This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json) Hash identifier: +lzPuxzrMdUoBN6OQIRKQvyOF3fPV/dqK+qkllVlGWc= Subject key identifier: 16:22:BA:2B:42:C9:1F:12:B8:D9:38:A9:C5:84:D7:41:38:53:DD:C3 Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e Certificate serial: 019AF31D4672391ADAD0575B5BA058BAF688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft Manifest number: 0CB8 Signing time: Sat 06 Dec 2025 10:02:53 +0000 Manifest this update: Sat 06 Dec 2025 10:02:53 +0000 Manifest next update: Sun 07 Dec 2025 10:02:53 +0000 Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: vNVJExCBRtsFT7/ZeCc/2Y3huC7BAPjAT1Zez0kPUS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:46:72:39:1a:da:d0:57:5b:5b:a0:58:ba:f6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e Validity Not Before: Dec 6 10:02:53 2025 GMT Not After : Dec 7 10:02:53 2025 GMT Subject: CN=1622ba2b42c91f12b8d938a9c584d7413853ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:05:80:9e:30:47:6b:d1:0c:3c:ce:a5:30: 57:f8:70:76:da:38:29:78:22:40:03:73:5e:08:84: 16:58:fc:8e:da:68:20:26:68:d8:70:b4:c2:fb:4a: fc:07:61:ac:e7:e5:5d:07:d2:b9:79:94:bc:05:06: 34:73:f6:54:52:44:61:f5:57:0b:9b:33:38:17:7e: df:16:22:80:cd:c8:95:ee:93:a4:bd:01:0a:6a:6c: f6:b0:43:4e:ed:21:af:a1:4b:aa:3b:b9:f1:05:ae: 7f:86:2f:13:76:ef:9e:17:28:88:cf:0f:7f:4d:3b: 97:98:1f:e1:ed:ff:77:e3:da:3b:fc:8a:72:bb:db: 4b:56:7a:91:88:b1:09:ef:a4:ef:7f:05:ab:3b:8d: 40:5b:d3:c5:f3:0d:62:82:6c:0c:c7:fb:79:cc:1f: 6d:a6:7c:13:25:f2:cc:09:43:f9:e3:07:1d:84:b3: 5e:cf:4f:41:83:d7:e9:d5:52:7c:83:5c:e5:e9:47: 3b:cd:7a:c9:85:b9:c1:c1:d5:db:d3:7c:f7:4d:a4: 2d:01:51:7b:3e:c2:27:1f:fe:c4:4b:aa:a8:af:99: 04:f6:21:e9:a7:e6:aa:f0:82:da:32:46:40:dc:56: f0:18:80:05:0d:f2:c0:56:9a:e8:e7:44:7c:e2:1f: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:BA:2B:42:C9:1F:12:B8:D9:38:A9:C5:84:D7:41:38:53:DD:C3 X509v3 Authority Key Identifier: keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:82:aa:58:20:e7:de:f2:e8:91:18:94:48:19:70:1b:3f:bc: 96:5a:65:3b:c5:f1:55:da:2c:e5:b6:d3:4c:9a:d1:f4:54:9a: c3:c5:56:88:3f:72:d1:17:a3:e8:06:1d:84:50:f2:a1:03:b5: e1:55:af:18:63:2f:37:16:1b:12:1c:e4:71:b8:bc:77:28:f7: e9:7c:f9:fc:f9:b0:bb:eb:5f:98:71:f0:9d:17:0a:8e:36:5b: 32:d0:67:dd:d3:cc:3e:5e:1c:9e:72:9c:6f:d7:a1:90:eb:a8: 98:c6:a8:12:99:74:f2:23:a1:73:2b:f3:0c:86:be:e9:2e:43: 19:d4:0b:84:bb:d3:20:6e:40:35:e4:4c:4e:66:6d:c1:a0:60: 2e:cf:a7:68:53:44:f6:89:a2:6d:63:8a:e4:3d:85:d4:aa:d2: 24:ec:1c:f6:0b:dd:a9:a3:fc:b3:c5:57:17:a9:00:7b:ab:82: e7:31:2f:b9:16:25:c1:40:e0:38:e6:80:44:e9:cf:2d:ca:dd: c9:0c:6b:ab:0c:c9:4a:e6:ed:7a:fc:58:30:da:53:30:96:70: e9:fd:14:65:fb:28:a4:b5:f8:63:0e:56:92:a3:60:80:97:62: 96:97:db:03:d8:ea:16:4e:e1:b9:ec:82:c0:97:32:bb:83:4b: d4:eb:3d:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUZyORra0FdbW6BYuvaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0 MTVkM2UwHhcNMjUxMjA2MTAwMjUzWhcNMjUxMjA3MTAwMjUzWjAzMTEwLwYDVQQD EygxNjIyYmEyYjQyYzkxZjEyYjhkOTM4YTljNTg0ZDc0MTM4NTNkZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJAFgJ4wR2vRDDzOpTBX+HB22jgp eCJAA3NeCIQWWPyO2mggJmjYcLTC+0r8B2Gs5+VdB9K5eZS8BQY0c/ZUUkRh9VcL mzM4F37fFiKAzciV7pOkvQEKamz2sENO7SGvoUuqO7nxBa5/hi8Tdu+eFyiIzw9/ TTuXmB/h7f9349o7/Ipyu9tLVnqRiLEJ76TvfwWrO41AW9PF8w1igmwMx/t5zB9t pnwTJfLMCUP54wcdhLNez09Bg9fp1VJ8g1zl6Uc7zXrJhbnBwdXb03z3TaQtAVF7 PsInH/7ES6qor5kE9iHpp+aq8ILaMkZA3FbwGIAFDfLAVpro50R84h+R6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYiuitCyR8SuNk4qcWE10E4U93DMB8GA1UdIwQY MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYKqWCDn 3vLokRiUSBlwGz+8llplO8XxVdos5bbTTJrR9FSaw8VWiD9y0Rej6AYdhFDyoQO1 4VWvGGMvNxYbEhzkcbi8dyj36Xz5/Pmwu+tfmHHwnRcKjjZbMtBn3dPMPl4cnnKc b9ehkOuomMaoEpl08iOhcyvzDIa+6S5DGdQLhLvTIG5ANeRMTmZtwaBgLs+naFNE 9omibWOK5D2F1KrSJOwc9gvdqaP8s8VXF6kAe6uC5zEvuRYlwUDgOOaAROnPLcrd yQxrqwzJSubtevxYMNpTMJZw6f0UZfsopLX4Yw5WkqNggJdilpfbA9jqFk7hueyC wJcyu4NL1Os9kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:15 2025 by rpki-client