This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json) Hash identifier: ld236AGOFQvw39SnAejdhIvT59X8scUNZWxbYLVa1QU= Subject key identifier: 7A:1E:15:07:64:D7:1E:9D:ED:16:D2:2F:5E:20:64:FD:FB:36:54:1C Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Certificate serial: 019AF509BC81AEAEAE563603DF37FAB8AE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft Manifest number: 05DA Signing time: Sat 06 Dec 2025 19:00:47 +0000 Manifest this update: Sat 06 Dec 2025 19:00:47 +0000 Manifest next update: Sun 07 Dec 2025 19:00:47 +0000 Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: WgZnFd1jQvF7BHYbJYxT6zvVtnKT3cW3O5bxVp0Yxr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:bc:81:ae:ae:ae:56:36:03:df:37:fa:b8:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Validity Not Before: Dec 6 19:00:47 2025 GMT Not After : Dec 7 19:00:47 2025 GMT Subject: CN=7a1e150764d71e9ded16d22f5e2064fdfb36541c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:dd:62:6e:52:09:4d:f0:8b:c5:3b:8d:0b: 7d:cd:ec:c9:ce:63:54:bf:ed:20:ed:f3:29:48:df: 1f:de:d8:4b:6d:c5:bb:60:87:b8:6f:38:a6:69:b8: e4:d2:ba:d8:74:b3:79:3c:89:a0:93:31:3e:b9:0e: 77:9f:e2:ff:fa:5c:f3:a4:02:5e:f3:f0:83:2b:f6: f8:55:b1:c6:b0:8d:6d:15:65:c6:2c:25:1f:d7:11: 24:50:f7:63:39:4c:90:b9:37:01:9d:31:09:7d:79: a5:31:5d:e6:cb:5f:a3:43:71:b8:4f:2a:c5:7f:8f: 9b:e5:c9:83:8e:6b:ca:16:bc:70:02:45:56:f9:14: f2:66:dd:e2:8c:37:ea:09:4c:06:b1:45:97:63:07: 98:94:3b:66:9f:cc:01:f8:bf:a6:65:ef:d6:b6:95: 19:3c:1a:7e:81:ac:97:a1:8c:ae:97:3e:47:44:a5: ad:0c:e1:79:60:3c:c0:aa:94:af:85:f1:55:ca:c2: fd:bb:da:e7:8c:b7:1c:07:20:7c:52:45:f2:f2:54: 07:87:de:45:d5:d4:51:1b:1b:94:87:85:bf:c0:52: a6:1d:04:f8:0b:2a:ca:68:a8:e6:b8:4e:37:52:55: 1d:fb:ca:be:ff:ba:fa:9d:fa:65:a1:b9:97:ee:c2: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1E:15:07:64:D7:1E:9D:ED:16:D2:2F:5E:20:64:FD:FB:36:54:1C X509v3 Authority Key Identifier: keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c1:56:72:e3:02:18:b7:b0:4d:39:39:e4:5d:ec:a4:b0:b0: 5b:75:80:22:76:7b:48:1a:20:3e:2b:4f:27:3c:89:7b:10:1e: 06:f8:c7:f9:45:26:2c:a4:85:08:88:a9:06:34:99:7b:4c:64: 2d:98:6a:90:89:42:7e:ec:da:aa:24:14:98:3a:dd:bc:85:60: cc:3f:c1:2f:09:ef:0f:63:8e:e6:bb:94:7e:68:a3:73:f3:89: 9d:f4:b5:31:b3:36:d3:e2:d5:81:26:ca:e6:8e:a9:b4:78:f0: 88:66:02:7b:de:b0:1f:45:fe:66:8f:a4:16:d9:af:1a:27:dd: 1a:9d:2a:69:48:db:9c:43:be:6d:3f:b0:11:25:e6:fd:9a:5c: 2f:f7:f8:e6:18:e4:ef:49:df:f3:f3:c7:70:fe:31:9c:ac:61: b4:dc:30:3f:7a:41:ad:22:4e:6b:6a:e7:e1:fd:2c:33:aa:40: 23:26:49:06:ce:6a:12:74:de:ac:c2:73:74:1e:78:12:b9:90: f7:cc:6f:64:95:52:79:a1:d5:eb:7a:65:66:2f:db:e5:5c:4e: ce:58:c0:51:56:34:8f:7d:0d:b8:67:f9:4d:56:40:ae:cf:3d: b3:d7:4e:4c:2d:b5:6e:70:fc:be:49:e1:a3:dd:45:00:5f:4f: a0:ee:8e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbyBrq6uVjYD3zf6uK5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj ZWViMDQwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD Eyg3YTFlMTUwNzY0ZDcxZTlkZWQxNmQyMmY1ZTIwNjRmZGZiMzY1NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlALdYm5SCU3wi8U7jQt9zezJzmNU v+0g7fMpSN8f3thLbcW7YIe4bzimabjk0rrYdLN5PImgkzE+uQ53n+L/+lzzpAJe 8/CDK/b4VbHGsI1tFWXGLCUf1xEkUPdjOUyQuTcBnTEJfXmlMV3my1+jQ3G4TyrF f4+b5cmDjmvKFrxwAkVW+RTyZt3ijDfqCUwGsUWXYweYlDtmn8wB+L+mZe/WtpUZ PBp+gayXoYyulz5HRKWtDOF5YDzAqpSvhfFVysL9u9rnjLccByB8UkXy8lQHh95F 1dRRGxuUh4W/wFKmHQT4CyrKaKjmuE43UlUd+8q+/7r6nfplobmX7sLhVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoeFQdk1x6d7RbSL14gZP37NlQcMB8GA1UdIwQY MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMFWcuMC GLewTTk55F3spLCwW3WAInZ7SBogPitPJzyJexAeBvjH+UUmLKSFCIipBjSZe0xk LZhqkIlCfuzaqiQUmDrdvIVgzD/BLwnvD2OO5ruUfmijc/OJnfS1MbM20+LVgSbK 5o6ptHjwiGYCe96wH0X+Zo+kFtmvGifdGp0qaUjbnEO+bT+wESXm/ZpcL/f45hjk 70nf8/PHcP4xnKxhtNwwP3pBrSJOa2rn4f0sM6pAIyZJBs5qEnTerMJzdB54ErmQ 98xvZJVSeaHV63plZi/b5VxOzljAUVY0j30NuGf5TVZArs89s9dOTC21bnD8vknh o91FAF9PoO6OJA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:23 2025 by rpki-client