This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json) Hash identifier: ctMXTma1o700NDeNJ+FKoJgWKf+14pY8u/QIz2lzegw= Subject key identifier: 8C:8F:10:AA:BE:7C:33:81:F1:BF:B1:DB:12:D2:6F:6A:37:79:AD:F9 Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Certificate serial: 019B34C4FC796C4611337CA0CE5C4CB30EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft Manifest number: 05FB Signing time: Fri 19 Dec 2025 04:01:23 +0000 Manifest this update: Fri 19 Dec 2025 04:01:23 +0000 Manifest next update: Sat 20 Dec 2025 04:01:23 +0000 Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: LNtLG3HYN2qullxmpo9+ip6XK56k9OqaLVPnjk2qutE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:fc:79:6c:46:11:33:7c:a0:ce:5c:4c:b3:0e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Validity Not Before: Dec 19 04:01:23 2025 GMT Not After : Dec 20 04:01:23 2025 GMT Subject: CN=8c8f10aabe7c3381f1bfb1db12d26f6a3779adf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:5f:63:b2:6e:02:0a:98:c6:56:44:ac:56: 46:89:52:4f:54:28:f5:59:82:7a:1d:2d:b8:1d:f1: b3:b8:6f:b0:63:fd:1d:c0:33:6a:b7:26:af:f0:c1: c4:1b:56:1f:63:9f:d7:ec:da:34:36:53:6c:be:33: d6:04:d3:cf:6c:98:ef:e2:05:85:ce:a0:50:fe:42: 0c:89:95:28:9b:42:98:fb:d0:01:36:2f:d3:94:da: 0b:6f:37:ef:21:0a:00:63:e0:f7:d7:33:ec:bc:dd: 3e:9c:8b:c4:f2:c9:6c:f3:35:fb:bf:91:99:4f:03: fa:b6:c6:10:90:26:8f:09:30:4f:7e:7b:fb:45:08: 74:aa:ea:b8:3f:57:eb:96:cd:37:6d:e0:97:9a:10: e6:d0:cb:fb:17:87:b4:21:c3:96:65:47:da:fc:bd: 32:04:22:bb:b2:6d:67:28:4c:95:e4:e2:b9:b4:56: 61:f9:ea:a9:8f:14:54:e7:21:e6:39:f6:0a:57:d8: 6f:1f:ab:d7:5f:45:cf:58:b4:ac:fd:64:a8:d1:37: aa:18:c3:f4:85:1c:fe:24:93:84:14:22:08:6c:33: 5a:9b:fd:36:26:7e:15:a4:dd:d4:23:d7:04:dc:9f: 4c:26:3e:85:ec:4c:b6:38:a6:88:84:ee:f9:24:57: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:10:AA:BE:7C:33:81:F1:BF:B1:DB:12:D2:6F:6A:37:79:AD:F9 X509v3 Authority Key Identifier: keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:34:3c:00:52:93:ba:15:0a:aa:82:5c:a4:6e:4c:1c:f9:7f: 88:44:75:63:25:b4:1c:27:d3:88:2b:df:de:e1:32:38:cf:04: a6:7c:a6:88:13:1d:7c:73:38:56:fd:7d:80:ce:0a:e7:ef:6b: 9d:8a:e7:33:1d:61:bb:eb:22:e2:fe:3c:8d:90:a5:e4:c6:f9: ad:47:c0:d5:2c:8d:6e:a7:3b:67:6c:bc:90:1f:8f:d6:59:d2: 82:d9:08:f8:37:e9:68:4f:db:cd:8c:7d:d5:98:70:0a:eb:3e: d1:6f:da:44:cc:82:b6:b9:32:b8:e5:6d:56:5d:eb:6d:7f:b5: 90:96:e0:cc:aa:fc:11:9d:c4:ec:81:d7:1d:b7:65:ee:e5:a7: d2:80:a7:94:8d:24:16:15:dd:e2:73:c5:02:be:9b:05:61:0b: 4a:4c:33:c1:78:d8:dd:6b:10:75:92:70:82:04:15:9c:0b:72: 3e:d3:d2:52:11:86:81:30:c1:bf:f8:3a:b5:e4:d8:24:24:fa: b8:18:4c:c6:11:b3:4e:e8:6f:f7:1d:41:a9:01:6e:23:b2:72: db:30:1b:2f:b8:57:9b:fc:1d:6c:8f:98:63:47:fc:50:13:79: c3:72:b0:d0:24:f0:70:c6:08:52:ce:12:ff:18:5a:c1:f3:8d: ab:11:5c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xPx5bEYRM3ygzlxMsw7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj ZWViMDQwHhcNMjUxMjE5MDQwMTIzWhcNMjUxMjIwMDQwMTIzWjAzMTEwLwYDVQQD Eyg4YzhmMTBhYWJlN2MzMzgxZjFiZmIxZGIxMmQyNmY2YTM3NzlhZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pdfY7JuAgqYxlZErFZGiVJPVCj1 WYJ6HS24HfGzuG+wY/0dwDNqtyav8MHEG1YfY5/X7No0NlNsvjPWBNPPbJjv4gWF zqBQ/kIMiZUom0KY+9ABNi/TlNoLbzfvIQoAY+D31zPsvN0+nIvE8sls8zX7v5GZ TwP6tsYQkCaPCTBPfnv7RQh0quq4P1frls03beCXmhDm0Mv7F4e0IcOWZUfa/L0y BCK7sm1nKEyV5OK5tFZh+eqpjxRU5yHmOfYKV9hvH6vXX0XPWLSs/WSo0TeqGMP0 hRz+JJOEFCIIbDNam/02Jn4VpN3UI9cE3J9MJj6F7Ey2OKaIhO75JFdNKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyPEKq+fDOB8b+x2xLSb2o3ea35MB8GA1UdIwQY MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDQ8AFKT uhUKqoJcpG5MHPl/iER1YyW0HCfTiCvf3uEyOM8EpnymiBMdfHM4Vv19gM4K5+9r nYrnMx1hu+si4v48jZCl5Mb5rUfA1SyNbqc7Z2y8kB+P1lnSgtkI+DfpaE/bzYx9 1ZhwCus+0W/aRMyCtrkyuOVtVl3rbX+1kJbgzKr8EZ3E7IHXHbdl7uWn0oCnlI0k FhXd4nPFAr6bBWELSkwzwXjY3WsQdZJwggQVnAtyPtPSUhGGgTDBv/g6teTYJCT6 uBhMxhGzTuhv9x1BqQFuI7Jy2zAbL7hXm/wdbI+YY0f8UBN5w3Kw0CTwcMYIUs4S /xhawfONqxFcIA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:15:36 2025 by rpki-client