This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json) Hash identifier: r+7UOsRQ+sEiY5kzbMab4d0dKYMZCxeM3+XJ/QijpOM= Subject key identifier: D2:23:F0:C2:F4:98:4E:E7:D1:28:4F:B5:38:55:AD:F9:12:87:0D:BF Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e Certificate serial: 019AF31B7F7935081EEFACFBA1B8BD5C4F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 10:00:56 +0000 Manifest this update: Sat 06 Dec 2025 10:00:56 +0000 Manifest next update: Sun 07 Dec 2025 10:00:56 +0000 Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: kVQbTNF0F+Fz1az6VwyaXk1eV5vW38BL+dItA56OW6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7f:79:35:08:1e:ef:ac:fb:a1:b8:bd:5c:4f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e Validity Not Before: Dec 6 10:00:56 2025 GMT Not After : Dec 7 10:00:56 2025 GMT Subject: CN=d223f0c2f4984ee7d1284fb53855adf912870dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:9d:53:22:4c:a4:77:0c:59:fa:60:cf:e9: 3c:18:9a:56:ce:59:bc:e5:91:a1:06:c1:3d:b4:4f: a4:04:2d:e4:c2:25:54:cf:ce:20:84:a4:c3:80:ae: 57:cf:5b:3e:dd:6f:3e:95:ca:1f:37:7e:0a:47:7e: d1:46:c6:18:d5:39:28:59:9f:63:eb:cf:a5:20:3d: 3b:fe:51:1f:12:46:25:f0:a9:96:4d:75:73:78:6e: 87:68:8f:51:ee:ac:f5:db:c0:6b:51:c8:bb:57:7d: 87:3f:fa:c8:a9:5a:aa:4c:e9:5c:81:a6:2b:c0:3f: 97:db:af:df:60:28:ce:58:c4:ea:db:24:57:df:b3: f1:82:38:95:83:39:35:6e:39:9c:56:16:69:03:bb: 80:f2:43:bc:39:4d:c4:a8:24:8b:49:6a:81:a2:df: 17:85:14:c1:37:dd:2c:b6:14:51:30:2a:91:38:c9: 71:8c:3a:34:c7:e9:5b:3d:9b:82:11:f0:b8:36:b7: c3:65:4c:d4:2e:a4:df:c3:32:da:60:fe:95:3c:82: 27:60:2f:8b:f2:ee:10:0a:23:11:52:65:d6:40:03: aa:4c:ec:51:ec:9e:d0:5a:a3:63:b9:e4:36:e0:0e: 8f:4c:e3:3b:f8:4d:35:d8:46:a6:24:70:33:e3:52: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:23:F0:C2:F4:98:4E:E7:D1:28:4F:B5:38:55:AD:F9:12:87:0D:BF X509v3 Authority Key Identifier: keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bf:28:07:4b:1f:de:64:d9:9d:cf:f8:c2:93:36:3a:f6:68: 17:9e:b4:56:ee:1f:81:53:7a:bc:6b:a9:23:a0:5c:3d:8c:78: 1a:13:0b:1c:04:45:67:22:02:e6:dd:c0:a0:dd:49:e2:4a:91: 7f:60:74:cc:29:f1:91:c5:f4:10:49:a7:90:ab:1a:1b:eb:09: 7d:ea:0c:9e:7e:a2:3c:55:a2:09:0a:de:9f:57:aa:f5:b0:1b: 24:05:02:8f:ef:09:1d:38:69:4f:df:ca:bc:61:1c:2b:8d:5d: 4c:9c:8d:00:16:58:c4:92:55:d1:c4:d2:16:79:18:9f:44:83: 58:d0:82:ef:32:04:04:13:47:ed:f5:12:64:64:7c:78:3e:6f: df:07:19:e4:4a:21:b0:75:7a:1b:60:9e:a2:c0:7f:c8:8d:da: 8b:99:45:c3:11:27:59:17:86:1f:16:7c:96:01:a1:51:6e:d3: 5e:95:d1:17:a6:56:f8:47:b4:cf:9d:32:c6:cb:c1:c2:78:78: 0c:43:bf:da:02:72:47:4a:53:d3:d4:0c:87:45:57:85:ed:96: 88:87:50:ee:a4:5d:5e:47:24:e4:55:b7:d2:8a:76:e5:4f:5d: ef:b7:cc:79:92:b2:02:94:dc:cb:ad:95:95:b0:b0:eb:cc:7a: f5:31:21:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG395NQge76z7obi9XE+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmE4Nzk1ZjNlN2UyZDJjN2M5MGYxYzM2NjZjZjdmOTI4 M2RhOWUwHhcNMjUxMjA2MTAwMDU2WhcNMjUxMjA3MTAwMDU2WjAzMTEwLwYDVQQD EyhkMjIzZjBjMmY0OTg0ZWU3ZDEyODRmYjUzODU1YWRmOTEyODcwZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ASdUyJMpHcMWfpgz+k8GJpWzlm8 5ZGhBsE9tE+kBC3kwiVUz84ghKTDgK5Xz1s+3W8+lcofN34KR37RRsYY1TkoWZ9j 68+lID07/lEfEkYl8KmWTXVzeG6HaI9R7qz128BrUci7V32HP/rIqVqqTOlcgaYr wD+X26/fYCjOWMTq2yRX37PxgjiVgzk1bjmcVhZpA7uA8kO8OU3EqCSLSWqBot8X hRTBN90sthRRMCqROMlxjDo0x+lbPZuCEfC4NrfDZUzULqTfwzLaYP6VPIInYC+L 8u4QCiMRUmXWQAOqTOxR7J7QWqNjueQ24A6PTOM7+E012EamJHAz41KPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIj8ML0mE7n0ShPtThVrfkShw2/MB8GA1UdIwQY MBaAFCW6h5Xz5+LSx8kPHDZmz3+Sg9qeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMt NGVkZGJlYjgzODdiLzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMtNGVkZGJlYjgzODdi LzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb8oB0sf 3mTZnc/4wpM2OvZoF560Vu4fgVN6vGupI6BcPYx4GhMLHARFZyIC5t3AoN1J4kqR f2B0zCnxkcX0EEmnkKsaG+sJfeoMnn6iPFWiCQren1eq9bAbJAUCj+8JHThpT9/K vGEcK41dTJyNABZYxJJV0cTSFnkYn0SDWNCC7zIEBBNH7fUSZGR8eD5v3wcZ5Eoh sHV6G2CeosB/yI3ai5lFwxEnWReGHxZ8lgGhUW7TXpXRF6ZW+Ee0z50yxsvBwnh4 DEO/2gJyR0pT09QMh0VXhe2WiIdQ7qRdXkck5FW30op25U9d77fMeZKyApTcy62V lbCw68x69TEh0g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:58 2025 by rpki-client