This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json) Hash identifier: qFLHt4Nt6qRRBCfhWOYljX/ILm6Cuh/UOPn1sZ9O4hc= Subject key identifier: FE:BA:EE:F1:6B:B9:30:83:6C:8F:55:E8:05:9A:15:E5:A5:2B:9D:D0 Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Certificate serial: 019AF12D96B32623D877D013BD5CD958BD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft Manifest number: 0FFF Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: mi+giAb2l5pyGSNo1JC6Zz4DRbLOILuJH5qLxtNChk4=) 2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:96:b3:26:23:d8:77:d0:13:bd:5c:d9:58:bd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=febaeef16bb930836c8f55e8059a15e5a52b9dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:e8:66:1e:c5:8b:f2:dd:76:6c:c6:c9:32: dc:ca:56:98:cb:fe:3b:44:55:9a:f1:7a:53:34:c6: 97:ad:2a:db:97:6d:40:6f:2a:f9:3e:3e:38:af:ff: c5:49:53:e4:b6:89:5f:96:54:21:e6:f1:6d:91:57: 59:0f:ea:ee:e2:1e:ba:a9:2f:27:9d:0e:ba:2c:3e: 9c:0f:8d:ed:ca:87:2b:a7:0a:e6:4f:61:bc:31:0e: 31:9c:b6:db:b3:91:15:6c:32:e8:1d:4b:8b:a6:f9: c7:7e:b6:f7:da:d7:77:35:21:71:8c:5a:5d:e3:78: dd:a3:aa:08:0f:db:a0:88:e4:b4:a9:05:27:37:4d: f8:c9:e9:a4:f0:88:f4:8b:d7:cf:bf:b7:e5:25:2c: 7f:a8:9d:73:cf:79:21:1c:ff:92:e8:a3:55:fe:6e: c8:75:0c:f1:6a:38:65:60:5f:f0:db:a8:e1:16:a8: 50:68:e8:fa:1a:9a:aa:d9:02:13:b9:83:a6:e2:15: d3:62:fa:20:c8:f0:b6:1f:c2:d4:93:ee:ad:3c:1a: 2b:53:2c:2b:61:58:ae:0e:49:a9:ee:43:88:7e:2c: d3:1f:92:c9:de:bd:3b:b8:d1:c2:f4:40:1b:eb:fb: a0:0f:be:3b:8d:f7:5c:e7:64:66:91:9c:63:53:a8: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BA:EE:F1:6B:B9:30:83:6C:8F:55:E8:05:9A:15:E5:A5:2B:9D:D0 X509v3 Authority Key Identifier: keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:c6:7f:ac:c7:92:2c:f9:14:f9:0b:5f:87:84:80:a7:c5: 90:f5:cd:dd:89:01:a8:92:af:df:22:f4:e1:32:c0:18:0c:d1: 68:3f:d6:49:3f:de:bc:89:7f:54:30:a8:0d:08:97:e0:50:c2: 28:fc:a2:52:c8:08:2a:47:5c:f0:a0:43:fe:5b:7e:1d:59:48: fc:65:bb:ad:77:7d:75:d2:15:1e:f7:3e:b4:34:4b:91:5c:dc: 39:35:44:4d:c9:bc:56:2b:e3:01:bf:e2:d7:38:96:eb:01:fe: 37:c0:e0:1d:7b:37:0a:92:c6:90:b0:65:9f:a1:38:1e:46:15: 96:f0:32:97:77:b3:fb:6b:e8:ad:3e:2e:10:be:85:48:e5:2c: 50:78:ea:48:79:77:28:f2:04:9e:f0:70:8f:bb:48:ab:85:9d: 5f:2d:9c:73:51:aa:27:a0:2a:f1:c4:b1:ea:2c:b2:dc:6e:f6: 8a:ac:d2:3c:8c:0a:8c:85:c3:d3:a1:18:2b:88:eb:f1:b5:a8: a5:0b:6a:9f:f7:6f:d5:08:8e:84:aa:5d:57:d5:cd:3f:09:87: e1:38:ab:3f:15:05:c5:39:10:28:67:f5:88:3f:0b:3f:30:47: c2:a4:7c:ad:5b:34:26:25:8b:95:99:bf:71:4e:94:19:09:9c: 0d:b3:66:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZazJiPYd9ATvVzZWL1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw OWZiYzMwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhmZWJhZWVmMTZiYjkzMDgzNmM4ZjU1ZTgwNTlhMTVlNWE1MmI5ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3oZh7Fi/LddmzGyTLcylaYy/47 RFWa8XpTNMaXrSrbl21Abyr5Pj44r//FSVPktolfllQh5vFtkVdZD+ru4h66qS8n nQ66LD6cD43tyocrpwrmT2G8MQ4xnLbbs5EVbDLoHUuLpvnHfrb32td3NSFxjFpd 43jdo6oID9ugiOS0qQUnN034yemk8Ij0i9fPv7flJSx/qJ1zz3khHP+S6KNV/m7I dQzxajhlYF/w26jhFqhQaOj6Gpqq2QITuYOm4hXTYvogyPC2H8LUk+6tPBorUywr YViuDkmp7kOIfizTH5LJ3r07uNHC9EAb6/ugD747jfdc52RmkZxjU6gZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP667vFruTCDbI9V6AWaFeWlK53QMB8GA1UdIwQY MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCrGf6zH kiz5FPkLX4eEgKfFkPXN3YkBqJKv3yL04TLAGAzRaD/WST/evIl/VDCoDQiX4FDC KPyiUsgIKkdc8KBD/lt+HVlI/GW7rXd9ddIVHvc+tDRLkVzcOTVETcm8VivjAb/i 1ziW6wH+N8DgHXs3CpLGkLBln6E4HkYVlvAyl3ez+2vorT4uEL6FSOUsUHjqSHl3 KPIEnvBwj7tIq4WdXy2cc1GqJ6Aq8cSx6iyy3G72iqzSPIwKjIXD06EYK4jr8bWo pQtqn/dv1QiOhKpdV9XNPwmH4TirPxUFxTkQKGf1iD8LPzBHwqR8rVs0JiWLlZm/ cU6UGQmcDbNmzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:53 2025 by rpki-client