This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json) Hash identifier: cPdoc7G5pPaxd6p7q4rHCPE2pe+a4gcJ+wDBfmfCoew= Subject key identifier: 34:0B:CA:E0:0F:B2:E5:25:A2:36:A2:38:8D:E3:CF:76:08:B2:2D:0A Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Certificate serial: 019B34C511CE6600CB11ED1D485222F25D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft Manifest number: 1022 Signing time: Fri 19 Dec 2025 04:01:28 +0000 Manifest this update: Fri 19 Dec 2025 04:01:28 +0000 Manifest next update: Sat 20 Dec 2025 04:01:28 +0000 Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: QE/GkexH3br9Qu2kBMBOAyHRsJo6mmlCbvIRglIUcL0=) 2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:11:ce:66:00:cb:11:ed:1d:48:52:22:f2:5d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Validity Not Before: Dec 19 04:01:28 2025 GMT Not After : Dec 20 04:01:28 2025 GMT Subject: CN=340bcae00fb2e525a236a2388de3cf7608b22d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:93:31:0e:02:e6:29:52:3f:4d:db:64:ed: 61:65:d7:c7:6e:ac:d9:49:89:5e:f9:5b:f7:e3:0a: 60:32:b3:6a:00:27:b8:96:0d:8b:ab:88:41:18:76: 5d:df:69:26:a3:c6:82:4d:83:f5:50:49:e2:a6:43: 21:a9:27:d6:d7:b8:c0:b9:78:52:f6:97:76:64:9e: 0f:42:85:92:80:4f:99:ff:25:ea:e4:6b:fd:90:9c: 07:b3:95:1d:11:d5:0c:48:2c:9c:c4:5e:a8:53:d0: 03:4c:5f:c2:3a:27:24:f6:51:10:2d:a3:d5:e7:67: 89:84:27:b7:aa:f8:bb:43:21:a5:65:73:4d:f5:45: 96:eb:b1:85:ce:83:62:6f:0c:17:ac:a5:63:d9:f5: d4:b5:5a:08:41:63:2d:ec:77:38:7e:20:51:7e:2d: 6e:e3:31:45:47:17:89:40:7a:8d:04:58:45:20:63: 00:2f:af:f8:7e:0a:3e:37:ac:5b:6d:66:91:d7:e9: 2f:09:b1:d6:29:ee:49:92:8e:85:b8:d1:34:25:0a: 3a:f7:64:56:88:a2:37:af:27:80:17:53:69:c1:cf: 91:04:4e:3e:d0:25:d6:de:f8:f9:e1:8e:09:36:22: e8:54:db:78:02:08:f9:c9:71:00:8f:7f:40:a4:7f: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:CA:E0:0F:B2:E5:25:A2:36:A2:38:8D:E3:CF:76:08:B2:2D:0A X509v3 Authority Key Identifier: keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:9e:51:59:22:5b:96:c8:63:50:d2:e9:25:3f:01:92:50: 2d:2a:6a:a5:d7:44:b7:8e:ce:28:52:14:11:c2:0d:9e:3b:43: 8f:0f:c6:b4:cb:a7:fb:d5:e3:ce:c5:e5:49:6f:35:39:b4:62: 38:12:c0:8f:54:1c:2c:e7:8e:7e:dd:2a:6c:ce:53:98:01:ca: e8:ed:7c:a8:eb:37:19:1c:40:11:bf:58:db:29:44:98:8d:3b: 8e:96:6e:89:b9:cb:fb:96:15:a3:09:7d:89:30:38:3e:1d:3f: a9:c6:33:ff:3e:84:c9:e2:f3:35:c2:90:88:9b:85:86:b3:1b: 97:de:da:5e:c4:93:15:3f:0c:65:57:81:22:e1:59:b0:a1:1d: 34:bd:2c:d8:4c:b2:6a:2d:cb:8b:8c:ba:26:02:11:13:67:14: 5d:ae:61:af:e6:d9:d3:12:a0:3a:12:bf:dd:0e:85:e0:e3:d8: a8:a0:86:21:a6:8b:fe:97:27:4f:71:c2:d6:43:ad:63:d7:c0: 6c:91:0c:49:25:aa:2e:6f:b9:a7:df:d4:59:96:e2:fd:a1:91: 0a:31:8e:f0:62:8c:e3:3a:a6:f0:dc:46:7a:14:e6:5e:7f:c5: 49:2f:cb:dd:2b:be:91:32:ad:a0:a2:c8:92:1c:3f:9b:53:dc: ac:96:d3:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRHOZgDLEe0dSFIi8l1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw OWZiYzMwHhcNMjUxMjE5MDQwMTI4WhcNMjUxMjIwMDQwMTI4WjAzMTEwLwYDVQQD EygzNDBiY2FlMDBmYjJlNTI1YTIzNmEyMzg4ZGUzY2Y3NjA4YjIyZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwiTMQ4C5ilSP03bZO1hZdfHbqzZ SYle+Vv34wpgMrNqACe4lg2Lq4hBGHZd32kmo8aCTYP1UEnipkMhqSfW17jAuXhS 9pd2ZJ4PQoWSgE+Z/yXq5Gv9kJwHs5UdEdUMSCycxF6oU9ADTF/COick9lEQLaPV 52eJhCe3qvi7QyGlZXNN9UWW67GFzoNibwwXrKVj2fXUtVoIQWMt7Hc4fiBRfi1u 4zFFRxeJQHqNBFhFIGMAL6/4fgo+N6xbbWaR1+kvCbHWKe5Jko6FuNE0JQo692RW iKI3ryeAF1Npwc+RBE4+0CXW3vj54Y4JNiLoVNt4Agj5yXEAj39ApH9c5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQLyuAPsuUlojaiOI3jz3YIsi0KMB8GA1UdIwQY MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASWeUVki W5bIY1DS6SU/AZJQLSpqpddEt47OKFIUEcINnjtDjw/GtMun+9XjzsXlSW81ObRi OBLAj1QcLOeOft0qbM5TmAHK6O18qOs3GRxAEb9Y2ylEmI07jpZuibnL+5YVowl9 iTA4Ph0/qcYz/z6EyeLzNcKQiJuFhrMbl97aXsSTFT8MZVeBIuFZsKEdNL0s2Eyy ai3Li4y6JgIRE2cUXa5hr+bZ0xKgOhK/3Q6F4OPYqKCGIaaL/pcnT3HC1kOtY9fA bJEMSSWqLm+5p9/UWZbi/aGRCjGO8GKM4zqm8NxGehTmXn/FSS/L3Su+kTKtoKLI khw/m1PcrJbTYw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:31:26 2025 by rpki-client