This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft File: JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json) Hash identifier: GnBYnyfIRWRwJKdKADaJ1r3pkWKifxLP409g42yFdsY= Subject key identifier: A4:B3:F4:6B:FB:41:E1:12:25:66:E9:AE:5D:C0:0E:5A:BF:F5:FF:81 Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Certificate serial: 019B33446A8DC7C4963732C781133EF28A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 21:01:20 +0000 Manifest this update: Thu 18 Dec 2025 21:01:20 +0000 Manifest next update: Fri 19 Dec 2025 21:01:20 +0000 Files and hashes: 1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: 6opU7w9WQtJI3cbfLrihlKx+B5eMdQPivU2sbN2gp/c=) 2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:6a:8d:c7:c4:96:37:32:c7:81:13:3e:f2:8a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Validity Not Before: Dec 18 21:01:20 2025 GMT Not After : Dec 19 21:01:20 2025 GMT Subject: CN=a4b3f46bfb41e1122566e9ae5dc00e5abff5ff81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:01:c4:5a:22:36:23:17:b7:5f:d3:10:51: 98:3e:4c:ca:8d:6f:f5:3e:8e:7c:23:7b:44:34:35: 94:3b:ec:be:e7:5d:3d:8a:80:c5:4c:68:02:68:dd: a8:d3:69:a2:15:3a:45:ea:e7:1c:dc:2b:a2:53:24: 82:7a:e9:c2:b2:db:e6:8b:26:ca:23:5b:34:86:21: d5:9c:c0:93:61:3b:c7:96:db:78:e9:ae:55:5f:0c: f4:bc:81:d1:02:8c:37:77:7a:31:c2:67:02:e7:3b: 20:10:65:fd:81:c1:8e:f8:78:e8:fe:92:d1:ae:8e: 74:47:d1:1b:23:3d:7e:8a:ba:ff:c4:32:bc:4c:ea: a5:35:34:03:8b:b9:17:21:79:ef:ec:b0:cf:4e:15: 29:4b:84:f4:35:40:ba:03:13:ee:6c:03:eb:85:7a: 5a:26:8d:e7:5d:75:a0:6d:c2:1b:1c:a4:a4:3a:5a: 34:af:90:04:11:be:97:f1:88:60:ce:f0:e1:ad:19: 0c:9b:3a:5f:8b:f3:00:93:2a:ef:d8:b5:d5:36:11: b9:ba:fb:54:ac:5a:73:9e:15:e4:3c:bd:9c:cd:d3: 1a:74:50:1b:27:38:45:05:0f:f8:9a:4c:bb:9b:4e: db:e7:74:f1:18:c9:60:a9:93:6c:ea:2d:16:01:f1: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:F4:6B:FB:41:E1:12:25:66:E9:AE:5D:C0:0E:5A:BF:F5:FF:81 X509v3 Authority Key Identifier: keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9f:0e:74:56:8c:9a:7c:a8:2c:32:a7:fd:48:a3:88:c3:8f: f9:ca:35:c2:fb:77:bc:2c:ee:15:99:ff:78:c1:b7:ac:61:38: d8:0f:d6:1b:20:fd:16:ec:9c:6e:fc:38:14:2a:b5:da:49:bc: 4a:b1:f7:58:17:39:68:73:24:a8:fa:80:bc:f4:83:e1:32:29: 2e:16:23:1c:1e:b0:57:63:d0:2f:c4:4b:7b:58:77:1d:a8:b1: 6d:fd:c9:e7:bc:7e:a9:a2:e9:0e:20:44:fa:5c:ab:53:0f:c9: 98:22:3a:b4:13:5e:2a:89:0d:0d:8f:20:e1:34:e8:e1:32:d0: 27:64:a0:63:1f:b3:b8:14:d9:f0:3d:ea:75:06:3f:97:62:35: 03:b3:13:39:91:49:59:3c:e2:b6:c9:4e:22:28:d1:6b:cd:ed: 38:da:7a:d8:de:08:89:b5:05:c1:bf:c4:e1:cc:30:25:47:27: 4c:1d:be:4f:46:17:f5:06:37:54:02:17:57:50:ce:2d:83:25: c0:3e:21:d9:3e:9a:83:b8:98:90:84:fe:06:6a:b7:a1:51:82: 74:89:77:34:3e:8f:d0:3e:21:70:b5:9b:ac:04:f5:3d:fd:f3: 07:6b:a9:96:6c:34:47:74:f1:c8:8a:e8:99:3d:7d:76:60:5e: 72:6f:17:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGqNx8SWNzLHgRM+8ooOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1 NDdiZTYwHhcNMjUxMjE4MjEwMTIwWhcNMjUxMjE5MjEwMTIwWjAzMTEwLwYDVQQD EyhhNGIzZjQ2YmZiNDFlMTEyMjU2NmU5YWU1ZGMwMGU1YWJmZjVmZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4owBxFoiNiMXt1/TEFGYPkzKjW/1 Po58I3tENDWUO+y+5109ioDFTGgCaN2o02miFTpF6ucc3CuiUySCeunCstvmiybK I1s0hiHVnMCTYTvHltt46a5VXwz0vIHRAow3d3oxwmcC5zsgEGX9gcGO+Hjo/pLR ro50R9EbIz1+irr/xDK8TOqlNTQDi7kXIXnv7LDPThUpS4T0NUC6AxPubAPrhXpa Jo3nXXWgbcIbHKSkOlo0r5AEEb6X8YhgzvDhrRkMmzpfi/MAkyrv2LXVNhG5uvtU rFpznhXkPL2czdMadFAbJzhFBQ/4mky7m07b53TxGMlgqZNs6i0WAfEc3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSz9Gv7QeESJWbprl3ADlq/9f+BMB8GA1UdIwQY MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt YjYxMDU2ODQ2NmIzLzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUtYjYxMDU2ODQ2NmIz LzEvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop8OdFaM mnyoLDKn/UijiMOP+co1wvt3vCzuFZn/eMG3rGE42A/WGyD9Fuycbvw4FCq12km8 SrH3WBc5aHMkqPqAvPSD4TIpLhYjHB6wV2PQL8RLe1h3Haixbf3J57x+qaLpDiBE +lyrUw/JmCI6tBNeKokNDY8g4TTo4TLQJ2SgYx+zuBTZ8D3qdQY/l2I1A7MTOZFJ WTzitslOIijRa83tONp62N4IibUFwb/E4cwwJUcnTB2+T0YX9QY3VAIXV1DOLYMl wD4h2T6ag7iYkIT+Bmq3oVGCdIl3ND6P0D4hcLWbrAT1Pf3zB2uplmw0R3TxyIro mT19dmBecm8XNA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:42 2025 by rpki-client