This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft File: Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft (raw, json) Hash identifier: Kn8sZzSh62BoLlNtMADHPnbc8FXZkh0fc6PWUVt2ZKE= Subject key identifier: EE:BB:35:49:B8:2B:16:72:78:1E:CA:77:B9:D7:96:3A:FA:25:40:65 Authority key identifier: 25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF Certificate issuer: /CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf Certificate serial: 019AF0885AC776FD1F19B95C61854C98CA85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft Manifest number: 4F Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl (hash: lXpwqxmNvtixC9VfQcz8MqfXZwiPUeSkezRCxbiIGPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5a:c7:76:fd:1f:19:b9:5c:61:85:4c:98:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=eebb3549b82b1672781eca77b9d7963afa254065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:a1:47:55:5d:c2:bf:fd:01:30:00:f2:49: f8:4d:c4:ac:c8:83:02:c4:e7:84:c1:63:c2:2d:44: 26:df:e1:91:d6:68:1a:70:c7:ba:f3:eb:dc:76:e2: 9d:36:a3:39:cb:e5:7d:3e:ac:e0:50:a6:38:af:80: d0:fc:08:20:65:c2:32:cd:81:0b:7c:79:f7:3a:b5: 4f:2e:d0:c6:7c:dc:43:19:35:97:90:92:a8:8c:cd: a4:72:ab:61:8a:36:92:4a:c0:4f:69:87:75:70:ef: 0b:e6:76:5e:74:c3:6e:84:83:6d:d0:53:f3:75:8c: db:b2:c7:9d:ac:96:9e:2b:fb:6e:e8:4c:aa:c0:20: 2a:92:4b:ed:cf:7b:24:da:f3:d1:e0:de:97:fd:c2: b4:5b:81:39:b2:11:b3:97:40:28:d8:2f:b9:6c:df: d8:98:35:1a:17:e3:a6:34:ad:c0:af:57:be:11:bf: c2:11:ff:4f:34:20:73:41:9c:00:95:9e:1b:03:2b: c8:82:00:08:03:41:85:c0:96:0b:62:a2:8f:7c:36: df:0f:09:0c:b6:90:25:a1:7b:64:6c:d0:fd:44:ed: 83:13:e0:ee:68:c6:fb:bd:35:8a:41:f7:b8:ec:9a: 92:c5:21:9b:e4:ae:72:0b:c4:61:4d:3a:e4:79:17: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BB:35:49:B8:2B:16:72:78:1E:CA:77:B9:D7:96:3A:FA:25:40:65 X509v3 Authority Key Identifier: keyid:25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:74:93:2d:df:4d:2c:e2:32:62:82:6b:22:83:17:d8:34:66: 47:f6:b2:d8:95:5b:6d:f8:1f:aa:a3:a6:e3:47:a1:36:45:f0: c9:66:b9:ff:73:e6:e9:1b:4d:ac:15:24:e4:b1:6b:46:86:22: f4:7a:78:20:2c:bc:51:73:ed:4f:64:cb:e7:9e:cf:5c:86:d5: b5:55:05:21:07:90:e0:c5:3d:a8:57:a9:f8:d1:62:96:ca:36: 4c:59:6b:b0:d5:e5:9e:9c:08:76:78:dc:74:97:ce:65:70:6c: ca:c0:2e:38:9b:94:22:2e:cf:b0:08:44:f8:47:76:9b:59:8c: fb:1e:1c:72:ec:4e:bc:f9:da:9b:da:38:ef:20:a7:76:88:c6: 77:8d:c5:eb:6d:67:50:b4:77:2f:d9:33:af:41:b7:a8:17:33: 9f:49:e2:ef:72:d2:20:6a:34:cb:f2:6a:c9:56:30:ea:28:bb: ac:26:ff:62:3a:64:26:fe:3d:28:f0:f3:32:76:0d:da:c2:0f: b7:bb:ba:98:4e:50:e8:23:a3:bc:94:81:4f:23:7d:59:01:ff: 5b:b8:42:86:48:d6:18:1e:6c:93:05:66:04:b5:f0:f9:ee:3b: a0:3f:ea:4b:c5:3f:79:30:83:2c:e3:83:40:31:17:2b:da:f5: db:d6:62:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFrHdv0fGblcYYVMmMqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTc2YmU4NmQ1OWQ0YTIxNWFjNmE4NDU1ZGJmMTBhZTgw YWRlZGYwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD EyhlZWJiMzU0OWI4MmIxNjcyNzgxZWNhNzdiOWQ3OTYzYWZhMjU0MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I6hR1Vdwr/9ATAA8kn4TcSsyIMC xOeEwWPCLUQm3+GR1mgacMe68+vcduKdNqM5y+V9PqzgUKY4r4DQ/AggZcIyzYEL fHn3OrVPLtDGfNxDGTWXkJKojM2kcqthijaSSsBPaYd1cO8L5nZedMNuhINt0FPz dYzbssedrJaeK/tu6EyqwCAqkkvtz3sk2vPR4N6X/cK0W4E5shGzl0Ao2C+5bN/Y mDUaF+OmNK3Ar1e+Eb/CEf9PNCBzQZwAlZ4bAyvIggAIA0GFwJYLYqKPfDbfDwkM tpAloXtkbND9RO2DE+DuaMb7vTWKQfe47JqSxSGb5K5yC8RhTTrkeRe/PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO67NUm4KxZyeB7Kd7nXljr6JUBlMB8GA1UdIwQY MBaAFCXna+htWdSiFaxqhFXb8QroCt7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mYWUyYmEtNjUxYi00NWE4LTkwZmMt YzQ2MWJmNjUxYzlhLzEvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9mYWUyYmEtNjUxYi00NWE4LTkwZmMtYzQ2MWJmNjUxYzlh LzEvSmVkcjZHMVoxS0lWckdxRVZkdnhDdWdLM3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHSTLd9N LOIyYoJrIoMX2DRmR/ay2JVbbfgfqqOm40ehNkXwyWa5/3Pm6RtNrBUk5LFrRoYi 9Hp4ICy8UXPtT2TL557PXIbVtVUFIQeQ4MU9qFep+NFilso2TFlrsNXlnpwIdnjc dJfOZXBsysAuOJuUIi7PsAhE+Ed2m1mM+x4ccuxOvPnam9o47yCndojGd43F621n ULR3L9kzr0G3qBczn0ni73LSIGo0y/JqyVYw6ii7rCb/YjpkJv49KPDzMnYN2sIP t7u6mE5Q6COjvJSBTyN9WQH/W7hChkjWGB5skwVmBLXw+e47oD/qS8U/eTCDLOOD QDEXK9r129Ziew== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:04 2025 by rpki-client