This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json) Hash identifier: PVVcWfWN/ZS8z2A1WEKaY/jCcWMyxbXd+I3+S11fi9M= Subject key identifier: B5:60:D9:81:CF:47:3B:BD:4E:37:E5:53:68:EA:02:AD:62:2D:8D:C9 Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1 Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1 Certificate serial: 019AF23F6D327917466816C54ABF108786FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft Manifest number: 06C3 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: gsOvOsWn+7DDo61kPomFtmvmlFeLh+bsGMZVOKW4ifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6d:32:79:17:46:68:16:c5:4a:bf:10:87:86:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=b560d981cf473bbd4e37e55368ea02ad622d8dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:6c:07:25:95:27:8e:2c:30:99:80:ae:8a: 84:e8:69:f4:3e:a3:73:3b:12:12:86:56:3d:66:90: 29:a2:88:db:4e:8e:b9:79:bb:45:c3:af:6f:b3:fd: f0:19:2e:11:94:74:56:29:c8:16:52:b5:98:cc:5b: e2:49:e9:6e:d1:97:a0:b4:9d:71:71:34:b4:de:d4: ce:4e:38:86:7e:d4:60:d6:42:26:57:d1:05:bc:d2: b2:16:56:47:b4:56:1b:23:1b:f9:53:59:f2:4e:0b: a9:eb:13:35:75:f6:39:d0:dc:14:0a:9c:ad:c0:0b: 06:38:81:11:05:08:0b:f1:13:91:8a:56:aa:40:62: 83:d2:70:fb:00:ff:b6:37:a9:93:9d:ed:f4:ef:3f: a3:69:99:6a:94:62:29:5a:de:e4:d3:d8:9d:18:23: de:67:d4:72:31:7f:00:0e:0e:f7:88:3c:37:56:db: 44:7f:f5:5c:a8:1f:7d:42:4a:df:92:c8:39:c8:c8: 88:d3:f0:e5:75:51:e3:cc:99:12:3a:70:1c:66:bd: d8:5f:23:18:de:4e:ff:74:59:c0:81:cf:f2:cb:53: 0d:6a:09:26:28:65:eb:e5:3d:4a:45:30:51:40:13: bb:bf:72:e3:78:a7:34:ee:db:06:cd:c2:c7:2a:24: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:D9:81:CF:47:3B:BD:4E:37:E5:53:68:EA:02:AD:62:2D:8D:C9 X509v3 Authority Key Identifier: keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5d:94:fc:c0:df:0b:a3:23:bb:5c:e8:30:11:e1:f8:64:25: 57:ba:5d:4b:19:d4:fa:c8:d5:13:a4:be:ee:f3:49:6a:a5:9c: 6f:5a:be:5a:2f:17:46:d3:9f:76:9a:19:e6:15:88:b8:73:be: 6e:c4:d9:8d:ca:7f:99:f5:02:af:17:86:39:bf:65:f1:78:e8: b9:d0:b4:55:d4:d3:c2:16:0a:73:44:79:1e:2c:1e:65:9b:21: c2:9e:7e:f8:42:d2:43:24:e4:1e:34:7f:2b:ca:94:ad:2d:a9: 8b:f9:ef:2f:a3:50:85:bb:f3:3a:85:e0:fb:99:33:0f:63:6d: 3c:ea:ed:75:d9:67:31:b2:d0:e4:52:2e:34:73:ef:c6:1d:20: 20:13:16:8e:ed:80:a8:c1:65:3c:ab:2e:ef:09:dc:25:16:a3: e2:6e:8b:e5:12:57:5e:fc:97:b9:c9:2a:46:0f:c0:07:83:97: 7e:b2:c4:56:21:b4:76:7f:21:2d:24:6e:38:0c:04:60:7b:36: bc:f7:47:7e:72:28:25:07:ba:57:f9:fd:26:ea:58:ab:f8:df: 24:8e:62:b2:94:e8:1a:4c:5d:00:f1:19:c3:09:56:9a:38:03: c8:63:e0:67:47:6f:ca:40:53:77:d8:ea:d3:b7:4b:34:b1:27: a6:45:10:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP20yeRdGaBbFSr8Qh4b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDI1ZGZjNjUyNDgzY2M3YmZmZDYxMzZmNDc3MzViZDE5 MGQ1YTEwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EyhiNTYwZDk4MWNmNDczYmJkNGUzN2U1NTM2OGVhMDJhZDYyMmQ4ZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S1sByWVJ44sMJmAroqE6Gn0PqNz OxIShlY9ZpApoojbTo65ebtFw69vs/3wGS4RlHRWKcgWUrWYzFviSelu0ZegtJ1x cTS03tTOTjiGftRg1kImV9EFvNKyFlZHtFYbIxv5U1nyTgup6xM1dfY50NwUCpyt wAsGOIERBQgL8RORilaqQGKD0nD7AP+2N6mTne307z+jaZlqlGIpWt7k09idGCPe Z9RyMX8ADg73iDw3VttEf/VcqB99Qkrfksg5yMiI0/DldVHjzJkSOnAcZr3YXyMY 3k7/dFnAgc/yy1MNagkmKGXr5T1KRTBRQBO7v3LjeKc07tsGzcLHKiRrgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVg2YHPRzu9TjflU2jqAq1iLY3JMB8GA1UdIwQY MBaAFCXSXfxlJIPMe//WE29Hc1vRkNWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQt MDAyYTEyYzI0MjQ4LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQtMDAyYTEyYzI0MjQ4 LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVV2U/MDf C6Mju1zoMBHh+GQlV7pdSxnU+sjVE6S+7vNJaqWcb1q+Wi8XRtOfdpoZ5hWIuHO+ bsTZjcp/mfUCrxeGOb9l8XjoudC0VdTTwhYKc0R5HiweZZshwp5++ELSQyTkHjR/ K8qUrS2pi/nvL6NQhbvzOoXg+5kzD2NtPOrtddlnMbLQ5FIuNHPvxh0gIBMWju2A qMFlPKsu7wncJRaj4m6L5RJXXvyXuckqRg/AB4OXfrLEViG0dn8hLSRuOAwEYHs2 vPdHfnIoJQe6V/n9JupYq/jfJI5ispToGkxdAPEZwwlWmjgDyGPgZ0dvykBTd9jq 07dLNLEnpkUQig== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:22 2025 by rpki-client