This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json) Hash identifier: rC+vvqcqRTA2NI0C5IMxXWvcBAxr8HxePZijni3ZI+Y= Subject key identifier: 75:BB:A0:73:A9:B5:54:CD:A5:94:B0:54:F1:24:25:1B:6C:88:27:7C Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Certificate serial: 019B0EC9955D987396313E3C2CF6F7B20F44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 19:00:50 +0000 Manifest this update: Thu 11 Dec 2025 19:00:50 +0000 Manifest next update: Fri 12 Dec 2025 19:00:50 +0000 Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: 3cXxlUcMpyFAE5benS8Yviq0UpWlqbKSApylZFCvGPA=) 2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:95:5d:98:73:96:31:3e:3c:2c:f6:f7:b2:0f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d Validity Not Before: Dec 11 19:00:50 2025 GMT Not After : Dec 12 19:00:50 2025 GMT Subject: CN=75bba073a9b554cda594b054f124251b6c88277c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f7:4c:b2:04:62:ef:89:19:60:86:7b:22:0a: 21:e0:0f:9d:76:4c:95:66:3f:d9:af:51:f6:94:bc: 65:f2:ce:a4:d1:46:13:44:88:20:bf:ae:8d:a7:97: 2c:ad:79:02:03:d9:c4:14:1a:38:ab:93:7c:2e:fa: 87:0e:2b:3f:ab:e1:3b:c4:09:63:64:24:5b:25:af: ac:6d:24:e8:87:10:05:d5:f0:07:44:46:a9:71:81: 8d:65:d8:64:8b:12:97:b6:43:59:3c:00:02:bb:30: 7c:cb:39:4b:6e:72:d8:0a:cf:63:f9:38:46:a2:01: 24:6e:d8:46:74:c1:ad:11:e2:b7:bc:85:00:40:8a: 63:f5:7a:78:81:1f:1d:07:a2:ff:73:00:4c:85:66: 0b:b6:56:02:3e:a9:28:59:60:63:1b:12:e9:0d:6e: 41:1d:7b:1c:53:38:85:6e:41:0e:1f:20:be:8e:04: 0a:e3:a0:13:d6:ec:98:b9:ce:41:e3:5b:7b:94:81: 4b:79:49:32:04:b1:7c:7e:7d:fc:67:83:b8:c8:41: c2:85:61:81:d3:9f:12:b7:07:c9:64:b7:1f:eb:c1: 3f:58:54:1b:96:d3:19:2b:18:fa:23:97:df:8d:9d: d2:55:07:ad:df:e0:a5:2e:37:d4:7f:ff:1e:33:a0: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:A0:73:A9:B5:54:CD:A5:94:B0:54:F1:24:25:1B:6C:88:27:7C X509v3 Authority Key Identifier: keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:86:d6:45:81:e4:53:e1:5a:58:70:e6:82:4f:ec:e5:4b:96: 3d:42:33:b0:50:fd:f9:a7:bb:c8:40:dc:6c:28:24:4f:23:22: 43:1e:5d:3f:71:b0:a3:cc:56:62:c2:5e:06:57:89:59:4e:cd: f1:be:3e:d6:4d:83:16:ba:1f:30:d5:ea:07:60:f1:c7:3f:70: 2e:f3:d3:a3:11:2e:54:4e:82:c7:9c:c7:f5:50:8b:54:f0:02: 98:0a:28:01:15:c0:f7:8a:6c:d1:58:94:75:18:d1:4c:91:04: ea:e6:a3:42:f3:cf:c7:8e:8c:00:69:de:43:48:39:f1:60:a7: 62:f7:27:60:b7:6d:93:13:b6:bd:16:6a:60:fe:0e:25:5f:1b: 08:fa:da:a5:8e:4b:18:68:b6:2c:0b:6e:df:51:1c:df:66:b1: 18:16:30:f5:33:67:78:c2:ba:a4:24:8c:9f:ae:4d:02:77:bd: 07:dc:d9:8a:89:0f:31:bf:04:08:1a:c9:45:28:03:ea:a6:87: 22:d0:d1:22:20:3a:2e:6b:03:15:65:94:b2:a7:49:18:0b:2e: 65:bb:97:78:89:7a:0c:e3:74:52:55:c9:00:6e:7a:f5:73:3c: 63:84:a1:cf:ce:11:67:77:de:69:26:db:b8:5a:3a:14:72:d7: 88:9d:95:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZVdmHOWMT48LPb3sg9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh ZTA2MGQwHhcNMjUxMjExMTkwMDUwWhcNMjUxMjEyMTkwMDUwWjAzMTEwLwYDVQQD Eyg3NWJiYTA3M2E5YjU1NGNkYTU5NGIwNTRmMTI0MjUxYjZjODgyNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfdMsgRi74kZYIZ7Igoh4A+ddkyV Zj/Zr1H2lLxl8s6k0UYTRIggv66Np5csrXkCA9nEFBo4q5N8LvqHDis/q+E7xAlj ZCRbJa+sbSTohxAF1fAHREapcYGNZdhkixKXtkNZPAACuzB8yzlLbnLYCs9j+ThG ogEkbthGdMGtEeK3vIUAQIpj9Xp4gR8dB6L/cwBMhWYLtlYCPqkoWWBjGxLpDW5B HXscUziFbkEOHyC+jgQK46AT1uyYuc5B41t7lIFLeUkyBLF8fn38Z4O4yEHChWGB 058StwfJZLcf68E/WFQbltMZKxj6I5ffjZ3SVQet3+ClLjfUf/8eM6C/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW7oHOptVTNpZSwVPEkJRtsiCd8MB8GA1UdIwQY MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFobWRYHk U+FaWHDmgk/s5UuWPUIzsFD9+ae7yEDcbCgkTyMiQx5dP3Gwo8xWYsJeBleJWU7N 8b4+1k2DFrofMNXqB2Dxxz9wLvPToxEuVE6Cx5zH9VCLVPACmAooARXA94ps0ViU dRjRTJEE6uajQvPPx46MAGneQ0g58WCnYvcnYLdtkxO2vRZqYP4OJV8bCPrapY5L GGi2LAtu31Ec32axGBYw9TNneMK6pCSMn65NAne9B9zZiokPMb8ECBrJRSgD6qaH ItDRIiA6LmsDFWWUsqdJGAsuZbuXeIl6DON0UlXJAG569XM8Y4Shz84RZ3feaSbb uFo6FHLXiJ2VhA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:47 2025 by rpki-client