This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft File: Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft (raw, json) Hash identifier: Kwfuv3yaYa9xmgeAGn3HIjMFiZFvfUbCASoOxPDE2EY= Subject key identifier: E7:82:DA:CC:3A:68:9F:B1:FA:36:0A:F1:56:4C:3D:4F:37:FA:5D:0E Authority key identifier: 25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF Certificate issuer: /CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf Certificate serial: 019B5ABF403EB2D75FC155E11736835B915D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft Manifest number: 86 Signing time: Fri 26 Dec 2025 13:00:41 +0000 Manifest this update: Fri 26 Dec 2025 13:00:41 +0000 Manifest next update: Sat 27 Dec 2025 13:00:41 +0000 Files and hashes: 1: Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl (hash: Q3WUKuOs8WqNaJp1Qe2yo9CX0RtiJHTDuggY06qirF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:40:3e:b2:d7:5f:c1:55:e1:17:36:83:5b:91:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf Validity Not Before: Dec 26 13:00:41 2025 GMT Not After : Dec 27 13:00:41 2025 GMT Subject: CN=e782dacc3a689fb1fa360af1564c3d4f37fa5d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:df:84:8a:e7:88:09:4e:b5:28:bd:0d:aa: 0f:a2:8f:7a:81:eb:c3:e7:9c:21:2f:94:8f:83:01: 2a:6f:2e:df:d6:6f:fb:33:3a:d5:04:c2:c4:2e:51: ae:b6:67:5a:73:84:79:8f:ee:e6:e3:30:67:96:c5: f5:3f:13:6f:00:1e:94:a7:8d:75:6b:73:e0:52:d1: 71:1f:ae:30:c2:55:46:e0:d9:f5:28:5c:73:53:02: e0:05:57:cf:a9:63:7a:dc:ff:c3:27:4f:92:a4:f2: a5:b1:da:8a:b7:f9:af:84:ee:15:8f:3e:c9:47:65: c2:c1:ca:c2:2b:36:75:70:b7:05:cc:1e:59:ea:1a: c1:bc:4c:be:f5:16:1d:4c:57:75:fc:45:92:a6:26: 35:f6:3a:98:dc:81:12:4f:d0:7e:47:23:eb:cb:89: cb:12:73:41:79:d3:ac:4c:4b:6d:8b:69:bd:28:82: 8e:9e:33:06:08:2f:e3:13:f0:40:56:6c:16:a5:a3: f7:54:46:52:ca:bc:a4:00:d8:f7:0f:de:91:e7:86: 55:2c:6b:50:78:cc:ff:fe:ac:25:d7:e2:01:39:d0: 19:f3:d0:aa:db:84:63:76:22:1f:32:dd:2b:a5:90: 45:11:85:64:cb:75:a3:c1:80:04:98:03:a4:04:cf: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:82:DA:CC:3A:68:9F:B1:FA:36:0A:F1:56:4C:3D:4F:37:FA:5D:0E X509v3 Authority Key Identifier: keyid:25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:76:dd:60:c0:40:c9:13:16:3e:c7:7d:19:44:46:82:4e:0a: 14:47:a2:02:96:6e:f7:97:18:f0:61:a7:cd:ea:01:ca:72:79: 02:3b:1d:31:9c:fb:88:a6:fb:48:29:84:9f:b9:28:56:81:e2: 32:ff:cb:9a:55:0c:25:24:67:58:67:d9:0e:49:35:71:00:90: 8a:ee:a1:ec:b5:b6:08:b8:79:d7:b6:d0:82:23:2d:55:5d:15: 57:da:2a:5b:00:2b:6a:bf:d3:eb:76:b1:62:76:54:7d:25:68: 6b:e4:13:34:f5:80:85:95:79:cd:6e:ac:97:fc:18:0b:7a:d0: 51:45:83:d3:7c:65:4d:aa:46:58:23:dc:94:a1:fd:9b:46:96: df:c6:28:9a:82:9e:97:af:9b:fb:8d:aa:7c:32:40:e2:61:df: cd:c0:49:7d:1a:34:d3:75:4a:48:59:62:2b:aa:7a:ff:b9:a7: ab:50:2a:4b:4a:d5:d2:5d:2d:07:94:23:67:64:3c:d2:77:54: 8c:b2:85:9e:65:9f:52:47:2b:7c:b5:b2:12:2d:a8:63:c8:c4: c2:17:fe:31:dd:bd:40:5c:37:56:7f:63:68:2a:ac:3d:d2:9c: c3:54:dd:81:5d:d2:28:ef:54:f0:14:d3:a2:70:37:21:24:98: 35:9e:69:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav0A+stdfwVXhFzaDW5FdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTc2YmU4NmQ1OWQ0YTIxNWFjNmE4NDU1ZGJmMTBhZTgw YWRlZGYwHhcNMjUxMjI2MTMwMDQxWhcNMjUxMjI3MTMwMDQxWjAzMTEwLwYDVQQD EyhlNzgyZGFjYzNhNjg5ZmIxZmEzNjBhZjE1NjRjM2Q0ZjM3ZmE1ZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHfhIrniAlOtSi9DaoPoo96gevD 55whL5SPgwEqby7f1m/7MzrVBMLELlGutmdac4R5j+7m4zBnlsX1PxNvAB6Up411 a3PgUtFxH64wwlVG4Nn1KFxzUwLgBVfPqWN63P/DJ0+SpPKlsdqKt/mvhO4Vjz7J R2XCwcrCKzZ1cLcFzB5Z6hrBvEy+9RYdTFd1/EWSpiY19jqY3IEST9B+RyPry4nL EnNBedOsTEtti2m9KIKOnjMGCC/jE/BAVmwWpaP3VEZSyrykANj3D96R54ZVLGtQ eMz//qwl1+IBOdAZ89Cq24RjdiIfMt0rpZBFEYVky3WjwYAEmAOkBM/R/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeC2sw6aJ+x+jYK8VZMPU83+l0OMB8GA1UdIwQY MBaAFCXna+htWdSiFaxqhFXb8QroCt7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mYWUyYmEtNjUxYi00NWE4LTkwZmMt YzQ2MWJmNjUxYzlhLzEvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mYWUyYmEtNjUxYi00NWE4LTkwZmMtYzQ2MWJmNjUxYzlh LzEvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnbdYMBA yRMWPsd9GURGgk4KFEeiApZu95cY8GGnzeoBynJ5AjsdMZz7iKb7SCmEn7koVoHi Mv/LmlUMJSRnWGfZDkk1cQCQiu6h7LW2CLh517bQgiMtVV0VV9oqWwArar/T63ax YnZUfSVoa+QTNPWAhZV5zW6sl/wYC3rQUUWD03xlTapGWCPclKH9m0aW38YomoKe l6+b+42qfDJA4mHfzcBJfRo003VKSFliK6p6/7mnq1AqS0rV0l0tB5QjZ2Q80ndU jLKFnmWfUkcrfLWyEi2oY8jEwhf+Md29QFw3Vn9jaCqsPdKcw1TdgV3SKO9U8BTT onA3ISSYNZ5pYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:08 2025 by rpki-client