This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json) Hash identifier: wbGGkRuP0hXN2yWyedUSCt9SsUkCtFj/OBFKssR7yEc= Subject key identifier: 8B:7A:76:BF:4A:0C:C4:4F:6E:3B:7A:F5:9A:0D:6D:3F:AD:44:16:A4 Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c Certificate serial: 019AF35227FD6FC166E398B7FF45D5187F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft Manifest number: 01E3 Signing time: Sat 06 Dec 2025 11:00:38 +0000 Manifest this update: Sat 06 Dec 2025 11:00:38 +0000 Manifest next update: Sun 07 Dec 2025 11:00:38 +0000 Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: qxpcPlqxM6hW7J1WtSWipWo96UpQoMcEBYFtBjP0+MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:27:fd:6f:c1:66:e3:98:b7:ff:45:d5:18:7f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c Validity Not Before: Dec 6 11:00:38 2025 GMT Not After : Dec 7 11:00:38 2025 GMT Subject: CN=8b7a76bf4a0cc44f6e3b7af59a0d6d3fad4416a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1e:bd:91:fb:26:1a:79:a2:71:b0:04:f3:48: e4:20:a6:4b:ac:0c:d3:fb:a6:2e:1f:83:1a:11:6e: 79:24:14:14:07:6a:04:fb:65:55:d5:c4:7f:22:bf: 22:f4:c8:1d:56:9a:55:39:e4:14:0a:2e:1e:44:5e: e0:70:a3:b2:1d:2a:56:69:99:fe:e8:06:fb:e3:7a: 92:8c:93:a6:b0:bd:31:a0:f5:9e:47:11:02:ad:33: e0:d1:7f:c6:03:d9:13:ab:f7:77:68:52:67:2e:3f: fc:3c:b6:e5:e8:08:1e:dd:f6:f2:3e:cf:94:2d:0f: e1:cf:f8:b3:a9:1b:cc:74:d3:67:a8:cb:00:fe:c8: d2:b7:6a:9f:3b:1d:e0:37:51:c2:ae:b1:1f:63:5f: a8:8f:88:54:1c:91:95:7c:2b:da:7a:3c:2c:58:6a: aa:7a:12:54:8e:92:ca:62:06:f2:ac:ed:c1:6b:6e: 7d:ac:c2:2b:03:0b:1e:8b:ab:b5:25:28:de:7e:01: 86:d0:c4:61:fc:1d:f1:e9:29:21:bf:2a:30:57:94: 44:2a:f4:91:49:f3:92:40:e4:d2:7b:ea:fd:da:2d: 7b:6b:91:7b:9b:04:c3:95:96:15:6f:b8:52:4e:4b: 1f:44:58:66:b8:52:5f:39:98:2c:fe:6f:f5:d9:99: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:76:BF:4A:0C:C4:4F:6E:3B:7A:F5:9A:0D:6D:3F:AD:44:16:A4 X509v3 Authority Key Identifier: keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:97:b7:8e:19:ac:96:c2:b0:b4:8f:56:09:89:d3:f9:6b: d8:5c:ea:72:0c:2e:c5:3b:40:2d:3e:1e:e4:ce:15:f2:fd:22: c7:ff:6a:4e:0d:26:14:5a:72:bd:87:46:e3:ad:95:de:74:ff: 12:16:28:d8:d8:e7:fa:b3:75:5f:ed:f9:95:ef:be:74:19:28: 4f:08:67:fc:ff:16:b8:2d:73:a3:59:02:94:cf:6d:90:f2:63: 75:c1:16:16:df:fd:ac:ba:ae:0c:6a:8b:2b:ba:29:d5:44:a8: 18:cc:ad:68:7b:ff:35:21:b6:96:66:10:33:31:78:04:13:7a: e4:b0:70:e9:f0:7f:6d:37:13:70:7b:53:a3:0f:92:11:89:d1: bc:34:8c:97:52:8e:f9:9a:e5:de:26:91:c8:99:dd:90:c6:fa: 30:bb:ff:7a:cd:1b:64:c1:3b:8e:aa:6c:86:37:09:59:f5:9d: ac:c6:ba:01:14:31:d6:92:0a:b3:44:11:af:bc:d4:ea:ab:b9: 8b:60:72:da:bb:0b:56:ee:f2:2b:13:3f:44:9c:6c:9c:a2:2f: 3f:af:1f:ca:b0:05:62:8c:7c:6f:1d:a4:64:53:8a:81:6a:7a: e3:4c:f4:87:47:72:de:94:ba:dc:75:44:16:a0:8b:89:1d:5f: bc:98:2a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUif9b8Fm45i3/0XVGH8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MTIyODY5ZDBlYTRmOTg3YWI1MWZiOTc5MTgwMGQ4NDA1 YTlhM2MwHhcNMjUxMjA2MTEwMDM4WhcNMjUxMjA3MTEwMDM4WjAzMTEwLwYDVQQD Eyg4YjdhNzZiZjRhMGNjNDRmNmUzYjdhZjU5YTBkNmQzZmFkNDQxNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R69kfsmGnmicbAE80jkIKZLrAzT +6YuH4MaEW55JBQUB2oE+2VV1cR/Ir8i9MgdVppVOeQUCi4eRF7gcKOyHSpWaZn+ 6Ab743qSjJOmsL0xoPWeRxECrTPg0X/GA9kTq/d3aFJnLj/8PLbl6Age3fbyPs+U LQ/hz/izqRvMdNNnqMsA/sjSt2qfOx3gN1HCrrEfY1+oj4hUHJGVfCvaejwsWGqq ehJUjpLKYgbyrO3Ba259rMIrAwsei6u1JSjefgGG0MRh/B3x6SkhvyowV5REKvSR SfOSQOTSe+r92i17a5F7mwTDlZYVb7hSTksfRFhmuFJfOZgs/m/12Zmp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt6dr9KDMRPbjt69ZoNbT+tRBakMB8GA1UdIwQY MBaAFCUSKGnQ6k+YerUfuXkYANhAWpo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUt ODY5MjIwNjc3YmM2LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wZTVkNGItNjI1Yy00NTcxLWJiNDUtODY5MjIwNjc3YmM2 LzEvSlJJb2FkRHFUNWg2dFItNWVSZ0EyRUJhbWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTaXt44Z rJbCsLSPVgmJ0/lr2FzqcgwuxTtALT4e5M4V8v0ix/9qTg0mFFpyvYdG462V3nT/ EhYo2Njn+rN1X+35le++dBkoTwhn/P8WuC1zo1kClM9tkPJjdcEWFt/9rLquDGqL K7op1USoGMytaHv/NSG2lmYQMzF4BBN65LBw6fB/bTcTcHtTow+SEYnRvDSMl1KO +Zrl3iaRyJndkMb6MLv/es0bZME7jqpshjcJWfWdrMa6ARQx1pIKs0QRr7zU6qu5 i2By2rsLVu7yKxM/RJxsnKIvP68fyrAFYox8bx2kZFOKgWp640z0h0dy3pS63HVE FqCLiR1fvJgqhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:47 2025 by rpki-client