This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json) Hash identifier: YKi+6iRiM6NfLt7MxtDmZyOBJqOkl8PnaM/CoCeH+7I= Subject key identifier: 44:BC:5B:6B:31:39:17:90:A6:1E:E1:4D:A4:2A:71:D3:1B:36:AC:C7 Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e Certificate serial: 019B5ABF236190A9EEA466017DDF508458D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft Manifest number: 0AC4 Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: pfr1/o0VMtbYCXDJ2zyWhitSy4+fuL2fwrF/hO2E5Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:23:61:90:a9:ee:a4:66:01:7d:df:50:84:58:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=44bc5b6b31391790a61ee14da42a71d31b36acc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:9c:c5:33:78:e2:e0:9d:76:64:7f:18:2e: 2b:85:35:eb:b7:65:a5:82:f4:b3:90:03:ce:3e:90: c5:9c:b1:89:56:47:a5:3d:e8:2f:dc:43:09:7a:4e: 2e:14:dd:c7:cb:b1:de:bb:7f:bb:cd:a6:b5:dc:4d: 34:02:9a:e9:3a:02:5b:a4:e9:47:b7:ca:5e:92:af: ea:0a:7d:1e:d8:b0:60:50:da:16:3b:91:10:f6:53: 5d:16:b8:5c:79:2c:18:89:f2:f3:ab:53:24:54:a5: bc:c9:e8:f1:18:18:d8:60:39:fd:20:e2:de:03:63: 9f:c6:10:84:53:d9:72:62:82:82:58:f3:d3:2a:ba: d8:8e:51:47:73:bb:2e:ae:0a:de:28:25:7b:05:67: 11:4c:e5:89:23:a7:ef:58:5f:64:1b:e7:b6:51:f2: 2f:89:83:4a:f9:85:29:06:ce:e6:bd:48:4a:b2:36: f3:b6:17:35:87:ba:14:13:89:1a:72:da:ba:97:f1: 08:3a:a0:3a:b1:7b:8b:79:81:cf:94:58:6c:9a:4d: 91:9f:59:79:d2:56:44:bd:e4:3d:aa:db:a4:ae:5f: c1:a8:85:2d:74:5e:4e:0a:9c:85:16:92:28:72:0a: aa:b2:1d:e9:14:83:df:c2:f4:5c:7e:39:ee:15:c6: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BC:5B:6B:31:39:17:90:A6:1E:E1:4D:A4:2A:71:D3:1B:36:AC:C7 X509v3 Authority Key Identifier: keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:35:de:6f:41:86:ae:cd:14:a3:50:bc:2c:51:66:1e:4f:a6: b2:61:d2:45:bf:60:79:f5:32:2b:0d:66:27:3f:33:23:04:6a: 85:8a:7c:0c:4c:ce:56:27:db:3c:18:2e:46:f1:b4:52:06:69: a7:c2:10:1f:a8:98:93:3f:68:77:7a:16:85:06:a5:20:0e:5c: d8:e8:d2:cd:9c:5a:31:1a:54:82:d8:da:9d:ae:55:38:f5:34: 1d:e1:ad:2d:d2:13:85:bb:38:24:52:6f:80:43:b4:9d:d6:c5: d5:50:de:60:16:0f:46:30:71:fd:ad:34:31:6e:1b:68:56:57: dc:f1:cb:18:c1:e9:8c:07:25:00:f6:a9:68:d4:2f:db:88:c0: a3:e9:ad:58:36:aa:4a:fe:f1:62:56:29:60:07:52:2d:8f:09: 18:f1:32:af:87:40:91:18:11:ca:ea:47:0b:13:68:ba:0b:cf: fc:6b:a1:c7:b6:65:6b:be:84:26:b8:29:47:9c:56:dd:41:f1: b5:0c:20:35:fa:d7:eb:60:54:5e:b2:e3:80:1a:67:e1:bd:21: 0f:e6:f3:c4:85:67:95:82:63:1b:84:a8:e2:4a:22:40:30:ab: c2:b2:c4:6c:2d:0b:f2:3b:ae:3c:9d:f5:e5:6c:c4:92:12:ea: 46:66:e8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyNhkKnupGYBfd9QhFjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDM1MWE4NjdiOWRhZTlkYjY3NjQzMDZiZDczMjA1OWY2 ZDk5OWUwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD Eyg0NGJjNWI2YjMxMzkxNzkwYTYxZWUxNGRhNDJhNzFkMzFiMzZhY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8KcxTN44uCddmR/GC4rhTXrt2Wl gvSzkAPOPpDFnLGJVkelPegv3EMJek4uFN3Hy7Heu3+7zaa13E00AprpOgJbpOlH t8pekq/qCn0e2LBgUNoWO5EQ9lNdFrhceSwYifLzq1MkVKW8yejxGBjYYDn9IOLe A2OfxhCEU9lyYoKCWPPTKrrYjlFHc7surgreKCV7BWcRTOWJI6fvWF9kG+e2UfIv iYNK+YUpBs7mvUhKsjbzthc1h7oUE4kactq6l/EIOqA6sXuLeYHPlFhsmk2Rn1l5 0lZEveQ9qtukrl/BqIUtdF5OCpyFFpIocgqqsh3pFIPfwvRcfjnuFcYtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES8W2sxOReQph7hTaQqcdMbNqzHMB8GA1UdIwQY MBaAFCVDUahnudrp22dkMGvXMgWfbZmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgt MjA1Y2E2Njg4NTY0LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgtMjA1Y2E2Njg4NTY0 LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTXeb0GG rs0Uo1C8LFFmHk+msmHSRb9gefUyKw1mJz8zIwRqhYp8DEzOVifbPBguRvG0UgZp p8IQH6iYkz9od3oWhQalIA5c2OjSzZxaMRpUgtjana5VOPU0HeGtLdIThbs4JFJv gEO0ndbF1VDeYBYPRjBx/a00MW4baFZX3PHLGMHpjAclAPapaNQv24jAo+mtWDaq Sv7xYlYpYAdSLY8JGPEyr4dAkRgRyupHCxNougvP/Guhx7Zla76EJrgpR5xW3UHx tQwgNfrX62BUXrLjgBpn4b0hD+bzxIVnlYJjG4So4koiQDCrwrLEbC0L8juuPJ31 5WzEkhLqRmbooA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:58 2025 by rpki-client