This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json) Hash identifier: f7goPquetGjwU0+FEAv3ZiEtmYF6WOwBUKb2Uo4JJUM= Subject key identifier: AA:2E:97:0A:F2:9A:87:6B:35:45:79:65:C8:8D:95:9B:19:2F:8D:4A Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Certificate serial: 019B2061EFA9138E4FC84C2D58B1838EC5C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft Manifest number: 14BF Signing time: Mon 15 Dec 2025 05:00:47 +0000 Manifest this update: Mon 15 Dec 2025 05:00:47 +0000 Manifest next update: Tue 16 Dec 2025 05:00:47 +0000 Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: E4SvQj1dXq6YlVoNqcoyhRCcp0OrGcyJmDe2KUjVg2Y=) 2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:ef:a9:13:8e:4f:c8:4c:2d:58:b1:83:8e:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Validity Not Before: Dec 15 05:00:47 2025 GMT Not After : Dec 16 05:00:47 2025 GMT Subject: CN=aa2e970af29a876b35457965c88d959b192f8d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:10:9f:53:1b:54:2e:e8:ce:d5:4e:f1:65: 73:f2:73:cb:a0:4e:c6:eb:03:11:cb:c3:da:49:3f: 56:b3:d6:21:7e:b4:73:b7:af:7a:57:c8:00:ea:0d: f3:b4:6b:44:4a:53:43:32:2d:71:8f:1c:f3:49:41: 6f:dc:15:e7:7d:d1:74:a1:79:b0:79:6a:13:56:01: 98:71:4d:66:64:73:d7:4c:3b:38:38:6f:55:d4:60: ca:4f:f5:da:59:59:9a:6d:51:11:5b:b4:00:92:f7: 10:9c:82:f4:52:d8:e7:6a:34:32:f6:16:4d:d1:f7: 48:71:25:87:ac:60:46:3e:0c:6d:99:b0:37:45:c2: aa:80:1f:f7:9a:b4:47:7e:6b:a8:2e:88:93:37:43: 63:ea:3c:4e:ba:c9:ed:68:2b:a8:d9:d0:7e:16:6b: f1:dd:2d:06:4f:43:1d:6e:8c:53:c5:d7:28:34:af: 28:95:5f:7a:b1:27:33:ec:9b:68:43:b7:9e:61:84: 8b:27:90:8b:f8:51:93:b0:57:74:63:07:ee:66:83: 2e:14:1d:84:47:3a:3d:e9:25:b5:f0:52:d2:e7:a0: 76:e3:f5:a7:be:a2:90:ae:94:f7:72:38:b7:ad:74: b1:1c:96:17:f3:0d:5c:ce:1d:c0:71:67:0b:05:56: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:97:0A:F2:9A:87:6B:35:45:79:65:C8:8D:95:9B:19:2F:8D:4A X509v3 Authority Key Identifier: keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f2:dc:74:b9:d8:59:dd:0f:f3:9e:f9:3f:24:84:f9:a2:9d: b4:3a:8b:58:2d:71:e9:ff:81:62:ad:06:04:b5:c3:f0:15:71: f4:69:ef:46:87:85:72:53:2d:ff:d5:f3:22:90:30:e8:0f:e4: 06:c0:fb:63:ec:6f:f9:a8:d2:e1:0a:8b:73:5e:cd:21:af:4c: fc:6a:f6:7b:50:d3:1f:f8:73:8b:29:dd:d7:d1:48:8e:25:5b: 72:c4:33:84:51:12:93:3c:01:1b:cc:5e:c8:c3:21:03:f7:f4: 56:2e:f0:4a:92:2a:c6:6a:f0:74:39:17:7b:17:65:c2:3b:e9: 85:56:5e:b5:62:77:4f:54:b0:3c:84:06:7d:da:73:e8:dd:b5: 34:31:51:0c:80:3c:2d:a2:9c:db:70:3a:39:a1:70:4c:37:ca: 5a:c0:3c:b4:60:ea:dc:18:04:21:00:a9:b2:c0:f7:05:a2:08: b7:8e:90:c7:49:a1:31:ae:3a:ff:c4:12:b8:94:58:98:41:80: 44:87:75:a3:01:15:ae:d0:a8:15:9f:da:fd:46:ba:72:54:67: 3b:75:c5:64:93:f2:a8:03:7e:98:d6:8d:50:0a:c1:84:a0:4f: fb:7e:d8:0c:9d:3f:70:4d:79:7f:1c:88:10:21:5b:90:eb:3a: e4:2a:75:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYe+pE45PyEwtWLGDjsXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTdlZTViZWE5NWI2ZmNhOTJkN2M4MDA1YjI1MzFkMGQ1 MTA0NjgwHhcNMjUxMjE1MDUwMDQ3WhcNMjUxMjE2MDUwMDQ3WjAzMTEwLwYDVQQD EyhhYTJlOTcwYWYyOWE4NzZiMzU0NTc5NjVjODhkOTU5YjE5MmY4ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGkQn1MbVC7oztVO8WVz8nPLoE7G 6wMRy8PaST9Ws9YhfrRzt696V8gA6g3ztGtESlNDMi1xjxzzSUFv3BXnfdF0oXmw eWoTVgGYcU1mZHPXTDs4OG9V1GDKT/XaWVmabVERW7QAkvcQnIL0UtjnajQy9hZN 0fdIcSWHrGBGPgxtmbA3RcKqgB/3mrRHfmuoLoiTN0Nj6jxOusntaCuo2dB+Fmvx 3S0GT0MdboxTxdcoNK8olV96sScz7JtoQ7eeYYSLJ5CL+FGTsFd0YwfuZoMuFB2E Rzo96SW18FLS56B24/WnvqKQrpT3cji3rXSxHJYX8w1czh3AcWcLBVbXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoulwrymodrNUV5ZciNlZsZL41KMB8GA1UdIwQY MBaAFCaX7lvqlbb8qS18gAWyUx0NUQRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt ODdmMTI5ZGMwZmYyLzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy LzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfLcdLnY Wd0P8575PySE+aKdtDqLWC1x6f+BYq0GBLXD8BVx9GnvRoeFclMt/9XzIpAw6A/k BsD7Y+xv+ajS4QqLc17NIa9M/Gr2e1DTH/hziynd19FIjiVbcsQzhFESkzwBG8xe yMMhA/f0Vi7wSpIqxmrwdDkXexdlwjvphVZetWJ3T1SwPIQGfdpz6N21NDFRDIA8 LaKc23A6OaFwTDfKWsA8tGDq3BgEIQCpssD3BaIIt46Qx0mhMa46/8QSuJRYmEGA RId1owEVrtCoFZ/a/Ua6clRnO3XFZJPyqAN+mNaNUArBhKBP+37YDJ0/cE15fxyI ECFbkOs65Cp1jQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:21 2025 by rpki-client