This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json) Hash identifier: 1iz+Rrshe/46PtI/J9XP1Agz1Lqo18sGaH4L25k5LxI= Subject key identifier: AE:0A:10:83:5F:95:D9:53:B0:07:74:0C:6D:88:3D:BB:95:BF:7C:3F Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca Certificate serial: 019B0CA49D5774510DB9BF6AF058D7846FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft Manifest number: 0848 Signing time: Thu 11 Dec 2025 09:01:13 +0000 Manifest this update: Thu 11 Dec 2025 09:01:13 +0000 Manifest next update: Fri 12 Dec 2025 09:01:13 +0000 Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: t0OAThxtvE1o2Tm6Tb7kNsZyhVLhpQyjLuwagKJOF1I=) 2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:9d:57:74:51:0d:b9:bf:6a:f0:58:d7:84:6f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca Validity Not Before: Dec 11 09:01:13 2025 GMT Not After : Dec 12 09:01:13 2025 GMT Subject: CN=ae0a10835f95d953b007740c6d883dbb95bf7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:7f:c4:e9:59:60:25:76:6e:e4:e5:74:6f: 7b:62:3f:38:ea:fc:c9:e3:e7:b9:71:b6:a2:c6:e3: 65:f6:f0:53:7c:d7:f8:4c:b7:7b:2c:f1:f6:d8:53: bd:52:4c:f6:57:f1:14:9e:6e:ad:21:f7:33:fe:89: a5:77:0b:53:cd:b5:2b:a9:cc:f3:0a:37:94:84:58: a2:d3:6c:5f:a8:2e:25:2b:fc:79:d6:d0:ca:92:50: f9:6f:e8:1b:47:17:ce:d4:ca:a3:30:ad:cb:32:08: d4:00:05:f4:3f:f7:a9:88:32:79:61:f1:91:ce:aa: bd:41:b0:7c:54:8b:f9:ff:3e:73:d6:28:d3:e7:40: 08:65:f7:63:61:ad:be:ee:01:22:c7:5f:ea:e4:5f: 76:03:39:ab:96:71:24:50:8a:aa:83:0a:2c:59:3f: ee:c8:90:63:c3:51:81:dd:36:a1:3c:02:96:1c:c1: fd:82:ee:79:d4:e0:8e:43:b0:51:a9:e7:05:8b:d6: ba:89:6a:eb:d5:20:13:68:de:19:b9:c7:02:95:ab: 22:c1:58:27:2a:3a:55:7a:cb:85:d8:e3:2f:68:e2: b7:6e:9a:af:09:dc:2b:b7:68:ae:ea:54:e2:20:18: 33:2a:d8:b1:d2:68:cc:cc:3b:cf:74:9b:88:0c:0d: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0A:10:83:5F:95:D9:53:B0:07:74:0C:6D:88:3D:BB:95:BF:7C:3F X509v3 Authority Key Identifier: keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3f:81:b1:a2:48:8e:51:f3:2b:fc:4c:73:3b:56:d5:d6:66: a2:62:66:75:f7:5b:01:1c:8c:f3:e4:2e:12:94:3d:38:98:34: b9:e6:da:2b:ab:f5:fb:a6:f2:42:00:08:b9:05:b4:61:79:cc: cc:5d:0a:84:47:7c:49:4d:cf:ab:a6:8a:6b:cd:23:3e:00:6c: fd:67:94:c6:fc:b7:1d:2f:57:61:19:77:78:e1:9e:1e:26:d5: 10:d8:c7:95:ec:55:f7:77:90:fe:14:fa:29:57:66:da:11:d4: df:aa:8f:78:92:d6:5f:94:16:55:55:f7:c4:08:58:23:e1:9f: 66:9a:22:62:c1:98:c4:11:a6:e5:a0:b3:71:d9:18:e2:5f:6b: 1d:c9:0d:db:f1:eb:36:e3:69:dd:fc:e7:e7:9b:53:7f:04:31: b1:e0:ef:81:50:1b:d5:65:41:56:61:aa:3f:d6:97:b9:2b:49: 58:40:b4:4d:4a:55:3f:2f:d7:96:b0:39:ec:2b:85:13:2a:ae: 54:e0:3b:13:7e:92:3d:4c:49:f5:c0:87:95:9e:d7:1e:55:e0: 5e:80:aa:7c:4a:af:a1:d6:7f:ba:f2:b9:16:4e:bc:a1:15:0b: 6e:cd:fc:5e:66:db:fa:2c:f1:a7:1c:c5:4f:c0:5a:91:31:54: a5:b9:05:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMpJ1XdFENub9q8FjXhG+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4 NDIzY2EwHhcNMjUxMjExMDkwMTEzWhcNMjUxMjEyMDkwMTEzWjAzMTEwLwYDVQQD EyhhZTBhMTA4MzVmOTVkOTUzYjAwNzc0MGM2ZDg4M2RiYjk1YmY3YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklR/xOlZYCV2buTldG97Yj846vzJ 4+e5cbaixuNl9vBTfNf4TLd7LPH22FO9Ukz2V/EUnm6tIfcz/omldwtTzbUrqczz CjeUhFii02xfqC4lK/x51tDKklD5b+gbRxfO1MqjMK3LMgjUAAX0P/epiDJ5YfGR zqq9QbB8VIv5/z5z1ijT50AIZfdjYa2+7gEix1/q5F92AzmrlnEkUIqqgwosWT/u yJBjw1GB3TahPAKWHMH9gu551OCOQ7BRqecFi9a6iWrr1SATaN4ZuccClasiwVgn KjpVesuF2OMvaOK3bpqvCdwrt2iu6lTiIBgzKtix0mjMzDvPdJuIDA0UuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4KEINfldlTsAd0DG2IPbuVv3w/MB8GA1UdIwQY MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT+BsaJI jlHzK/xMcztW1dZmomJmdfdbARyM8+QuEpQ9OJg0uebaK6v1+6byQgAIuQW0YXnM zF0KhEd8SU3Pq6aKa80jPgBs/WeUxvy3HS9XYRl3eOGeHibVENjHlexV93eQ/hT6 KVdm2hHU36qPeJLWX5QWVVX3xAhYI+GfZpoiYsGYxBGm5aCzcdkY4l9rHckN2/Hr NuNp3fzn55tTfwQxseDvgVAb1WVBVmGqP9aXuStJWEC0TUpVPy/XlrA57CuFEyqu VOA7E36SPUxJ9cCHlZ7XHlXgXoCqfEqvodZ/uvK5Fk68oRULbs38Xmbb+izxpxzF T8BakTFUpbkFiQ== -----END CERTIFICATE-----Generated at Thu Dec 11 17:51:39 2025 by rpki-client