This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json) Hash identifier: Nu8wTlcgpBbLz9NUYce7bvZuXVHxLRoMMNzuzdlZLBk= Subject key identifier: 11:8F:34:20:21:BC:05:F3:35:E6:5B:58:28:2D:FF:FD:F7:67:BF:4C Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Certificate serial: 019B0E9310DEDE314492555A09CB9561E462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft Manifest number: 154C Signing time: Thu 11 Dec 2025 18:01:17 +0000 Manifest this update: Thu 11 Dec 2025 18:01:17 +0000 Manifest next update: Fri 12 Dec 2025 18:01:17 +0000 Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: ygQAECs5sr1kb+rrnym3Z4/x8+ffQN8Hx5HeXCZYTxw=) 2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:10:de:de:31:44:92:55:5a:09:cb:95:61:e4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Validity Not Before: Dec 11 18:01:17 2025 GMT Not After : Dec 12 18:01:17 2025 GMT Subject: CN=118f342021bc05f335e65b58282dfffdf767bf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:98:19:ec:b4:cc:0c:83:8c:9f:f7:81:66: 5d:ff:92:7b:a3:37:35:ad:39:1f:c0:9e:d3:35:8d: a3:3b:b7:0f:98:19:7f:6d:d6:b5:5c:10:b3:f2:7a: f6:92:77:da:70:4d:b4:5a:d9:05:ab:ea:1b:2c:84: 33:f6:28:bc:4b:24:e3:bf:30:0e:1a:5f:9b:3b:25: 7e:5d:ff:e4:ce:06:f4:bc:7d:b2:3f:52:9d:c4:f9: 48:e0:8c:1d:5e:15:7a:7f:77:b1:8c:ae:7d:53:9d: 8e:b2:e3:67:53:db:00:68:3a:f1:4d:9b:4c:b9:d4: e9:28:7e:fb:15:d1:8a:30:c0:08:a2:a3:94:89:ad: e4:6f:29:40:76:e4:f4:f4:20:c5:00:08:fd:75:b3: 6e:e0:2c:0d:8a:e8:98:a2:9e:00:98:a4:25:1e:41: 9b:98:15:c3:7a:e7:d9:47:90:48:aa:7b:f0:49:51: 86:dd:c3:d0:24:a6:54:99:a1:ef:eb:87:42:5d:b4: 78:15:04:e8:6d:5b:2b:c7:94:38:5b:ac:ed:4e:f7: 04:3b:8c:8e:f8:e9:75:06:d6:4d:ce:45:47:f0:15: d1:29:ad:78:07:3d:09:65:05:42:61:89:64:5b:1b: 25:f9:16:9a:b3:a5:6e:d6:29:b9:8f:ce:18:be:b7: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:34:20:21:BC:05:F3:35:E6:5B:58:28:2D:FF:FD:F7:67:BF:4C X509v3 Authority Key Identifier: keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:68:5a:a7:55:ec:a3:e8:81:4c:d3:c3:c1:db:c4:07:00:01: 68:dc:dc:c4:2b:e0:4f:1d:fd:8f:9f:76:67:ed:f8:c8:6d:92: 16:29:8b:93:70:f0:f9:11:13:ef:63:c7:d0:1a:c4:b1:85:b9: d6:57:93:07:45:ee:07:41:7c:f7:52:59:57:3d:b0:36:22:23: ec:6b:8f:70:20:21:ef:16:7f:1f:d2:82:1d:5e:08:2d:05:a2: bd:5f:7d:55:67:bc:aa:3b:47:24:81:70:0f:e6:e1:a6:76:e8: 67:64:e5:91:08:e0:a4:db:eb:c4:c8:5f:52:24:78:92:0a:68: 35:0f:58:78:4a:7b:41:07:42:e7:25:bf:93:92:83:97:4b:0a: 30:6b:24:3b:7c:0a:8d:c2:e8:dd:81:0b:34:75:51:26:e1:63: 3d:6b:c0:f9:bc:29:68:f8:ab:62:f9:8b:d1:9d:ed:e1:59:25: 4c:6f:ca:09:89:30:35:44:6e:7b:00:51:34:76:31:29:3a:21: e3:ac:57:57:3d:09:01:0c:5c:1d:c8:62:f9:bf:63:0f:61:1d: df:bf:47:2a:98:ab:03:f1:20:3f:fa:b6:a0:87:59:b3:1f:1b: f9:25:d4:4d:1f:86:1e:3e:40:5d:e8:89:72:7e:28:51:b2:01: 0a:95:79:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxDe3jFEklVaCcuVYeRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi ZDVmMTIwHhcNMjUxMjExMTgwMTE3WhcNMjUxMjEyMTgwMTE3WjAzMTEwLwYDVQQD EygxMThmMzQyMDIxYmMwNWYzMzVlNjViNTgyODJkZmZmZGY3NjdiZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSYGey0zAyDjJ/3gWZd/5J7ozc1 rTkfwJ7TNY2jO7cPmBl/bda1XBCz8nr2knfacE20WtkFq+obLIQz9ii8SyTjvzAO Gl+bOyV+Xf/kzgb0vH2yP1KdxPlI4IwdXhV6f3exjK59U52OsuNnU9sAaDrxTZtM udTpKH77FdGKMMAIoqOUia3kbylAduT09CDFAAj9dbNu4CwNiuiYop4AmKQlHkGb mBXDeufZR5BIqnvwSVGG3cPQJKZUmaHv64dCXbR4FQTobVsrx5Q4W6ztTvcEO4yO +Ol1BtZNzkVH8BXRKa14Bz0JZQVCYYlkWxsl+Raas6Vu1im5j84Yvrcy6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGPNCAhvAXzNeZbWCgt//33Z79MMB8GA1UdIwQY MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3 LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGhap1Xs o+iBTNPDwdvEBwABaNzcxCvgTx39j592Z+34yG2SFimLk3Dw+RET72PH0BrEsYW5 1leTB0XuB0F891JZVz2wNiIj7GuPcCAh7xZ/H9KCHV4ILQWivV99VWe8qjtHJIFw D+bhpnboZ2TlkQjgpNvrxMhfUiR4kgpoNQ9YeEp7QQdC5yW/k5KDl0sKMGskO3wK jcLo3YELNHVRJuFjPWvA+bwpaPirYvmL0Z3t4VklTG/KCYkwNURuewBRNHYxKToh 46xXVz0JAQxcHchi+b9jD2Ed379HKpirA/EgP/q2oIdZsx8b+SXUTR+GHj5AXeiJ cn4oUbIBCpV5Ow== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:21 2025 by rpki-client