This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json) Hash identifier: rYu+Vg74tBaAAbYtc/XdfmOyLbmNBQiN5vrSlGrz3eA= Subject key identifier: 1D:8E:A0:36:E5:B1:3D:65:08:11:89:B6:E5:15:DE:79:55:DD:A4:1A Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Certificate serial: 019AF50A800A29A0B508857E429CDDB718C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:37 +0000 Manifest this update: Sat 06 Dec 2025 19:01:37 +0000 Manifest next update: Sun 07 Dec 2025 19:01:37 +0000 Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: 94/xVzq09kX3oG/LXE5s+WCgTNmAKwQUR7i+N3U0pwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:80:0a:29:a0:b5:08:85:7e:42:9c:dd:b7:18:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Validity Not Before: Dec 6 19:01:37 2025 GMT Not After : Dec 7 19:01:37 2025 GMT Subject: CN=1d8ea036e5b13d65081189b6e515de7955dda41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:d5:06:dd:7b:55:de:f1:19:87:a1:a0:7b: 75:4c:39:48:5a:00:68:c8:c9:61:f4:30:53:9b:6e: 17:9c:7e:4c:76:40:9f:c0:7e:06:6a:e3:c7:2e:3e: 30:7f:4f:55:1f:09:bc:d7:e9:4d:fa:0a:0b:60:92: 31:dd:be:5a:5c:69:99:3a:86:8c:38:d3:fc:28:f9: d1:5a:b1:d4:b0:17:7b:68:39:75:2e:8e:61:c2:54: 5a:c7:6d:ea:0a:5a:b4:81:b3:64:b1:07:b6:c0:7f: 6a:bc:2b:5e:de:79:f9:bd:a0:ee:d1:da:a8:4b:a3: 1b:2b:f1:f4:f2:04:22:8b:59:da:ec:d8:54:97:10: 30:83:cb:e9:c5:59:cc:ed:37:49:b7:8e:9b:cc:ef: eb:6e:2e:70:2b:3a:01:ae:a1:ab:ee:e9:76:fe:ad: 7a:e9:3c:ab:89:aa:78:24:74:df:1d:32:ad:62:1b: 64:52:bf:63:75:01:5d:18:b8:0f:f4:20:9a:4c:bf: 17:84:57:cd:7f:4f:b9:ac:5e:e8:a5:7b:c5:1e:d7: d2:69:01:d0:2b:b9:25:7b:ce:74:cb:a5:56:90:4e: f9:83:e5:00:f6:80:0f:fc:7b:69:4a:17:17:ce:eb: de:8f:2e:d1:be:d5:52:a9:21:d1:ff:cc:d7:06:ac: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8E:A0:36:E5:B1:3D:65:08:11:89:B6:E5:15:DE:79:55:DD:A4:1A X509v3 Authority Key Identifier: keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:d7:20:b4:71:be:1f:94:d0:8e:f9:3b:d2:ef:23:a4:ef: 7c:e6:4d:3c:d3:51:68:e3:d8:8a:3f:b4:84:27:aa:66:b1:3b: 16:6d:9d:ae:d4:0d:90:65:08:07:09:c1:ba:96:ad:25:81:e1: aa:bf:d1:2e:da:06:fb:6f:8e:f4:e0:a9:72:76:4e:14:22:24: 7a:06:7b:b4:4a:ef:e5:39:60:86:50:4a:dc:8d:cf:f4:e1:ff: 1a:d1:d1:b3:98:97:26:4b:ff:9a:1f:a3:fe:d2:7b:91:49:14: b0:d4:b6:6d:34:47:19:41:f8:8f:b9:2c:69:58:71:4d:02:d6: 6d:60:51:f7:9e:72:48:66:64:1f:61:ec:df:c3:5f:02:05:e7: f6:75:2b:9c:de:f5:e6:55:70:ba:71:a4:f7:e5:62:a1:25:eb: a9:1a:40:84:7c:76:12:a8:e2:3f:9c:87:03:75:48:34:b3:2e: c7:f1:dd:9b:a5:20:a4:31:f7:12:9f:1f:af:95:20:e7:66:ca: 6e:76:7b:32:97:14:84:d5:0b:9e:7d:ef:eb:27:cb:7a:47:26: a6:8b:2f:8a:d1:cf:62:6d:cc:9e:1d:14:6d:0d:f6:f2:36:eb: 13:40:9b:a8:0e:06:60:e0:b3:d8:6c:a4:46:0c:06:ed:66:47: 49:38:9e:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CoAKKaC1CIV+QpzdtxjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz ZmQ3Y2YwHhcNMjUxMjA2MTkwMTM3WhcNMjUxMjA3MTkwMTM3WjAzMTEwLwYDVQQD EygxZDhlYTAzNmU1YjEzZDY1MDgxMTg5YjZlNTE1ZGU3OTU1ZGRhNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjVBt17Vd7xGYehoHt1TDlIWgBo yMlh9DBTm24XnH5MdkCfwH4GauPHLj4wf09VHwm81+lN+goLYJIx3b5aXGmZOoaM ONP8KPnRWrHUsBd7aDl1Lo5hwlRax23qClq0gbNksQe2wH9qvCte3nn5vaDu0dqo S6MbK/H08gQii1na7NhUlxAwg8vpxVnM7TdJt46bzO/rbi5wKzoBrqGr7ul2/q16 6Tyriap4JHTfHTKtYhtkUr9jdQFdGLgP9CCaTL8XhFfNf0+5rF7opXvFHtfSaQHQ K7kle850y6VWkE75g+UA9oAP/HtpShcXzuvejy7RvtVSqSHR/8zXBqxZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2OoDblsT1lCBGJtuUV3nlV3aQaMB8GA1UdIwQY MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3vXILRx vh+U0I75O9LvI6TvfOZNPNNRaOPYij+0hCeqZrE7Fm2drtQNkGUIBwnBupatJYHh qr/RLtoG+2+O9OCpcnZOFCIkegZ7tErv5TlghlBK3I3P9OH/GtHRs5iXJkv/mh+j /tJ7kUkUsNS2bTRHGUH4j7ksaVhxTQLWbWBR955ySGZkH2Hs38NfAgXn9nUrnN71 5lVwunGk9+VioSXrqRpAhHx2EqjiP5yHA3VINLMux/Hdm6UgpDH3Ep8fr5Ug52bK bnZ7MpcUhNULnn3v6yfLekcmposvitHPYm3Mnh0UbQ328jbrE0CbqA4GYOCz2Gyk RgwG7WZHSTievA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:39:44 2025 by rpki-client