This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json) Hash identifier: bzLz9LzXoLKk67y7fYGCq/LTnqqG3rdi3WviT4wEnmY= Subject key identifier: C0:89:DE:78:E8:C2:62:E0:5D:92:05:09:55:AD:11:59:CF:41:71:21 Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Certificate serial: 019B484B17CF79A5186DEF8CB3336B15519D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft Manifest number: 04DE Signing time: Mon 22 Dec 2025 23:00:39 +0000 Manifest this update: Mon 22 Dec 2025 23:00:39 +0000 Manifest next update: Tue 23 Dec 2025 23:00:39 +0000 Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: hYly3Sp0M0vmiI7IIE/nm+noXeP4Zwy2lTPqL0xRRso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:17:cf:79:a5:18:6d:ef:8c:b3:33:6b:15:51:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc Validity Not Before: Dec 22 23:00:39 2025 GMT Not After : Dec 23 23:00:39 2025 GMT Subject: CN=c089de78e8c262e05d92050955ad1159cf417121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:ea:60:2d:20:b4:68:04:9b:27:a6:ae:a3: da:09:a9:ad:74:e3:1b:12:89:66:55:68:9e:f8:1c: dc:de:6b:1a:53:42:41:7f:1d:75:2b:09:6a:79:59: d7:7a:bc:b6:1f:3c:fb:13:9b:50:c6:d2:b5:e5:eb: 52:43:fa:94:7e:24:16:1d:c6:1c:a9:3b:2c:76:49: e6:35:55:18:53:8c:59:ef:d7:56:d6:ff:b6:34:71: 95:3e:61:ee:ec:58:e7:b6:ee:ff:7e:6e:af:7b:bb: 5c:f8:6c:9c:39:34:b6:a7:9a:d1:80:78:f9:2e:8b: db:26:1a:07:92:10:e8:b4:1f:43:fd:14:5b:6a:ab: 49:74:3c:53:43:39:f1:27:1a:ce:84:9d:2d:70:96: b9:d2:fe:f8:6e:bf:50:9a:f6:1c:f7:b1:ce:26:58: c5:bb:08:81:1a:34:55:0e:7f:9a:a8:b1:e9:c6:7f: 50:0d:4a:6d:6a:10:da:20:12:74:49:d7:a0:e0:40: ba:83:dc:b3:22:aa:51:3f:f7:f2:bc:f5:15:18:64: 9b:20:c8:8a:79:f8:a1:4c:bb:b7:c8:20:56:b8:e0: 7f:9c:cd:32:83:93:88:41:79:3a:60:d4:52:89:ea: 76:ec:ce:fa:66:0e:d2:4d:da:2c:ba:d7:d9:ab:d1: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:89:DE:78:E8:C2:62:E0:5D:92:05:09:55:AD:11:59:CF:41:71:21 X509v3 Authority Key Identifier: keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:30:d2:21:57:51:75:89:49:bd:ba:f3:69:b2:e7:e8:df:72: 8e:c3:24:a6:f5:76:88:5b:cd:09:9b:9a:85:9b:62:33:5a:eb: 65:8f:83:db:c2:fa:aa:f3:e9:ba:57:34:2d:47:ad:35:db:b8: 12:93:10:e5:06:92:24:6b:57:43:a6:56:ca:22:67:06:87:26: 45:c3:41:b3:5a:8c:10:26:65:ab:a7:e4:94:f6:c7:c9:a2:f6: 71:51:ef:3f:e3:84:54:09:4c:04:01:bf:32:07:bc:fb:b4:a7: d0:c3:fb:c5:e3:09:dd:ca:5b:f4:49:3d:1b:9d:8b:a8:5f:e6: 88:70:68:63:d9:60:70:75:56:29:6d:8e:6e:79:9f:0e:30:e2: c0:04:11:76:14:5d:c8:fd:85:04:24:3f:e8:28:c7:6a:78:34: 89:f3:5f:15:e9:7e:bd:51:4e:3a:76:ff:12:c8:a9:2f:a5:ea: 86:28:7b:f1:4e:95:6c:17:68:ec:49:d5:48:e4:28:98:69:41: 99:54:e0:d4:ea:11:46:01:22:f5:f8:8e:ac:b3:f6:f4:17:7e: 40:b4:c8:17:62:b7:67:46:74:fd:70:8f:be:44:69:81:9c:33: 48:05:ca:3d:b8:da:f6:d2:da:0c:52:02:87:34:3a:cf:f2:4a: 23:32:5b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISxfPeaUYbe+MszNrFVGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTI2OTJiMWJjZTdiMDMyN2MxZmU3NWM4OTI5OWUyZjg2 MjE3ZmMwHhcNMjUxMjIyMjMwMDM5WhcNMjUxMjIzMjMwMDM5WjAzMTEwLwYDVQQD EyhjMDg5ZGU3OGU4YzI2MmUwNWQ5MjA1MDk1NWFkMTE1OWNmNDE3MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8//qYC0gtGgEmyemrqPaCamtdOMb EolmVWie+Bzc3msaU0JBfx11KwlqeVnXery2Hzz7E5tQxtK15etSQ/qUfiQWHcYc qTssdknmNVUYU4xZ79dW1v+2NHGVPmHu7Fjntu7/fm6ve7tc+GycOTS2p5rRgHj5 LovbJhoHkhDotB9D/RRbaqtJdDxTQznxJxrOhJ0tcJa50v74br9QmvYc97HOJljF uwiBGjRVDn+aqLHpxn9QDUptahDaIBJ0Sdeg4EC6g9yzIqpRP/fyvPUVGGSbIMiK efihTLu3yCBWuOB/nM0yg5OIQXk6YNRSiep27M76Zg7STdosutfZq9HXFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCJ3njowmLgXZIFCVWtEVnPQXEhMB8GA1UdIwQY MBaAFJ/iaSsbznsDJ8H+dciSmeL4Yhf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzIt NzBmYzFlYWI1NGMxLzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzItNzBmYzFlYWI1NGMx LzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezDSIVdR dYlJvbrzabLn6N9yjsMkpvV2iFvNCZuahZtiM1rrZY+D28L6qvPpulc0LUetNdu4 EpMQ5QaSJGtXQ6ZWyiJnBocmRcNBs1qMECZlq6fklPbHyaL2cVHvP+OEVAlMBAG/ Mge8+7Sn0MP7xeMJ3cpb9Ek9G52LqF/miHBoY9lgcHVWKW2ObnmfDjDiwAQRdhRd yP2FBCQ/6CjHang0ifNfFel+vVFOOnb/EsipL6Xqhih78U6VbBdo7EnVSOQomGlB mVTg1OoRRgEi9fiOrLP29Bd+QLTIF2K3Z0Z0/XCPvkRpgZwzSAXKPbja9tLaDFIC hzQ6z/JKIzJbaA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:09:48 2025 by rpki-client