This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json) Hash identifier: nJX5DkMo/ab+WQRx+9nLy99UJwfkX0hNJFZdhE1IBig= Subject key identifier: F4:66:53:44:91:F7:01:83:1B:BB:B7:AA:41:4F:4B:F5:EF:EA:06:D2 Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26 Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126 Certificate serial: 019B5975B8E77B117833CB196A5E21FFA69C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft Manifest number: 15B2 Signing time: Fri 26 Dec 2025 07:00:45 +0000 Manifest this update: Fri 26 Dec 2025 07:00:45 +0000 Manifest next update: Sat 27 Dec 2025 07:00:45 +0000 Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: FioNY739x6aHdOZoRTCHDvqyeSwTMjxOZXemyK5fgus=) 2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b8:e7:7b:11:78:33:cb:19:6a:5e:21:ff:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25fd5781576f3d4225af99453e93a92598527126 Validity Not Before: Dec 26 07:00:45 2025 GMT Not After : Dec 27 07:00:45 2025 GMT Subject: CN=f466534491f701831bbbb7aa414f4bf5efea06d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:4a:82:73:e8:e4:60:4b:02:43:87:af:ee: 75:16:f9:ec:e0:2e:40:7f:87:74:1f:11:f9:55:64: 63:b1:49:b7:8c:97:b8:53:de:fb:d5:5f:28:3d:a2: ff:b1:59:4d:d0:58:19:94:c8:78:dc:e9:f4:19:9e: 71:3d:e5:da:d2:f0:4b:4c:15:53:ea:b9:98:a7:73: 64:22:13:64:c3:54:86:ac:ec:64:1b:69:ff:cf:ed: a7:b4:73:82:0d:1f:bb:91:2d:eb:33:6b:34:2e:82: 87:ed:5e:e5:4b:24:e6:5b:ee:33:bd:d0:8e:86:28: d3:cd:fa:4a:2e:c1:b0:03:8f:02:cf:d3:cf:21:d9: be:c8:68:ad:d4:d5:4a:74:ff:68:d4:22:d9:de:08: e6:12:ff:ee:f6:2c:ba:ba:88:16:a2:b4:a1:0d:db: f8:31:31:fa:bd:04:84:5d:43:e5:41:48:d5:35:b9: a9:6f:5b:72:9c:9b:2c:ad:6f:3f:30:25:32:2e:3c: d7:57:2b:71:9f:fa:78:54:94:ac:6c:d3:e3:58:3f: 11:cf:79:e5:42:f3:39:aa:cb:42:c8:f1:4a:c9:d2: 77:93:61:e8:91:ec:ef:6f:e8:2b:1c:a6:29:27:cc: 6c:e9:7a:f3:ce:87:13:f9:7e:42:3a:fc:5d:a6:be: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:53:44:91:F7:01:83:1B:BB:B7:AA:41:4F:4B:F5:EF:EA:06:D2 X509v3 Authority Key Identifier: keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9d:0d:8d:d6:6a:fc:47:64:6a:6f:c4:df:b9:e8:c7:f8:60: 56:62:46:3b:7a:1f:c6:2b:dd:9b:c5:b1:5c:13:3c:80:48:50: 14:1d:54:04:c9:04:b0:ff:9e:f4:9e:c9:e4:54:5e:99:30:76: 77:ba:b4:e6:68:f4:45:cc:b1:5f:75:fb:74:09:3b:7f:98:2a: 8a:6b:b8:24:5d:9d:ad:95:b9:5c:e7:f9:57:6e:b8:a0:69:ee: dc:25:dd:45:51:66:b8:88:76:a8:30:6b:a3:58:3c:49:33:51: 57:d5:78:ca:b5:ff:29:17:0a:7f:df:52:cf:77:7e:b8:a6:83: 5f:64:c4:d8:ff:90:8b:99:05:e1:65:cc:51:fe:cb:d2:99:1a: 6e:fe:ff:99:80:67:f5:cc:e0:44:25:15:48:da:51:9c:99:9a: 2c:f1:7d:1a:5f:9b:a0:27:c8:f8:f1:cd:35:3c:74:c5:23:c4: b9:5e:06:99:35:c6:97:94:77:28:ee:22:16:b2:72:5f:9a:e7: b1:08:5b:ee:ed:03:af:15:2d:8d:8c:ae:50:0a:ef:34:76:dc: b4:c9:fb:15:c7:fb:f8:e0:39:d3:62:49:33:41:f4:ea:d9:f9: 88:f8:58:4b:cd:3d:38:fd:45:b1:ef:19:05:3d:15:9e:a7:60: 3c:ce:e6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbjnexF4M8sZal4h/6acMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1 MjcxMjYwHhcNMjUxMjI2MDcwMDQ1WhcNMjUxMjI3MDcwMDQ1WjAzMTEwLwYDVQQD EyhmNDY2NTM0NDkxZjcwMTgzMWJiYmI3YWE0MTRmNGJmNWVmZWEwNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtKgnPo5GBLAkOHr+51Fvns4C5A f4d0HxH5VWRjsUm3jJe4U9771V8oPaL/sVlN0FgZlMh43On0GZ5xPeXa0vBLTBVT 6rmYp3NkIhNkw1SGrOxkG2n/z+2ntHOCDR+7kS3rM2s0LoKH7V7lSyTmW+4zvdCO hijTzfpKLsGwA48Cz9PPIdm+yGit1NVKdP9o1CLZ3gjmEv/u9iy6uogWorShDdv4 MTH6vQSEXUPlQUjVNbmpb1tynJssrW8/MCUyLjzXVytxn/p4VJSsbNPjWD8Rz3nl QvM5qstCyPFKydJ3k2Hokezvb+grHKYpJ8xs6XrzzocT+X5COvxdpr4p3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRmU0SR9wGDG7u3qkFPS/Xv6gbSMB8GA1UdIwQY MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ0NjdZq /Edkam/E37nox/hgVmJGO3ofxivdm8WxXBM8gEhQFB1UBMkEsP+e9J7J5FRemTB2 d7q05mj0RcyxX3X7dAk7f5gqimu4JF2drZW5XOf5V264oGnu3CXdRVFmuIh2qDBr o1g8STNRV9V4yrX/KRcKf99Sz3d+uKaDX2TE2P+Qi5kF4WXMUf7L0pkabv7/mYBn 9czgRCUVSNpRnJmaLPF9Gl+boCfI+PHNNTx0xSPEuV4GmTXGl5R3KO4iFrJyX5rn sQhb7u0DrxUtjYyuUArvNHbctMn7Fcf7+OA502JJM0H06tn5iPhYS809OP1Fse8Z BT0VnqdgPM7m6w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:00 2025 by rpki-client