This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json) Hash identifier: HPzecISnxihsu7mot75yYDOtFh9EZLrjZ/SKRHaTGqQ= Subject key identifier: F2:B8:0B:78:8D:A4:13:67:5C:E1:2C:04:9F:7E:43:EE:6D:84:6E:1E Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Certificate serial: 019B1D9879A2866684BDECF43D76509C1247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft Manifest number: 1016 Signing time: Sun 14 Dec 2025 16:01:30 +0000 Manifest this update: Sun 14 Dec 2025 16:01:30 +0000 Manifest next update: Mon 15 Dec 2025 16:01:30 +0000 Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: Ex+d2RvJVYgtKwH3jGPuTi/L2i+VU1dJLI5uvTeHOW0=) 2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:79:a2:86:66:84:bd:ec:f4:3d:76:50:9c:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Validity Not Before: Dec 14 16:01:30 2025 GMT Not After : Dec 15 16:01:30 2025 GMT Subject: CN=f2b80b788da413675ce12c049f7e43ee6d846e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:68:61:6b:8b:50:27:01:64:12:1b:53:a4: ae:16:6d:70:2c:5a:4b:56:5e:01:31:31:40:7d:d3: 2d:b3:21:db:b8:c7:de:42:ab:45:55:0f:51:da:be: 3f:c3:7a:98:4d:37:f8:0f:68:33:4d:18:71:70:d8: 0f:03:cb:cd:a7:6e:1f:a0:b5:4e:55:5a:12:50:47: 8d:46:81:86:78:6d:33:5e:37:d7:42:3d:45:c7:8b: 76:73:99:87:9e:65:ff:99:ca:3a:86:04:11:75:63: 9a:cc:e8:6f:ef:a2:e1:ad:55:20:9a:9c:f2:c3:53: f9:45:38:b0:76:15:f9:15:a0:ff:b9:8b:5a:08:c5: 24:b9:6c:f5:10:0e:61:82:f6:b7:29:d4:3b:8c:1f: b9:59:c6:92:1e:1d:96:78:e4:0d:f4:6d:74:9a:5d: fa:37:03:21:3c:29:b6:eb:d4:8b:9a:59:58:a5:ac: dd:94:1c:0d:5c:e6:4d:e8:3b:ff:7b:79:75:29:c5: d0:5f:ca:cb:0f:06:ee:1b:d0:d2:f5:0d:86:e4:54: 32:8a:99:3d:a1:3c:13:08:97:0d:bf:96:1e:54:ae: 7a:92:1b:33:cf:60:d4:e8:82:d4:3a:0c:e7:a5:69: 0b:d7:d0:b7:92:cd:ac:6b:d2:0d:33:fc:98:2a:ac: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:0B:78:8D:A4:13:67:5C:E1:2C:04:9F:7E:43:EE:6D:84:6E:1E X509v3 Authority Key Identifier: keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9d:74:b5:d2:50:eb:50:80:10:60:22:d5:1b:5b:e7:f7:a3: d8:2a:49:a5:ce:9c:44:4d:51:03:be:49:5f:34:c5:9d:62:d4: 2b:dd:3d:5c:b5:30:64:37:a2:14:c6:b4:c9:26:b0:4c:c4:65: 26:c0:73:88:30:ce:20:14:d7:b9:08:3b:57:5a:fa:17:60:df: 7c:6b:43:28:ac:b4:c8:7b:17:09:ce:99:3f:8c:b0:6c:60:d0: 6a:9f:7a:5e:53:ce:e0:a0:2b:3e:49:ea:5c:fb:e1:4c:fc:a8: c0:6d:b9:57:c5:3e:2e:cc:f1:b1:e5:d3:fc:9f:28:b5:65:4c: f6:fb:09:be:90:52:1e:03:60:a9:f9:48:f2:46:4a:34:17:a8: 96:1b:a1:43:a8:6d:b6:4c:77:26:95:58:25:73:52:17:28:62: 9e:79:8f:15:53:df:7b:6f:99:11:95:ee:de:b0:67:a1:51:d5: 7a:55:1e:ad:e6:b6:89:15:87:5d:2e:f1:2f:71:ae:28:46:f7: 70:53:3d:49:be:a6:08:d1:47:1b:45:02:ae:34:47:54:6f:24: a2:a0:41:96:8e:ff:df:76:96:e8:f2:a2:c3:b1:6b:6d:72:53: ca:c9:ea:9b:e8:35:71:f9:1f:39:8e:7e:1c:be:d0:9e:a4:9b: 4f:17:fc:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmHmihmaEvez0PXZQnBJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw OWZiYzMwHhcNMjUxMjE0MTYwMTMwWhcNMjUxMjE1MTYwMTMwWjAzMTEwLwYDVQQD EyhmMmI4MGI3ODhkYTQxMzY3NWNlMTJjMDQ5ZjdlNDNlZTZkODQ2ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCdoYWuLUCcBZBIbU6SuFm1wLFpL Vl4BMTFAfdMtsyHbuMfeQqtFVQ9R2r4/w3qYTTf4D2gzTRhxcNgPA8vNp24foLVO VVoSUEeNRoGGeG0zXjfXQj1Fx4t2c5mHnmX/mco6hgQRdWOazOhv76LhrVUgmpzy w1P5RTiwdhX5FaD/uYtaCMUkuWz1EA5hgva3KdQ7jB+5WcaSHh2WeOQN9G10ml36 NwMhPCm269SLmllYpazdlBwNXOZN6Dv/e3l1KcXQX8rLDwbuG9DS9Q2G5FQyipk9 oTwTCJcNv5YeVK56khszz2DU6ILUOgznpWkL19C3ks2sa9INM/yYKqxvOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK4C3iNpBNnXOEsBJ9+Q+5thG4eMB8GA1UdIwQY MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR510tdJQ 61CAEGAi1Rtb5/ej2CpJpc6cRE1RA75JXzTFnWLUK909XLUwZDeiFMa0ySawTMRl JsBziDDOIBTXuQg7V1r6F2DffGtDKKy0yHsXCc6ZP4ywbGDQap96XlPO4KArPknq XPvhTPyowG25V8U+LszxseXT/J8otWVM9vsJvpBSHgNgqflI8kZKNBeolhuhQ6ht tkx3JpVYJXNSFyhinnmPFVPfe2+ZEZXu3rBnoVHVelUerea2iRWHXS7xL3GuKEb3 cFM9Sb6mCNFHG0UCrjRHVG8koqBBlo7/33aW6PKiw7FrbXJTysnqm+g1cfkfOY5+ HL7QnqSbTxf8eA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:14:24 2025 by rpki-client