This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json) Hash identifier: kTld22N+nBIL5lvw7gpGeMDbSnPALuNIGfTuecr8aHM= Subject key identifier: 48:1B:EE:6B:E5:A5:2C:10:E2:5D:1E:B7:66:05:D0:67:37:38:B0:49 Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Certificate serial: 019AF31D65DF79C6D88C5D6D7EEBB1D2D827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft Manifest number: 0674 Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: 5wawdF6t61QJZSEaqSNAV1JNqv4d1lY0uRwoE1XxID8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:65:df:79:c6:d8:8c:5d:6d:7e:eb:b1:d2:d8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672 Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=481bee6be5a52c10e25d1eb76605d0673738b049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:34:6c:99:16:43:91:7f:3f:dc:9b:a3:da: 9e:8a:02:12:03:03:e8:17:74:78:b1:15:19:c4:33: d0:4b:fa:02:53:24:24:4f:6f:f8:62:66:48:7c:7a: af:b8:c2:db:a3:e1:f5:e0:86:28:f1:11:90:a8:57: 67:39:ff:20:4d:61:e4:f2:54:ff:5e:5a:d2:6b:18: d7:1f:af:23:4a:e4:50:21:aa:4e:6c:db:bb:29:65: da:7a:59:0f:af:ce:85:1d:15:95:8f:47:6c:b2:42: 8f:7c:86:42:0e:08:2b:56:3a:7e:ac:e8:6b:1e:c1: 1b:8e:cb:1b:af:34:ea:8c:8e:6b:b2:43:f7:f6:c6: 36:aa:c0:a6:b0:60:a4:b4:c0:70:a4:29:30:36:c3: 83:01:64:73:1a:71:54:9a:c2:8c:6f:20:c7:4b:38: e5:ac:9f:22:c6:26:98:2b:1c:e0:f1:94:79:35:78: cf:9a:dc:a3:93:da:04:bd:a8:f3:41:99:b3:d6:df: d0:19:e0:aa:78:ba:7d:40:7f:b8:5a:80:9f:6d:f0: e6:b5:53:a0:d7:3a:ea:33:8f:24:56:f8:ec:d2:a6: 36:c8:a3:8d:df:6f:ec:6b:67:a4:13:73:a9:c3:29: b3:a1:25:70:3d:d7:7b:8b:ef:cc:90:ed:33:aa:5c: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1B:EE:6B:E5:A5:2C:10:E2:5D:1E:B7:66:05:D0:67:37:38:B0:49 X509v3 Authority Key Identifier: keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:6c:2f:e8:01:2f:ed:49:1a:77:f1:b4:02:cf:46:77:9c:14: b9:9b:54:aa:a7:cc:0e:d0:53:81:7e:e6:49:9a:50:45:83:6f: 87:6f:a9:c6:d5:b7:fb:ad:62:fd:fc:56:f7:3c:c2:dc:3f:81: 9a:81:6f:a2:e1:27:20:87:b2:37:61:1d:d9:b1:32:13:b9:dc: b1:82:51:fc:7f:63:e7:03:d2:53:6a:97:68:de:37:f4:73:cd: 7c:af:3e:28:ce:0c:d7:d7:95:6f:3b:e9:2a:79:7d:81:d2:1f: ff:88:0e:e5:05:28:c9:74:7d:c8:31:45:eb:a6:e0:77:70:42: 6d:95:3f:8a:ef:6d:5b:5f:eb:cf:25:f5:47:41:27:af:5d:68: fa:5c:62:54:88:11:5d:bc:6e:d9:5e:3a:49:0e:3e:93:0a:60: 87:a8:c5:30:8b:6e:a2:39:6a:26:e9:cf:fe:36:6e:19:84:65: 5c:29:35:cb:fc:33:3e:92:32:6f:4c:76:37:2f:ef:10:29:9c: 9b:7c:8d:3b:ff:96:b7:80:9b:96:fd:f0:78:b8:0d:73:e3:28: cc:3d:4a:db:27:d6:fd:50:ea:2b:6e:ea:b2:e5:7e:37:32:b4: 2e:5d:20:03:85:4c:1d:89:15:13:78:89:d9:52:ea:9b:81:03: 38:12:c8:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWXfecbYjF1tfuux0tgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWE0MTgwMDI3ZDkyM2Q5ZmUwYzk1NzBjOTBiOWQxMzA4 ZmE2NzIwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD Eyg0ODFiZWU2YmU1YTUyYzEwZTI1ZDFlYjc2NjA1ZDA2NzM3MzhiMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvg0bJkWQ5F/P9ybo9qeigISAwPo F3R4sRUZxDPQS/oCUyQkT2/4YmZIfHqvuMLbo+H14IYo8RGQqFdnOf8gTWHk8lT/ XlrSaxjXH68jSuRQIapObNu7KWXaelkPr86FHRWVj0dsskKPfIZCDggrVjp+rOhr HsEbjssbrzTqjI5rskP39sY2qsCmsGCktMBwpCkwNsODAWRzGnFUmsKMbyDHSzjl rJ8ixiaYKxzg8ZR5NXjPmtyjk9oEvajzQZmz1t/QGeCqeLp9QH+4WoCfbfDmtVOg 1zrqM48kVvjs0qY2yKON32/sa2ekE3OpwymzoSVwPdd7i+/MkO0zqlxgYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgb7mvlpSwQ4l0et2YF0Gc3OLBJMB8GA1UdIwQY MBaAFI5aQYACfZI9n+DJVwyQudEwj6ZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTIt NWY5ODdlMWVjMDM1LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTItNWY5ODdlMWVjMDM1 LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2wv6AEv 7Ukad/G0As9Gd5wUuZtUqqfMDtBTgX7mSZpQRYNvh2+pxtW3+61i/fxW9zzC3D+B moFvouEnIIeyN2Ed2bEyE7ncsYJR/H9j5wPSU2qXaN439HPNfK8+KM4M19eVbzvp Knl9gdIf/4gO5QUoyXR9yDFF66bgd3BCbZU/iu9tW1/rzyX1R0Enr11o+lxiVIgR Xbxu2V46SQ4+kwpgh6jFMItuojlqJunP/jZuGYRlXCk1y/wzPpIyb0x2Ny/vECmc m3yNO/+Wt4Cblv3weLgNc+MozD1K2yfW/VDqK27qsuV+NzK0Ll0gA4VMHYkVE3iJ 2VLqm4EDOBLIlg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:10 2025 by rpki-client