This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json) Hash identifier: XPVdelzn0qGloVYc5rceT+ScecOLjpr/KV7Rh9SIiR8= Subject key identifier: D7:1C:AA:57:19:29:52:3E:25:A9:AA:C9:B1:A6:F1:7C:F5:8E:8B:EC Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Certificate serial: 019B2C2F65F65A32C085656247F5E491F230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft Manifest number: 0628 Signing time: Wed 17 Dec 2025 12:01:02 +0000 Manifest this update: Wed 17 Dec 2025 12:01:02 +0000 Manifest next update: Thu 18 Dec 2025 12:01:02 +0000 Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: H7qw2k7GVQMV83fIiW0aARXdJLgi+pLmyScKS46IHJE=) 2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:65:f6:5a:32:c0:85:65:62:47:f5:e4:91:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Validity Not Before: Dec 17 12:01:02 2025 GMT Not After : Dec 18 12:01:02 2025 GMT Subject: CN=d71caa571929523e25a9aac9b1a6f17cf58e8bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:74:e6:83:61:3c:d3:e9:22:a4:3d:25:80: 17:14:42:67:b6:f6:78:19:32:77:da:a6:7a:f6:31: 94:09:54:82:8c:8f:2d:dc:5a:9f:a7:cb:62:30:57: a2:d1:6d:20:d3:d5:00:8e:5b:56:b6:43:38:7a:fd: 1b:0e:31:df:8c:f9:27:43:86:70:ee:e7:1a:14:69: 90:bd:56:1d:bd:71:fb:56:81:10:6e:d1:11:ac:16: 88:e3:3c:66:46:3e:17:7e:f3:71:7c:af:e0:ea:c7: f0:21:2e:75:32:20:d7:6b:b3:aa:cc:e7:27:71:0a: 6d:65:41:18:61:5a:79:e4:2c:d4:80:b1:57:57:41: 0f:7a:3f:4a:11:8b:4c:4c:a4:27:49:42:b8:a3:24: 46:ee:d2:c7:9c:aa:86:e8:9d:d7:2d:81:44:b6:8c: 01:fa:4d:f8:f8:b5:e7:e3:7a:84:00:df:84:ca:b8: 0e:d9:73:bd:e7:bb:38:72:52:a0:bf:99:93:74:c8: b7:34:0c:55:75:82:aa:7b:6f:5a:bb:64:5e:ea:3b: c7:0f:99:a2:5a:51:2f:d9:80:7e:ed:d7:e5:d4:8b: 32:29:be:e6:24:6b:6c:65:8e:ac:d2:55:bc:ef:53: fc:1f:3b:85:f2:95:8a:00:65:d3:94:6b:73:ac:94: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1C:AA:57:19:29:52:3E:25:A9:AA:C9:B1:A6:F1:7C:F5:8E:8B:EC X509v3 Authority Key Identifier: keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2b:ed:79:6c:20:e7:c9:a8:5a:d5:7f:66:44:47:73:62:d9: 23:3b:fd:b9:84:61:81:52:7f:57:5b:8c:f5:c1:3a:88:c4:8c: ae:c1:c6:ee:c9:35:27:a8:66:ad:19:ae:89:b6:03:94:73:c8: 58:7d:a6:f2:c6:b1:44:b9:8f:c3:e3:e9:f2:22:ed:63:ae:2e: 59:75:fc:70:00:3d:26:af:2f:00:de:68:60:05:92:40:a6:c3: 08:fb:19:02:d6:fd:12:ef:62:86:3d:08:9a:10:b6:f4:72:61: 27:d3:8c:59:8a:f7:65:60:46:bc:1c:30:98:15:6b:59:30:8d: d3:20:bc:13:91:8d:fc:79:cd:df:10:ae:81:36:0b:2a:65:5f: 87:33:e8:4f:10:3f:14:b5:bc:4a:ae:25:06:31:ac:1d:a1:ac: a6:4b:c2:ce:9e:17:01:fb:f8:43:f9:b8:bf:98:5b:ce:72:6e: 5b:39:c6:fe:8e:cb:29:d3:70:d6:7d:7f:e6:96:64:cf:60:30: 3e:a2:91:98:52:a6:11:be:7c:77:65:2a:40:a1:6b:c4:d7:45: 43:0d:1b:ff:22:30:d2:39:80:79:93:cb:22:7e:33:94:f7:f6: 27:e6:81:f2:7e:5a:f0:7b:46:6a:fd:27:43:b9:65:37:88:4e: d3:96:09:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2X2WjLAhWViR/XkkfIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw YjUxOGYwHhcNMjUxMjE3MTIwMTAyWhcNMjUxMjE4MTIwMTAyWjAzMTEwLwYDVQQD EyhkNzFjYWE1NzE5Mjk1MjNlMjVhOWFhYzliMWE2ZjE3Y2Y1OGU4YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MJ05oNhPNPpIqQ9JYAXFEJntvZ4 GTJ32qZ69jGUCVSCjI8t3Fqfp8tiMFei0W0g09UAjltWtkM4ev0bDjHfjPknQ4Zw 7ucaFGmQvVYdvXH7VoEQbtERrBaI4zxmRj4XfvNxfK/g6sfwIS51MiDXa7OqzOcn cQptZUEYYVp55CzUgLFXV0EPej9KEYtMTKQnSUK4oyRG7tLHnKqG6J3XLYFEtowB +k34+LXn43qEAN+EyrgO2XO957s4clKgv5mTdMi3NAxVdYKqe29au2Re6jvHD5mi WlEv2YB+7dfl1IsyKb7mJGtsZY6s0lW871P8HzuF8pWKAGXTlGtzrJTqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNccqlcZKVI+JamqybGm8Xz1jovsMB8GA1UdIwQY MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSvteWwg 58moWtV/ZkRHc2LZIzv9uYRhgVJ/V1uM9cE6iMSMrsHG7sk1J6hmrRmuibYDlHPI WH2m8saxRLmPw+Pp8iLtY64uWXX8cAA9Jq8vAN5oYAWSQKbDCPsZAtb9Eu9ihj0I mhC29HJhJ9OMWYr3ZWBGvBwwmBVrWTCN0yC8E5GN/HnN3xCugTYLKmVfhzPoTxA/ FLW8Sq4lBjGsHaGspkvCzp4XAfv4Q/m4v5hbznJuWznG/o7LKdNw1n1/5pZkz2Aw PqKRmFKmEb58d2UqQKFrxNdFQw0b/yIw0jmAeZPLIn4zlPf2J+aB8n5a8HtGav0n Q7llN4hO05YJjw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:35 2025 by rpki-client