This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json) Hash identifier: XjbZxgtX/wjdNQK8b6Uv98IDqcav9BX1t7P86vJAgYQ= Subject key identifier: E6:A6:40:0E:7A:DF:46:92:86:75:9C:E2:2D:B2:DD:6B:EB:E0:00:9F Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f Certificate serial: 019B3569EA2418F273C2EE6E6787C2665473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft Manifest number: 05BB Signing time: Fri 19 Dec 2025 07:01:32 +0000 Manifest this update: Fri 19 Dec 2025 07:01:32 +0000 Manifest next update: Sat 20 Dec 2025 07:01:32 +0000 Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: ySV5a5sDGR8ExY5kQr3x+FTMgnMBztlcovRFDi4voBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:ea:24:18:f2:73:c2:ee:6e:67:87:c2:66:54:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f Validity Not Before: Dec 19 07:01:32 2025 GMT Not After : Dec 20 07:01:32 2025 GMT Subject: CN=e6a6400e7adf469286759ce22db2dd6bebe0009f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:81:16:94:5d:c9:00:b8:10:1d:62:55:5a:3e: 94:f1:45:e6:44:da:6e:a2:76:13:f1:f2:ae:69:65: 93:50:99:61:e4:ca:06:a2:ae:40:b3:0d:41:fa:ee: e4:b3:6c:43:1b:c8:91:5c:77:5f:45:f1:6a:9a:08: 33:95:64:43:74:d0:f9:0c:e3:85:0a:bb:f3:44:8d: ae:77:1c:d2:cc:b7:dc:e1:39:01:9c:b6:5e:a9:ac: 3d:db:f5:b3:37:29:df:fb:67:28:c5:59:b2:6c:b8: d8:6f:d8:94:15:4a:72:c8:8b:3d:1f:ee:01:0a:9b: 52:77:b4:59:f9:33:b5:98:75:31:f3:92:1b:be:d6: 4a:ab:6d:54:70:44:13:d5:d2:34:60:dd:94:01:36: 1d:88:a7:34:3b:e0:22:64:fb:3a:de:83:00:d7:fd: e9:8f:5a:84:68:98:da:80:a6:0b:06:6c:b2:0b:ea: 4a:82:3f:f6:d8:e6:2f:d3:1d:74:5d:79:05:a1:ad: f2:05:18:3f:b8:a4:dd:8a:51:dd:28:ea:78:e4:1c: e2:63:f9:1b:3a:32:7a:a2:ba:1c:8b:85:12:c2:e8: 64:ea:0d:53:f0:87:62:01:e9:d6:35:b0:50:f0:fc: f8:9d:c1:27:cf:19:6d:a5:c2:07:e9:95:11:3a:31: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A6:40:0E:7A:DF:46:92:86:75:9C:E2:2D:B2:DD:6B:EB:E0:00:9F X509v3 Authority Key Identifier: keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bf:ff:96:8a:43:13:fb:74:25:35:65:48:6b:d8:c5:b7:e6: 5d:df:b4:30:ae:5d:90:45:5f:78:7e:71:fb:9e:39:68:6b:f5: 81:64:41:1b:02:4d:c6:7b:3b:3a:38:97:f0:ac:71:cc:ab:4e: 1f:18:bb:c4:67:e9:b1:f8:f8:d5:4d:3a:5c:73:af:d8:a5:f2: 15:4d:b2:50:49:a3:58:f8:68:da:c7:b4:6b:fa:6e:59:72:35: 35:6b:ab:1a:9e:e2:e5:bb:d7:4e:68:17:c4:5f:f1:55:de:7d: af:74:be:91:c0:dd:5f:82:bb:3c:a8:78:37:27:21:95:ec:32: 8d:2b:88:81:b7:68:ac:b1:90:79:14:90:7b:7e:ae:4a:0e:54: 42:ac:e8:83:40:c3:ad:3a:6d:60:93:64:30:b5:a0:56:42:45: 2b:24:78:3f:62:80:e7:68:e7:f5:c6:31:08:bc:8b:86:e5:24: 31:98:33:2e:ad:7b:78:1c:bb:cd:11:0b:31:b5:99:ed:24:62: 89:69:1e:2f:b7:cf:f1:71:de:1a:82:8e:cf:b9:fa:82:51:2b: f2:f9:bc:8b:15:71:15:f8:ec:1f:75:12:c2:ae:6f:99:52:1a: c6:02:3e:fc:c0:38:53:f7:a2:61:28:d2:fc:a6:45:3e:3a:d8: 81:c8:89:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aeokGPJzwu5uZ4fCZlRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOWMwN2U3ZThkZTg1OGIyZTY4MTNkMDBmOWIzOTkyZGY1 MzgyN2YwHhcNMjUxMjE5MDcwMTMyWhcNMjUxMjIwMDcwMTMyWjAzMTEwLwYDVQQD EyhlNmE2NDAwZTdhZGY0NjkyODY3NTljZTIyZGIyZGQ2YmViZTAwMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YEWlF3JALgQHWJVWj6U8UXmRNpu onYT8fKuaWWTUJlh5MoGoq5Asw1B+u7ks2xDG8iRXHdfRfFqmggzlWRDdND5DOOF CrvzRI2udxzSzLfc4TkBnLZeqaw92/WzNynf+2coxVmybLjYb9iUFUpyyIs9H+4B CptSd7RZ+TO1mHUx85IbvtZKq21UcEQT1dI0YN2UATYdiKc0O+AiZPs63oMA1/3p j1qEaJjagKYLBmyyC+pKgj/22OYv0x10XXkFoa3yBRg/uKTdilHdKOp45BziY/kb OjJ6oroci4USwuhk6g1T8IdiAenWNbBQ8Pz4ncEnzxltpcIH6ZUROjH5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOamQA5630aShnWc4i2y3Wvr4ACfMB8GA1UdIwQY MBaAFI2cB+fo3oWLLmgT0A+bOZLfU4J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYt ZjM2M2M1MTM4NzAyLzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYtZjM2M2M1MTM4NzAy LzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr//lopD E/t0JTVlSGvYxbfmXd+0MK5dkEVfeH5x+545aGv1gWRBGwJNxns7OjiX8KxxzKtO Hxi7xGfpsfj41U06XHOv2KXyFU2yUEmjWPho2se0a/puWXI1NWurGp7i5bvXTmgX xF/xVd59r3S+kcDdX4K7PKh4NychlewyjSuIgbdorLGQeRSQe36uSg5UQqzog0DD rTptYJNkMLWgVkJFKyR4P2KA52jn9cYxCLyLhuUkMZgzLq17eBy7zRELMbWZ7SRi iWkeL7fP8XHeGoKOz7n6glEr8vm8ixVxFfjsH3USwq5vmVIaxgI+/MA4U/eiYSjS /KZFPjrYgciJpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:28 2025 by rpki-client