This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json) Hash identifier: 8JCfuAGE3xZaangWNmrFaEUg7pCGaL7atqT8EubwMrM= Subject key identifier: 2C:E0:30:EF:4E:DB:82:D1:29:6C:62:BC:5F:A4:F1:FA:14:3A:74:4F Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Certificate serial: 019B0F373AB71167C4C532A7F8D259FAF70E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft Manifest number: 0619 Signing time: Thu 11 Dec 2025 21:00:36 +0000 Manifest this update: Thu 11 Dec 2025 21:00:36 +0000 Manifest next update: Fri 12 Dec 2025 21:00:36 +0000 Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: KEe87i2WQyOGpeubyh+DNFe5KQyWnzJYFCEUUKCv6nM=) 2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:3a:b7:11:67:c4:c5:32:a7:f8:d2:59:fa:f7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Validity Not Before: Dec 11 21:00:36 2025 GMT Not After : Dec 12 21:00:36 2025 GMT Subject: CN=2ce030ef4edb82d1296c62bc5fa4f1fa143a744f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:19:85:d2:6a:14:b5:e6:4e:9d:21:d0:4e: fa:af:4b:37:79:7a:94:d4:0e:2f:70:74:40:7d:b7: 6d:f3:d5:10:fc:2c:4c:23:8c:0b:b3:19:fc:d1:f9: 4a:2d:09:30:fa:e0:d5:90:1c:36:33:e4:cd:c0:bc: d7:41:a4:2f:3b:f9:af:76:e2:22:03:84:e7:ec:9f: 52:a6:74:a7:1e:ae:7a:dc:f1:62:8d:5a:a5:8b:be: a7:9c:f2:95:0f:e8:e5:4c:71:cc:07:d6:0b:03:db: 90:c6:1a:e1:df:c9:8c:91:7c:59:62:44:69:ef:ad: 88:1b:9a:b1:d5:f0:d7:e4:98:bd:ac:c8:6e:c8:dd: b8:d2:69:f4:e7:d5:41:32:d2:38:ad:2f:e3:a6:f1: d5:e4:f2:a5:fa:d2:c7:0f:5d:ce:85:d7:4f:30:94: d1:26:c9:f7:ed:37:12:f5:ec:e1:88:d1:be:a1:41: 0d:e2:14:8e:09:68:cc:3a:0a:11:03:19:44:17:51: ed:cf:eb:d3:43:31:16:9c:30:5a:dd:70:8a:54:76: d3:8d:2d:7a:a8:cc:5e:50:94:9f:60:38:9b:7c:e4: 99:d1:bc:7c:48:57:1a:e8:ef:13:de:ee:10:8e:2f: c5:56:fa:6c:80:c2:a0:cc:94:da:bb:20:5a:0c:e1: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E0:30:EF:4E:DB:82:D1:29:6C:62:BC:5F:A4:F1:FA:14:3A:74:4F X509v3 Authority Key Identifier: keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:35:4f:c0:f5:14:cc:96:ce:ff:c6:8b:7b:fd:d1:7e:bc:2a: e3:14:d6:fe:b0:63:95:67:74:e4:e3:0e:27:70:f9:4d:9c:95: 6c:c9:cd:de:03:ad:be:80:07:63:41:80:6f:b8:f8:3a:47:ae: 79:b2:e7:6c:27:f2:77:dd:66:b8:7a:b6:71:90:44:37:11:4d: b9:32:de:33:39:22:dd:8c:9e:25:d5:7b:2e:75:96:c2:4d:5e: f0:dd:9b:78:5c:89:67:93:82:1e:13:19:2c:4c:47:f6:f8:32: c0:9d:b6:f4:8e:83:5f:6f:e5:04:21:d9:ea:71:7c:ed:e4:7f: 0e:82:ea:0d:fb:bf:b1:bb:f6:a2:47:60:53:d8:48:29:05:09: d6:af:6f:46:19:8c:11:f9:bf:97:22:ae:42:c0:32:1a:50:46: 94:a5:36:fe:e6:78:b4:b2:35:56:fa:c2:6e:bf:78:fd:b8:15: 8f:76:39:a9:b7:0a:7f:a1:3d:21:5c:87:ad:07:44:fc:da:90: 49:7f:3b:90:e2:f9:40:c7:84:2c:6d:77:b2:88:d4:be:06:30: c6:34:9e:0f:96:e8:a9:e3:23:aa:2e:a3:14:9f:16:da:a4:c0: 0e:fd:5b:25:54:4b:4c:72:5c:a6:38:c1:9c:41:f8:89:f2:9a: a4:cb:ce:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzq3EWfExTKn+NJZ+vcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw YjUxOGYwHhcNMjUxMjExMjEwMDM2WhcNMjUxMjEyMjEwMDM2WjAzMTEwLwYDVQQD EygyY2UwMzBlZjRlZGI4MmQxMjk2YzYyYmM1ZmE0ZjFmYTE0M2E3NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEsZhdJqFLXmTp0h0E76r0s3eXqU 1A4vcHRAfbdt89UQ/CxMI4wLsxn80flKLQkw+uDVkBw2M+TNwLzXQaQvO/mvduIi A4Tn7J9SpnSnHq563PFijVqli76nnPKVD+jlTHHMB9YLA9uQxhrh38mMkXxZYkRp 762IG5qx1fDX5Ji9rMhuyN240mn059VBMtI4rS/jpvHV5PKl+tLHD13OhddPMJTR Jsn37TcS9ezhiNG+oUEN4hSOCWjMOgoRAxlEF1Htz+vTQzEWnDBa3XCKVHbTjS16 qMxeUJSfYDibfOSZ0bx8SFca6O8T3u4Qji/FVvpsgMKgzJTauyBaDOFPjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzgMO9O24LRKWxivF+k8foUOnRPMB8GA1UdIwQY MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczVPwPUU zJbO/8aLe/3Rfrwq4xTW/rBjlWd05OMOJ3D5TZyVbMnN3gOtvoAHY0GAb7j4Okeu ebLnbCfyd91muHq2cZBENxFNuTLeMzki3YyeJdV7LnWWwk1e8N2beFyJZ5OCHhMZ LExH9vgywJ229I6DX2/lBCHZ6nF87eR/DoLqDfu/sbv2okdgU9hIKQUJ1q9vRhmM Efm/lyKuQsAyGlBGlKU2/uZ4tLI1VvrCbr94/bgVj3Y5qbcKf6E9IVyHrQdE/NqQ SX87kOL5QMeELG13sojUvgYwxjSeD5boqeMjqi6jFJ8W2qTADv1bJVRLTHJcpjjB nEH4ifKapMvOMA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:55:49 2025 by rpki-client