This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json) Hash identifier: mOUlXgM0CSWfMAkyhxGmxhAfpARS37h/2OPbSsyRvPE= Subject key identifier: 38:43:18:D1:50:33:46:16:D4:A7:28:34:E4:0F:E0:6F:96:B4:01:C3 Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b Certificate serial: 019AF209779F0F945D571AFFFA7A76AC5990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft Manifest number: 158D Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: ECvxJFSXOHz3YvxcvjQUNKuKN8NpWzheoLl3zQLd48c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:77:9f:0f:94:5d:57:1a:ff:fa:7a:76:ac:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2546049998791fe85770313ba660c4125192980b Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=384318d150334616d4a72834e40fe06f96b401c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:68:a4:ea:be:cf:e4:4a:c0:03:50:fb:e6: b4:d3:8c:82:fa:3e:e6:68:78:0e:79:11:4f:da:f5: 73:39:01:59:75:1a:54:97:82:45:00:4a:25:6e:42: 01:54:43:db:4a:7c:98:b6:e9:6f:3a:8f:c0:b6:21: ff:d4:ae:9f:45:cc:35:a0:61:73:75:34:4c:0c:98: 03:81:fa:91:f1:89:57:5f:5c:dd:8a:c9:36:f6:86: 1c:0a:59:70:2e:f1:88:c4:c5:18:3f:d1:c8:ef:eb: dd:f1:59:ff:e9:c0:4a:2e:d1:33:ed:74:bc:24:ee: 05:12:18:b4:45:7b:be:0a:3c:1e:4d:43:12:3d:e6: aa:a4:fe:a6:3c:0b:83:13:7f:9b:8f:cb:5f:85:58: 07:fb:62:78:c7:e5:0f:a6:a0:a9:fa:10:4d:e4:37: 69:b6:69:fe:1b:f8:26:35:ce:8a:7d:de:73:f4:14: 86:0e:13:d3:cf:7c:53:8d:f0:61:37:f6:1f:68:2c: b1:f9:c6:6d:c5:12:92:9c:8a:21:12:85:98:8c:3f: 5b:3d:28:1f:7b:19:a3:55:02:cc:6e:75:fc:ec:d0: fa:02:3b:79:28:a7:00:5e:f9:65:f6:37:19:35:87: 9b:56:d7:26:45:c8:4b:a4:9a:60:03:8d:4a:61:8c: e5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:18:D1:50:33:46:16:D4:A7:28:34:E4:0F:E0:6F:96:B4:01:C3 X509v3 Authority Key Identifier: keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:68:dd:0f:ec:1c:00:95:64:76:05:7b:17:68:87:4d:56:8a: 2c:bb:a2:11:a2:4c:02:18:2b:df:56:e3:fa:99:b9:46:8f:4a: 60:42:6b:af:7f:c3:40:3e:ba:4f:7e:3a:70:60:3b:65:03:7f: 4b:1c:af:86:cd:fa:dd:9d:e4:b6:8c:60:b2:34:68:75:93:43: 24:9b:70:de:aa:b9:38:c7:a5:cf:07:9b:18:aa:df:60:ec:31: 20:a1:9c:b1:8d:f8:b7:aa:fc:0b:70:f8:d3:12:63:a3:e2:0d: a1:57:38:17:59:27:65:75:1c:51:7f:14:28:4b:fe:1f:0e:f5: bd:9c:d3:ab:4a:5f:31:86:85:70:9d:dc:48:70:18:6c:2f:08: 2e:11:c4:bf:b7:4a:f6:30:cb:23:63:6c:33:a5:3b:56:64:60: f0:5a:5c:bf:5d:58:cf:c8:22:a6:f8:e7:1d:95:17:cb:cc:20: d8:37:72:64:c6:a2:a1:04:2a:6b:a3:53:3c:34:9d:f2:1a:fb: 56:b8:69:09:53:48:4d:d6:23:35:fd:e0:3b:0e:c3:74:db:15: 75:85:27:a8:81:64:83:12:4c:eb:1f:35:25:cd:38:2d:2e:06: d2:c8:97:a0:ec:a5:d7:87:21:2a:7d:59:bd:42:bf:4b:9b:41: f0:03:ed:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXefD5RdVxr/+np2rFmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDYwNDk5OTg3OTFmZTg1NzcwMzEzYmE2NjBjNDEyNTE5 Mjk4MGIwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EygzODQzMThkMTUwMzM0NjE2ZDRhNzI4MzRlNDBmZTA2Zjk2YjQwMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rxopOq+z+RKwANQ++a004yC+j7m aHgOeRFP2vVzOQFZdRpUl4JFAEolbkIBVEPbSnyYtulvOo/AtiH/1K6fRcw1oGFz dTRMDJgDgfqR8YlXX1zdisk29oYcCllwLvGIxMUYP9HI7+vd8Vn/6cBKLtEz7XS8 JO4FEhi0RXu+CjweTUMSPeaqpP6mPAuDE3+bj8tfhVgH+2J4x+UPpqCp+hBN5Ddp tmn+G/gmNc6Kfd5z9BSGDhPTz3xTjfBhN/YfaCyx+cZtxRKSnIohEoWYjD9bPSgf exmjVQLMbnX87ND6Ajt5KKcAXvll9jcZNYebVtcmRchLpJpgA41KYYzlzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhDGNFQM0YW1KcoNOQP4G+WtAHDMB8GA1UdIwQY MBaAFCVGBJmYeR/oV3AxO6ZgxBJRkpgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2Et MWM1MWIzMzNkZmZiLzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2EtMWM1MWIzMzNkZmZi LzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmjdD+wc AJVkdgV7F2iHTVaKLLuiEaJMAhgr31bj+pm5Ro9KYEJrr3/DQD66T346cGA7ZQN/ Sxyvhs363Z3ktoxgsjRodZNDJJtw3qq5OMelzwebGKrfYOwxIKGcsY34t6r8C3D4 0xJjo+INoVc4F1knZXUcUX8UKEv+Hw71vZzTq0pfMYaFcJ3cSHAYbC8ILhHEv7dK 9jDLI2NsM6U7VmRg8Fpcv11Yz8gipvjnHZUXy8wg2DdyZMaioQQqa6NTPDSd8hr7 VrhpCVNITdYjNf3gOw7DdNsVdYUnqIFkgxJM6x81Jc04LS4G0siXoOyl14chKn1Z vUK/S5tB8APtnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:10 2025 by rpki-client