This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json) Hash identifier: s/x5FeEOLpj/pjgl3WqLfnWMBS1tkAblOKs9emeVzJ4= Subject key identifier: F4:72:E8:81:4A:E7:C3:D0:8D:83:52:E7:F9:54:BD:EA:3C:0D:83:D9 Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Certificate serial: 019AF1D21F85307A797644111E95635D6831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft Manifest number: 0482 Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: L2BroeRQhdACWqrEJlxFRCm012kbqV8NtHN0MxG2M1A=) 2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1f:85:30:7a:79:76:44:11:1e:95:63:5d:68:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=f472e8814ae7c3d08d8352e7f954bdea3c0d83d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:42:75:0d:30:0b:e9:eb:85:21:9a:5e:d3: 0f:5e:b3:89:5e:30:c5:a7:19:3a:49:df:2d:a5:14: 4b:8b:a8:f7:50:99:c6:b7:1b:1d:68:73:ae:07:e1: ff:c2:0c:58:3b:5f:53:5c:cc:70:89:1e:99:27:69: d0:d5:da:8b:a4:78:e3:78:40:43:5e:de:2e:b4:7b: 0c:7d:98:b5:7c:bd:38:ab:74:00:d4:64:eb:7b:e6: 8c:55:00:d3:75:86:6d:11:af:99:86:4f:c3:2d:7a: ad:12:0a:5b:7a:3e:c9:19:0e:2c:69:ff:30:df:97: 8a:70:80:1f:ad:5c:a6:1e:31:bd:dd:76:96:01:16: 71:6c:90:5b:bd:50:13:44:c8:16:32:fd:97:23:0f: 3d:94:8d:a7:24:ca:5e:a0:7e:8f:68:45:93:c7:27: e6:17:1f:ad:45:2b:9b:76:66:43:28:7e:66:d6:40: e7:1d:78:27:97:c5:cb:b3:de:ce:22:91:cf:34:31: e4:a9:58:aa:59:c6:44:23:de:78:db:1d:b2:24:16: 59:d2:47:34:2c:8f:d8:59:f1:31:76:72:19:87:24: b3:9e:b3:55:4d:65:73:cf:8f:8c:e2:de:b4:cb:bc: f8:1e:1a:a4:56:5b:bd:db:bc:7a:22:83:3b:12:32: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:E8:81:4A:E7:C3:D0:8D:83:52:E7:F9:54:BD:EA:3C:0D:83:D9 X509v3 Authority Key Identifier: keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:3a:b4:41:25:f2:c0:c8:7d:31:35:bb:5e:02:6b:57:94: 97:9b:5d:8c:c6:ad:fb:e6:54:3b:a0:c1:eb:ee:33:f9:e5:b1: d0:e6:ff:10:7e:48:a6:26:83:ba:33:ba:79:18:12:9a:aa:bb: 3d:6f:7d:54:e5:85:dc:49:2a:bf:c3:98:39:59:c6:4c:7d:84: 7b:21:c2:80:af:a0:96:3e:42:fa:d1:1d:36:6c:46:1a:bc:12: a6:71:6f:79:37:1d:bf:98:be:02:ea:49:91:25:76:10:1b:2b: 23:56:2e:49:ab:6c:06:0f:7e:cd:65:9f:df:b8:03:d0:5f:c1: cd:ae:05:97:ef:21:16:01:cb:f7:9d:78:1b:b9:f6:7b:db:39: 43:92:2c:7d:75:2d:d2:fd:70:fd:d0:52:27:f5:bc:7a:12:86: ac:fa:ac:5f:0e:aa:06:fa:17:42:45:4a:ad:81:de:57:1f:af: 85:0a:6f:a2:05:c8:95:20:1b:86:59:ab:61:9c:57:7a:e1:d8: 2e:5f:77:20:95:dd:a3:59:81:cf:c6:59:97:b6:2c:ed:a8:23: 6b:3e:5a:f1:fe:49:6a:0b:49:38:bd:24:03:54:ad:58:c7:59: 87:60:10:00:ec:67:c3:d0:86:9a:59:55:4f:4d:a6:f9:33:16: e7:75:49:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h+FMHp5dkQRHpVjXWgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky NzkyM2EwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EyhmNDcyZTg4MTRhZTdjM2QwOGQ4MzUyZTdmOTU0YmRlYTNjMGQ4M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3dCdQ0wC+nrhSGaXtMPXrOJXjDF pxk6Sd8tpRRLi6j3UJnGtxsdaHOuB+H/wgxYO19TXMxwiR6ZJ2nQ1dqLpHjjeEBD Xt4utHsMfZi1fL04q3QA1GTre+aMVQDTdYZtEa+Zhk/DLXqtEgpbej7JGQ4saf8w 35eKcIAfrVymHjG93XaWARZxbJBbvVATRMgWMv2XIw89lI2nJMpeoH6PaEWTxyfm Fx+tRSubdmZDKH5m1kDnHXgnl8XLs97OIpHPNDHkqViqWcZEI9542x2yJBZZ0kc0 LI/YWfExdnIZhySznrNVTWVzz4+M4t60y7z4HhqkVlu927x6IoM7EjIe+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRy6IFK58PQjYNS5/lUveo8DYPZMB8GA1UdIwQY MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMko6tEEl 8sDIfTE1u14Ca1eUl5tdjMat++ZUO6DB6+4z+eWx0Ob/EH5IpiaDujO6eRgSmqq7 PW99VOWF3Ekqv8OYOVnGTH2EeyHCgK+glj5C+tEdNmxGGrwSpnFveTcdv5i+AupJ kSV2EBsrI1YuSatsBg9+zWWf37gD0F/Bza4Fl+8hFgHL9514G7n2e9s5Q5IsfXUt 0v1w/dBSJ/W8ehKGrPqsXw6qBvoXQkVKrYHeVx+vhQpvogXIlSAbhlmrYZxXeuHY Ll93IJXdo1mBz8ZZl7Ys7agjaz5a8f5JagtJOL0kA1StWMdZh2AQAOxnw9CGmllV T02m+TMW53VJ/g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:07 2025 by rpki-client