This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json) Hash identifier: 5tVjZEnqxkDGkX8NHe+pfcF603qZLpsweaBdSYWdmk0= Subject key identifier: DF:56:16:16:1C:9B:9D:A8:3E:C3:25:ED:A4:63:08:B7:B5:77:61:0D Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019B37FC2977F246B3289AA2110C45C143FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft Manifest number: 14E1 Signing time: Fri 19 Dec 2025 19:00:31 +0000 Manifest this update: Fri 19 Dec 2025 19:00:31 +0000 Manifest next update: Sat 20 Dec 2025 19:00:31 +0000 Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: EvlyX6exb7g8sOXhUsu3TFreR5QDJjkN1XetgR/RNqA=) 2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=) 3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:29:77:f2:46:b3:28:9a:a2:11:0c:45:c1:43:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Dec 19 19:00:31 2025 GMT Not After : Dec 20 19:00:31 2025 GMT Subject: CN=df5616161c9b9da83ec325eda46308b7b577610d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:96:f3:57:ff:bc:46:84:00:96:3d:9b:33: e3:ba:60:f1:87:36:e5:af:59:f8:47:b6:17:ef:99: 64:79:dc:3e:33:97:0a:93:30:fd:54:39:d5:ea:a6: eb:8c:b1:99:ae:e1:e7:80:82:94:09:e6:79:f7:8f: 6c:14:cd:09:0b:66:29:66:02:41:0e:2a:50:48:96: 44:3c:49:ac:db:22:10:be:b8:47:8e:20:99:4f:a4: 09:dc:b4:06:b5:fb:1e:4a:93:60:fb:57:b1:b9:d9: 67:af:b8:14:69:c2:72:de:df:f2:43:1f:32:3f:28: 53:de:b3:05:66:0c:c7:ba:80:f4:41:9a:25:08:7d: 9d:a1:ef:ac:00:c9:b4:02:34:7b:67:69:5e:e2:ec: 2f:45:43:9d:d7:d7:f6:47:cc:3d:22:b3:00:51:84: 86:63:1b:9e:6f:85:68:ac:bf:b7:5a:af:2b:62:ef: da:8f:78:f0:c7:77:86:03:49:43:b3:80:1e:41:51: dc:bb:af:e5:37:9b:40:d4:a7:fb:4c:31:f6:c6:3e: e3:96:c3:66:48:26:62:ba:c1:2a:3b:39:ab:24:04: 12:8c:86:9e:83:fd:c8:88:1f:35:94:11:0b:60:60: eb:16:99:00:50:46:45:12:6b:62:5d:ec:3c:55:09: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:56:16:16:1C:9B:9D:A8:3E:C3:25:ED:A4:63:08:B7:B5:77:61:0D X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:03:bc:cf:31:a0:84:19:55:8d:0c:30:14:af:fd:53:11: e8:9d:8f:84:e4:77:b2:91:3b:85:e1:54:29:3a:f4:9b:7a:e0: 09:f6:70:e7:b2:68:68:e4:18:f2:2d:71:9a:9f:a0:08:23:11: 7e:06:e7:eb:9b:3d:03:09:75:13:2e:fd:b8:81:6e:f1:e6:f6: ac:d6:8b:26:0d:5b:02:a0:b8:87:2f:46:8c:03:db:21:0f:14: fa:11:13:a4:17:05:30:10:44:75:c2:62:a0:8c:1b:0c:bb:6a: b1:4e:a6:09:c5:66:5c:c2:d3:25:95:ac:d8:84:59:fc:34:21: fb:ae:2f:3d:1b:34:f1:39:49:16:97:12:dc:96:86:6b:54:3f: 74:e7:52:a2:5a:7e:3b:20:12:a5:cd:70:36:c4:73:06:cd:ab: 4a:34:d1:16:ec:7e:a6:88:28:fb:67:95:81:23:f8:d0:fd:ea: 47:1e:a8:dd:a3:d6:e7:1a:15:74:47:8d:e4:8e:16:ad:db:98: f8:eb:9c:e8:a3:e1:55:5f:ee:8b:7b:4f:ba:fc:28:db:e4:d6: 76:23:81:8a:35:d7:71:da:47:df:bb:0f:46:5d:5a:69:7d:b5: 51:34:76:17:ec:4f:1a:4a:d2:b3:f8:1e:9a:46:84:ed:9c:56: 08:ef:18:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Cl38kazKJqiEQxFwUP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjUxMjE5MTkwMDMxWhcNMjUxMjIwMTkwMDMxWjAzMTEwLwYDVQQD EyhkZjU2MTYxNjFjOWI5ZGE4M2VjMzI1ZWRhNDYzMDhiN2I1Nzc2MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs+W81f/vEaEAJY9mzPjumDxhzbl r1n4R7YX75lkedw+M5cKkzD9VDnV6qbrjLGZruHngIKUCeZ5949sFM0JC2YpZgJB DipQSJZEPEms2yIQvrhHjiCZT6QJ3LQGtfseSpNg+1exudlnr7gUacJy3t/yQx8y PyhT3rMFZgzHuoD0QZolCH2doe+sAMm0AjR7Z2le4uwvRUOd19f2R8w9IrMAUYSG Yxueb4VorL+3Wq8rYu/aj3jwx3eGA0lDs4AeQVHcu6/lN5tA1Kf7TDH2xj7jlsNm SCZiusEqOzmrJAQSjIaeg/3IiB81lBELYGDrFpkAUEZFEmtiXew8VQkJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9WFhYcm52oPsMl7aRjCLe1d2ENMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXukDvM8x oIQZVY0MMBSv/VMR6J2PhOR3spE7heFUKTr0m3rgCfZw57JoaOQY8i1xmp+gCCMR fgbn65s9Awl1Ey79uIFu8eb2rNaLJg1bAqC4hy9GjAPbIQ8U+hETpBcFMBBEdcJi oIwbDLtqsU6mCcVmXMLTJZWs2IRZ/DQh+64vPRs08TlJFpcS3JaGa1Q/dOdSolp+ OyASpc1wNsRzBs2rSjTRFux+pogo+2eVgSP40P3qRx6o3aPW5xoVdEeN5I4WrduY +Ouc6KPhVV/ui3tPuvwo2+TWdiOBijXXcdpH37sPRl1aaX21UTR2F+xPGkrSs/ge mkaE7ZxWCO8YbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:49:33 2025 by rpki-client