This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json) Hash identifier: qserJcH1b6ShvCkGKOlkOXIBdXV2V4ARYb2LmaTyKFk= Subject key identifier: B4:98:E4:8A:5F:71:31:F4:D3:F1:1B:68:B7:AD:6C:6A:54:86:36:56 Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6 Certificate serial: 019B58D11048118F72E2CA4B2B8305CB8D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft Manifest number: 10C8 Signing time: Fri 26 Dec 2025 04:00:54 +0000 Manifest this update: Fri 26 Dec 2025 04:00:54 +0000 Manifest next update: Sat 27 Dec 2025 04:00:54 +0000 Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: 08ILAqL8b65CLP62878YCdtpIXtcVieFdvvGQcW/J60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:10:48:11:8f:72:e2:ca:4b:2b:83:05:cb:8d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6 Validity Not Before: Dec 26 04:00:54 2025 GMT Not After : Dec 27 04:00:54 2025 GMT Subject: CN=b498e48a5f7131f4d3f11b68b7ad6c6a54863656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:8e:2e:83:44:32:19:a5:43:8a:14:4e:86: 88:52:7a:72:f3:18:df:6f:66:23:25:95:26:d0:ee: 49:ff:c6:42:eb:b6:85:de:26:b4:8c:e0:70:06:6e: 14:da:ca:53:93:3c:47:21:32:a3:70:e7:0c:af:9d: 07:b0:cb:3b:5d:bb:4c:95:c0:c6:b2:ce:06:0a:16: e6:29:74:ae:7f:db:ef:89:d2:1a:71:e1:fa:b1:10: 25:d3:f0:07:0e:db:3d:38:06:63:0a:b6:bb:20:6e: 19:ba:1e:50:6a:f8:0b:f8:8d:b8:59:d1:e9:96:9f: 5e:57:9a:4f:1c:31:99:dc:63:53:85:4f:74:ed:01: 23:61:6b:bb:ac:95:f6:21:8e:20:00:48:bb:9e:a5: 65:a6:01:58:61:e9:45:e1:54:f0:7d:66:03:25:b1: 5d:4d:69:4f:d6:10:7a:89:21:6d:06:cf:5f:56:d5: c2:e5:61:f8:f9:78:67:a6:79:5e:2c:58:5d:4a:2e: 3e:7a:96:68:69:c0:fa:ef:0a:81:d9:85:41:cd:85: f3:0d:ae:b4:1d:e9:21:2b:fc:98:6c:79:61:d1:2d: 6e:94:94:b0:a3:b1:8f:a1:69:44:ec:c1:90:07:54: 5f:b9:6b:a0:58:b2:fb:41:e8:e6:33:aa:be:2f:98: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:98:E4:8A:5F:71:31:F4:D3:F1:1B:68:B7:AD:6C:6A:54:86:36:56 X509v3 Authority Key Identifier: keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:49:2c:45:5c:5b:5a:00:87:03:9a:11:f1:7f:74:1c:95:58: 1d:46:17:f5:e4:b6:c5:45:7d:66:88:37:9f:30:04:90:59:6e: d6:31:ae:25:84:d3:45:9b:1a:42:18:59:34:55:2d:98:3f:e8: db:5a:3a:8e:0d:5b:de:70:0d:34:3f:0a:bf:27:94:20:73:ba: b2:e7:1e:45:2d:e7:e5:5c:7c:79:bc:cb:5c:b8:8c:ee:4b:6b: 1f:a3:ad:00:ef:c9:93:b3:fc:86:1e:49:d6:6f:60:31:a4:ff: 03:50:b4:5f:2b:72:0a:ce:77:87:13:a4:73:80:31:05:fd:62: f2:d5:4e:57:5e:d0:92:af:75:ac:0c:17:b2:f6:f3:8b:e2:d4: eb:75:89:c9:bd:a2:32:6b:19:ce:71:87:c1:c8:b5:df:2d:18: 5e:0a:54:3f:5b:72:30:42:2a:24:fb:4d:22:a3:c0:d2:94:c7: 6e:13:c8:29:09:c4:5a:ba:f4:c8:79:a7:2d:1a:d2:5b:7f:d7: f1:38:d7:56:f0:76:9a:cf:c6:1e:7e:72:a1:9e:bd:04:2e:d6: 0e:ed:4e:92:da:71:7d:df:0e:13:74:6a:74:7a:99:28:aa:8e: c7:67:54:31:e7:a7:cc:61:c1:b5:09:c8:69:52:22:c3:f1:65: bd:34:cd:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0RBIEY9y4spLK4MFy41QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmU0ZTkwOWJlYjZjMmExZDJkNjY4MmIwOWM2ODJhMjQx YzRiYzYwHhcNMjUxMjI2MDQwMDU0WhcNMjUxMjI3MDQwMDU0WjAzMTEwLwYDVQQD EyhiNDk4ZTQ4YTVmNzEzMWY0ZDNmMTFiNjhiN2FkNmM2YTU0ODYzNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNeOLoNEMhmlQ4oUToaIUnpy8xjf b2YjJZUm0O5J/8ZC67aF3ia0jOBwBm4U2spTkzxHITKjcOcMr50HsMs7XbtMlcDG ss4GChbmKXSuf9vvidIaceH6sRAl0/AHDts9OAZjCra7IG4Zuh5QavgL+I24WdHp lp9eV5pPHDGZ3GNThU907QEjYWu7rJX2IY4gAEi7nqVlpgFYYelF4VTwfWYDJbFd TWlP1hB6iSFtBs9fVtXC5WH4+XhnpnleLFhdSi4+epZoacD67wqB2YVBzYXzDa60 HekhK/yYbHlh0S1ulJSwo7GPoWlE7MGQB1RfuWugWLL7QejmM6q+L5j5UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSY5IpfcTH00/EbaLetbGpUhjZWMB8GA1UdIwQY MBaAFCW+TpCb62wqHS1mgrCcaCokHEvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEt NzUzZGZjZGFhNmJmLzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEtNzUzZGZjZGFhNmJm LzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUksRVxb WgCHA5oR8X90HJVYHUYX9eS2xUV9Zog3nzAEkFlu1jGuJYTTRZsaQhhZNFUtmD/o 21o6jg1b3nANND8KvyeUIHO6suceRS3n5Vx8ebzLXLiM7ktrH6OtAO/Jk7P8hh5J 1m9gMaT/A1C0XytyCs53hxOkc4AxBf1i8tVOV17Qkq91rAwXsvbzi+LU63WJyb2i MmsZznGHwci13y0YXgpUP1tyMEIqJPtNIqPA0pTHbhPIKQnEWrr0yHmnLRrSW3/X 8TjXVvB2ms/GHn5yoZ69BC7WDu1Oktpxfd8OE3RqdHqZKKqOx2dUMeenzGHBtQnI aVIiw/FlvTTNTA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client