This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json) Hash identifier: cWTYO8DKzsu4aTRtlbBYasAJEk0pfr2LyYInPf18nWg= Subject key identifier: 63:0A:5F:5E:07:CB:0E:08:0E:18:D7:2F:69:54:7B:26:77:AB:CB:EF Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9 Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9 Certificate serial: 019B5A1ADCF90A3D8233EB42FC1019F5CF96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 10:01:08 +0000 Manifest this update: Fri 26 Dec 2025 10:01:08 +0000 Manifest next update: Sat 27 Dec 2025 10:01:08 +0000 Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: pAML+hQK6/4TYj2Szv952e6dR4np2cX4hSsfz0NMAuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:dc:f9:0a:3d:82:33:eb:42:fc:10:19:f5:cf:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9 Validity Not Before: Dec 26 10:01:08 2025 GMT Not After : Dec 27 10:01:08 2025 GMT Subject: CN=630a5f5e07cb0e080e18d72f69547b2677abcbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:42:60:c4:0e:7f:7e:29:41:11:b8:ba:74: a4:b1:54:18:e9:bc:fd:68:4d:77:0f:06:33:78:71: 3b:f9:c8:f1:2e:90:bd:86:2f:fd:a5:02:1b:33:37: f6:72:10:6f:52:76:4d:eb:4d:56:a2:ac:7d:3a:b8: ad:2f:07:08:1f:bf:e7:84:e5:6e:c0:0a:ee:6b:35: 87:a0:36:03:b7:b7:46:1e:70:2c:0b:51:67:f2:22: 0d:4a:06:3e:e6:26:d2:f4:bf:73:68:00:9b:e5:76: 6c:2e:67:da:91:bb:8d:64:a3:05:66:5b:0c:ab:62: 30:b7:fa:32:6d:0e:5d:f3:37:ea:a6:8c:35:a4:36: 15:ff:a7:5a:1d:33:67:bb:d6:70:25:e7:a1:ae:22: a7:ea:91:2b:ee:3c:5b:8e:fd:ec:56:84:fd:e7:8c: fe:7a:3f:71:cb:87:15:ce:ab:d6:19:b4:04:52:8d: 8f:76:45:d2:41:e0:ab:78:7f:65:2e:8e:ee:85:97: 43:8b:74:53:59:9a:22:28:36:11:2e:03:eb:24:5a: 28:c0:e0:c0:bf:c4:d1:f1:a5:a6:ef:f9:2a:72:84: b6:af:eb:89:28:9a:91:64:1c:ed:28:ac:b4:f8:7e: f8:0e:c0:81:56:4c:58:1a:32:11:6b:64:f9:f2:a2: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:5F:5E:07:CB:0E:08:0E:18:D7:2F:69:54:7B:26:77:AB:CB:EF X509v3 Authority Key Identifier: keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:93:ae:fb:a7:30:a8:d0:a4:3d:a9:6f:9d:c2:68:80:67:85: 19:91:71:5d:28:38:b7:5b:65:93:ae:ab:e4:a3:ca:3a:5a:1a: 92:b9:64:97:3f:16:cf:04:9c:a1:3e:49:fd:51:4a:ae:28:5c: 76:1e:19:f3:3f:e9:87:c6:28:4b:97:3f:d0:5c:f5:72:aa:ed: 16:96:6f:e5:b5:9c:21:f8:3c:73:bb:0f:3f:e2:5c:3a:ac:8b: 92:8c:9c:27:86:74:59:bb:a3:46:46:af:54:4d:42:17:c9:d2: c1:9b:c6:30:3b:4b:29:1d:97:f8:2d:d8:28:c6:60:2a:fd:92: d4:30:04:1a:c6:56:76:95:e1:73:c7:c4:d5:e9:1d:29:ba:d6: 51:e4:f9:f9:5e:df:d0:45:c7:c8:f8:96:20:d1:67:f4:f3:47: bf:33:e2:b0:bc:01:09:88:fc:b5:2a:cc:c3:13:43:40:57:b4: c7:c5:76:8d:bd:61:d6:95:a3:77:33:45:2e:ef:87:f1:5c:e3: 48:05:e0:cf:4c:5b:87:dd:dd:fa:fd:b2:3f:8a:1e:ea:82:50: 30:03:fc:88:64:7a:58:83:a1:f3:32:c2:a8:6c:57:89:7a:4e: ca:72:69:fa:8a:1b:c3:9b:2b:12:7c:c8:76:f8:2d:c6:8c:a7: 1c:eb:ab:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtz5Cj2CM+tC/BAZ9c+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk Yzc1ZjkwHhcNMjUxMjI2MTAwMTA4WhcNMjUxMjI3MTAwMTA4WjAzMTEwLwYDVQQD Eyg2MzBhNWY1ZTA3Y2IwZTA4MGUxOGQ3MmY2OTU0N2IyNjc3YWJjYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8VCYMQOf34pQRG4unSksVQY6bz9 aE13DwYzeHE7+cjxLpC9hi/9pQIbMzf2chBvUnZN601Woqx9OritLwcIH7/nhOVu wAruazWHoDYDt7dGHnAsC1Fn8iINSgY+5ibS9L9zaACb5XZsLmfakbuNZKMFZlsM q2Iwt/oybQ5d8zfqpow1pDYV/6daHTNnu9ZwJeehriKn6pEr7jxbjv3sVoT954z+ ej9xy4cVzqvWGbQEUo2PdkXSQeCreH9lLo7uhZdDi3RTWZoiKDYRLgPrJFoowODA v8TR8aWm7/kqcoS2r+uJKJqRZBztKKy0+H74DsCBVkxYGjIRa2T58qLfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMKX14Hyw4IDhjXL2lUeyZ3q8vvMB8GA1UdIwQY MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5Ou+6cw qNCkPalvncJogGeFGZFxXSg4t1tlk66r5KPKOloakrlklz8WzwScoT5J/VFKrihc dh4Z8z/ph8YoS5c/0Fz1cqrtFpZv5bWcIfg8c7sPP+JcOqyLkoycJ4Z0WbujRkav VE1CF8nSwZvGMDtLKR2X+C3YKMZgKv2S1DAEGsZWdpXhc8fE1ekdKbrWUeT5+V7f 0EXHyPiWINFn9PNHvzPisLwBCYj8tSrMwxNDQFe0x8V2jb1h1pWjdzNFLu+H8Vzj SAXgz0xbh93d+v2yP4oe6oJQMAP8iGR6WIOh8zLCqGxXiXpOynJp+oobw5srEnzI dvgtxoynHOur6g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client