This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json) Hash identifier: QtrN1KVSImawQ7foV1L2px8UC6aV3TR6bCASnRHLWzI= Subject key identifier: 77:C6:58:79:0D:40:D6:2F:69:48:1B:DF:B5:46:10:87:EA:C7:41:34 Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Certificate serial: 019AF388FE0A54A07B50E6A2C870AB3CEC58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft Manifest number: 128F Signing time: Sat 06 Dec 2025 12:00:32 +0000 Manifest this update: Sat 06 Dec 2025 12:00:32 +0000 Manifest next update: Sun 07 Dec 2025 12:00:32 +0000 Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: yPgfPd1GnsQ56+LF7VBIRelfHSAPhBHh9oMWda3xVYE=) 2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:fe:0a:54:a0:7b:50:e6:a2:c8:70:ab:3c:ec:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33 Validity Not Before: Dec 6 12:00:32 2025 GMT Not After : Dec 7 12:00:32 2025 GMT Subject: CN=77c658790d40d62f69481bdfb5461087eac74134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:11:5e:d6:92:ee:00:55:90:97:2b:ac:5e: 91:31:4d:95:ad:9a:7f:f0:f0:30:2e:e0:e4:46:ee: 3f:75:cb:52:72:9c:62:28:2c:dd:16:11:b5:8c:7a: 51:3a:87:18:37:c3:4b:43:dd:c1:e4:6d:90:80:10: 18:f0:9d:b0:57:ab:ad:b0:e1:8f:98:16:c3:28:9a: a3:6c:df:96:c4:3d:e2:01:86:c2:b5:63:66:77:db: c5:72:70:b8:c1:7f:7a:bb:f4:18:f4:dd:e2:d9:74: b8:5a:71:1c:a8:d8:88:75:71:58:1e:30:01:6a:31: e2:38:95:e5:fe:b9:b8:79:fb:b1:24:5a:5f:6e:95: a1:d0:1a:f9:c4:22:0d:1f:42:f2:fa:ac:65:57:40: e0:52:18:c0:28:d5:2d:92:db:5a:30:ca:90:6e:f1: d7:a1:a5:b0:75:e4:b9:1e:21:fb:d5:dd:8e:8a:ef: f3:b5:00:99:0f:7c:42:ba:e3:05:82:c8:b3:da:cf: 5f:fb:a8:f7:42:8c:8d:66:fb:cf:28:dc:02:37:4e: 67:62:f8:47:1c:84:82:9b:18:be:d9:4e:14:60:37: af:78:95:58:28:27:10:03:6f:a8:b4:d9:b9:a1:50: d9:c8:50:85:ff:69:a8:a2:22:b2:19:50:13:cb:a6: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C6:58:79:0D:40:D6:2F:69:48:1B:DF:B5:46:10:87:EA:C7:41:34 X509v3 Authority Key Identifier: keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:c2:18:51:ae:c3:a7:4f:8e:67:da:10:b3:fa:83:1b:d1: 53:62:ae:bc:31:fb:ac:5e:0c:6d:d3:fa:1b:fc:70:18:56:ba: 8a:f7:53:54:7b:4c:a3:48:33:ca:ef:07:3d:d9:16:ab:da:ee: 12:5c:ef:39:4b:06:39:e8:5e:57:0c:c3:f1:a6:79:ad:39:02: d4:7a:22:46:3b:1a:cf:8f:40:69:3e:37:40:c9:ea:5f:fe:ef: cc:28:3c:c8:df:db:4d:38:f2:04:4a:26:49:de:bb:4c:f8:d6: 04:0a:6e:f7:40:6c:2d:8b:f2:a4:cf:d3:6f:17:54:44:84:4d: 6a:d3:3b:fb:1f:18:e9:2e:03:f9:f1:f6:00:00:c4:7c:b7:1a: 19:c9:7d:94:e6:4b:e1:ca:97:7c:80:f3:54:0b:82:07:a9:3e: be:59:b6:06:10:78:b6:e6:d9:37:88:77:67:e4:52:36:d0:51: 3e:5f:98:2e:14:15:9f:d8:75:91:e3:0f:96:94:f6:d3:85:3e: 7e:40:4c:b7:7a:9e:1e:d3:24:cf:19:5a:4d:8a:79:cb:e1:49: be:c6:65:b3:3b:73:bd:e6:6e:eb:ba:0c:e5:b2:70:ba:07:8c: 62:7e:0b:ee:2e:c0:53:82:db:37:3c:60:f3:77:f8:22:39:52: 90:5e:3a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziP4KVKB7UOaiyHCrPOxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl NDZhMzMwHhcNMjUxMjA2MTIwMDMyWhcNMjUxMjA3MTIwMDMyWjAzMTEwLwYDVQQD Eyg3N2M2NTg3OTBkNDBkNjJmNjk0ODFiZGZiNTQ2MTA4N2VhYzc0MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhsRXtaS7gBVkJcrrF6RMU2VrZp/ 8PAwLuDkRu4/dctScpxiKCzdFhG1jHpROocYN8NLQ93B5G2QgBAY8J2wV6utsOGP mBbDKJqjbN+WxD3iAYbCtWNmd9vFcnC4wX96u/QY9N3i2XS4WnEcqNiIdXFYHjAB ajHiOJXl/rm4efuxJFpfbpWh0Br5xCINH0Ly+qxlV0DgUhjAKNUtkttaMMqQbvHX oaWwdeS5HiH71d2Oiu/ztQCZD3xCuuMFgsiz2s9f+6j3QoyNZvvPKNwCN05nYvhH HISCmxi+2U4UYDeveJVYKCcQA2+otNm5oVDZyFCF/2mooiKyGVATy6bBrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfGWHkNQNYvaUgb37VGEIfqx0E0MB8GA1UdIwQY MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2 LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHnCGFGu w6dPjmfaELP6gxvRU2KuvDH7rF4MbdP6G/xwGFa6ivdTVHtMo0gzyu8HPdkWq9ru ElzvOUsGOeheVwzD8aZ5rTkC1HoiRjsaz49AaT43QMnqX/7vzCg8yN/bTTjyBEom Sd67TPjWBApu90BsLYvypM/TbxdURIRNatM7+x8Y6S4D+fH2AADEfLcaGcl9lOZL 4cqXfIDzVAuCB6k+vlm2BhB4tubZN4h3Z+RSNtBRPl+YLhQVn9h1keMPlpT204U+ fkBMt3qeHtMkzxlaTYp5y+FJvsZlsztzveZu67oM5bJwugeMYn4L7i7AU4LbNzxg 83f4IjlSkF46ag== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:02 2025 by rpki-client