This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json) Hash identifier: XfLMIY0dzPh+xkOYAxcpLjy32sQ2YPoUs8qeDC65JSI= Subject key identifier: E4:F5:B2:4D:D5:38:37:4F:7B:B9:7E:D5:31:FC:34:5C:F5:19:84:30 Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e Certificate serial: 019B405B911730EF4903AFA7B6B933C4F79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft Manifest number: 0CE0 Signing time: Sun 21 Dec 2025 10:01:41 +0000 Manifest this update: Sun 21 Dec 2025 10:01:41 +0000 Manifest next update: Mon 22 Dec 2025 10:01:41 +0000 Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: OxGRgHYY5Lx3isHmaEGN+UgjBXTdQ7TONSJHNCD2TPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:91:17:30:ef:49:03:af:a7:b6:b9:33:c4:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e Validity Not Before: Dec 21 10:01:41 2025 GMT Not After : Dec 22 10:01:41 2025 GMT Subject: CN=e4f5b24dd538374f7bb97ed531fc345cf5198430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:15:2b:53:86:24:72:2f:6c:39:08:22:84: 67:6d:6e:88:14:cd:29:82:8a:d2:e2:58:d9:11:fd: d8:32:6d:bf:bd:ef:4e:04:e4:52:98:9d:27:42:92: 1a:39:27:e8:54:4a:a0:3a:70:68:c8:b8:40:8e:80: 0e:61:4e:cc:85:a8:b1:0a:da:ac:f3:f3:b2:cf:94: 7d:ce:02:b7:3a:03:5d:f2:e9:29:bd:1a:f8:3c:bc: 2d:e9:30:c6:e1:f7:27:73:03:64:ab:5c:c0:42:86: 7f:06:9e:9e:30:05:b8:1b:89:f3:72:e3:09:11:e7: ab:9d:f9:a4:2d:1f:03:f2:b7:e5:99:70:a2:23:4f: 91:24:82:ab:65:b8:b5:a2:11:0b:6b:a4:67:0c:83: f7:c1:bf:50:5a:0c:57:64:ef:bc:97:f7:07:3f:17: da:be:20:94:fd:32:6c:45:da:18:61:00:04:87:26: 01:2d:97:87:39:61:68:bc:13:2d:1c:e1:8b:4f:ce: 93:88:7c:d0:d2:c9:47:e4:db:90:28:f1:9b:7e:dd: 66:7f:68:cc:ac:31:c3:ec:06:6c:91:cb:71:80:d3: 08:fe:a3:e8:df:94:f6:13:29:b6:61:76:da:3a:29: 8f:f4:17:45:73:c3:53:37:f3:b5:d0:e7:aa:6f:d4: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F5:B2:4D:D5:38:37:4F:7B:B9:7E:D5:31:FC:34:5C:F5:19:84:30 X509v3 Authority Key Identifier: keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:58:b8:93:ff:59:51:0a:9c:f9:3b:3f:69:19:c0:31:01:2c: 5d:75:b6:4a:31:62:fd:5a:3f:6c:1b:59:41:e8:37:37:34:f8: 45:e5:45:94:8a:6e:a3:1f:60:db:58:51:1e:05:dd:20:5c:4e: 11:f3:ff:e0:87:9c:68:6f:0a:19:e3:7d:62:b2:af:b0:2f:e7: 18:42:35:c9:40:c3:77:a5:d6:8e:d0:df:59:f5:b8:cd:8b:a5: 9d:0e:d5:9e:12:8e:56:ec:9e:6b:d7:f8:17:77:f2:a1:ee:c0: a5:70:fe:8b:fa:60:7c:2f:87:6b:de:d3:8f:2a:63:0b:03:5d: 11:fb:7e:c6:c8:ad:48:2a:b5:ae:08:83:a7:22:b7:a8:5f:0f: d2:04:d4:9d:e2:3c:2c:3b:2b:5e:0c:67:53:04:0b:1c:52:83: a2:e6:35:a8:d3:e3:e3:47:5e:f0:5e:ca:6f:b7:9a:1c:3a:8b: 29:9e:15:f0:59:86:65:a6:e0:1e:13:ee:63:89:d4:81:82:31: cd:74:eb:af:fa:d3:b1:d4:ff:fd:64:08:11:dc:56:98:83:5d: f7:b4:cc:4f:12:0b:59:e0:f7:f1:5f:f5:6f:47:08:76:e6:6f: f7:a4:27:81:eb:ea:11:35:a4:fa:59:8d:87:84:af:83:9e:ae: 45:16:d9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW5EXMO9JA6+ntrkzxPebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0 MTVkM2UwHhcNMjUxMjIxMTAwMTQxWhcNMjUxMjIyMTAwMTQxWjAzMTEwLwYDVQQD EyhlNGY1YjI0ZGQ1MzgzNzRmN2JiOTdlZDUzMWZjMzQ1Y2Y1MTk4NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+cVK1OGJHIvbDkIIoRnbW6IFM0p gorS4ljZEf3YMm2/ve9OBORSmJ0nQpIaOSfoVEqgOnBoyLhAjoAOYU7MhaixCtqs 8/Oyz5R9zgK3OgNd8ukpvRr4PLwt6TDG4fcncwNkq1zAQoZ/Bp6eMAW4G4nzcuMJ EeernfmkLR8D8rflmXCiI0+RJIKrZbi1ohELa6RnDIP3wb9QWgxXZO+8l/cHPxfa viCU/TJsRdoYYQAEhyYBLZeHOWFovBMtHOGLT86TiHzQ0slH5NuQKPGbft1mf2jM rDHD7AZskctxgNMI/qPo35T2Eym2YXbaOimP9BdFc8NTN/O10Oeqb9T8QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT1sk3VODdPe7l+1TH8NFz1GYQwMB8GA1UdIwQY MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFi4k/9Z UQqc+Ts/aRnAMQEsXXW2SjFi/Vo/bBtZQeg3NzT4ReVFlIpuox9g21hRHgXdIFxO EfP/4IecaG8KGeN9YrKvsC/nGEI1yUDDd6XWjtDfWfW4zYulnQ7VnhKOVuyea9f4 F3fyoe7ApXD+i/pgfC+Ha97TjypjCwNdEft+xsitSCq1rgiDpyK3qF8P0gTUneI8 LDsrXgxnUwQLHFKDouY1qNPj40de8F7Kb7eaHDqLKZ4V8FmGZabgHhPuY4nUgYIx zXTrr/rTsdT//WQIEdxWmINd97TMTxILWeD38V/1b0cIduZv96QngevqETWk+lmN h4Svg56uRRbZPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:00:10 2025 by rpki-client