:94:96:e1:20:53:0e:9b:b0:1e:65:7a:52: 49:e5:a0:df:54:2c:0e:0a:17:ae:e9:fb:25:a6:c3: 5e:a9:ab:09:4b:2c:a3:fa:69:4d:ae:fc:61:d7:71: f9:c2:04:5a:c9:0a:e3:00:a6:2f:13:45:64:d1:b3: bf:28:b7:ff:01:d7:25:6b:e2:bb:1e:bc:2d:d3:6e: 45:55:67:b6:bd:eb:12:e1:df:80:d3:e7:d3:0f:54: 1e:20:f1:4c:b9:46:6e:34:53:c7:d2:0d:44:bb:20: 53:01:08:74:97:f0:9f:38:32:90:c2:b7:62:b2:37: b5:d4:f9:fe:e1:11:15:9e:08:a9:92:c9:1b:e0:a0: 78:69:9b:22:bd:4a:5a:86:a1:d1:2f:8f:d3:5e:d3: da:07:b6:30:c8:48:4e:e5:ce:e3:25:da:2f:36:3b: a0:c1:ba:5a:66:29:c0:d1:da:f4:19:72:57:a9:6e: 34:04:e1:09:78:19:4a:63:94:6b:b2:4f:07:c6:c7: c2:13:fc:36:21:1e:89:3a:99:6f:7f:df:25:5b:41: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:41:DB:FC:51:CD:2E:F9:92:4E:20:11:0D:05:1D:C4:2E:D4:D5 X509v3 Authority Key Identifier: keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3d:dc:33:90:9d:79:b9:f4:c9:da:df:94:9a:d5:d7:3d:e4: 0a:9a:75:31:47:bf:bf:e9:ce:b6:63:cd:82:c4:b4:85:dc:74: 46:6d:95:4d:d5:e6:73:da:a0:e9:d9:3d:04:20:51:08:44:c4: 81:b0:6a:d4:2d:0b:dc:63:4f:c3:f9:ec:d0:45:38:c8:94:68: 3c:d0:7d:98:a4:69:a0:c4:e9:7a:3d:20:9c:d3:7f:ac:67:d3: 7a:2e:fd:2d:33:ce:af:21:48:e4:3b:b2:e5:73:39:7b:13:7a: 97:72:d8:33:28:03:b3:48:99:65:0e:5f:59:f5:07:1c:1c:b8: e6:ea:dd:dc:88:f7:29:65:0f:7b:5e:57:ef:49:20:c6:d1:ae: e7:be:67:83:e0:4f:35:34:2c:f6:4e:77:32:ff:f0:cc:3e:fa: 48:2a:78:6f:1a:83:5e:2f:97:b7:e1:66:ce:7e:57:39:38:dc: a8:80:b7:6f:3a:28:07:99:90:58:da:64:90:47:6a:31:84:ad: 6c:bf:ed:6b:a2:cb:b5:47:24:f5:e5:bd:2a:cc:b4:fa:b3:93: e0:fe:b8:0d:c1:9e:6b:93:2d:72:e5:b7:37:20:9b:74:d4:cb: 0a:47:04:8c:8d:17:89:c7:e7:66:d4:64:12:bf:8a:f8:95:78: 3b:f1:56:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzkS2/sXj02a9nAKqU0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDk5ZjNiZmU5OTI3MzZhMzg4NWM3OTYzMjRkYjMzOTc3 ZmE3ZTkwHhcNMjUxMjI2MDcwMjI0WhcNMjUxMjI3MDcwMjI0WjAzMTEwLwYDVQQD EyhkNmEzNDFkYmZjNTFjZDJlZjk5MjRlMjAxMTBkMDUxZGM0MmVkNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLfBSY3fV41CAeGS7DtY/pDzeUuI dXv/FKdi2suOiuXJ6QpWixqQTLrij2SkMaaUluEgUw6bsB5lelJJ5aDfVCwOCheu 6fslpsNeqasJSyyj+mlNrvxh13H5wgRayQrjAKYvE0Vk0bO/KLf/Adcla+K7Hrwt 025FVWe2vesS4d+A0+fTD1QeIPFMuUZuNFPH0g1EuyBTAQh0l/CfODKQwrdisje1 1Pn+4REVngipkskb4KB4aZsivUpahqHRL4/TXtPaB7YwyEhO5c7jJdovNjugwbpa ZinA0dr0GXJXqW40BOEJeBlKY5Rrsk8HxsfCE/w2IR6JOplvf98lW0G9TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNajQdv8Uc0u+ZJOIBENBR3ELtTVMB8GA1UdIwQY MBaAFIzZnzv+mSc2o4hceWMk2zOXf6fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmIt YTYwNDY0NDA5ZDMyLzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmItYTYwNDY0NDA5ZDMy LzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz3cM5Cd ebn0ydrflJrV1z3kCpp1MUe/v+nOtmPNgsS0hdx0Rm2VTdXmc9qg6dk9BCBRCETE gbBq1C0L3GNPw/ns0EU4yJRoPNB9mKRpoMTpej0gnNN/rGfTei79LTPOryFI5Duy 5XM5exN6l3LYMygDs0iZZQ5fWfUHHBy45urd3Ij3KWUPe15X70kgxtGu575ng+BP NTQs9k53Mv/wzD76SCp4bxqDXi+Xt+Fmzn5XOTjcqIC3bzooB5mQWNpkkEdqMYSt bL/ta6LLtUck9eW9Ksy0+rOT4P64DcGea5MtcuW3NyCbdNTLCkcEjI0XicfnZtRk Er+K+JV4O/FWog== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:36 2025 by rpki-client