This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json) Hash identifier: Ya5FGPe/1QqdqVBWmVukGly1+L7UzAvTCG2QO1WbtBA= Subject key identifier: 6C:A0:6B:FA:9F:22:F8:A5:26:28:5C:E9:AA:55:79:34:32:F1:B7:DD Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Certificate serial: 019B2176E29F4C6905EC7B68BE5CAFADD079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft Manifest number: 068C Signing time: Mon 15 Dec 2025 10:03:17 +0000 Manifest this update: Mon 15 Dec 2025 10:03:17 +0000 Manifest next update: Tue 16 Dec 2025 10:03:17 +0000 Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: IdBlNqbXHWOTXMrwdwcMWay+9p1CwPDF7ieypcS6yIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:e2:9f:4c:69:05:ec:7b:68:be:5c:af:ad:d0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Validity Not Before: Dec 15 10:03:17 2025 GMT Not After : Dec 16 10:03:17 2025 GMT Subject: CN=6ca06bfa9f22f8a526285ce9aa55793432f1b7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:68:0d:07:4b:a5:82:9c:72:cf:6f:6d:e7: de:51:80:77:2a:e1:39:26:c4:a3:3c:fa:64:25:0a: 7b:53:2d:48:6f:a0:b0:fa:ba:f0:c6:41:36:ff:43: 62:1a:99:09:35:1e:d0:ec:84:67:2c:ba:f7:f0:3b: 0a:81:1a:b7:80:0b:35:ad:9f:35:3e:8d:83:13:9b: 37:50:50:5c:37:bf:55:cd:f5:89:e7:52:46:6e:a2: 16:fe:4b:ce:41:8e:70:cd:4b:b5:94:0a:e3:c0:f2: b8:6e:ed:b4:a6:e4:dd:1a:1e:0c:70:d9:b9:e6:cb: 64:46:46:7d:a2:c8:65:81:ec:5f:fc:fc:21:82:a1: f6:70:31:4b:d2:0c:4f:83:e8:56:57:84:e5:79:19: c4:2c:e4:33:01:44:8b:b4:97:9b:a2:a0:a2:30:7f: 8c:cf:78:52:a2:18:12:e0:7f:45:b5:e6:1e:d2:8e: d0:a2:4a:36:ef:81:06:72:f5:31:bd:e4:3c:82:e9: 97:97:d8:3e:74:3d:12:4b:ce:21:40:fd:8c:3a:5b: 32:2d:31:8f:f9:b7:d9:26:a7:ec:a9:f3:d3:c4:ce: df:cc:e6:1f:37:ac:40:f9:ef:b4:8c:be:6e:da:e1: 57:e1:0d:36:de:b8:fe:0e:45:09:32:4a:2c:13:b7: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:6B:FA:9F:22:F8:A5:26:28:5C:E9:AA:55:79:34:32:F1:B7:DD X509v3 Authority Key Identifier: keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:98:0f:ef:03:ad:bb:1a:6e:c6:4e:34:86:56:83:33:11:54: 4d:b2:bf:a2:11:66:62:0f:c9:86:60:3a:b4:49:9a:dd:00:84: e0:29:40:3c:54:2b:c9:a1:c1:4a:b4:4c:b6:73:87:20:0d:91: a4:f7:4f:bc:27:af:53:86:9b:37:d0:47:b2:f3:c4:16:2c:88: 34:8d:0d:d9:5f:eb:e3:ed:a9:86:71:3a:ea:16:ea:04:ce:38: d1:f9:52:86:32:48:cb:f2:89:08:ec:42:12:e6:ed:92:5c:1c: 62:0a:7f:d7:e8:a8:e6:ac:89:6a:ed:2c:f6:d6:f8:5c:2b:a3: d3:1a:0c:51:e0:76:4c:46:4d:13:7a:59:89:ce:0a:f6:3d:2c: 14:ec:f2:f6:5c:10:67:b9:af:98:ac:1d:6e:6a:eb:51:65:7d: 78:a7:02:c1:47:8d:ed:ee:76:71:1b:9d:27:0d:5a:f6:69:06: 1e:42:a8:d8:ec:c5:31:62:e7:7d:7e:a8:f7:4a:1a:9f:aa:d6: 30:56:db:41:2d:ae:12:ad:35:d8:c5:8b:90:ac:4e:d7:ed:e8: d1:a3:ac:eb:1e:94:83:25:29:f0:6b:62:27:cf:8e:89:74:7e: 84:83:5e:ed:c6:66:34:09:3a:70:47:c9:5d:33:7b:da:a3:9a: 78:00:fd:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshduKfTGkF7HtovlyvrdB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWE0MTgwMDI3ZDkyM2Q5ZmUwYzk1NzBjOTBiOWQxMzA4 ZmE2NzIwHhcNMjUxMjE1MTAwMzE3WhcNMjUxMjE2MTAwMzE3WjAzMTEwLwYDVQQD Eyg2Y2EwNmJmYTlmMjJmOGE1MjYyODVjZTlhYTU1NzkzNDMyZjFiN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1VoDQdLpYKccs9vbefeUYB3KuE5 JsSjPPpkJQp7Uy1Ib6Cw+rrwxkE2/0NiGpkJNR7Q7IRnLLr38DsKgRq3gAs1rZ81 Po2DE5s3UFBcN79VzfWJ51JGbqIW/kvOQY5wzUu1lArjwPK4bu20puTdGh4McNm5 5stkRkZ9oshlgexf/PwhgqH2cDFL0gxPg+hWV4TleRnELOQzAUSLtJeboqCiMH+M z3hSohgS4H9FteYe0o7Qoko274EGcvUxveQ8gumXl9g+dD0SS84hQP2MOlsyLTGP +bfZJqfsqfPTxM7fzOYfN6xA+e+0jL5u2uFX4Q023rj+DkUJMkosE7cukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyga/qfIvilJihc6apVeTQy8bfdMB8GA1UdIwQY MBaAFI5aQYACfZI9n+DJVwyQudEwj6ZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTIt NWY5ODdlMWVjMDM1LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTItNWY5ODdlMWVjMDM1 LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpgP7wOt uxpuxk40hlaDMxFUTbK/ohFmYg/JhmA6tEma3QCE4ClAPFQryaHBSrRMtnOHIA2R pPdPvCevU4abN9BHsvPEFiyINI0N2V/r4+2phnE66hbqBM440flShjJIy/KJCOxC EubtklwcYgp/1+io5qyJau0s9tb4XCuj0xoMUeB2TEZNE3pZic4K9j0sFOzy9lwQ Z7mvmKwdbmrrUWV9eKcCwUeN7e52cRudJw1a9mkGHkKo2OzFMWLnfX6o90oan6rW MFbbQS2uEq012MWLkKxO1+3o0aOs6x6UgyUp8GtiJ8+OiXR+hINe7cZmNAk6cEfJ XTN72qOaeAD9dQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:46:52 2025 by rpki-client