This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json) Hash identifier: 7PZWNPCL1KxczTqwVKUXSlHjKjhEZ5RfW7KqS4aTTQw= Subject key identifier: F1:14:75:66:4F:F6:E7:CE:55:E6:3D:33:C1:D7:7A:AE:E5:02:D9:F3 Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Certificate serial: 019B469414C56E40FB98F7C82B8514F13BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 15:01:08 +0000 Manifest this update: Mon 22 Dec 2025 15:01:08 +0000 Manifest next update: Tue 23 Dec 2025 15:01:08 +0000 Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: CZ+deAQ42BClvKZcr4QcRaTYHb33Kx/Bge3xtVLbddI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:14:c5:6e:40:fb:98:f7:c8:2b:85:14:f1:3b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27 Validity Not Before: Dec 22 15:01:08 2025 GMT Not After : Dec 23 15:01:08 2025 GMT Subject: CN=f11475664ff6e7ce55e63d33c1d77aaee502d9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:06:c7:2f:89:e4:8e:e3:af:c6:ed:a0:89: f3:05:7d:30:54:7b:b0:3b:60:29:80:32:76:c5:1b: ed:90:99:66:9a:f9:cb:a6:19:39:ad:d3:3b:5c:46: 89:35:42:48:57:43:ba:f2:23:e1:a8:68:94:25:f4: 83:cc:a3:49:20:a4:cb:a8:8a:bb:4e:0e:fc:eb:b6: d7:4e:b9:da:4a:1b:5e:0b:f3:3d:22:09:83:59:19: f8:16:b5:55:48:5e:ef:84:fe:26:0b:8d:11:51:ab: a1:74:35:70:a6:04:11:1d:1a:90:44:ff:3b:7d:4a: c7:3f:95:ac:f7:3c:b1:32:39:bb:94:4a:b2:ab:65: d9:39:88:72:05:47:5b:86:3e:47:b6:cf:62:83:8d: be:fa:b0:92:58:13:a4:96:97:61:dc:2e:40:18:f5: 9f:fe:e1:de:92:7c:63:85:68:69:91:10:e0:3c:9a: 50:4e:87:fe:83:ec:75:0f:4c:91:85:eb:d0:01:4d: fc:fa:af:bd:14:36:de:8f:b6:ba:66:c9:65:fa:22: 4b:47:a7:f4:32:51:4a:17:b9:c5:26:05:dd:9f:6b: 6b:5e:86:74:90:8e:8b:b7:81:4a:a7:3a:f6:4b:b7: 85:1e:5d:a1:ec:d3:1f:fc:02:09:78:67:35:f6:8e: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:75:66:4F:F6:E7:CE:55:E6:3D:33:C1:D7:7A:AE:E5:02:D9:F3 X509v3 Authority Key Identifier: keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b8:f6:a3:1e:32:54:a2:6e:b1:7e:b0:f0:73:3f:23:c9:92: 22:f2:04:b2:b4:f2:5c:fe:41:79:5d:cd:3b:00:3e:23:0d:10: d9:a1:a6:d8:9c:aa:58:d5:64:f7:cf:80:66:2c:ba:83:c7:14: cf:a4:a3:69:6b:7d:37:01:fd:24:ef:e1:1e:8c:ea:82:e9:0d: 3c:ac:f9:d3:de:1a:8b:c1:16:96:1e:4a:5d:ab:85:76:b7:64: 05:fd:ee:86:91:35:21:7b:83:e5:e8:39:9f:2a:79:ab:62:7f: eb:de:21:7c:0b:e1:8e:28:9e:ef:a6:36:68:81:22:86:43:35: 25:0c:46:0f:97:44:80:76:a9:81:b9:7c:06:ce:dc:5b:af:b7: 7b:a6:7e:e7:80:5b:a7:33:37:7d:83:4f:f3:86:1d:d2:d2:04: ad:d8:d5:8a:a9:be:82:d8:c4:ea:a1:64:ba:c4:f8:24:3b:e6: 08:4e:61:7e:e3:44:eb:4d:7d:23:f9:ad:b3:d1:63:29:10:11: 97:93:16:82:a1:05:8f:5a:a0:17:91:cb:99:e9:b7:7a:c5:7b: db:56:fd:e7:6e:ee:84:84:7d:c2:bc:80:5a:2e:c2:1d:a2:a5: e4:56:86:09:c3:b6:d9:58:9c:6e:74:56:0f:60:6a:c8:42:73: 93:07:a7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlBTFbkD7mPfIK4UU8TvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZGI1MzY0N2FkNjQ1YTk0MjBmNjBiODZkNmU5Mzc1ZmNm ODVhMjcwHhcNMjUxMjIyMTUwMTA4WhcNMjUxMjIzMTUwMTA4WjAzMTEwLwYDVQQD EyhmMTE0NzU2NjRmZjZlN2NlNTVlNjNkMzNjMWQ3N2FhZWU1MDJkOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFQGxy+J5I7jr8btoInzBX0wVHuw O2ApgDJ2xRvtkJlmmvnLphk5rdM7XEaJNUJIV0O68iPhqGiUJfSDzKNJIKTLqIq7 Tg7867bXTrnaShteC/M9IgmDWRn4FrVVSF7vhP4mC40RUauhdDVwpgQRHRqQRP87 fUrHP5Ws9zyxMjm7lEqyq2XZOYhyBUdbhj5Hts9ig42++rCSWBOklpdh3C5AGPWf /uHeknxjhWhpkRDgPJpQTof+g+x1D0yRhevQAU38+q+9FDbej7a6Zsll+iJLR6f0 MlFKF7nFJgXdn2trXoZ0kI6Lt4FKpzr2S7eFHl2h7NMf/AIJeGc19o4W0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEUdWZP9ufOVeY9M8HXeq7lAtnzMB8GA1UdIwQY MBaAFCTbU2R61kWpQg9guG1uk3X8+FonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEt NDYxMDcyYmY4YWVmLzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEtNDYxMDcyYmY4YWVm LzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbj2ox4y VKJusX6w8HM/I8mSIvIEsrTyXP5BeV3NOwA+Iw0Q2aGm2JyqWNVk98+AZiy6g8cU z6SjaWt9NwH9JO/hHozqgukNPKz5094ai8EWlh5KXauFdrdkBf3uhpE1IXuD5eg5 nyp5q2J/694hfAvhjiie76Y2aIEihkM1JQxGD5dEgHapgbl8Bs7cW6+3e6Z+54Bb pzM3fYNP84Yd0tIErdjViqm+gtjE6qFkusT4JDvmCE5hfuNE6019I/mts9FjKRAR l5MWgqEFj1qgF5HLmem3esV721b9527uhIR9wryAWi7CHaKl5FaGCcO22VicbnRW D2BqyEJzkwenGw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:36 2025 by rpki-client