This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json) Hash identifier: Putz4jOBK8hVkjvxYjttQtM9gn+p2rI6/kD7J6S0zUo= Subject key identifier: 38:4D:A5:AB:46:A5:0D:C0:EB:E4:5D:2F:3A:C4:C8:9A:3A:44:6E:D3 Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce Certificate serial: 019B2664B1C07B2A6BE0531F9443879CFDC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft Manifest number: 0E11 Signing time: Tue 16 Dec 2025 09:01:31 +0000 Manifest this update: Tue 16 Dec 2025 09:01:31 +0000 Manifest next update: Wed 17 Dec 2025 09:01:31 +0000 Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=) 2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: 0+0hRxByGfzJIY/qFPfA+Ks/sXNeGM6NAC85zyfJydE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:b1:c0:7b:2a:6b:e0:53:1f:94:43:87:9c:fd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce Validity Not Before: Dec 16 09:01:31 2025 GMT Not After : Dec 17 09:01:31 2025 GMT Subject: CN=384da5ab46a50dc0ebe45d2f3ac4c89a3a446ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:7f:08:b1:a4:21:91:58:c0:5e:21:a5:02: 05:4f:04:21:48:9f:e7:b4:35:e4:1f:a4:bc:95:7e: 8a:52:8c:a3:b3:14:63:35:3f:3b:c4:81:f3:c9:d8: c5:19:fa:d4:01:4d:55:ad:37:9a:20:b2:0c:b6:36: 96:db:f4:b9:9e:c6:fd:3b:9a:bf:48:49:2f:a6:09: 7d:41:a7:3c:94:85:6a:dc:97:e4:2d:50:9c:3c:41: bb:50:89:cd:ec:eb:dd:f6:ca:2a:e8:e2:64:28:f9: a6:0d:ea:e3:3c:b6:ea:ca:71:15:4f:eb:74:00:14: 8e:75:fc:07:8b:87:66:ec:f6:6c:0f:db:57:84:9d: 3f:dd:06:68:ad:82:d7:40:b6:49:30:a5:9c:e8:b2: 3a:87:7c:b0:b9:84:16:e9:54:98:a7:3b:31:87:28: 17:fd:76:3c:40:00:6f:75:c3:77:0d:4f:2a:a9:f9: 95:50:ff:e5:dd:62:4e:c5:10:b2:8a:b7:68:82:b1: f0:0a:74:20:ed:57:d2:ca:7d:15:db:bb:6c:26:98: fb:93:48:ac:2d:fb:bb:27:f9:85:27:5d:23:15:f6: 27:ac:f6:3b:9c:71:a1:86:cc:81:93:5b:ec:73:e7: 8f:83:64:7f:e9:c6:16:27:73:c6:7b:df:12:44:c1: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4D:A5:AB:46:A5:0D:C0:EB:E4:5D:2F:3A:C4:C8:9A:3A:44:6E:D3 X509v3 Authority Key Identifier: keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:5c:1b:ec:75:bb:00:03:e3:d2:b7:2b:07:8a:53:54:75: bc:94:61:5c:0d:09:82:d2:79:ea:ed:ab:96:06:32:4f:aa:dc: b1:cf:99:46:3d:03:9d:af:78:91:4a:4e:1b:f4:2e:81:92:37: 58:d4:92:4a:a2:1f:72:9d:ae:8d:f9:b2:fd:93:e9:d6:53:8d: 9c:8b:de:ca:f8:24:84:f0:64:a9:46:38:46:87:4c:c9:01:c2: 44:0b:09:bc:de:d3:75:46:d5:25:ad:c9:5f:6b:8c:94:cb:95: fe:2a:2e:33:8c:0d:12:5b:5f:b5:c9:44:05:54:c8:92:8a:97: 94:54:ad:e3:cc:69:2c:42:24:d6:31:73:b8:45:9e:51:cd:ff: 62:e3:d5:80:ee:2d:88:af:0a:99:e7:88:15:50:59:e5:79:d2: 9c:cc:b4:53:5e:e5:85:b5:d7:25:d7:26:a8:71:23:6d:3d:2e: 55:89:43:82:cb:e4:e9:11:78:0b:ec:81:c7:1e:88:39:d8:57: ae:7c:27:1a:dd:be:f8:0e:78:bf:f8:ba:d9:d5:e2:c4:9c:60: a2:c1:5c:fd:fe:8f:84:95:aa:55:b7:84:66:48:d0:c5:58:ff: 75:34:61:db:1c:7e:b0:d1:59:6a:8d:e9:e8:1d:e0:de:a8:da: 69:20:f4:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZLHAeypr4FMflEOHnP3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJkZTkzNzBjMjBlZjFiYTRkN2ZlMWJiMDE4ZjNmNmRm ZGM5Y2UwHhcNMjUxMjE2MDkwMTMxWhcNMjUxMjE3MDkwMTMxWjAzMTEwLwYDVQQD EygzODRkYTVhYjQ2YTUwZGMwZWJlNDVkMmYzYWM0Yzg5YTNhNDQ2ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3d/CLGkIZFYwF4hpQIFTwQhSJ/n tDXkH6S8lX6KUoyjsxRjNT87xIHzydjFGfrUAU1VrTeaILIMtjaW2/S5nsb9O5q/ SEkvpgl9Qac8lIVq3JfkLVCcPEG7UInN7Ovd9soq6OJkKPmmDerjPLbqynEVT+t0 ABSOdfwHi4dm7PZsD9tXhJ0/3QZorYLXQLZJMKWc6LI6h3ywuYQW6VSYpzsxhygX /XY8QABvdcN3DU8qqfmVUP/l3WJOxRCyirdogrHwCnQg7VfSyn0V27tsJpj7k0is Lfu7J/mFJ10jFfYnrPY7nHGhhsyBk1vsc+ePg2R/6cYWJ3PGe98SRMGoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhNpatGpQ3A6+RdLzrEyJo6RG7TMB8GA1UdIwQY MBaAFCRS3pNwwg7xuk1/4bsBjz9t/cnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUt OGVhMmQxNGE2NDJlLzEvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUtOGVhMmQxNGE2NDJl LzEvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfVcG+x1 uwAD49K3KweKU1R1vJRhXA0JgtJ56u2rlgYyT6rcsc+ZRj0Dna94kUpOG/QugZI3 WNSSSqIfcp2ujfmy/ZPp1lONnIveyvgkhPBkqUY4RodMyQHCRAsJvN7TdUbVJa3J X2uMlMuV/iouM4wNEltftclEBVTIkoqXlFSt48xpLEIk1jFzuEWeUc3/YuPVgO4t iK8KmeeIFVBZ5XnSnMy0U17lhbXXJdcmqHEjbT0uVYlDgsvk6RF4C+yBxx6IOdhX rnwnGt2++A54v/i62dXixJxgosFc/f6PhJWqVbeEZkjQxVj/dTRh2xx+sNFZao3p 6B3g3qjaaSD0UQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:29:26 2025 by rpki-client