This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json) Hash identifier: JAV8+5U/AM/si52fyiPBMK40FxI5VQzB4m3lkaePXYk= Subject key identifier: 22:1E:90:03:A0:EA:1B:9B:8C:53:CA:54:05:41:B0:78:CC:51:FD:E3 Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019B22F5894758CCE4A6588512008430EAC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft Manifest number: 1071 Signing time: Mon 15 Dec 2025 17:01:15 +0000 Manifest this update: Mon 15 Dec 2025 17:01:15 +0000 Manifest next update: Tue 16 Dec 2025 17:01:15 +0000 Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: 6HGscC2B87DoA4RoT80fL3PjujIHJSKDG68Xst3UCuU=) 2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:89:47:58:cc:e4:a6:58:85:12:00:84:30:ea:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Dec 15 17:01:15 2025 GMT Not After : Dec 16 17:01:15 2025 GMT Subject: CN=221e9003a0ea1b9b8c53ca540541b078cc51fde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:c9:52:a6:1f:5d:00:a7:37:fb:32:13:db: 61:cd:db:08:a2:c0:ed:e9:a3:93:c7:19:2a:bf:94: 7c:b4:1a:00:4b:50:ba:b4:a5:f5:90:9e:ac:ae:f0: 5a:21:6f:5f:b7:39:ca:2b:3b:04:41:72:e8:2a:2e: 3b:d1:cb:2c:0e:1d:5b:7d:1c:91:f8:48:9f:54:03: 97:30:8f:95:f5:cc:bb:d9:44:1a:0f:d0:dd:12:53: 81:ed:b4:57:cd:5a:30:d5:33:9e:25:5e:a4:8d:cb: 77:ae:ce:1e:db:02:d0:2e:5f:37:27:f4:3b:59:5c: b0:b9:07:70:62:df:ea:ca:00:51:fa:f4:74:92:15: 21:93:cc:1f:96:e1:a8:5f:9a:07:a8:cf:ab:bf:14: 41:fa:f9:16:7e:d7:49:32:be:a0:04:f7:55:bb:ac: 4f:3a:bb:ad:65:03:4f:19:27:39:89:62:21:68:c7: 3d:83:fc:d7:66:61:67:fb:9e:c6:0d:ba:8b:a4:9e: 71:ee:b2:8a:02:76:aa:33:66:97:b4:e0:50:47:5c: 3a:32:f0:94:90:0b:61:a4:83:53:7a:8a:15:ea:b1: 43:2f:39:e7:67:ee:94:74:43:7f:fa:07:92:9e:ef: d7:e2:3e:af:10:ce:74:35:3a:e0:99:51:1f:5d:30: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:90:03:A0:EA:1B:9B:8C:53:CA:54:05:41:B0:78:CC:51:FD:E3 X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8a:45:c1:38:13:54:6c:79:95:83:76:9e:4d:35:80:c4:4a: 88:2c:33:bf:ac:eb:50:c8:ed:50:3b:0f:21:09:10:9c:55:a1: 20:bd:79:ca:2a:58:34:9a:a0:73:1e:de:bf:07:61:c8:cc:fd: fa:01:53:cc:1c:9d:97:61:27:5d:58:da:fc:d5:d9:7b:7f:29: bd:3f:3c:d2:eb:77:d2:83:ae:96:f4:8d:d6:06:02:a5:81:81: c8:01:37:02:73:f8:37:e3:4b:44:7f:17:5b:8a:80:24:45:d2: 14:55:ed:19:da:99:d9:15:0a:5c:24:40:c6:6f:ed:c4:a3:d2: a6:a3:4e:7b:c5:42:2b:5a:f7:46:41:f5:7e:e5:0c:81:14:fa: c4:0a:f6:77:64:9e:b7:da:b1:aa:26:90:5a:6d:e0:af:62:25: a2:ce:ab:e3:1e:40:cc:1f:cf:4a:fb:4a:c1:f2:e7:72:c0:10: 30:8d:d5:fb:b3:f8:31:a0:98:e8:88:1b:63:84:9d:f1:de:72: 30:d1:65:13:3b:e2:cf:91:9b:bc:ff:54:05:bd:1d:f0:f0:3b: 0b:5b:49:93:68:1f:6c:b7:65:f0:35:24:1e:f8:18:f8:f1:a8: 3b:72:ee:26:dc:1c:84:68:af:44:21:a2:74:f2:8d:ef:ff:42: 1a:7e:bf:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9YlHWMzkpliFEgCEMOrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjUxMjE1MTcwMTE1WhcNMjUxMjE2MTcwMTE1WjAzMTEwLwYDVQQD EygyMjFlOTAwM2EwZWExYjliOGM1M2NhNTQwNTQxYjA3OGNjNTFmZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDLJUqYfXQCnN/syE9thzdsIosDt 6aOTxxkqv5R8tBoAS1C6tKX1kJ6srvBaIW9ftznKKzsEQXLoKi470cssDh1bfRyR +EifVAOXMI+V9cy72UQaD9DdElOB7bRXzVow1TOeJV6kjct3rs4e2wLQLl83J/Q7 WVywuQdwYt/qygBR+vR0khUhk8wfluGoX5oHqM+rvxRB+vkWftdJMr6gBPdVu6xP OrutZQNPGSc5iWIhaMc9g/zXZmFn+57GDbqLpJ5x7rKKAnaqM2aXtOBQR1w6MvCU kAthpINTeooV6rFDLznnZ+6UdEN/+geSnu/X4j6vEM50NTrgmVEfXTCW8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIekAOg6hubjFPKVAVBsHjMUf3jMB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4pFwTgT VGx5lYN2nk01gMRKiCwzv6zrUMjtUDsPIQkQnFWhIL15yipYNJqgcx7evwdhyMz9 +gFTzBydl2EnXVja/NXZe38pvT880ut30oOulvSN1gYCpYGByAE3AnP4N+NLRH8X W4qAJEXSFFXtGdqZ2RUKXCRAxm/txKPSpqNOe8VCK1r3RkH1fuUMgRT6xAr2d2Se t9qxqiaQWm3gr2Ilos6r4x5AzB/PSvtKwfLncsAQMI3V+7P4MaCY6IgbY4Sd8d5y MNFlEzviz5GbvP9UBb0d8PA7C1tJk2gfbLdl8DUkHvgY+PGoO3LuJtwchGivRCGi dPKN7/9CGn6/PA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:03:36 2025 by rpki-client