This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json) Hash identifier: z8pDvgGEl7mjIUQO2npM+8+Qivgm6ua23zURgW4tvXo= Subject key identifier: 3D:13:9C:EB:42:D7:47:F1:5D:FD:3F:3E:41:78:55:B6:B8:C2:D4:1A Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Certificate serial: 019B31C3972C6563143C2EBF581B10B67735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft Manifest number: 1264 Signing time: Thu 18 Dec 2025 14:01:00 +0000 Manifest this update: Thu 18 Dec 2025 14:01:00 +0000 Manifest next update: Fri 19 Dec 2025 14:01:00 +0000 Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: V2VQ4Aol6E8HWYwwLtaUcgOl7iuAjZ6KlUyKzueAh2s=) 2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=) 3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:97:2c:65:63:14:3c:2e:bf:58:1b:10:b6:77:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Validity Not Before: Dec 18 14:01:00 2025 GMT Not After : Dec 19 14:01:00 2025 GMT Subject: CN=3d139ceb42d747f15dfd3f3e417855b6b8c2d41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e7:7d:33:ed:c5:4b:07:89:50:d3:cc:5f:2e: d7:27:d7:cd:f7:15:f3:47:65:dc:2e:07:e3:8b:fa: 27:81:05:1e:89:3a:6e:6f:f3:31:86:fe:2d:c5:45: 39:70:37:60:8c:73:f3:ea:e1:f4:2d:2f:de:84:89: 58:50:d2:87:a9:b3:8d:84:dd:ac:9c:b5:6a:e7:06: 9c:13:8d:2e:e5:a9:27:4d:7a:6c:70:20:6d:9c:ca: f0:cb:dc:0d:86:58:5e:5d:fd:41:86:15:70:7c:49: 3d:a9:2a:fb:51:30:cc:fd:ef:cd:bb:2e:4c:58:b3: de:7c:9c:64:48:5e:c4:06:13:f1:19:70:05:47:23: 34:8d:d8:b2:ad:7a:05:29:f6:5d:25:88:21:3d:f8: c0:1a:02:b8:f6:eb:44:fc:e0:d1:40:f9:c6:67:5f: f5:d6:48:66:70:98:36:72:1b:90:74:8f:39:b3:b2: 8f:1b:f0:10:f2:f7:21:17:b1:43:73:e3:3e:d7:6e: 3c:2e:fb:62:f1:9a:ca:1b:5f:c4:fa:44:ae:de:94: e7:48:69:00:42:94:67:e1:5f:d0:a3:cf:bb:6e:80: 3c:ef:9d:36:82:e7:ed:c1:2c:7b:12:ae:39:36:eb: 91:2c:b7:fa:c4:25:66:35:8d:34:9a:1c:3e:ff:7a: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:9C:EB:42:D7:47:F1:5D:FD:3F:3E:41:78:55:B6:B8:C2:D4:1A X509v3 Authority Key Identifier: keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a5:1f:86:25:8b:9a:bf:8d:b5:92:96:b2:a9:01:9d:84:f3: 35:6d:69:cd:9f:13:7e:44:79:0f:df:b7:19:8e:48:71:f7:b2: bd:c9:65:1c:7d:c8:27:b2:ec:e4:2b:d9:29:ba:90:59:a1:50: 0c:c1:10:7a:31:dd:c7:32:41:c2:d5:a9:ad:26:5d:78:5b:b1: d9:a1:a7:63:63:92:4c:cb:e8:bf:4c:fb:e7:3f:58:32:0a:97: d5:ce:08:01:c7:19:49:ae:c1:1c:b6:2d:ec:84:cd:72:59:1d: d7:70:01:3e:2d:98:f2:5f:88:0f:6b:da:28:df:96:b9:8c:36: a4:92:b2:b6:21:2b:6f:11:15:73:7a:d2:3e:c3:ba:14:49:52: d0:f6:f1:19:63:e4:39:c1:68:45:c1:3f:79:bf:2b:e3:f1:ce: c7:8b:fa:f3:aa:2f:07:42:52:69:6c:40:8d:dd:4b:5d:b6:c0: 6a:ff:b7:cb:b4:b9:2a:a3:2a:17:f4:a1:36:fb:ab:e4:e9:f6: 96:8b:d9:ac:82:40:7a:e6:a8:d9:63:14:0f:41:18:18:43:4c: 4a:2a:29:02:6d:21:f9:da:3a:8e:98:bb:a9:04:33:38:23:46: 54:23:3e:df:b5:44:da:95:8e:a6:03:7c:5a:6d:01:1a:1f:d5: 75:df:27:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5csZWMUPC6/WBsQtnc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm MDJkNWIwHhcNMjUxMjE4MTQwMTAwWhcNMjUxMjE5MTQwMTAwWjAzMTEwLwYDVQQD EygzZDEzOWNlYjQyZDc0N2YxNWRmZDNmM2U0MTc4NTViNmI4YzJkNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ed9M+3FSweJUNPMXy7XJ9fN9xXz R2XcLgfji/ongQUeiTpub/Mxhv4txUU5cDdgjHPz6uH0LS/ehIlYUNKHqbONhN2s nLVq5wacE40u5aknTXpscCBtnMrwy9wNhlheXf1BhhVwfEk9qSr7UTDM/e/Nuy5M WLPefJxkSF7EBhPxGXAFRyM0jdiyrXoFKfZdJYghPfjAGgK49utE/ODRQPnGZ1/1 1khmcJg2chuQdI85s7KPG/AQ8vchF7FDc+M+1248Lvti8ZrKG1/E+kSu3pTnSGkA QpRn4V/Qo8+7boA87502guftwSx7Eq45NuuRLLf6xCVmNY00mhw+/3q0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0TnOtC10fxXf0/PkF4Vba4wtQaMB8GA1UdIwQY MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqUfhiWL mr+NtZKWsqkBnYTzNW1pzZ8TfkR5D9+3GY5IcfeyvcllHH3IJ7Ls5CvZKbqQWaFQ DMEQejHdxzJBwtWprSZdeFux2aGnY2OSTMvov0z75z9YMgqX1c4IAccZSa7BHLYt 7ITNclkd13ABPi2Y8l+ID2vaKN+WuYw2pJKytiErbxEVc3rSPsO6FElS0PbxGWPk OcFoRcE/eb8r4/HOx4v686ovB0JSaWxAjd1LXbbAav+3y7S5KqMqF/ShNvur5On2 lovZrIJAeuao2WMUD0EYGENMSiopAm0h+do6jpi7qQQzOCNGVCM+37VE2pWOpgN8 Wm0BGh/Vdd8nEA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:30 2025 by rpki-client