This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json) Hash identifier: Ltri1BD13KRZ90Maaajmkocs8zCy3lG9lm3modAAUMw= Subject key identifier: 37:8F:D6:F2:4F:2D:C1:45:DC:A5:94:80:9A:10:48:94:DA:4D:0C:FB Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Certificate serial: 019AFBE7FAE3A7845C05BD2D790D21E1294B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft Manifest number: 060F Signing time: Mon 08 Dec 2025 03:01:15 +0000 Manifest this update: Mon 08 Dec 2025 03:01:15 +0000 Manifest next update: Tue 09 Dec 2025 03:01:15 +0000 Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: 3rdIzt6YGMlbLusVLwvSZcr7a7VtmcaBzVdwp4BCyDs=) 2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:fa:e3:a7:84:5c:05:bd:2d:79:0d:21:e1:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f Validity Not Before: Dec 8 03:01:15 2025 GMT Not After : Dec 9 03:01:15 2025 GMT Subject: CN=378fd6f24f2dc145dca594809a104894da4d0cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:8d:3f:d9:c5:8e:d3:d5:48:69:25:fe:84: d3:b3:5d:5e:dc:ef:de:35:09:ab:da:b9:d4:00:c9: 17:c1:07:3a:be:18:63:04:39:63:ab:54:16:55:19: 3b:95:f8:5f:37:64:e6:81:96:29:0a:dd:ea:d1:11: 09:4e:8c:8e:6a:fe:0a:14:34:03:a4:07:02:09:81: 61:be:1e:ac:ba:6a:19:08:aa:65:86:f2:e7:95:35: a2:b6:e1:00:78:e2:6f:9e:18:29:71:af:d6:20:ec: 0b:23:e8:28:20:e1:47:d5:82:20:d8:be:b3:f9:68: a4:f3:7e:0e:b6:04:84:86:97:08:80:5f:4c:e7:ec: 70:13:f2:cc:1a:7a:70:97:e0:15:66:41:1a:ac:6b: c3:f8:21:cc:29:4e:ea:90:f0:e5:02:12:84:e1:50: 6e:d8:0d:53:14:13:34:bb:86:2f:d1:3d:04:7b:f6: 2e:bc:da:68:53:9e:21:5d:dd:12:f2:1a:50:d0:f8: 02:2e:d4:0c:58:6d:df:65:f3:a1:53:9e:00:e0:68: f6:f8:99:2d:7e:2d:1e:6f:d0:7b:22:4f:81:2a:f0: 7a:df:b8:54:a0:4b:b9:4c:7e:3b:0b:c5:1a:46:fb: 3c:32:41:46:96:69:dc:e0:69:5d:ff:76:06:a9:6a: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:D6:F2:4F:2D:C1:45:DC:A5:94:80:9A:10:48:94:DA:4D:0C:FB X509v3 Authority Key Identifier: keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:63:01:32:a5:33:20:a7:7b:f8:64:ab:67:6d:31:8d:de:7e: b4:6c:20:72:7f:6e:7c:da:be:5e:60:29:67:34:e9:77:fe:99: 90:c5:11:6f:76:0e:0e:d8:73:02:7e:7d:07:6c:eb:f2:35:ec: c8:77:65:13:b9:ea:5d:2c:9c:c0:81:fb:76:d8:e7:0e:8e:1a: 78:e2:cc:04:70:77:c5:63:29:b6:11:98:4c:6f:e6:17:b8:03: c5:7e:7a:3b:da:c1:e3:ed:03:c2:ce:07:08:7c:af:41:12:60: dc:c1:78:74:92:1a:f9:e4:d9:a8:f3:dd:c6:52:25:ba:a7:be: 79:28:c7:cb:bf:96:cd:f7:64:d3:91:dd:72:66:37:9a:28:9e: 04:a3:6b:bc:d9:1b:b7:48:e7:d9:a8:b3:83:93:cc:aa:3f:5d: 40:01:59:8c:91:18:45:be:5d:b3:96:7c:b7:76:ec:1e:88:aa: 97:ec:79:f4:b7:89:1e:44:8e:e0:1d:52:24:5d:92:82:18:f1: 85:3f:3f:c6:3a:46:ed:8f:e0:19:ed:75:57:e1:9c:e8:1b:64: 15:62:53:47:ba:ce:4a:30:ef:55:27:13:37:5d:ba:4b:0d:c4: ec:25:61:e0:d6:04:0c:4c:d2:11:56:f1:83:a3:37:84:2b:26: 22:c9:4e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr75/rjp4RcBb0teQ0h4SlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw YjUxOGYwHhcNMjUxMjA4MDMwMTE1WhcNMjUxMjA5MDMwMTE1WjAzMTEwLwYDVQQD EygzNzhmZDZmMjRmMmRjMTQ1ZGNhNTk0ODA5YTEwNDg5NGRhNGQwY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumaNP9nFjtPVSGkl/oTTs11e3O/e NQmr2rnUAMkXwQc6vhhjBDljq1QWVRk7lfhfN2TmgZYpCt3q0REJToyOav4KFDQD pAcCCYFhvh6sumoZCKplhvLnlTWituEAeOJvnhgpca/WIOwLI+goIOFH1YIg2L6z +Wik834OtgSEhpcIgF9M5+xwE/LMGnpwl+AVZkEarGvD+CHMKU7qkPDlAhKE4VBu 2A1TFBM0u4Yv0T0Ee/YuvNpoU54hXd0S8hpQ0PgCLtQMWG3fZfOhU54A4Gj2+Jkt fi0eb9B7Ik+BKvB637hUoEu5TH47C8UaRvs8MkFGlmnc4Gld/3YGqWrxQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeP1vJPLcFF3KWUgJoQSJTaTQz7MB8GA1UdIwQY MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWMBMqUz IKd7+GSrZ20xjd5+tGwgcn9ufNq+XmApZzTpd/6ZkMURb3YODthzAn59B2zr8jXs yHdlE7nqXSycwIH7dtjnDo4aeOLMBHB3xWMpthGYTG/mF7gDxX56O9rB4+0Dws4H CHyvQRJg3MF4dJIa+eTZqPPdxlIluqe+eSjHy7+Wzfdk05HdcmY3miieBKNrvNkb t0jn2aizg5PMqj9dQAFZjJEYRb5ds5Z8t3bsHoiql+x59LeJHkSO4B1SJF2Sghjx hT8/xjpG7Y/gGe11V+Gc6BtkFWJTR7rOSjDvVScTN126Sw3E7CVh4NYEDEzSEVbx g6M3hCsmIslOvg== -----END CERTIFICATE-----Generated at Mon Dec 8 08:35:31 2025 by rpki-client