This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json) Hash identifier: 5O2JOjqrHzRozvEO0uvAk/aGM52WZ+gWWGz8Kwckwc4= Subject key identifier: FE:77:FD:12:A9:D7:FE:63:3A:2A:4C:A9:7D:1A:23:F2:5E:EC:18:46 Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019ACBA08FFB113BC96CEEEF47AD3CBE8F31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft Manifest number: 0EEE Signing time: Fri 28 Nov 2025 18:01:28 +0000 Manifest this update: Fri 28 Nov 2025 18:01:28 +0000 Manifest next update: Sat 29 Nov 2025 18:01:28 +0000 Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=) 2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: Uo2RLXXiNK7tYyf6SdRvfmnY9kcBkTMjB2uZcZf3lgU=) 3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:a0:8f:fb:11:3b:c9:6c:ee:ef:47:ad:3c:be:8f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Nov 28 18:01:28 2025 GMT Not After : Nov 29 18:01:28 2025 GMT Subject: CN=fe77fd12a9d7fe633a2a4ca97d1a23f25eec1846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:1b:ca:03:06:09:c7:de:18:54:ad:ea:82: 3c:ea:6e:fd:7d:4a:e3:24:60:b1:90:83:1e:e4:46: 16:c7:55:7b:00:e7:67:71:7f:79:77:d4:61:49:6f: 94:83:28:0d:7c:3c:40:25:d5:ee:5a:d0:e3:80:01: be:b9:6c:d9:6b:03:77:b2:08:f6:14:fe:75:7f:b7: 5f:f1:48:64:bd:98:8e:5e:a1:f4:d8:8d:2d:d2:0b: c0:61:42:c8:bd:1c:99:71:b2:6f:44:f1:3d:89:72: a7:5c:f4:63:87:41:ef:c8:48:cd:2a:d2:dc:76:a0: c0:a8:5f:e4:eb:63:76:27:61:b3:53:cf:8a:cc:00: cf:bc:0a:f1:3f:ea:0e:35:09:6c:96:33:aa:fb:d9: 26:7b:ae:47:cf:5c:0d:62:7f:e4:59:80:97:02:82: d5:c4:b4:cd:96:a2:2c:8c:11:dd:0c:7d:05:0f:9b: 26:51:fa:b7:ec:61:07:50:0a:98:22:a1:62:a1:48: 4b:10:8d:71:22:45:76:74:09:0b:2a:e7:87:3a:9d: be:55:09:a3:58:d2:f6:76:22:8c:b7:c0:07:ce:0d: 24:ab:0e:a6:21:4e:d1:43:e0:8a:66:1e:8c:ce:67: 82:93:83:0b:c5:8a:81:29:6f:bb:16:30:21:5a:f7: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:FD:12:A9:D7:FE:63:3A:2A:4C:A9:7D:1A:23:F2:5E:EC:18:46 X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4b:a4:40:36:9d:8b:de:c6:41:75:2f:46:a1:09:a5:64:16: 54:9c:19:5f:32:b5:c2:1d:85:39:c4:ef:71:4e:19:d1:f2:7d: c5:e7:4f:65:d8:7d:db:36:25:5e:7d:dd:bb:ab:52:7f:27:bd: 07:fc:df:42:4d:34:cb:de:6b:a7:e0:84:dd:2c:22:f1:bc:76: d7:34:65:77:4e:0e:d2:cd:9b:ab:81:b9:81:42:01:37:80:4d: 3f:86:3e:44:8f:b1:e6:bf:4a:cb:8c:e8:88:dc:bd:fa:bc:e9: 45:3f:54:13:a6:da:01:a3:65:a5:53:81:b6:6a:0f:a1:24:d2: e0:a0:e1:fe:bf:c3:5f:e1:bd:86:b1:79:da:c9:ae:35:37:cb: 3c:42:56:f7:2b:ba:65:8b:53:63:02:43:61:28:4a:41:01:f1: 41:20:01:af:e6:b3:8c:dc:47:7f:bd:d6:dc:41:f4:9e:b4:ef: 8b:e3:a7:20:fe:43:e7:4b:eb:72:f3:8b:7f:92:71:0e:27:89: df:b5:d2:0a:60:a1:47:eb:8f:41:7a:66:39:c0:43:1c:b8:e3: cd:87:c5:c5:c5:9b:d5:2a:f2:5a:f2:3d:da:f7:c6:72:08:5b: 99:62:93:a3:fb:2e:79:a8:bb:39:e8:7c:94:60:55:b7:c3:29: 68:c7:94:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrLoI/7ETvJbO7vR608vo8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjUxMTI4MTgwMTI4WhcNMjUxMTI5MTgwMTI4WjAzMTEwLwYDVQQD EyhmZTc3ZmQxMmE5ZDdmZTYzM2EyYTRjYTk3ZDFhMjNmMjVlZWMxODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviEbygMGCcfeGFSt6oI86m79fUrj JGCxkIMe5EYWx1V7AOdncX95d9RhSW+UgygNfDxAJdXuWtDjgAG+uWzZawN3sgj2 FP51f7df8UhkvZiOXqH02I0t0gvAYULIvRyZcbJvRPE9iXKnXPRjh0HvyEjNKtLc dqDAqF/k62N2J2GzU8+KzADPvArxP+oONQlsljOq+9kme65Hz1wNYn/kWYCXAoLV xLTNlqIsjBHdDH0FD5smUfq37GEHUAqYIqFioUhLEI1xIkV2dAkLKueHOp2+VQmj WNL2diKMt8AHzg0kqw6mIU7RQ+CKZh6MzmeCk4MLxYqBKW+7FjAhWve7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP53/RKp1/5jOipMqX0aI/Je7BhGMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEukQDad i97GQXUvRqEJpWQWVJwZXzK1wh2FOcTvcU4Z0fJ9xedPZdh92zYlXn3du6tSfye9 B/zfQk00y95rp+CE3Swi8bx21zRld04O0s2bq4G5gUIBN4BNP4Y+RI+x5r9Ky4zo iNy9+rzpRT9UE6baAaNlpVOBtmoPoSTS4KDh/r/DX+G9hrF52smuNTfLPEJW9yu6 ZYtTYwJDYShKQQHxQSABr+azjNxHf73W3EH0nrTvi+OnIP5D50vrcvOLf5JxDieJ 37XSCmChR+uPQXpmOcBDHLjjzYfFxcWb1SryWvI92vfGcghbmWKTo/sueai7Oeh8 lGBVt8MpaMeUlw== -----END CERTIFICATE-----Generated at Sat Nov 29 01:59:49 2025 by rpki-client