This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json) Hash identifier: alWX0rmmIZgELVFt0OpKsEb/akJzI2Gg1/Wo3DiKhp4= Subject key identifier: 85:D9:22:1F:6B:57:87:10:78:D6:B5:87:3E:3A:63:AB:AD:66:BA:16 Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Certificate serial: 019B217626475AB2BFDEBD93AB4745803567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft Manifest number: 02E7 Signing time: Mon 15 Dec 2025 10:02:29 +0000 Manifest this update: Mon 15 Dec 2025 10:02:29 +0000 Manifest next update: Tue 16 Dec 2025 10:02:29 +0000 Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=) 2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: TYqjeRprwOwX2PJcWO2nA6e+NUSuPCu2BG0oS9J1iSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:26:47:5a:b2:bf:de:bd:93:ab:47:45:80:35:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Validity Not Before: Dec 15 10:02:29 2025 GMT Not After : Dec 16 10:02:29 2025 GMT Subject: CN=85d9221f6b57871078d6b5873e3a63abad66ba16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:af:30:01:6f:1b:dd:2d:1c:93:b3:5b:ae: e5:a9:24:92:3c:a3:f1:72:c0:50:db:97:ae:fa:1b: 2b:70:33:c1:22:43:ae:a0:27:be:08:1a:3d:53:25: 3d:5a:00:33:e6:69:01:70:9e:0a:80:00:6e:5d:5a: 43:93:7e:46:ab:e0:20:79:74:8a:e0:49:6e:ba:95: 4d:f8:7e:3a:13:f6:48:3e:14:81:65:8d:a0:c9:7c: bb:5b:7d:3a:74:99:44:ac:c7:a2:21:4a:0b:10:c6: 7c:31:b0:64:b9:0d:c0:c1:ab:4b:52:3d:2c:1c:0a: f0:da:87:9a:43:33:fb:55:48:61:28:8f:4b:b4:2f: eb:e9:5c:f8:28:cd:24:80:50:4d:05:8d:52:40:a0: 65:3f:66:85:f0:76:6b:36:af:d6:20:fe:f4:12:0a: d6:80:e9:6b:af:df:34:a1:1a:ab:be:86:c2:48:3e: aa:f7:af:1b:23:27:7e:56:46:49:6b:50:62:c6:ca: c7:ab:de:ea:37:c3:50:90:0a:59:e6:28:aa:63:e3: 6b:49:b1:33:d2:bc:6a:f8:1d:96:ff:73:b5:9b:b4: 28:6e:23:2a:60:51:d1:87:46:46:8f:96:62:74:1d: 3d:06:ac:d7:52:e9:57:1e:ac:15:61:35:da:1b:fb: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:22:1F:6B:57:87:10:78:D6:B5:87:3E:3A:63:AB:AD:66:BA:16 X509v3 Authority Key Identifier: keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:0e:2b:16:ab:7b:61:83:6b:16:b4:55:73:93:7c:2a:60:2a: f0:9f:5f:01:7b:cf:a6:18:e5:7f:5c:4a:48:e1:ea:9b:89:db: 4c:07:a7:db:30:81:9e:4e:49:ac:3f:2a:b5:8f:d1:78:99:70: d2:ac:2f:81:6c:07:15:2e:23:af:17:a9:8a:e7:80:9b:30:f8: f6:c6:0b:13:33:3b:79:5d:93:3e:d1:05:1e:97:e6:cc:62:93: 6d:2f:7b:b5:06:a2:3a:a4:be:bf:b6:44:75:5f:f8:38:ff:79: ea:6c:67:96:9c:f4:9c:d2:96:96:8a:5a:bb:26:51:d1:3d:78: e6:88:b2:64:28:09:8f:77:e1:33:dc:e1:bf:21:51:9e:76:9b: d3:97:e2:ae:c4:ff:f3:3f:5a:a2:44:02:42:52:46:2a:c9:75: 65:f2:3b:22:a8:69:5f:a0:e3:35:69:80:de:d7:61:82:93:b9: 3b:3b:c1:e6:58:5c:c0:ee:11:54:37:19:d7:ed:75:d9:fc:6a: b5:48:4a:a2:23:b8:35:ab:e4:11:79:7d:02:12:48:d1:1f:1d: 20:0d:0d:1f:14:af:82:f6:a3:80:87:4a:84:a4:b2:e2:a9:85: a2:8c:f0:c1:04:9d:e8:ab:1a:87:cb:7a:80:15:6a:3b:29:54: c5:6b:81:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdiZHWrK/3r2Tq0dFgDVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTM0YzBjMTgyYzQzODM3ZjJjMmJkNGVkY2IwYjhiM2Fi ZTk2ZTkwHhcNMjUxMjE1MTAwMjI5WhcNMjUxMjE2MTAwMjI5WjAzMTEwLwYDVQQD Eyg4NWQ5MjIxZjZiNTc4NzEwNzhkNmI1ODczZTNhNjNhYmFkNjZiYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoGvMAFvG90tHJOzW67lqSSSPKPx csBQ25eu+hsrcDPBIkOuoCe+CBo9UyU9WgAz5mkBcJ4KgABuXVpDk35Gq+AgeXSK 4EluupVN+H46E/ZIPhSBZY2gyXy7W306dJlErMeiIUoLEMZ8MbBkuQ3AwatLUj0s HArw2oeaQzP7VUhhKI9LtC/r6Vz4KM0kgFBNBY1SQKBlP2aF8HZrNq/WIP70EgrW gOlrr980oRqrvobCSD6q968bIyd+VkZJa1BixsrHq97qN8NQkApZ5iiqY+NrSbEz 0rxq+B2W/3O1m7QobiMqYFHRh0ZGj5ZidB09BqzXUulXHqwVYTXaG/t3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXZIh9rV4cQeNa1hz46Y6utZroWMB8GA1UdIwQY MBaAFI5TTAwYLEODfywr1O3LC4s6vpbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2It OTg1NDc2YzU1ZTQzLzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2ItOTg1NDc2YzU1ZTQz LzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuA4rFqt7 YYNrFrRVc5N8KmAq8J9fAXvPphjlf1xKSOHqm4nbTAen2zCBnk5JrD8qtY/ReJlw 0qwvgWwHFS4jrxepiueAmzD49sYLEzM7eV2TPtEFHpfmzGKTbS97tQaiOqS+v7ZE dV/4OP956mxnlpz0nNKWlopauyZR0T145oiyZCgJj3fhM9zhvyFRnnab05firsT/ 8z9aokQCQlJGKsl1ZfI7IqhpX6DjNWmA3tdhgpO5OzvB5lhcwO4RVDcZ1+112fxq tUhKoiO4NavkEXl9AhJI0R8dIA0NHxSvgvajgIdKhKSy4qmFoozwwQSd6Ksah8t6 gBVqOylUxWuBRA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:03:36 2025 by rpki-client