This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json) Hash identifier: 4yTVQW8FQz9k0ApDVZPHJzyRUPfsgoxV00VkJZZ8yzM= Subject key identifier: 5A:B6:BA:C1:2F:4C:D2:9E:DE:D2:E4:CF:4E:95:D2:08:27:29:72:BA Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019AF68A3E2CE0EFFEB9CA1D23E2A2E136AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft Manifest number: 105A Signing time: Sun 07 Dec 2025 02:00:46 +0000 Manifest this update: Sun 07 Dec 2025 02:00:46 +0000 Manifest next update: Mon 08 Dec 2025 02:00:46 +0000 Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: GPtQ1S0W4YzS5179V7pdB8ag7EVcV2kMec16roj1V0A=) 2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:3e:2c:e0:ef:fe:b9:ca:1d:23:e2:a2:e1:36:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Dec 7 02:00:46 2025 GMT Not After : Dec 8 02:00:46 2025 GMT Subject: CN=5ab6bac12f4cd29eded2e4cf4e95d208272972ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:2f:e2:b7:6b:f0:fe:b1:91:3a:02:b2:b8: 73:88:88:73:21:85:fb:59:2f:33:31:b7:38:55:2d: 62:3f:c1:0e:0e:de:81:c5:1c:77:a3:97:01:ea:8e: b7:1a:8c:02:8a:c2:f1:e5:cf:ec:3c:ac:39:84:80: 4d:79:27:9e:54:e6:d5:56:0f:4f:17:49:65:65:5a: d0:3a:42:e5:58:52:26:91:6f:c4:13:ab:08:19:1a: 13:c8:9f:83:9a:b4:89:16:8d:1c:22:e9:03:fd:c5: e4:36:eb:b8:57:e3:ab:8d:6c:6e:65:3c:55:e6:62: b1:ad:b0:00:80:0d:09:3d:f7:53:3e:19:fc:ef:8c: df:d3:85:aa:91:ce:78:70:18:de:ca:87:64:6f:69: 51:e2:7f:c0:88:c6:e7:cf:71:d9:fc:76:39:2c:76: fa:cc:63:74:ff:5d:63:7e:e9:b2:17:3a:61:e6:1f: 6b:7d:52:ec:0b:0a:2a:4f:95:84:7e:d5:3b:be:58: 5f:73:60:d8:e3:f2:3b:77:c2:22:dc:03:c4:8d:de: a3:56:4f:3c:d7:d6:0b:45:f9:46:40:6e:ab:91:a7: 09:ca:8d:9c:1f:20:58:82:a9:b5:1d:17:be:ea:ab: ba:aa:2d:7e:9b:5a:b0:1f:ae:23:81:c7:b8:82:f5: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B6:BA:C1:2F:4C:D2:9E:DE:D2:E4:CF:4E:95:D2:08:27:29:72:BA X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:76:2a:10:b6:e4:0e:08:da:69:1d:43:e5:5f:84:91:a5:a4: 3e:c0:cd:af:22:68:59:ce:11:39:83:76:6d:42:32:8b:60:46: 9d:23:fc:b0:c0:02:c4:10:bc:5a:1e:2f:97:14:1d:f8:44:85: d5:0b:a1:6f:c4:08:71:f8:24:77:80:32:66:c1:b8:b2:7b:24: 86:b3:98:13:f3:0e:e2:28:6e:8c:af:f4:c1:cd:89:6a:be:4a: 19:7a:ae:85:92:5a:8d:da:df:af:f1:dc:ce:27:a9:15:b2:ff: f6:46:75:61:4f:c0:2e:7e:d8:87:e1:d0:4f:9a:90:f6:a8:2c: 97:f7:cc:fb:34:cf:43:82:20:26:18:83:5a:c3:c9:ad:cd:18: 5e:e5:9f:ba:24:8d:3e:dd:fe:2d:f7:9f:60:4a:41:17:5b:fa: a0:28:5b:db:53:93:8d:ab:e9:77:4a:82:5b:6e:73:bb:a0:b1: fa:fd:f6:3a:9f:2a:47:ab:63:76:2b:04:3b:4e:5f:41:73:bc: c4:f0:14:7d:2d:36:ff:49:5a:e8:d0:4e:d6:2d:92:f9:6e:11: 3c:7c:98:95:d0:52:13:36:e7:03:5d:6e:aa:e4:a7:5f:64:9b: d8:3d:fe:26:60:d6:d9:20:aa:54:73:1c:06:fe:1c:87:41:0e: 68:70:f5:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ij4s4O/+ucodI+Ki4TauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjUxMjA3MDIwMDQ2WhcNMjUxMjA4MDIwMDQ2WjAzMTEwLwYDVQQD Eyg1YWI2YmFjMTJmNGNkMjllZGVkMmU0Y2Y0ZTk1ZDIwODI3Mjk3MmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWMv4rdr8P6xkToCsrhziIhzIYX7 WS8zMbc4VS1iP8EODt6BxRx3o5cB6o63GowCisLx5c/sPKw5hIBNeSeeVObVVg9P F0llZVrQOkLlWFImkW/EE6sIGRoTyJ+DmrSJFo0cIukD/cXkNuu4V+OrjWxuZTxV 5mKxrbAAgA0JPfdTPhn874zf04Wqkc54cBjeyodkb2lR4n/AiMbnz3HZ/HY5LHb6 zGN0/11jfumyFzph5h9rfVLsCwoqT5WEftU7vlhfc2DY4/I7d8Ii3APEjd6jVk88 19YLRflGQG6rkacJyo2cHyBYgqm1HRe+6qu6qi1+m1qwH64jgce4gvV7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq2usEvTNKe3tLkz06V0ggnKXK6MB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnYqELbk DgjaaR1D5V+EkaWkPsDNryJoWc4ROYN2bUIyi2BGnSP8sMACxBC8Wh4vlxQd+ESF 1Quhb8QIcfgkd4AyZsG4snskhrOYE/MO4ihujK/0wc2Jar5KGXquhZJajdrfr/Hc ziepFbL/9kZ1YU/ALn7Yh+HQT5qQ9qgsl/fM+zTPQ4IgJhiDWsPJrc0YXuWfuiSN Pt3+LfefYEpBF1v6oChb21OTjavpd0qCW25zu6Cx+v32Op8qR6tjdisEO05fQXO8 xPAUfS02/0la6NBO1i2S+W4RPHyYldBSEzbnA11uquSnX2Sb2D3+JmDW2SCqVHMc Bv4ch0EOaHD1Ag== -----END CERTIFICATE-----Generated at Sun Dec 7 09:26:32 2025 by rpki-client