This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json) Hash identifier: irBsUVc5aQTRg2OrBOERwIi202JtPkIyRdQCow0a3wQ= Subject key identifier: 83:1A:BF:E3:49:40:16:85:B5:2F:B6:8D:3B:81:1F:55:CF:B5:1A:AD Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Certificate serial: 019AFBB169DD56135B1788A16E85350F1594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft Manifest number: 1248 Signing time: Mon 08 Dec 2025 02:01:39 +0000 Manifest this update: Mon 08 Dec 2025 02:01:39 +0000 Manifest next update: Tue 09 Dec 2025 02:01:39 +0000 Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: lskvabFMjXpYTNMPyUAGMSRyjc0T3RPl5T/1mYj1jAU=) 2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=) 3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:69:dd:56:13:5b:17:88:a1:6e:85:35:0f:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Validity Not Before: Dec 8 02:01:39 2025 GMT Not After : Dec 9 02:01:39 2025 GMT Subject: CN=831abfe349401685b52fb68d3b811f55cfb51aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:80:8c:7b:27:ca:18:4f:67:de:f1:cc:f7: 50:0f:f0:a1:c1:51:27:24:fe:b2:7a:c0:a5:e6:df: 1d:e4:55:dd:6b:7d:ab:7d:74:4f:ed:b4:6e:69:67: 2d:6c:d4:ca:18:c5:21:08:2a:20:58:53:d0:dc:4b: f3:84:cb:ae:c4:71:1e:aa:bb:fe:1c:2b:8c:04:79: 3a:3c:97:5a:06:c6:f8:6d:84:d9:05:4a:d3:a3:c1: 30:64:65:c1:8f:87:6c:a6:cd:0f:72:1e:b5:a5:19: 59:23:f9:ff:cc:77:55:88:3f:a1:1c:ca:bc:e2:0f: ad:b4:45:d2:1c:da:87:3f:82:33:64:4e:9b:ca:5b: 2f:8d:98:a0:f9:a5:6d:2f:57:54:85:77:71:88:92: ac:b2:61:37:fa:4a:80:b9:c3:87:70:fe:23:a8:53: 54:e2:7c:6f:10:31:12:0b:a2:2c:92:b2:bb:e0:3b: 1d:b6:ee:ca:8c:25:e4:fb:68:e2:0a:4b:c1:ad:27: 31:d1:39:03:58:a9:85:f3:dd:e6:52:07:95:e7:7f: 93:ca:1e:a2:8b:a4:7a:2f:ce:e2:ae:f8:db:49:9a: 61:ff:66:5d:e2:fa:96:c0:fa:fd:b8:6d:6b:ae:f3: 85:00:9f:db:a0:a1:5d:a1:d3:fc:a3:51:0a:f7:f4: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:BF:E3:49:40:16:85:B5:2F:B6:8D:3B:81:1F:55:CF:B5:1A:AD X509v3 Authority Key Identifier: keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:26:cc:ca:70:0a:f2:31:9d:a0:68:53:ed:52:c8:e6:ce:9a: e9:1c:fa:a2:e5:8b:32:f8:28:0f:3e:d2:0c:16:5f:13:87:1d: e6:f1:e2:5c:46:60:8c:c1:50:16:ec:c2:94:58:8e:a2:97:07: 42:84:2a:34:93:e3:84:95:e9:e9:7b:8f:0b:91:f7:49:bc:39: 17:4a:d3:7b:2b:e4:cb:03:c0:1e:27:31:d1:8c:4e:70:1e:0b: 77:15:4b:7b:65:5f:0d:07:18:dc:f8:6c:96:e5:a3:40:0f:1d: 11:1a:b8:93:2c:a0:aa:68:c5:43:ca:88:70:ce:2b:97:bb:a8: 96:00:af:17:70:5b:b3:64:cc:b7:60:86:d7:e0:1f:45:29:9a: 2e:cd:99:95:3b:dc:31:4b:94:23:09:c8:0a:6b:3b:f1:b4:23: 03:7a:43:48:db:af:67:a9:97:74:94:6c:a0:c4:cf:fa:6f:be: 83:ab:0b:35:29:88:65:d2:71:a2:df:8e:3f:9b:13:81:6a:cc: a8:f6:2e:86:37:3a:5c:e3:19:39:ea:f6:0a:c9:88:03:be:ed: df:12:c2:1e:fc:83:e7:11:72:e9:77:41:71:f3:c3:be:cf:64: 61:9d:56:51:fd:c9:ef:c3:c3:22:61:05:90:45:1c:7c:b4:9a: fb:2c:59:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sWndVhNbF4ihboU1DxWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm MDJkNWIwHhcNMjUxMjA4MDIwMTM5WhcNMjUxMjA5MDIwMTM5WjAzMTEwLwYDVQQD Eyg4MzFhYmZlMzQ5NDAxNjg1YjUyZmI2OGQzYjgxMWY1NWNmYjUxYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YCAjHsnyhhPZ97xzPdQD/ChwVEn JP6yesCl5t8d5FXda32rfXRP7bRuaWctbNTKGMUhCCogWFPQ3EvzhMuuxHEeqrv+ HCuMBHk6PJdaBsb4bYTZBUrTo8EwZGXBj4dsps0Pch61pRlZI/n/zHdViD+hHMq8 4g+ttEXSHNqHP4IzZE6bylsvjZig+aVtL1dUhXdxiJKssmE3+kqAucOHcP4jqFNU 4nxvEDESC6IskrK74Dsdtu7KjCXk+2jiCkvBrScx0TkDWKmF893mUgeV53+Tyh6i i6R6L87irvjbSZph/2Zd4vqWwPr9uG1rrvOFAJ/boKFdodP8o1EK9/RX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMav+NJQBaFtS+2jTuBH1XPtRqtMB8GA1UdIwQY MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQybMynAK 8jGdoGhT7VLI5s6a6Rz6ouWLMvgoDz7SDBZfE4cd5vHiXEZgjMFQFuzClFiOopcH QoQqNJPjhJXp6XuPC5H3Sbw5F0rTeyvkywPAHicx0YxOcB4LdxVLe2VfDQcY3Phs luWjQA8dERq4kyygqmjFQ8qIcM4rl7uolgCvF3Bbs2TMt2CG1+AfRSmaLs2ZlTvc MUuUIwnICms78bQjA3pDSNuvZ6mXdJRsoMTP+m++g6sLNSmIZdJxot+OP5sTgWrM qPYuhjc6XOMZOer2CsmIA77t3xLCHvyD5xFy6XdBcfPDvs9kYZ1WUf3J78PDImEF kEUcfLSa+yxZcQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:17 2025 by rpki-client