This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json) Hash identifier: gTxas75zAu21H3KLBCp+zx0n++vt3LOhQ9vUwkMk0+s= Subject key identifier: E2:5C:68:A7:08:F2:56:C9:90:87:65:FE:33:EC:E4:D9:4C:AB:BE:45 Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca Certificate serial: 019B23D1212D4F1C390F8683AB29627C9515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft Manifest number: 0854 Signing time: Mon 15 Dec 2025 21:01:06 +0000 Manifest this update: Mon 15 Dec 2025 21:01:06 +0000 Manifest next update: Tue 16 Dec 2025 21:01:06 +0000 Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: LTD56igjYDuYJU9pYkzi265Ve7lM+CkLEZVcUmf08ac=) 2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:21:2d:4f:1c:39:0f:86:83:ab:29:62:7c:95:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca Validity Not Before: Dec 15 21:01:06 2025 GMT Not After : Dec 16 21:01:06 2025 GMT Subject: CN=e25c68a708f256c9908765fe33ece4d94cabbe45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:41:60:8f:4a:21:6d:8f:2c:ca:67:7b:56: 20:0b:9d:c3:c2:a6:a1:20:04:62:10:0f:35:1a:f4: 26:14:fb:b0:f6:b5:f8:e4:2e:0a:f5:05:48:9d:03: 26:02:02:8e:4f:bb:af:e4:cb:5e:ff:cc:e0:18:da: 1b:1b:b5:fd:d8:eb:52:7a:08:13:ed:ab:51:5d:f1: 2c:61:55:f0:fd:b3:26:08:4a:6a:b5:ac:c6:3e:a2: b5:79:d4:8c:84:01:f4:ad:d8:4f:f6:80:fe:2f:8e: 21:06:39:ff:2c:69:67:3d:8c:af:24:35:8b:45:f3: 65:61:d5:f9:8f:20:c5:5b:8b:bf:ed:c9:b1:bf:c6: 92:82:59:6b:62:73:d9:57:e2:1f:67:5e:cf:a0:89: 58:7e:05:0e:f5:fc:17:0a:7e:82:34:5c:51:ba:c5: 2f:53:8d:c0:b3:8f:65:f8:05:64:d5:5b:6e:9d:8a: 35:84:78:e9:1f:55:fa:19:59:5f:42:7d:1c:ac:9b: b9:ae:e1:69:e7:af:97:e2:20:7f:0d:a6:9e:c5:0f: 14:30:da:16:b0:3d:67:a8:8d:ae:18:7e:1d:7a:20: c8:d4:17:83:b4:c1:5c:25:9f:68:96:23:de:14:3e: cd:b1:46:97:92:35:3f:bd:66:96:86:7b:7d:58:7b: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:68:A7:08:F2:56:C9:90:87:65:FE:33:EC:E4:D9:4C:AB:BE:45 X509v3 Authority Key Identifier: keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0d:eb:6b:8f:c2:0b:73:e8:22:cc:c3:60:d0:07:11:a1:88: 81:d8:14:b4:f1:52:d5:f9:52:eb:96:5d:1e:95:87:85:82:43: 6e:e1:7d:b5:d7:f1:f4:20:bc:f9:5f:08:fc:79:61:d8:24:8b: e9:50:d1:f0:98:82:96:84:92:45:ec:ab:8d:90:e2:e8:67:f9: 59:1e:02:ea:9e:5a:56:97:ce:ef:df:3a:95:55:7e:52:68:c7: ae:92:7b:1b:17:63:bb:c5:77:83:27:46:24:44:6d:df:6b:b3: 3d:46:65:96:2d:88:f7:6e:32:d3:4f:5b:03:50:81:8c:98:31: a2:31:ce:e0:c5:35:bd:fb:2c:1e:6a:90:58:c4:06:88:97:c4: 41:e9:4a:2d:ec:82:af:f6:d9:65:f9:c9:c7:e8:e2:de:c8:c7: e5:3b:42:30:d0:30:6c:03:f0:f2:68:54:6d:5d:17:06:03:73: 7e:09:0b:2e:e6:6c:c1:22:4a:c0:5e:09:b7:5e:dc:ee:c3:79: d3:d6:85:d7:4a:76:9b:0a:a5:b9:8d:54:60:44:af:cd:28:a6: 13:2d:24:28:d2:81:ec:02:42:d6:bc:da:2c:fd:a5:9c:bd:1f: 2a:cd:1d:7d:f0:cf:42:81:c8:e8:e6:a5:22:4d:0b:6b:04:e0: f3:eb:ac:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0SEtTxw5D4aDqylifJUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4 NDIzY2EwHhcNMjUxMjE1MjEwMTA2WhcNMjUxMjE2MjEwMTA2WjAzMTEwLwYDVQQD EyhlMjVjNjhhNzA4ZjI1NmM5OTA4NzY1ZmUzM2VjZTRkOTRjYWJiZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA111BYI9KIW2PLMpne1YgC53Dwqah IARiEA81GvQmFPuw9rX45C4K9QVInQMmAgKOT7uv5Mte/8zgGNobG7X92OtSeggT 7atRXfEsYVXw/bMmCEpqtazGPqK1edSMhAH0rdhP9oD+L44hBjn/LGlnPYyvJDWL RfNlYdX5jyDFW4u/7cmxv8aSgllrYnPZV+IfZ17PoIlYfgUO9fwXCn6CNFxRusUv U43As49l+AVk1VtunYo1hHjpH1X6GVlfQn0crJu5ruFp56+X4iB/DaaexQ8UMNoW sD1nqI2uGH4deiDI1BeDtMFcJZ9oliPeFD7NsUaXkjU/vWaWhnt9WHum6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJcaKcI8lbJkIdl/jPs5NlMq75FMB8GA1UdIwQY MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ3ra4/C C3PoIszDYNAHEaGIgdgUtPFS1flS65ZdHpWHhYJDbuF9tdfx9CC8+V8I/Hlh2CSL 6VDR8JiCloSSReyrjZDi6Gf5WR4C6p5aVpfO7986lVV+UmjHrpJ7Gxdju8V3gydG JERt32uzPUZlli2I924y009bA1CBjJgxojHO4MU1vfssHmqQWMQGiJfEQelKLeyC r/bZZfnJx+ji3sjH5TtCMNAwbAPw8mhUbV0XBgNzfgkLLuZswSJKwF4Jt17c7sN5 09aF10p2mwqluY1UYESvzSimEy0kKNKB7AJC1rzaLP2lnL0fKs0dffDPQoHI6Oal Ik0LawTg8+usgw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:19:50 2025 by rpki-client