This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json) Hash identifier: ja/dI16hHD11PYUIrGChCRSAXEk873c0CRZ0p5HJBto= Subject key identifier: FE:B1:71:E0:09:66:09:41:7D:A3:08:77:07:16:C2:1D:11:CC:A4:68 Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca Certificate serial: 019AF38994F0D483DC42CB81DF776E78E60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft Manifest number: 083B Signing time: Sat 06 Dec 2025 12:01:11 +0000 Manifest this update: Sat 06 Dec 2025 12:01:11 +0000 Manifest next update: Sun 07 Dec 2025 12:01:11 +0000 Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: 4wDaJbpFmFtegW8qGafQahaNi8tchVmwlqKtQSQFbsI=) 2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:94:f0:d4:83:dc:42:cb:81:df:77:6e:78:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca Validity Not Before: Dec 6 12:01:11 2025 GMT Not After : Dec 7 12:01:11 2025 GMT Subject: CN=feb171e0096609417da308770716c21d11cca468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:80:a7:bf:e4:42:0f:95:59:41:3d:6b:d5: 98:ad:12:5d:a2:d4:2f:02:fa:e8:5b:de:61:95:8d: 19:92:6f:5d:54:28:c4:cd:c1:62:29:08:70:b7:bd: 85:21:e8:4b:9e:bc:1c:b2:68:e7:19:28:65:3a:9b: 03:14:5e:13:77:cb:39:d7:6f:ac:00:06:4a:f7:dc: 29:a5:94:e4:93:cd:f3:29:4f:c1:01:23:ab:65:ea: 23:19:03:27:23:26:05:26:aa:41:fb:35:17:73:58: 6e:52:37:09:00:e2:e3:80:52:0f:30:ec:5f:25:3d: b8:8b:0c:52:a2:0f:10:cd:6d:70:fb:06:49:99:d1: ac:4e:b2:3b:e1:9d:ca:fa:04:cf:8e:6f:49:bc:c4: 15:a7:08:26:cd:42:97:91:09:3b:01:a7:3d:6c:87: 66:4f:3d:ed:8c:30:44:1a:37:5a:17:69:72:6d:8d: 75:af:2d:2f:49:cd:3d:14:7c:e2:ba:ec:38:e2:35: 1c:90:42:de:b7:55:c5:b2:47:28:69:a0:eb:5d:a1: f2:14:7e:72:f1:18:16:12:63:ce:86:46:00:e0:ec: 73:40:67:42:c2:68:45:cf:72:9d:7b:96:57:87:7a: 71:a5:07:dd:6d:d8:96:23:d2:bb:ae:be:a6:2c:a8: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B1:71:E0:09:66:09:41:7D:A3:08:77:07:16:C2:1D:11:CC:A4:68 X509v3 Authority Key Identifier: keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fc:00:76:9c:48:d0:2b:5e:26:1e:e3:d8:bb:a1:fc:db:18: a0:53:aa:cd:a3:73:8b:21:5f:09:9c:6f:63:a3:a7:b9:52:23: 7e:69:6f:7a:2d:ec:84:8d:1e:54:4c:28:ff:b0:f6:c7:3f:95: 38:5c:77:55:73:2c:12:86:3c:cf:8b:6a:74:9e:c7:d1:64:5b: 0c:ce:53:03:f4:41:0d:3b:bb:8a:c5:ae:20:4d:a2:14:d5:f3: 6b:b7:28:e1:ad:ce:cd:f4:8e:67:92:9b:9a:54:13:fc:f2:a4: 71:74:2c:fb:82:6a:39:4f:26:c5:af:4a:cb:8c:c2:7f:84:8f: ce:12:59:76:af:b9:0d:42:60:d3:0e:42:b2:7d:79:45:a4:c2: 20:5d:3b:9e:8d:a1:d8:0f:02:0a:2c:e3:12:b7:e9:fc:65:7b: f6:dc:8f:8f:31:ea:ad:3e:04:f0:fb:c3:a4:a9:c8:3c:33:30: 3b:f1:e0:d5:d0:b1:b7:89:3d:2d:c3:6e:d5:08:75:22:86:8b: b9:df:a4:ec:21:b1:0a:8b:0b:07:5f:58:f6:1a:0c:5d:99:cb: 07:a0:b8:67:ca:82:75:3a:41:3c:6b:46:08:fc:e2:34:e0:3b: 1b:95:e6:62:73:15:6a:be:d0:31:a2:8f:62:0e:00:bc:68:5d: 17:32:3e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZTw1IPcQsuB33dueOYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWU3ODcxZmQzOGYyZGY5MTgyNDJkZGExYzZmYzM1Njg4 NDIzY2EwHhcNMjUxMjA2MTIwMTExWhcNMjUxMjA3MTIwMTExWjAzMTEwLwYDVQQD EyhmZWIxNzFlMDA5NjYwOTQxN2RhMzA4NzcwNzE2YzIxZDExY2NhNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyWAp7/kQg+VWUE9a9WYrRJdotQv AvroW95hlY0Zkm9dVCjEzcFiKQhwt72FIehLnrwcsmjnGShlOpsDFF4Td8s512+s AAZK99wppZTkk83zKU/BASOrZeojGQMnIyYFJqpB+zUXc1huUjcJAOLjgFIPMOxf JT24iwxSog8QzW1w+wZJmdGsTrI74Z3K+gTPjm9JvMQVpwgmzUKXkQk7Aac9bIdm Tz3tjDBEGjdaF2lybY11ry0vSc09FHziuuw44jUckELet1XFskcoaaDrXaHyFH5y 8RgWEmPOhkYA4OxzQGdCwmhFz3Kde5ZXh3pxpQfdbdiWI9K7rr6mLKj+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6xceAJZglBfaMIdwcWwh0RzKRoMB8GA1UdIwQY MBaAFCUeeHH9OPLfkYJC3aHG/DVohCPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgt OGJlYWRhYWFkMGIxLzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83MTEzZGYtZTBlOC00NDBlLWExMTgtOGJlYWRhYWFkMGIx LzEvSlI1NGNmMDQ4dC1SZ2tMZG9jYjhOV2lFSThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/wAdpxI 0CteJh7j2Luh/NsYoFOqzaNziyFfCZxvY6OnuVIjfmlvei3shI0eVEwo/7D2xz+V OFx3VXMsEoY8z4tqdJ7H0WRbDM5TA/RBDTu7isWuIE2iFNXza7co4a3OzfSOZ5Kb mlQT/PKkcXQs+4JqOU8mxa9Ky4zCf4SPzhJZdq+5DUJg0w5Csn15RaTCIF07no2h 2A8CCizjErfp/GV79tyPjzHqrT4E8PvDpKnIPDMwO/Hg1dCxt4k9LcNu1Qh1IoaL ud+k7CGxCosLB19Y9hoMXZnLB6C4Z8qCdTpBPGtGCPziNOA7G5XmYnMVar7QMaKP Yg4AvGhdFzI+xA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:40:03 2025 by rpki-client