This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json) Hash identifier: rZdHAJMrPEdqh9OBCYB4TAZqYIAuHpDWVMQneIJcsx0= Subject key identifier: 6E:39:10:39:08:E9:CE:7D:19:A9:8D:55:51:00:A0:1E:AB:5C:20:6E Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87 Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87 Certificate serial: 019B5A8873A95970FBEEC9C13F04E0D0C8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft Manifest number: 10C8 Signing time: Fri 26 Dec 2025 12:00:50 +0000 Manifest this update: Fri 26 Dec 2025 12:00:50 +0000 Manifest next update: Sat 27 Dec 2025 12:00:50 +0000 Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: 8pnuQd/hrb3b09Ud6/kbcK+bS6c/PpHAI2mae4KeTQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:73:a9:59:70:fb:ee:c9:c1:3f:04:e0:d0:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87 Validity Not Before: Dec 26 12:00:50 2025 GMT Not After : Dec 27 12:00:50 2025 GMT Subject: CN=6e39103908e9ce7d19a98d555100a01eab5c206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:3b:74:ce:14:54:ee:d3:c7:44:7b:54:ee: 70:8b:5d:d0:e1:72:a1:dc:14:ad:ea:a0:24:97:f6: 7c:fc:e4:01:a4:cf:48:49:bd:a4:84:9d:11:1c:ba: 88:e9:32:7e:d9:75:51:bb:d4:18:ad:16:01:ba:5f: 9e:fa:14:75:81:c8:85:98:b4:ed:5c:70:b9:e6:c0: a0:8d:3d:e4:f8:87:b6:a9:31:64:b8:78:e1:93:ec: fe:6d:8e:6d:2e:5f:ba:0c:eb:ce:bc:10:5c:dd:e8: 36:1b:33:b3:b9:d7:cc:39:7f:1b:06:49:8d:7c:cb: 42:50:85:2e:e9:1f:b7:30:76:4e:10:0a:ee:f6:66: ea:7e:57:fb:ec:9d:83:e9:c3:d2:2a:d4:9a:d0:25: 48:c6:b1:5f:c8:ed:55:11:a8:22:fe:7f:4a:05:b5: ae:c3:51:32:b2:e9:7f:5c:bf:7f:13:3c:39:73:57: 17:b2:d0:10:25:c2:38:b3:28:b0:27:e5:3e:5c:c9: ca:2f:52:23:f9:a2:ab:0e:6b:f4:f5:ae:fc:d5:90: c6:fd:ef:ba:b8:48:23:ad:91:f6:8d:b6:ab:ab:40: 4f:a7:64:a8:31:ba:4a:17:7b:45:5c:74:1a:ec:10: 08:b2:86:99:52:8c:77:b8:9c:c6:9f:21:e0:77:2d: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:39:10:39:08:E9:CE:7D:19:A9:8D:55:51:00:A0:1E:AB:5C:20:6E X509v3 Authority Key Identifier: keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:90:57:d2:e0:df:71:ba:3c:08:a6:48:17:fd:af:05:f8:05: 25:39:0a:d5:8e:1e:10:a9:8c:0f:aa:fb:85:e3:16:55:4c:00: 78:08:c3:f8:25:9d:90:cd:d8:5f:bb:b7:ac:f8:f4:27:f3:77: a4:c2:6a:fe:8f:1f:1c:6e:dd:54:74:86:d5:b2:bd:58:36:10: 5f:0b:49:5f:7d:29:71:4c:17:ad:68:05:04:97:8d:05:82:a5: 9d:65:e2:b1:98:46:77:5d:f2:34:38:94:c2:f9:24:d8:21:4f: 45:2b:ed:00:d0:15:65:30:da:b8:63:d5:a1:2d:14:2c:c4:2c: 3c:5d:99:81:ba:94:39:cc:65:c6:4e:9f:b7:3a:8a:e2:2e:11: 0c:4c:e8:02:e7:1b:34:f1:9e:ed:f2:f0:13:c5:d4:9d:86:98: 2a:96:ed:4e:1b:62:a3:2c:ee:de:b1:eb:b5:2a:8a:f8:29:b9: 89:b9:da:09:9d:6a:12:f3:fa:a7:29:27:2c:a7:f2:9b:e8:10: e8:d5:11:a9:a3:ff:e4:3b:50:7d:59:2a:26:43:bd:13:d7:9e: b1:11:49:75:bf:63:73:02:66:63:4b:34:0d:62:e6:a9:16:09: e5:db:28:d6:1b:8e:7c:06:36:12:b9:8f:32:f4:1a:68:95:be: 1d:13:79:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHOpWXD77snBPwTg0MinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYjA3NmU1OWY0OWI1ZGNhY2IzNzUxODYwN2U2OTViMDRj ZGJmODcwHhcNMjUxMjI2MTIwMDUwWhcNMjUxMjI3MTIwMDUwWjAzMTEwLwYDVQQD Eyg2ZTM5MTAzOTA4ZTljZTdkMTlhOThkNTU1MTAwYTAxZWFiNWMyMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdk7dM4UVO7Tx0R7VO5wi13Q4XKh 3BSt6qAkl/Z8/OQBpM9ISb2khJ0RHLqI6TJ+2XVRu9QYrRYBul+e+hR1gciFmLTt XHC55sCgjT3k+Ie2qTFkuHjhk+z+bY5tLl+6DOvOvBBc3eg2GzOzudfMOX8bBkmN fMtCUIUu6R+3MHZOEAru9mbqflf77J2D6cPSKtSa0CVIxrFfyO1VEagi/n9KBbWu w1Eysul/XL9/Ezw5c1cXstAQJcI4syiwJ+U+XMnKL1Ij+aKrDmv09a781ZDG/e+6 uEgjrZH2jbarq0BPp2SoMbpKF3tFXHQa7BAIsoaZUox3uJzGnyHgdy1XnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG45EDkI6c59GamNVVEAoB6rXCBuMB8GA1UdIwQY MBaAFIywduWfSbXcrLN1GGB+aVsEzb+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTZkMTAtZjM0ZS00ZDNhLWEyMGEt NGM0NzY0NjgzOTA3LzEvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mMTZkMTAtZjM0ZS00ZDNhLWEyMGEtNGM0NzY0NjgzOTA3 LzEvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJBX0uDf cbo8CKZIF/2vBfgFJTkK1Y4eEKmMD6r7heMWVUwAeAjD+CWdkM3YX7u3rPj0J/N3 pMJq/o8fHG7dVHSG1bK9WDYQXwtJX30pcUwXrWgFBJeNBYKlnWXisZhGd13yNDiU wvkk2CFPRSvtANAVZTDauGPVoS0ULMQsPF2ZgbqUOcxlxk6ftzqK4i4RDEzoAucb NPGe7fLwE8XUnYaYKpbtThtioyzu3rHrtSqK+Cm5ibnaCZ1qEvP6pyknLKfym+gQ 6NURqaP/5DtQfVkqJkO9E9eesRFJdb9jcwJmY0s0DWLmqRYJ5dso1huOfAY2ErmP MvQaaJW+HRN5ow== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:26 2025 by rpki-client