This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft File: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json) Hash identifier: gpSUW0pRsYSODudgY1VyjnmOVhMLt4vp6nNeHHHCTe4= Subject key identifier: 74:18:2A:73:EB:06:42:7F:36:24:2D:2F:C3:31:85:1F:93:C2:E0:11 Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08 Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08 Certificate serial: 019AF31CC16747CD409DC92C67942B11675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft Manifest number: 05F4 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (hash: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=) 2: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: hFUI84UdW/wtrAPSK0bxNdM+Z/RMrjhOpCamIwoYLnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c1:67:47:cd:40:9d:c9:2c:67:94:2b:11:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=74182a73eb06427f36242d2fc331851f93c2e011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:60:31:6c:1f:91:91:0a:b5:46:82:96:3f: b6:d2:48:97:80:4d:a7:9a:01:88:8f:e2:6a:b7:44: 8f:c2:10:3c:9c:6f:e9:0d:40:ee:23:e1:d7:a5:b2: e6:e1:a4:01:c8:11:db:e7:c1:c5:34:73:2c:62:84: 5e:88:97:0e:d8:83:a7:13:54:6b:b5:e8:38:4e:cb: 5b:66:6e:4b:ba:51:0d:d0:2f:ce:25:fc:d0:05:e9: 20:d4:09:4c:98:c7:f3:7c:0a:0e:d6:2f:11:33:c9: bd:b6:d8:c8:46:b3:a8:61:3d:05:e2:9e:ce:ff:8b: ee:58:b8:2c:de:dd:f8:8f:90:fc:7d:d2:d7:b7:cd: f8:9b:b2:c4:68:58:8b:8c:81:9a:ec:71:50:9d:b1: fe:80:4c:f6:31:b8:d6:51:98:a2:68:d2:5c:c0:db: 78:f5:ac:0d:5a:43:ad:fb:09:8b:6d:5d:8f:f0:a8: 89:6c:48:db:49:d3:94:bc:aa:34:8e:7b:40:91:e4: 23:ee:10:28:d7:fc:95:94:f4:e7:62:ea:a1:1e:81: a9:e4:10:33:46:c6:05:91:fd:c8:77:ca:d1:4b:06: 0b:87:c8:85:18:c1:ac:b9:9f:9d:72:53:7e:9e:66: 69:16:5e:2e:89:a3:56:88:cc:8e:7b:e5:b0:27:3b: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:18:2A:73:EB:06:42:7F:36:24:2D:2F:C3:31:85:1F:93:C2:E0:11 X509v3 Authority Key Identifier: keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:63:4e:bc:77:69:dd:5a:6f:02:62:f8:8b:5e:8b:f5:d2: 98:55:ea:14:45:43:07:7f:ff:cb:3e:1f:0d:d0:f0:aa:60:01: 61:79:ab:8f:b4:62:79:46:f0:6b:b4:c7:9e:89:87:be:17:e4: c0:a8:94:a6:50:1f:74:72:af:18:cb:85:3e:6f:c5:0a:40:d9: 12:70:95:ed:43:77:33:e9:d8:cf:2a:75:ef:ae:f9:ff:38:39: ba:db:90:1f:53:65:d1:43:ad:91:50:29:ca:98:55:fa:b8:c4: bf:8e:a5:be:3d:0c:5c:03:54:cd:b0:f8:36:8f:12:6c:bd:89: 89:5d:8b:73:7f:b3:47:08:20:53:55:86:6b:29:ba:2c:a1:7e: cb:97:05:05:1d:0f:ef:0a:8d:ed:6d:e9:52:44:59:f0:96:5b: 06:3f:fa:d7:fa:f2:33:96:d4:e1:ed:89:b4:db:74:27:41:6e: 2d:80:7f:4a:8b:b4:7a:a3:95:d0:0a:17:d6:9d:23:7e:fc:32: 0d:2e:fe:ec:5d:07:3d:3f:f8:06:7d:90:a1:23:39:7d:7d:e6: ed:63:fb:df:1e:4d:b6:a8:87:6e:ca:48:9e:c4:22:8d:da:71: 6d:3c:0a:6b:a7:cf:8b:48:cc:83:2b:31:12:a2:50:44:c1:81: 79:7c:ea:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMFnR81AncksZ5QrEWdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NWU4NWY4MjYyODg4YjU0YTg0OWJkY2Y0Y2VjNTAzMTY5 MTFhMDgwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD Eyg3NDE4MmE3M2ViMDY0MjdmMzYyNDJkMmZjMzMxODUxZjkzYzJlMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lgMWwfkZEKtUaClj+20kiXgE2n mgGIj+Jqt0SPwhA8nG/pDUDuI+HXpbLm4aQByBHb58HFNHMsYoReiJcO2IOnE1Rr teg4TstbZm5LulEN0C/OJfzQBekg1AlMmMfzfAoO1i8RM8m9ttjIRrOoYT0F4p7O /4vuWLgs3t34j5D8fdLXt834m7LEaFiLjIGa7HFQnbH+gEz2MbjWUZiiaNJcwNt4 9awNWkOt+wmLbV2P8KiJbEjbSdOUvKo0jntAkeQj7hAo1/yVlPTnYuqhHoGp5BAz RsYFkf3Id8rRSwYLh8iFGMGsuZ+dclN+nmZpFl4uiaNWiMyOe+WwJzvfywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQYKnPrBkJ/NiQtL8MxhR+TwuARMB8GA1UdIwQY MBaAFCZehfgmKIi1SoSb3PTOxQMWkRoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80OTE5MjUtZGY5MC00MDE0LThjYWYt NWFhMzY3ZDZhYjZlLzEvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80OTE5MjUtZGY5MC00MDE0LThjYWYtNWFhMzY3ZDZhYjZl LzEvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1NjTrx3 ad1abwJi+Itei/XSmFXqFEVDB3//yz4fDdDwqmABYXmrj7RieUbwa7THnomHvhfk wKiUplAfdHKvGMuFPm/FCkDZEnCV7UN3M+nYzyp17675/zg5utuQH1Nl0UOtkVAp yphV+rjEv46lvj0MXANUzbD4No8SbL2JiV2Lc3+zRwggU1WGaym6LKF+y5cFBR0P 7wqN7W3pUkRZ8JZbBj/61/ryM5bU4e2JtNt0J0FuLYB/Sou0eqOV0AoX1p0jfvwy DS7+7F0HPT/4Bn2QoSM5fX3m7WP73x5NtqiHbspInsQijdpxbTwKa6fPi0jMgysx EqJQRMGBeXzq6w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:54 2025 by rpki-client