This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json) Hash identifier: fPHRs7rPBzmCd+DMNIHPG3cCRkmEV+ZQCRa+OC9twIw= Subject key identifier: B8:69:9A:CE:83:CD:C1:67:08:15:D4:DB:52:F9:4D:9E:2B:43:BD:21 Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Certificate serial: 019B597770DE01E437571BF3F5F84C8881C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft Manifest number: 05FB Signing time: Fri 26 Dec 2025 07:02:38 +0000 Manifest this update: Fri 26 Dec 2025 07:02:38 +0000 Manifest next update: Sat 27 Dec 2025 07:02:38 +0000 Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: j4bPJXVvJX3oQNkItQunLQriHn7V9N9nPwBr1ibhg2I=) 2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:70:de:01:e4:37:57:1b:f3:f5:f8:4c:88:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Validity Not Before: Dec 26 07:02:38 2025 GMT Not After : Dec 27 07:02:38 2025 GMT Subject: CN=b8699ace83cdc1670815d4db52f94d9e2b43bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:ce:15:32:b9:91:b1:67:43:3a:f5:0a:9c: d5:ef:85:ec:2e:38:52:78:ac:b5:47:80:95:54:5a: d1:b9:c8:b3:16:9f:91:7e:8e:35:76:b5:21:1b:58: 2b:0c:10:8a:16:84:88:26:90:c4:88:3c:45:ff:ea: 5f:af:6d:65:b6:27:c3:2b:64:36:b6:02:75:47:33: 97:e5:9d:dc:8b:1f:e9:c2:13:16:ba:fd:99:27:8c: 15:c0:f2:2e:64:94:ad:6f:cb:34:ac:fd:45:23:eb: 1f:88:77:a5:ec:5a:0e:1f:e3:7c:5e:52:af:05:e7: 17:fd:1e:89:bc:bd:31:54:0e:3a:fb:59:de:5d:ce: 02:5c:7e:3f:3b:f1:4f:ae:aa:fa:78:2a:51:0a:ad: 1c:c3:14:3c:b5:99:48:d1:63:9c:5a:e0:58:ac:73: 09:dd:83:53:7c:b5:30:60:89:50:4b:17:ea:ba:46: b8:30:11:e6:59:4e:00:f9:f1:7e:8c:99:c5:64:ec: 1d:55:5d:56:95:9e:19:2c:f2:d7:09:ea:78:ce:37: e6:38:f7:d1:93:64:24:f0:d4:85:a2:fd:22:ee:12: 29:41:72:0f:1a:2b:f2:ef:62:51:31:b9:13:a8:70: 1b:9a:ba:36:d0:80:cd:5d:97:c1:0c:7e:1e:01:fe: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:69:9A:CE:83:CD:C1:67:08:15:D4:DB:52:F9:4D:9E:2B:43:BD:21 X509v3 Authority Key Identifier: keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:19:f7:41:12:d5:43:03:97:a5:32:69:4b:2b:43:63:af:c9: bf:55:61:5d:c5:c6:5e:d9:df:4f:e9:4d:03:9e:6c:e9:2b:50: 8c:1e:c2:3b:9c:78:74:5d:2b:2f:cb:b7:7c:f2:3c:38:19:42: 47:ab:e6:20:2b:07:8f:c7:bb:49:d8:0c:07:3a:42:d7:c4:8a: c3:db:b1:46:1f:26:a0:3b:38:27:94:58:f1:86:18:e2:69:32: f3:64:bb:d4:32:36:8f:a4:63:93:d0:e7:0a:90:ce:a8:4d:79: 7d:ce:5e:f8:3f:24:dd:26:0c:e5:ef:b9:bd:3c:ee:8c:43:51: 90:02:e2:87:85:72:8f:e7:25:de:b5:3d:47:8d:db:84:5b:67: b8:eb:ce:d5:f9:7a:b8:3f:2b:fe:0a:25:24:5a:5d:96:cc:95: fc:73:78:2d:28:f3:09:18:0c:a6:8b:47:f1:0f:cb:65:68:eb: 90:07:a9:3c:ee:ef:7c:16:66:a0:a7:73:5e:62:5c:d0:81:b1: eb:0f:33:7c:42:37:cc:6d:6c:09:58:d7:d5:e7:1d:0d:57:8f: c7:97:ab:3f:f9:5d:40:cd:73:16:3a:8a:7e:aa:05:65:3b:82: e7:5a:d7:bc:20:67:df:d9:4c:3d:0b:b7:e1:9e:4b:ec:10:6a: 29:38:13:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3DeAeQ3Vxvz9fhMiIHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx YWJhMTIwHhcNMjUxMjI2MDcwMjM4WhcNMjUxMjI3MDcwMjM4WjAzMTEwLwYDVQQD EyhiODY5OWFjZTgzY2RjMTY3MDgxNWQ0ZGI1MmY5NGQ5ZTJiNDNiZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BTOFTK5kbFnQzr1CpzV74XsLjhS eKy1R4CVVFrRucizFp+Rfo41drUhG1grDBCKFoSIJpDEiDxF/+pfr21ltifDK2Q2 tgJ1RzOX5Z3cix/pwhMWuv2ZJ4wVwPIuZJStb8s0rP1FI+sfiHel7FoOH+N8XlKv BecX/R6JvL0xVA46+1neXc4CXH4/O/FPrqr6eCpRCq0cwxQ8tZlI0WOcWuBYrHMJ 3YNTfLUwYIlQSxfquka4MBHmWU4A+fF+jJnFZOwdVV1WlZ4ZLPLXCep4zjfmOPfR k2Qk8NSFov0i7hIpQXIPGivy72JRMbkTqHAbmro20IDNXZfBDH4eAf6LNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhpms6DzcFnCBXU21L5TZ4rQ70hMB8GA1UdIwQY MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxn3QRLV QwOXpTJpSytDY6/Jv1VhXcXGXtnfT+lNA55s6StQjB7CO5x4dF0rL8u3fPI8OBlC R6vmICsHj8e7SdgMBzpC18SKw9uxRh8moDs4J5RY8YYY4mky82S71DI2j6Rjk9Dn CpDOqE15fc5e+D8k3SYM5e+5vTzujENRkALih4Vyj+cl3rU9R43bhFtnuOvO1fl6 uD8r/golJFpdlsyV/HN4LSjzCRgMpotH8Q/LZWjrkAepPO7vfBZmoKdzXmJc0IGx 6w8zfEI3zG1sCVjX1ecdDVePx5erP/ldQM1zFjqKfqoFZTuC51rXvCBn39lMPQu3 4Z5L7BBqKTgTTA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:54 2025 by rpki-client