This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json) Hash identifier: BtEQ2qx82W7QxeEkHo+4dt8GgbQHayWj/xPPGgSDp5g= Subject key identifier: 1D:4A:19:83:B8:4B:4B:4C:14:C1:46:21:C2:37:AC:D1:CA:DC:D5:C6 Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Certificate serial: 019AF1D183803AF68B26A96603F9DB980EBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft Manifest number: 037B Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: ufPvcwk/rHeXJN9rKPELxj4S6z9YYfPwxrdRUVPcPxs=) 2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:83:80:3a:f6:8b:26:a9:66:03:f9:db:98:0e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=1d4a1983b84b4b4c14c14621c237acd1cadcd5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:e5:3b:09:5d:8d:55:49:f9:a8:f8:ab:6e: e2:d3:e2:6b:52:0c:4c:83:fe:bc:09:0c:b1:db:93: af:3b:05:ed:a4:5b:f6:b9:37:de:9f:93:b7:a8:e2: f1:ff:dc:86:d7:9d:71:fd:a2:7b:6f:91:65:32:23: ba:6f:ba:80:0c:d1:02:f3:81:d9:ef:51:ab:be:87: 15:ae:73:d0:f2:f5:73:56:ae:5f:5a:ee:77:d8:55: e9:ac:ea:58:8c:26:a1:41:0a:5a:80:cc:90:2a:75: 8f:fa:8d:17:d9:8a:b3:8c:4e:5d:e3:d4:25:f9:f8: a2:1d:49:f1:7a:1a:e3:ae:e1:ec:a1:e7:80:69:20: 9b:8c:d5:a3:8c:54:0c:0a:bc:7b:75:21:e8:57:3d: 54:9c:5d:1a:f9:e6:31:ed:1c:09:ef:3b:c7:f5:76: 38:39:a1:fe:c3:5e:30:4b:dc:bc:84:3e:6a:ae:f8: 12:15:46:3d:11:77:7f:cb:8d:28:67:23:e4:dc:a8: 8d:3d:b1:2d:c7:85:dc:8e:a5:b0:33:87:85:ef:b1: 05:e1:12:18:28:e1:86:42:60:ee:4c:d2:66:a5:08: 86:bd:c6:9b:96:52:7e:04:a1:0e:f5:32:8b:34:17: 4a:1f:fa:8a:1f:05:f4:b6:d9:68:4e:fb:ba:60:42: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4A:19:83:B8:4B:4B:4C:14:C1:46:21:C2:37:AC:D1:CA:DC:D5:C6 X509v3 Authority Key Identifier: keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4c:a9:4e:d6:47:61:e2:d2:00:cc:16:2b:cb:69:68:25:40: 00:c9:b9:da:0a:6a:70:1c:73:e0:86:43:08:51:7b:09:1c:0e: 13:3a:bc:f1:c9:f1:a3:07:b2:31:68:67:8a:78:00:7e:0f:37: 07:f0:f7:c5:72:8b:b0:65:35:6c:1a:7c:e3:a2:9e:e5:87:1c: 6e:3f:ce:0f:e8:10:a9:f6:ae:44:61:70:6d:b5:77:a5:96:9f: 46:f0:48:02:84:04:ed:00:67:4d:b0:43:5a:70:33:fb:0f:f4: 50:4f:12:12:fb:e4:ac:56:ad:b7:48:6f:38:26:18:18:cf:0d: 2f:97:57:45:18:c6:51:7a:70:3d:93:d8:66:f2:60:57:b0:a5: c7:e8:ab:8c:84:89:53:19:78:99:35:95:18:9d:c7:fd:c9:ab: 34:9f:52:49:07:4e:e1:9a:e0:2f:8b:05:45:7d:66:e4:84:34: 97:e3:84:d0:3e:3a:e0:f6:53:14:b2:6c:ff:98:c0:d2:06:34: 8f:e5:2e:18:00:68:7e:86:e5:64:76:46:5c:40:c5:25:49:04: ee:24:78:ae:f6:74:14:0b:fa:0d:c2:e4:5f:79:84:ea:6d:7a: 9b:03:4b:e4:34:84:55:94:c5:eb:fa:d1:a9:c1:f1:03:50:5c: 2e:e0:d2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YOAOvaLJqlmA/nbmA67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw YTlkZTgwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EygxZDRhMTk4M2I4NGI0YjRjMTRjMTQ2MjFjMjM3YWNkMWNhZGNkNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLjlOwldjVVJ+aj4q27i0+JrUgxM g/68CQyx25OvOwXtpFv2uTfen5O3qOLx/9yG151x/aJ7b5FlMiO6b7qADNEC84HZ 71GrvocVrnPQ8vVzVq5fWu532FXprOpYjCahQQpagMyQKnWP+o0X2YqzjE5d49Ql +fiiHUnxehrjruHsoeeAaSCbjNWjjFQMCrx7dSHoVz1UnF0a+eYx7RwJ7zvH9XY4 OaH+w14wS9y8hD5qrvgSFUY9EXd/y40oZyPk3KiNPbEtx4XcjqWwM4eF77EF4RIY KOGGQmDuTNJmpQiGvcabllJ+BKEO9TKLNBdKH/qKHwX0ttloTvu6YEJIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1KGYO4S0tMFMFGIcI3rNHK3NXGMB8GA1UdIwQY MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUypTtZH YeLSAMwWK8tpaCVAAMm52gpqcBxz4IZDCFF7CRwOEzq88cnxoweyMWhningAfg83 B/D3xXKLsGU1bBp846Ke5Yccbj/OD+gQqfauRGFwbbV3pZafRvBIAoQE7QBnTbBD WnAz+w/0UE8SEvvkrFatt0hvOCYYGM8NL5dXRRjGUXpwPZPYZvJgV7Clx+irjISJ Uxl4mTWVGJ3H/cmrNJ9SSQdO4ZrgL4sFRX1m5IQ0l+OE0D464PZTFLJs/5jA0gY0 j+UuGABofoblZHZGXEDFJUkE7iR4rvZ0FAv6DcLkX3mE6m16mwNL5DSEVZTF6/rR qcHxA1BcLuDSYA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:25 2025 by rpki-client