This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json) Hash identifier: +Lsmb4YvJcoXC93VazWDKmTrJpp69IdvMTaTE8fmuL0= Subject key identifier: 4A:03:7F:8B:73:B2:30:D5:32:F7:5E:4D:31:6A:80:40:85:19:7E:C1 Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09 Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709 Certificate serial: 019B334470A5281C149D02038D400A4930DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft Manifest number: 04FD Signing time: Thu 18 Dec 2025 21:01:21 +0000 Manifest this update: Thu 18 Dec 2025 21:01:21 +0000 Manifest next update: Fri 19 Dec 2025 21:01:21 +0000 Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: LOPHn2wlaCP+iiPPEDcRAFCEZVd69nwAm9UBzy6enRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:70:a5:28:1c:14:9d:02:03:8d:40:0a:49:30:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709 Validity Not Before: Dec 18 21:01:21 2025 GMT Not After : Dec 19 21:01:21 2025 GMT Subject: CN=4a037f8b73b230d532f75e4d316a804085197ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:12:1a:55:49:fa:87:f0:82:53:14:c1:1a:1f: ae:38:69:01:dc:9f:8c:da:c1:2b:e8:22:a9:86:3b: 6c:9c:41:27:3d:ef:92:32:86:10:38:1d:9b:57:67: d8:ef:c6:ec:d1:b1:77:b6:19:82:38:94:e7:1d:aa: d2:f7:85:b5:7d:18:80:ca:a1:f7:47:97:72:a1:86: f6:04:86:67:a5:e0:dd:af:51:ee:b7:96:60:92:eb: dc:8d:0f:71:bc:c5:8b:e9:ab:42:eb:aa:aa:dc:b4: f4:7f:ca:87:e8:5a:00:71:88:1e:d9:6b:59:68:d3: 30:65:e4:fc:31:c9:f3:52:09:51:88:2b:35:f1:2c: f7:92:54:a1:85:fb:36:f6:5e:73:94:43:cb:a1:cd: 28:0b:41:14:e7:b3:95:bf:cd:ea:99:d0:ec:74:26: d0:a3:12:51:45:32:de:b1:db:3d:71:b5:a0:78:1d: 96:57:7d:7e:ec:cf:05:6b:a5:e0:38:8f:9f:ff:f4: 36:8a:da:0f:6a:7a:7e:4e:33:4e:6a:34:a8:5e:6c: 91:7b:d6:3a:1d:25:95:1d:e1:3a:a8:1d:d3:0a:f4: 16:3e:24:a8:40:f1:67:6c:b4:08:08:33:50:de:db: 37:1f:06:48:66:92:fd:30:d2:6c:45:dc:90:2c:f9: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:7F:8B:73:B2:30:D5:32:F7:5E:4D:31:6A:80:40:85:19:7E:C1 X509v3 Authority Key Identifier: keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:80:49:23:c4:94:94:fb:9a:5c:e4:da:39:61:8d:4b:20:09: 8b:40:18:71:64:1b:22:ea:2e:12:94:38:07:3e:9a:64:4b:e3: fd:d9:8f:a4:1b:6b:7b:3c:48:16:a5:15:c6:25:7f:60:bd:a8: 3c:c3:e1:05:b6:a5:5f:2a:15:09:46:54:14:06:2f:62:d3:3e: d3:57:5b:aa:95:00:71:fe:dd:15:6c:fd:f7:76:15:a3:f6:5b: c5:31:a2:d4:7b:5c:33:de:b3:c3:44:e5:c7:6e:44:8f:07:93: 48:e1:8e:1f:a7:f8:e9:84:cd:79:73:c1:1a:0f:f4:d6:8d:86: 59:6f:3f:c4:1c:48:5c:ce:46:a5:5d:83:f9:bb:4d:d5:52:b1: a5:57:0c:26:4d:28:8a:68:06:3a:78:67:0e:fb:a0:3a:8c:5e: 02:69:b6:db:50:33:95:dd:44:89:28:d3:90:bb:c5:67:7a:84: 8c:95:04:94:3c:02:4c:b2:42:0d:d9:ef:d0:df:a3:9c:23:e0: 74:d7:c1:a4:4e:9c:d0:f6:a8:74:5a:07:37:70:1f:f2:f7:0d: 39:85:54:f6:0b:85:11:0e:21:36:77:4b:ac:80:e5:5b:34:33: e1:17:6f:22:7d:94:fc:03:b4:96:22:bf:5f:79:93:07:5e:54: 2d:85:2f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHClKBwUnQIDjUAKSTDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDgzNjNlNWMxMDY3YWQxODhjMzgwMzkwYjA5ZDA5YTYy YTE3MDkwHhcNMjUxMjE4MjEwMTIxWhcNMjUxMjE5MjEwMTIxWjAzMTEwLwYDVQQD Eyg0YTAzN2Y4YjczYjIzMGQ1MzJmNzVlNGQzMTZhODA0MDg1MTk3ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BIaVUn6h/CCUxTBGh+uOGkB3J+M 2sEr6CKphjtsnEEnPe+SMoYQOB2bV2fY78bs0bF3thmCOJTnHarS94W1fRiAyqH3 R5dyoYb2BIZnpeDdr1Hut5ZgkuvcjQ9xvMWL6atC66qq3LT0f8qH6FoAcYge2WtZ aNMwZeT8McnzUglRiCs18Sz3klShhfs29l5zlEPLoc0oC0EU57OVv83qmdDsdCbQ oxJRRTLesds9cbWgeB2WV31+7M8Fa6XgOI+f//Q2itoPanp+TjNOajSoXmyRe9Y6 HSWVHeE6qB3TCvQWPiSoQPFnbLQICDNQ3ts3HwZIZpL9MNJsRdyQLPliKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoDf4tzsjDVMvdeTTFqgECFGX7BMB8GA1UdIwQY MBaAFIwINj5cEGetGIw4A5CwnQmmKhcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYt Yjg3YWI2YjBhMDI5LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYtYjg3YWI2YjBhMDI5 LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4BJI8SU lPuaXOTaOWGNSyAJi0AYcWQbIuouEpQ4Bz6aZEvj/dmPpBtrezxIFqUVxiV/YL2o PMPhBbalXyoVCUZUFAYvYtM+01dbqpUAcf7dFWz993YVo/ZbxTGi1HtcM96zw0Tl x25EjweTSOGOH6f46YTNeXPBGg/01o2GWW8/xBxIXM5GpV2D+btN1VKxpVcMJk0o imgGOnhnDvugOoxeAmm221Azld1EiSjTkLvFZ3qEjJUElDwCTLJCDdnv0N+jnCPg dNfBpE6c0PaodFoHN3Af8vcNOYVU9guFEQ4hNndLrIDlWzQz4RdvIn2U/AO0liK/ X3mTB15ULYUvmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:38:10 2025 by rpki-client