This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json) Hash identifier: Dbc+hYX80VrTqvhnteioQJB2KOqHfl5t4Mc2OAJM19Y= Subject key identifier: 67:C3:F7:86:2E:F7:52:BC:F1:36:D6:2E:40:D7:E3:19:78:7C:E5:54 Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Certificate serial: 019B3A901FB543D2C3419794028D4A129186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft Manifest number: 05FE Signing time: Sat 20 Dec 2025 07:01:22 +0000 Manifest this update: Sat 20 Dec 2025 07:01:22 +0000 Manifest next update: Sun 21 Dec 2025 07:01:22 +0000 Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: Q7h6GunomF7Cc7r5i8N1h1cp1qHFU4j4Bu48Kq+vXo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:1f:b5:43:d2:c3:41:97:94:02:8d:4a:12:91:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Validity Not Before: Dec 20 07:01:22 2025 GMT Not After : Dec 21 07:01:22 2025 GMT Subject: CN=67c3f7862ef752bcf136d62e40d7e319787ce554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:fa:ba:6a:e4:c1:36:1d:b1:d7:82:f0:3e: 91:a6:a4:83:f7:57:89:78:24:d8:c8:c3:16:e2:50: 84:cb:64:11:28:39:ff:e5:cf:40:73:b3:d6:85:d2: 11:16:1b:dd:f3:46:40:81:a2:2a:67:4c:e9:36:91: b5:a1:74:f5:e8:fc:d4:96:42:73:90:14:5a:fb:03: 41:b9:8a:8a:82:8e:e8:8e:07:d9:d8:a4:07:cd:91: 70:a1:ee:b0:89:8d:b9:12:7f:29:0a:f9:2e:35:a9: 92:9a:45:07:d6:f3:de:e2:a1:98:4e:2b:2b:35:60: 4b:da:d3:00:1f:40:4f:78:8c:48:e6:50:d1:20:ef: 90:34:82:ea:cf:c1:11:05:f3:ed:27:15:fa:7a:ba: d0:b7:5b:a9:6d:3e:6b:de:bc:be:66:db:ab:94:ea: 79:d9:62:b9:68:16:dd:07:d4:5b:a0:7f:28:7a:13: 90:97:c3:6b:b3:06:70:72:d2:b6:ec:50:10:76:97: b9:c6:95:91:99:b3:12:50:e2:ab:28:30:08:b7:62: 83:9c:02:1b:3d:ec:f5:6d:5f:be:95:5f:57:b9:30: 49:2c:06:94:c4:51:a5:6f:96:ee:8a:f9:fd:2e:0c: 11:17:4d:b0:86:ae:9e:6c:0b:f0:0a:da:e1:b3:e5: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:F7:86:2E:F7:52:BC:F1:36:D6:2E:40:D7:E3:19:78:7C:E5:54 X509v3 Authority Key Identifier: keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:f9:61:a7:f9:e3:5a:76:41:6b:22:27:56:f2:a4:c6:a0: 11:67:e4:0d:aa:92:00:25:01:2c:42:ba:e5:cf:bf:07:ac:a6: c0:3d:79:ac:ac:12:70:9c:f0:46:47:25:29:6e:b6:d1:86:b0: 63:69:16:21:f4:7e:1f:0f:9d:49:da:c1:a2:20:d8:67:cb:28: 7e:c1:fa:79:2a:c0:d8:ce:03:34:9f:d0:ef:59:b6:58:7b:27: c0:3e:ae:0c:0c:d5:c5:99:8d:eb:a4:f1:6f:83:18:56:0a:c7: 55:60:00:14:75:d9:f8:74:b5:c2:73:c0:72:c2:4b:51:89:71: d9:52:dd:78:78:5a:09:62:11:18:85:3f:c1:95:81:4e:f8:69: 54:ed:92:65:2c:4f:bb:28:fc:dc:20:65:8b:f1:ce:2f:ef:5b: ec:af:e4:a9:fa:3f:e3:80:e3:98:89:8c:d4:e9:9c:e7:7b:d6: 00:5b:52:0b:b1:9d:f2:e3:7f:ca:9d:e2:8c:15:f9:bb:ee:5d: 10:c9:a1:fe:65:c1:55:99:5f:d9:ce:f4:33:c4:db:7a:db:8e: 6e:3f:74:75:be:36:bc:c6:6d:66:2a:4a:3b:71:7d:f4:fa:ce: 3d:9a:7e:30:8d:4c:bc:e1:7a:01:8a:1f:24:eb:a7:4e:24:c9: fe:d1:11:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kB+1Q9LDQZeUAo1KEpGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj ZWViMDQwHhcNMjUxMjIwMDcwMTIyWhcNMjUxMjIxMDcwMTIyWjAzMTEwLwYDVQQD Eyg2N2MzZjc4NjJlZjc1MmJjZjEzNmQ2MmU0MGQ3ZTMxOTc4N2NlNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9D6umrkwTYdsdeC8D6RpqSD91eJ eCTYyMMW4lCEy2QRKDn/5c9Ac7PWhdIRFhvd80ZAgaIqZ0zpNpG1oXT16PzUlkJz kBRa+wNBuYqKgo7ojgfZ2KQHzZFwoe6wiY25En8pCvkuNamSmkUH1vPe4qGYTisr NWBL2tMAH0BPeIxI5lDRIO+QNILqz8ERBfPtJxX6errQt1upbT5r3ry+ZturlOp5 2WK5aBbdB9RboH8oehOQl8NrswZwctK27FAQdpe5xpWRmbMSUOKrKDAIt2KDnAIb Pez1bV++lV9XuTBJLAaUxFGlb5buivn9LgwRF02whq6ebAvwCtrhs+VoRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfD94Yu91K88TbWLkDX4xl4fOVUMB8GA1UdIwQY MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcD5Yaf5 41p2QWsiJ1bypMagEWfkDaqSACUBLEK65c+/B6ymwD15rKwScJzwRkclKW620Yaw Y2kWIfR+Hw+dSdrBoiDYZ8sofsH6eSrA2M4DNJ/Q71m2WHsnwD6uDAzVxZmN66Tx b4MYVgrHVWAAFHXZ+HS1wnPAcsJLUYlx2VLdeHhaCWIRGIU/wZWBTvhpVO2SZSxP uyj83CBli/HOL+9b7K/kqfo/44DjmImM1Omc53vWAFtSC7Gd8uN/yp3ijBX5u+5d EMmh/mXBVZlf2c70M8TbetuObj90db42vMZtZipKO3F99PrOPZp+MI1MvOF6AYof JOunTiTJ/tER7g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:27 2025 by rpki-client