This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json) Hash identifier: W7d2/Bw/lkySiGQxuYx+gNHtFODMHMLnJua5TY47Sbk= Subject key identifier: CA:CD:71:A0:B4:78:84:CD:E7:94:2F:99:44:FF:B4:4C:59:30:4D:27 Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Certificate serial: 019B59E39A330FEC326E26E7E70FFA2072A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft Manifest number: 16E9 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: jq2I4k8wG6hpgTmJI6DfPKkpzcS35IujOWxztom87KY=) 2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9a:33:0f:ec:32:6e:26:e7:e7:0f:fa:20:72:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=cacd71a0b47884cde7942f9944ffb44c59304d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:21:10:e2:11:f5:59:dc:23:0f:63:14:e1: 46:ce:d7:3f:0c:fb:66:f5:76:ef:0d:58:f7:bd:cd: d6:7b:e1:5e:23:49:3b:d2:59:a6:a5:7d:82:1d:95: d6:6b:3c:d6:20:ef:c5:00:29:bc:d7:08:15:f2:c5: c8:88:45:aa:d1:04:7c:31:0b:8e:c9:25:da:13:d3: 22:70:b4:80:63:ef:e7:64:dd:66:6f:99:8d:87:be: 19:e6:5b:12:7b:49:f3:e7:6d:d4:ef:37:d0:04:fb: 11:81:1a:54:80:95:cb:e6:1e:ab:fc:b0:41:a2:39: 63:0e:05:1b:0a:d0:f3:e0:28:61:c9:ad:2f:99:13: 0b:b1:a4:4d:43:a1:fa:02:4e:7a:02:38:98:4b:13: 13:b9:f6:7e:39:0d:8c:d8:68:1d:ca:3a:29:c4:af: 07:20:76:b3:7e:ef:f7:85:93:ba:81:e8:24:82:c6: 46:a0:3a:43:95:a0:2a:44:ad:33:5e:30:ff:ed:4d: f7:9a:06:ae:61:a1:1d:6c:f3:61:46:fa:18:6d:29: ce:41:6c:f9:99:a7:15:c6:66:8f:41:1b:33:dc:2e: 52:99:d4:a9:6a:af:58:f1:72:a6:da:0e:d4:1e:fa: 13:18:68:f4:5f:d1:a5:fd:29:3a:c1:fa:9a:82:65: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:71:A0:B4:78:84:CD:E7:94:2F:99:44:FF:B4:4C:59:30:4D:27 X509v3 Authority Key Identifier: keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:68:3e:4f:b9:25:35:34:c3:b3:ed:95:57:1c:41:79:c5: 35:1d:89:94:3d:c3:77:13:56:0c:3d:37:e1:06:73:24:cf:d2: 29:53:64:bf:ff:7a:93:7f:b4:7c:56:00:6d:54:ca:54:a0:3c: df:e0:17:86:6c:2f:c5:69:b5:22:e6:af:96:85:b8:f5:94:10: 36:33:75:6b:20:d8:28:43:04:b8:5b:5d:99:81:88:07:68:1e: a0:33:6a:f2:89:32:eb:b9:76:2f:53:72:cc:69:05:94:0f:2e: 07:8a:16:ce:15:e4:1d:08:fe:1f:d5:63:89:b3:50:53:b7:9d: 02:82:ae:c6:d0:09:05:fd:f5:89:73:c7:f2:c2:34:98:fd:6f: ed:e6:bb:64:b4:b8:a2:30:11:e9:82:8f:43:09:83:ec:2f:5a: b9:04:fe:8b:38:30:d3:9c:0b:e9:9e:de:93:9c:c8:9b:6a:84: ff:0e:92:eb:9f:5e:fb:c8:9a:86:1a:b4:0a:8d:54:25:1c:a6: 04:e5:03:8f:6f:29:a8:53:b0:8c:82:17:6b:f2:4e:02:b8:f0: 75:b2:a6:be:d3:4b:dc:33:68:19:8a:8f:5c:75:26:2d:6e:10: 76:6c:70:c2:c9:b6:7a:c4:5b:eb:0c:8e:ea:1e:14:40:ed:c1: a0:ff:93:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45ozD+wybibn5w/6IHKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi YzEwZjcwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD EyhjYWNkNzFhMGI0Nzg4NGNkZTc5NDJmOTk0NGZmYjQ0YzU5MzA0ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCshEOIR9VncIw9jFOFGztc/DPtm 9XbvDVj3vc3We+FeI0k70lmmpX2CHZXWazzWIO/FACm81wgV8sXIiEWq0QR8MQuO ySXaE9MicLSAY+/nZN1mb5mNh74Z5lsSe0nz523U7zfQBPsRgRpUgJXL5h6r/LBB ojljDgUbCtDz4Chhya0vmRMLsaRNQ6H6Ak56AjiYSxMTufZ+OQ2M2GgdyjopxK8H IHazfu/3hZO6gegkgsZGoDpDlaAqRK0zXjD/7U33mgauYaEdbPNhRvoYbSnOQWz5 macVxmaPQRsz3C5SmdSpaq9Y8XKm2g7UHvoTGGj0X9Gl/Sk6wfqagmUldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrNcaC0eITN55QvmUT/tExZME0nMB8GA1UdIwQY MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVpoPk+5 JTU0w7PtlVccQXnFNR2JlD3DdxNWDD034QZzJM/SKVNkv/96k3+0fFYAbVTKVKA8 3+AXhmwvxWm1IuavloW49ZQQNjN1ayDYKEMEuFtdmYGIB2geoDNq8oky67l2L1Ny zGkFlA8uB4oWzhXkHQj+H9VjibNQU7edAoKuxtAJBf31iXPH8sI0mP1v7ea7ZLS4 ojAR6YKPQwmD7C9auQT+izgw05wL6Z7ek5zIm2qE/w6S659e+8iahhq0Co1UJRym BOUDj28pqFOwjIIXa/JOArjwdbKmvtNL3DNoGYqPXHUmLW4Qdmxwwsm2esRb6wyO 6h4UQO3BoP+Tdw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:09 2025 by rpki-client