This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json) Hash identifier: 3eLgkqjpstyAgi4FSXSWLW4Xt4UkXiBk1Dl743IeLTQ= Subject key identifier: D1:5C:0D:24:91:45:8F:F4:EF:B3:93:A4:08:3B:D4:7C:6C:FD:B6:3B Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Certificate serial: 019B2B8B2F727D7316A9C87CF8BB6DF1A866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft Manifest number: 0D54 Signing time: Wed 17 Dec 2025 09:01:40 +0000 Manifest this update: Wed 17 Dec 2025 09:01:40 +0000 Manifest next update: Thu 18 Dec 2025 09:01:40 +0000 Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=) 2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: 18Ltab4AJ6BieBmjgCOvZFhA3zFENmIz6ah0Lx5OMLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:2f:72:7d:73:16:a9:c8:7c:f8:bb:6d:f1:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869 Validity Not Before: Dec 17 09:01:40 2025 GMT Not After : Dec 18 09:01:40 2025 GMT Subject: CN=d15c0d2491458ff4efb393a4083bd47c6cfdb63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:60:e7:60:89:cd:f8:05:f3:0b:6e:5f:8b: 23:37:f9:05:cb:69:55:ed:65:9c:fa:cf:1a:70:fc: 82:b0:76:d6:9e:d4:93:14:b8:82:45:1e:37:92:d1: a9:22:c3:9a:1b:72:7c:32:3d:a1:74:4a:d1:d9:c5: c3:a1:63:c4:9c:ab:de:26:af:25:ba:e7:87:4b:c0: ac:90:2d:e2:d0:27:4f:b4:ed:9e:a5:84:a2:c1:e4: 09:d9:b0:d3:71:00:ae:2e:ad:52:38:88:3d:df:1f: 7a:1d:d0:5d:dc:9e:c3:53:44:6f:04:8c:2f:44:11: 7f:39:cf:a1:da:cf:4d:1e:b2:82:ed:de:56:ed:90: 84:30:b3:83:06:1d:23:dd:b4:7b:f0:dc:63:27:d5: af:fc:db:a8:49:e8:6f:2c:5c:13:04:c6:71:57:94: 67:3b:d5:8d:b0:b5:75:46:8e:75:dc:ce:df:61:25: 5a:56:36:f5:68:b9:21:59:b1:ca:a7:ca:dc:3b:0d: 20:ae:8f:ac:de:07:e0:c9:0a:14:87:f1:34:e8:28: bf:e8:fb:2a:16:76:a0:67:18:41:28:13:c1:d5:b8: be:05:7a:b5:db:b6:d8:09:cf:55:e1:99:fc:54:9e: 9f:8c:ed:de:df:50:f6:59:44:c7:bc:6f:be:41:94: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5C:0D:24:91:45:8F:F4:EF:B3:93:A4:08:3B:D4:7C:6C:FD:B6:3B X509v3 Authority Key Identifier: keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ae:66:19:75:fc:dc:b0:96:21:28:bf:8d:dc:74:59:a9:3b: d9:4f:a8:3e:5f:62:51:92:a6:f1:b8:3c:7a:fc:69:67:e5:ca: c7:ee:87:42:cd:c1:24:d0:85:a6:16:66:5e:1f:13:a5:74:28: e0:13:f0:04:49:34:a0:76:fd:12:e9:ac:6f:5a:d8:e2:0c:ad: 39:04:2e:87:83:51:52:dd:a1:d3:19:d7:d0:0a:e4:1f:7f:fd: dd:30:60:f0:fe:f5:7d:6c:14:68:d0:76:83:8e:bf:13:22:21: 86:0d:59:9d:4a:5c:eb:16:32:bb:53:8a:fb:d4:01:75:3c:ec: 52:a6:e3:6c:3a:ac:4b:c0:b8:87:d1:03:6c:5a:2e:46:5e:33: 1e:80:4c:3c:79:25:39:38:19:92:f1:0d:44:a4:9c:40:69:7f: 47:d2:98:87:c0:64:9a:5b:66:bd:59:49:e8:c7:98:10:4f:c2: 36:fc:54:9c:92:93:06:20:63:5c:f0:d2:b9:c0:d9:f4:99:58: 29:b9:c3:b5:a5:89:48:26:c9:cf:c6:fe:0e:f5:bc:17:ce:75: d2:3b:dd:5a:6e:06:c0:16:7d:dd:d3:08:1d:eb:96:6a:e9:00: 6a:2a:9b:8e:5f:95:45:ea:e7:8a:7c:f2:e5:d2:f5:f1:3f:9b: 7c:55:a9:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriy9yfXMWqch8+Ltt8ahmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl YzU4NjkwHhcNMjUxMjE3MDkwMTQwWhcNMjUxMjE4MDkwMTQwWjAzMTEwLwYDVQQD EyhkMTVjMGQyNDkxNDU4ZmY0ZWZiMzkzYTQwODNiZDQ3YzZjZmRiNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZJg52CJzfgF8wtuX4sjN/kFy2lV 7WWc+s8acPyCsHbWntSTFLiCRR43ktGpIsOaG3J8Mj2hdErR2cXDoWPEnKveJq8l uueHS8CskC3i0CdPtO2epYSiweQJ2bDTcQCuLq1SOIg93x96HdBd3J7DU0RvBIwv RBF/Oc+h2s9NHrKC7d5W7ZCEMLODBh0j3bR78NxjJ9Wv/NuoSehvLFwTBMZxV5Rn O9WNsLV1Ro513M7fYSVaVjb1aLkhWbHKp8rcOw0gro+s3gfgyQoUh/E06Ci/6Psq FnagZxhBKBPB1bi+BXq127bYCc9V4Zn8VJ6fjO3e31D2WUTHvG++QZSVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFcDSSRRY/077OTpAg71Hxs/bY7MB8GA1UdIwQY MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt NjM3Y2ZkNzJiYWYwLzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa5mGXX8 3LCWISi/jdx0Wak72U+oPl9iUZKm8bg8evxpZ+XKx+6HQs3BJNCFphZmXh8TpXQo 4BPwBEk0oHb9Eumsb1rY4gytOQQuh4NRUt2h0xnX0ArkH3/93TBg8P71fWwUaNB2 g46/EyIhhg1ZnUpc6xYyu1OK+9QBdTzsUqbjbDqsS8C4h9EDbFouRl4zHoBMPHkl OTgZkvENRKScQGl/R9KYh8BkmltmvVlJ6MeYEE/CNvxUnJKTBiBjXPDSucDZ9JlY KbnDtaWJSCbJz8b+DvW8F8510jvdWm4GwBZ93dMIHeuWaukAaiqbjl+VRerninzy 5dL18T+bfFWpyQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:55 2025 by rpki-client