This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json) Hash identifier: rolJTBOjcfCw276RFBds9BFoz3R/z32Mw1ILBDwNLi0= Subject key identifier: 03:77:D4:F1:17:6B:3C:1E:6B:75:56:54:EB:52:92:69:B6:02:0A:A2 Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Certificate serial: 019B2BF86CCDE2EF3E6F09C84BCCFEE84A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft Manifest number: 14C5 Signing time: Wed 17 Dec 2025 11:00:59 +0000 Manifest this update: Wed 17 Dec 2025 11:00:59 +0000 Manifest next update: Thu 18 Dec 2025 11:00:59 +0000 Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: u7Wj/+R5ATl6TjjCAq8cM/YUSomf1wqgz1J5Rb2mLJI=) 2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:6c:cd:e2:ef:3e:6f:09:c8:4b:cc:fe:e8:4a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Validity Not Before: Dec 17 11:00:59 2025 GMT Not After : Dec 18 11:00:59 2025 GMT Subject: CN=0377d4f1176b3c1e6b755654eb529269b6020aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:2d:91:50:86:e2:da:8b:70:db:08:0d:b4: 81:9d:7f:0a:35:c8:63:6a:5e:9b:6d:bc:9d:1b:09: b2:a1:c5:99:14:5d:47:64:d6:71:a9:be:88:eb:42: 68:5d:ab:df:86:92:21:dc:f0:1d:d7:04:94:82:84: 20:5c:f2:64:52:73:41:ea:63:fb:f1:8c:04:2e:2c: 5d:88:50:c5:0e:e3:11:c0:68:10:00:fb:04:55:cd: 54:8e:c6:af:db:94:80:ba:53:53:8e:9a:43:06:94: 1d:e8:8a:7d:22:ce:f1:e4:ee:a3:ad:be:1e:26:8f: 5b:ea:a0:ab:10:23:bb:25:00:52:5f:f7:64:11:f8: 1c:22:ab:d8:ef:84:ee:24:0f:29:87:79:ef:92:eb: 59:6c:4a:40:d1:c4:e8:06:67:f6:36:d2:6d:51:8b: 3c:c2:63:a9:e8:d6:a1:4a:1a:2f:3d:39:80:cb:ff: e9:72:95:c6:eb:dd:78:6b:c5:0d:cb:dd:8d:9e:35: 4e:20:f8:6a:c0:32:3b:20:b7:05:cb:8d:47:1a:f3: 68:30:82:af:8e:d0:e8:3d:e6:1b:35:80:e6:2e:97: ad:fe:44:e0:84:94:31:de:82:86:ed:8c:4c:da:55: 75:1c:97:7d:e4:82:7b:10:40:a7:2b:cf:a4:ce:8b: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:D4:F1:17:6B:3C:1E:6B:75:56:54:EB:52:92:69:B6:02:0A:A2 X509v3 Authority Key Identifier: keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:42:fa:e9:ed:68:65:e0:d4:c4:47:af:2a:0b:c4:b0:a4:b3: 93:4b:d5:aa:01:78:cf:65:88:2a:f4:6a:ab:84:03:26:45:48: 2f:db:9c:16:d0:75:b2:11:47:f4:a2:ff:7b:64:ec:0b:2e:d0: 6c:b7:b4:72:af:9c:18:cf:02:c3:32:a3:08:f2:06:be:70:cf: 08:93:e2:9a:a9:22:8b:3c:fe:c8:58:83:73:b9:88:41:07:73: 1c:a6:9f:4c:22:5c:a4:e0:9d:f6:84:0e:1a:fb:2e:d6:21:31: 1e:65:dd:30:bb:f7:ed:91:9d:14:b8:eb:b6:c4:44:88:4b:fa: a1:ed:76:1b:53:e2:36:27:50:80:4b:ca:0e:b3:24:cc:5a:d4: 0f:f7:c6:cb:86:b1:ed:73:75:af:a9:58:71:97:b4:ec:0d:88: 0b:e3:7a:1f:56:1f:dc:37:07:56:21:04:be:da:8b:46:84:4c: dc:fc:75:aa:f4:35:ae:d5:65:37:6c:1c:77:b6:86:f2:b9:2a: ef:55:bf:85:7b:f3:3c:46:b7:c2:d3:c0:61:31:dc:7d:9f:6a: 58:33:e7:bd:83:d0:60:e7:d3:70:78:b1:44:9b:79:00:70:7f: 58:1a:86:c4:1c:6d:38:cc:07:68:d1:f5:9f:6a:a5:72:c8:31: 4c:c5:78:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+GzN4u8+bwnIS8z+6EonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTdlZTViZWE5NWI2ZmNhOTJkN2M4MDA1YjI1MzFkMGQ1 MTA0NjgwHhcNMjUxMjE3MTEwMDU5WhcNMjUxMjE4MTEwMDU5WjAzMTEwLwYDVQQD EygwMzc3ZDRmMTE3NmIzYzFlNmI3NTU2NTRlYjUyOTI2OWI2MDIwYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDktkVCG4tqLcNsIDbSBnX8KNchj al6bbbydGwmyocWZFF1HZNZxqb6I60JoXavfhpIh3PAd1wSUgoQgXPJkUnNB6mP7 8YwELixdiFDFDuMRwGgQAPsEVc1Ujsav25SAulNTjppDBpQd6Ip9Is7x5O6jrb4e Jo9b6qCrECO7JQBSX/dkEfgcIqvY74TuJA8ph3nvkutZbEpA0cToBmf2NtJtUYs8 wmOp6NahShovPTmAy//pcpXG6914a8UNy92NnjVOIPhqwDI7ILcFy41HGvNoMIKv jtDoPeYbNYDmLpet/kTghJQx3oKG7YxM2lV1HJd95IJ7EECnK8+kzouwxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN31PEXazwea3VWVOtSkmm2AgqiMB8GA1UdIwQY MBaAFCaX7lvqlbb8qS18gAWyUx0NUQRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt ODdmMTI5ZGMwZmYyLzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy LzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0L66e1o ZeDUxEevKgvEsKSzk0vVqgF4z2WIKvRqq4QDJkVIL9ucFtB1shFH9KL/e2TsCy7Q bLe0cq+cGM8CwzKjCPIGvnDPCJPimqkiizz+yFiDc7mIQQdzHKafTCJcpOCd9oQO Gvsu1iExHmXdMLv37ZGdFLjrtsREiEv6oe12G1PiNidQgEvKDrMkzFrUD/fGy4ax 7XN1r6lYcZe07A2IC+N6H1Yf3DcHViEEvtqLRoRM3Px1qvQ1rtVlN2wcd7aG8rkq 71W/hXvzPEa3wtPAYTHcfZ9qWDPnvYPQYOfTcHixRJt5AHB/WBqGxBxtOMwHaNH1 n2qlcsgxTMV44g== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:42 2025 by rpki-client