This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json) Hash identifier: OTn20y2Cktzxcem0vvi/02sAZC1UqkHaFEZaWOGx+lo= Subject key identifier: CE:87:AE:17:26:5C:04:5A:DC:0E:79:FF:B8:94:28:6F:3A:BC:4E:09 Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14 Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114 Certificate serial: 019B19F1D3382AF1515E80359D5124AD95BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft Manifest number: 06AE Signing time: Sat 13 Dec 2025 23:00:37 +0000 Manifest this update: Sat 13 Dec 2025 23:00:37 +0000 Manifest next update: Sun 14 Dec 2025 23:00:37 +0000 Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: AsaLa6PciiBGTp8d/InbnKUK7fo6RWV5KxI5cjmu84c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:d3:38:2a:f1:51:5e:80:35:9d:51:24:ad:95:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114 Validity Not Before: Dec 13 23:00:37 2025 GMT Not After : Dec 14 23:00:37 2025 GMT Subject: CN=ce87ae17265c045adc0e79ffb894286f3abc4e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:df:00:a6:0f:48:87:38:db:0d:f6:36:b8: d0:88:21:83:50:c2:16:0c:22:16:32:1b:f7:6b:79: 17:3e:51:76:fb:1b:01:6e:6d:43:e1:56:09:b5:b7: dd:d8:37:62:51:d4:af:29:40:32:99:dc:35:35:50: f1:d0:c2:83:33:98:8b:ed:94:2d:82:2c:37:63:0a: 3d:8a:e3:18:d7:4b:1e:90:1f:10:c3:95:2d:04:e2: 7d:92:af:25:cc:82:a1:47:ed:00:03:59:ac:a1:d3: 2e:36:9e:18:78:33:ba:e6:f1:d9:63:39:dd:84:62: e2:59:36:8e:90:b6:84:46:9c:56:1a:75:17:36:9e: 56:00:db:5d:87:80:1e:e1:17:85:1e:74:9e:21:8c: 4e:6b:fd:c3:11:17:08:73:2d:7a:5f:38:3e:f0:4a: f4:d2:86:5b:83:83:78:56:c9:35:bc:5c:ba:c2:59: d7:b4:3b:22:93:5c:11:00:90:ba:4a:64:93:a2:3e: 47:6d:4c:c9:4c:41:72:44:25:ea:d0:5f:37:90:70: e5:8f:fe:3e:ee:f0:f8:38:30:e8:78:87:96:69:b3: 07:1b:5f:19:b2:a9:76:fa:0e:bc:eb:30:79:a1:15: c4:ad:be:16:78:21:df:63:61:a0:eb:83:e8:94:6d: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:AE:17:26:5C:04:5A:DC:0E:79:FF:B8:94:28:6F:3A:BC:4E:09 X509v3 Authority Key Identifier: keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1f:58:bc:a0:ea:7a:21:4d:7c:71:5e:1f:ae:81:c4:60:da: e7:1a:f4:2c:a2:9b:76:41:b6:11:31:d0:dd:4a:4b:76:e9:c8: 1c:bb:b2:da:d0:e6:98:a8:5d:66:6b:67:65:d2:8e:e2:e4:e5: 2c:1c:7d:4a:59:df:76:17:a1:b2:a1:82:e0:62:73:a8:58:37: a7:22:84:3e:aa:0e:cf:1b:17:0e:92:b2:6c:1e:f0:df:eb:3d: 2f:c5:88:b1:32:54:3c:59:63:73:b5:e7:81:ed:7c:c3:a1:cd: 89:e5:c0:18:88:b7:84:da:ec:b5:e5:cd:c3:5e:33:06:89:7c: fc:4c:78:68:7f:35:b1:44:c9:f4:2f:76:79:a6:ae:cd:a0:34: d0:15:4c:a6:60:2a:60:2d:fa:5e:ba:fa:20:a0:59:0e:f6:6d: 8e:59:cb:5f:28:ff:2e:7a:2b:e2:06:95:2c:53:39:66:4d:87: 6f:17:d1:26:19:c4:82:e3:58:e8:06:4e:1c:3e:26:65:93:1b: 9a:f5:fe:f7:29:d9:d8:cd:bd:3a:3e:94:47:e6:ee:b6:7c:e7: 32:28:30:9b:ca:7d:fb:93:16:b9:22:0f:43:1d:5f:7f:31:02: 84:1a:88:f1:30:5c:13:7b:ba:f0:d0:b9:5c:ee:eb:c8:83:7f: 00:5c:98:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8dM4KvFRXoA1nVEkrZW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGVhZWZmNzYzNGVlOGRmZTgwNTRhZDg1ZjhhMTVlODQ3 NTkxMTQwHhcNMjUxMjEzMjMwMDM3WhcNMjUxMjE0MjMwMDM3WjAzMTEwLwYDVQQD EyhjZTg3YWUxNzI2NWMwNDVhZGMwZTc5ZmZiODk0Mjg2ZjNhYmM0ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstDfAKYPSIc42w32NrjQiCGDUMIW DCIWMhv3a3kXPlF2+xsBbm1D4VYJtbfd2DdiUdSvKUAymdw1NVDx0MKDM5iL7ZQt giw3Ywo9iuMY10sekB8Qw5UtBOJ9kq8lzIKhR+0AA1msodMuNp4YeDO65vHZYznd hGLiWTaOkLaERpxWGnUXNp5WANtdh4Ae4ReFHnSeIYxOa/3DERcIcy16Xzg+8Er0 0oZbg4N4Vsk1vFy6wlnXtDsik1wRAJC6SmSToj5HbUzJTEFyRCXq0F83kHDlj/4+ 7vD4ODDoeIeWabMHG18Zsql2+g686zB5oRXErb4WeCHfY2Gg64PolG0oPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6HrhcmXARa3A55/7iUKG86vE4JMB8GA1UdIwQY MBaAFI8Orv92NO6N/oBUrYX4oV6EdZEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUt YjNiNGVlZmU3MGE1LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmE4NTUtZjBjNy00NDU4LWEzZGUtYjNiNGVlZmU3MGE1 LzEvanc2dV8zWTA3bzMtZ0ZTdGhmaWhYb1Ixa1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR9YvKDq eiFNfHFeH66BxGDa5xr0LKKbdkG2ETHQ3UpLdunIHLuy2tDmmKhdZmtnZdKO4uTl LBx9SlnfdhehsqGC4GJzqFg3pyKEPqoOzxsXDpKybB7w3+s9L8WIsTJUPFljc7Xn ge18w6HNieXAGIi3hNrsteXNw14zBol8/Ex4aH81sUTJ9C92eaauzaA00BVMpmAq YC36Xrr6IKBZDvZtjlnLXyj/Lnor4gaVLFM5Zk2HbxfRJhnEguNY6AZOHD4mZZMb mvX+9ynZ2M29Oj6UR+butnznMigwm8p9+5MWuSIPQx1ffzEChBqI8TBcE3u68NC5 XO7ryIN/AFyYcg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:31:07 2025 by rpki-client