This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json) Hash identifier: /AwMgnSAGNL3sAyAFdhljPkJm6OLFkhzedNIVbpiH2E= Subject key identifier: 9D:94:8F:61:1D:89:86:7F:53:37:E2:F2:E4:BC:75:2F:03:3E:76:86 Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7 Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7 Certificate serial: 019AF23FB65B66481386EC6B29C5D005BD9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft Manifest number: 14AF Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: n1wD4PJqjujbQQCSJOUfUCt+io83tzTEIr1inGcRRtA=) 2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b6:5b:66:48:13:86:ec:6b:29:c5:d0:05:bd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=9d948f611d89867f5337e2f2e4bc752f033e7686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:11:25:5b:47:8b:ae:a0:0a:7a:aa:7a:05: 27:2c:7d:9d:ee:82:57:94:01:90:c1:5e:54:89:ed: a4:81:48:52:d1:d4:4d:a1:a1:77:67:b8:fd:18:10: ad:50:22:af:aa:f2:10:57:aa:4b:df:42:f9:68:91: bc:2d:16:25:e6:98:26:dc:31:f9:9f:24:e3:ac:03: 4d:67:4b:3f:d4:41:38:5d:26:36:93:d5:e8:86:4a: 84:f1:38:11:0d:27:fa:23:e6:63:43:45:00:dc:f8: 03:98:37:ef:33:1e:d4:0b:01:2e:56:47:a8:b9:66: bd:27:f3:74:de:51:73:9d:07:5d:8e:0b:50:07:18: 95:32:ac:eb:13:31:e2:99:22:03:7a:51:23:76:81: fc:50:e7:75:a9:ee:d2:0e:2e:a2:e2:2f:48:00:6a: 85:24:a9:65:49:9c:b8:30:82:cc:02:d3:6e:b1:13: 43:0b:b3:60:d9:41:b2:98:e3:72:d8:f6:67:48:46: b9:5a:8d:01:b6:eb:ae:49:33:cf:58:29:65:b7:4c: e9:96:0b:18:a3:30:39:80:e9:b1:1b:c5:e3:75:08: 2d:4b:f5:7f:81:17:d9:21:b0:97:15:ba:d4:d9:db: d7:7f:f4:91:dc:ee:d9:64:5b:d1:f3:93:28:2c:97: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:8F:61:1D:89:86:7F:53:37:E2:F2:E4:BC:75:2F:03:3E:76:86 X509v3 Authority Key Identifier: keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:23:b9:ff:b2:bd:cc:e5:ef:80:1f:34:f6:d4:db:bb:f5:71: ac:e8:a3:c5:94:06:43:ab:f7:50:04:25:1b:27:ec:63:c9:85: 38:22:88:7b:e0:e7:6c:2e:32:9e:b4:66:da:37:26:e1:d8:93: a8:74:51:68:bc:94:7e:b0:da:2d:62:6c:1c:a9:ac:6c:ed:2b: 0d:53:2f:01:07:b7:71:59:e0:08:35:64:60:b5:e8:45:9b:e1: 99:11:f3:1a:eb:94:64:c6:74:30:f3:77:50:71:94:24:d3:20: 6f:e3:fb:61:cb:82:0a:5c:65:f1:5b:77:f7:2f:fd:f1:3a:c0: b6:5e:d6:52:56:5b:9c:1a:a7:41:a4:2b:e2:66:38:5b:3e:c1: 7d:60:3c:68:72:a4:d4:1a:7d:1d:db:23:dd:35:6a:23:4c:62: 50:fa:62:72:38:db:8f:10:9c:1a:22:36:53:b2:0d:34:11:94: fe:72:5c:28:35:ef:8b:17:6c:7f:76:e0:ba:aa:ac:1d:5e:81: 78:df:74:22:ca:e8:8a:27:7f:9f:70:af:cf:6a:ec:ef:66:e6: be:96:cc:38:c0:c6:f9:79:5f:61:89:4b:ae:5d:4f:8b:08:38: 2d:46:b5:71:1a:f1:e1:78:c1:d4:4c:98:65:f2:b3:b8:8c:02: 6b:b0:36:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7ZbZkgThuxrKcXQBb2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0 OGI2ZTcwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD Eyg5ZDk0OGY2MTFkODk4NjdmNTMzN2UyZjJlNGJjNzUyZjAzM2U3Njg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T8RJVtHi66gCnqqegUnLH2d7oJX lAGQwV5Uie2kgUhS0dRNoaF3Z7j9GBCtUCKvqvIQV6pL30L5aJG8LRYl5pgm3DH5 nyTjrANNZ0s/1EE4XSY2k9XohkqE8TgRDSf6I+ZjQ0UA3PgDmDfvMx7UCwEuVkeo uWa9J/N03lFznQddjgtQBxiVMqzrEzHimSIDelEjdoH8UOd1qe7SDi6i4i9IAGqF JKllSZy4MILMAtNusRNDC7Ng2UGymONy2PZnSEa5Wo0BtuuuSTPPWCllt0zplgsY ozA5gOmxG8XjdQgtS/V/gRfZIbCXFbrU2dvXf/SR3O7ZZFvR85MoLJeq4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2Uj2EdiYZ/Uzfi8uS8dS8DPnaGMB8GA1UdIwQY MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt YjJhMTNhM2E5YjhhLzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSO5/7K9 zOXvgB809tTbu/VxrOijxZQGQ6v3UAQlGyfsY8mFOCKIe+DnbC4ynrRm2jcm4diT qHRRaLyUfrDaLWJsHKmsbO0rDVMvAQe3cVngCDVkYLXoRZvhmRHzGuuUZMZ0MPN3 UHGUJNMgb+P7YcuCClxl8Vt39y/98TrAtl7WUlZbnBqnQaQr4mY4Wz7BfWA8aHKk 1Bp9Hdsj3TVqI0xiUPpicjjbjxCcGiI2U7INNBGU/nJcKDXvixdsf3bguqqsHV6B eN90Isroiid/n3Cvz2rs72bmvpbMOMDG+XlfYYlLrl1Piwg4LUa1cRrx4XjB1EyY ZfKzuIwCa7A2ug== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:12 2025 by rpki-client