This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json) Hash identifier: 1nLFD0U2SLdiK4Bo10Nu5+ZWTMT2sXEx1xpn/z8wyJE= Subject key identifier: 1F:66:E6:A0:3A:FF:74:FA:1F:18:AC:DC:C5:F4:B1:DE:EE:00:2B:42 Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56 Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756 Certificate serial: 019B4626FF7378BD181873F696149379BFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft Manifest number: 08AC Signing time: Mon 22 Dec 2025 13:01:59 +0000 Manifest this update: Mon 22 Dec 2025 13:01:59 +0000 Manifest next update: Tue 23 Dec 2025 13:01:59 +0000 Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: 0PbS9JiaZ2xShlzRB1pN+Lgii7iQN48dWJHiD46Vrvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:ff:73:78:bd:18:18:73:f6:96:14:93:79:bf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756 Validity Not Before: Dec 22 13:01:59 2025 GMT Not After : Dec 23 13:01:59 2025 GMT Subject: CN=1f66e6a03aff74fa1f18acdcc5f4b1deee002b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:67:b7:d6:46:18:2a:a1:c5:cb:ea:c5:9f: ed:2f:c1:c7:48:a3:66:79:0c:31:9d:f2:3d:c9:fa: ea:60:33:72:ba:b7:45:03:e1:ec:4b:5f:ea:31:e3: ed:fa:35:c7:39:8f:f2:90:e7:ee:77:0a:b6:4b:aa: 87:b5:50:63:ed:70:7f:9d:41:17:16:fb:79:94:4c: c3:5c:b9:51:14:77:1a:38:fa:74:14:38:7b:c0:6b: b1:ec:34:5b:b7:8a:7f:1b:e8:b4:73:df:05:c5:98: df:fb:24:4f:4d:79:70:1f:04:75:0b:6f:bd:fa:bf: c9:cc:15:05:d7:5b:62:f8:f6:8b:bd:32:4b:4b:63: ef:d7:ed:66:00:c4:96:18:1f:a3:5c:4c:71:64:24: a4:4c:0f:1a:e6:36:34:c4:9a:75:ef:7d:1d:64:7b: 3b:79:6e:7c:0e:7a:58:82:5f:23:ba:54:57:c3:a7: 96:7c:74:44:a7:a9:b0:1d:61:7c:e1:68:7a:cc:eb: 2e:5b:55:a5:61:4d:70:4d:a5:cc:bf:9c:66:83:e6: 75:9a:24:25:60:1b:0c:fe:ad:46:bf:07:c9:0e:ee: d4:27:91:cb:f3:6a:53:4f:fb:22:b9:50:7e:86:c7: 89:90:03:34:2f:1d:e4:26:96:6e:fb:c8:d7:c2:7d: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:E6:A0:3A:FF:74:FA:1F:18:AC:DC:C5:F4:B1:DE:EE:00:2B:42 X509v3 Authority Key Identifier: keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:81:93:84:9c:61:e0:af:57:33:39:2a:92:9b:3e:fd:ff:c0: 12:9d:78:ed:1f:b1:87:e3:49:61:62:2b:27:c0:01:a1:3a:14: 08:1d:3c:ba:6e:92:39:d1:46:cf:cb:80:d2:eb:46:c9:c2:94: 4a:f6:36:e4:5e:a3:f1:c1:52:ba:ed:23:1f:35:9f:68:c2:9f: b1:dd:3b:31:7b:5c:0b:fb:1a:0c:d4:d3:f5:f5:e7:5a:cd:cb: 61:d7:09:dc:2c:57:7e:86:81:fe:e6:c0:08:21:1a:f0:15:cd: df:b3:43:5d:39:2a:95:3e:b4:0c:6f:6e:34:e9:44:b0:70:43: b0:b4:90:df:3e:97:45:44:08:23:76:41:a2:f5:bd:b6:94:c3: 74:e7:9e:db:94:53:ff:7e:e2:ca:06:37:7f:e3:3d:de:5d:23: 29:2e:68:1f:a8:5e:9b:4b:ea:8b:dd:ce:7a:ab:0c:51:1d:34: be:8a:c0:99:3c:62:ba:ae:1a:a9:d0:dd:04:f1:4b:1e:4a:b7: 4a:9d:c6:74:9f:bf:4e:67:76:44:68:7c:0b:ef:89:11:7e:7c: 85:e1:1d:34:ae:3e:70:cd:8f:2e:24:c1:b8:37:b5:26:8f:57: d8:14:31:ad:99:a0:5c:ed:21:cf:c2:80:85:f8:a0:d4:25:77: b5:df:ed:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJv9zeL0YGHP2lhSTeb/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjIyODg1YjA5NGNjYWJhNmJkY2U2ZmMzYWFmZGQ4ZmFh N2U3NTYwHhcNMjUxMjIyMTMwMTU5WhcNMjUxMjIzMTMwMTU5WjAzMTEwLwYDVQQD EygxZjY2ZTZhMDNhZmY3NGZhMWYxOGFjZGNjNWY0YjFkZWVlMDAyYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6hnt9ZGGCqhxcvqxZ/tL8HHSKNm eQwxnfI9yfrqYDNyurdFA+HsS1/qMePt+jXHOY/ykOfudwq2S6qHtVBj7XB/nUEX Fvt5lEzDXLlRFHcaOPp0FDh7wGux7DRbt4p/G+i0c98FxZjf+yRPTXlwHwR1C2+9 +r/JzBUF11ti+PaLvTJLS2Pv1+1mAMSWGB+jXExxZCSkTA8a5jY0xJp1730dZHs7 eW58DnpYgl8julRXw6eWfHREp6mwHWF84Wh6zOsuW1WlYU1wTaXMv5xmg+Z1miQl YBsM/q1GvwfJDu7UJ5HL82pTT/siuVB+hseJkAM0Lx3kJpZu+8jXwn0BEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9m5qA6/3T6Hxis3MX0sd7uACtCMB8GA1UdIwQY MBaAFI1iKIWwlMyrpr3Ob8Oq/dj6p+dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAt Nzg5ZDJiNWE4NmJjLzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAtNzg5ZDJiNWE4NmJj LzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoGThJxh 4K9XMzkqkps+/f/AEp147R+xh+NJYWIrJ8ABoToUCB08um6SOdFGz8uA0utGycKU SvY25F6j8cFSuu0jHzWfaMKfsd07MXtcC/saDNTT9fXnWs3LYdcJ3CxXfoaB/ubA CCEa8BXN37NDXTkqlT60DG9uNOlEsHBDsLSQ3z6XRUQII3ZBovW9tpTDdOee25RT /37iygY3f+M93l0jKS5oH6hem0vqi93OeqsMUR00vorAmTxiuq4aqdDdBPFLHkq3 Sp3GdJ+/Tmd2RGh8C++JEX58heEdNK4+cM2PLiTBuDe1Jo9X2BQxrZmgXO0hz8KA hfig1CV3td/tXw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:21 2025 by rpki-client