This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json) Hash identifier: 3w3mhEsTh9whV7Gwq4I2GcwUK2ld/Mi6eo31lDodbT8= Subject key identifier: 8A:34:DD:9D:E4:5E:41:56:BC:A8:0A:F4:43:FA:DC:5B:68:C5:CA:8A Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Certificate serial: 019AF12CCE1901C8C45FEAEA321BBF8003F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft Manifest number: 15D3 Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: Ne0Qs9X3O45jGJXudxpXvneJkZMPSlT+5DPfy6jHYkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ce:19:01:c8:c4:5f:ea:ea:32:1b:bf:80:03:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=8a34dd9de45e4156bca80af443fadc5b68c5ca8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:19:a9:b5:19:70:f4:e5:63:d4:4e:dc:e5: d8:7f:09:3f:a7:69:67:3e:00:14:19:14:6a:e4:87: 93:7d:10:c6:4d:15:83:aa:11:d9:06:f0:7b:6a:e6: 8b:6b:3b:7b:11:f2:91:3b:0f:71:cf:ad:8f:11:a9: 9c:75:b6:95:09:6c:74:16:ce:dc:f9:5a:90:f2:b6: 5a:d6:5b:07:18:d1:02:35:1b:0f:b4:c9:f5:54:fd: 95:af:90:4e:a0:6b:b1:e1:4b:65:d0:9c:60:c8:61: 1f:83:94:63:5f:d4:8c:b6:03:cc:d9:22:26:7e:b8: a0:20:1f:0d:29:9f:4e:67:a6:ba:62:28:32:38:14: 13:9d:34:ae:34:57:8d:32:3d:4f:26:4f:f2:51:9f: 3e:3f:26:23:93:6d:db:8b:81:c2:04:b6:dc:c0:ad: ff:48:00:68:01:2f:a7:78:0b:bc:64:a3:f7:bc:74: 97:88:d8:cf:83:5b:99:0b:4c:c9:c3:6c:98:8b:f1: 7c:c1:9c:f7:2b:6b:71:e2:66:2a:ce:3a:d8:38:0d: 64:03:3c:ff:26:1a:61:c2:7e:5b:72:b9:3d:75:e9: 73:d0:82:e8:8f:83:82:4d:2e:e3:76:10:24:78:3d: d4:53:dd:f9:d4:91:88:ce:61:6d:83:91:37:2f:45: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:DD:9D:E4:5E:41:56:BC:A8:0A:F4:43:FA:DC:5B:68:C5:CA:8A X509v3 Authority Key Identifier: keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:75:1e:b0:38:51:79:2c:b2:94:bf:6f:43:a2:fb:32:e9:1c: e4:d5:d2:f6:bc:f0:19:a5:14:20:7c:bd:ab:4e:03:68:fe:94: 09:e0:90:04:bb:16:06:2c:34:6c:39:00:f2:1c:50:b8:30:6b: 6b:07:16:02:93:78:87:57:39:02:8a:74:40:02:a2:d1:4d:91: 70:07:cb:93:33:ef:09:e8:3c:ba:45:cc:ef:84:25:c0:6d:a1: 52:c0:a6:97:a9:d7:20:52:82:9c:5d:f5:6a:80:ab:4a:63:cb: df:10:41:d5:a5:08:20:02:c8:c8:d5:15:61:9a:50:38:86:fe: 73:23:e0:b8:00:de:5d:ae:f7:b7:4e:c0:c5:b0:5c:8e:d2:3b: d5:cb:34:36:7f:57:64:a5:82:6a:8b:ce:73:0a:08:5b:40:f3: de:66:00:15:22:8d:e9:29:d9:66:0e:eb:a2:1b:10:9c:53:b9: a9:02:45:0e:a4:ee:70:02:72:52:fa:9c:b2:e8:b4:a0:da:a0: 40:35:48:3c:ce:a0:c3:0f:3e:ae:9b:16:ca:dd:27:68:7b:e2: 74:e0:8d:7e:64:e8:40:89:d5:51:43:74:c7:7e:95:88:60:7d: 06:9b:46:8d:fc:dc:12:50:87:02:94:9b:6d:35:58:cd:d7:ee: 3a:b0:c1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM4ZAcjEX+rqMhu/gAPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZGIwMDYxZjJkOGFlMTQwMzQ5N2NhMTdlMWE4OGRmMjMw NDhmOTMwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD Eyg4YTM0ZGQ5ZGU0NWU0MTU2YmNhODBhZjQ0M2ZhZGM1YjY4YzVjYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgZqbUZcPTlY9RO3OXYfwk/p2ln PgAUGRRq5IeTfRDGTRWDqhHZBvB7auaLazt7EfKROw9xz62PEamcdbaVCWx0Fs7c +VqQ8rZa1lsHGNECNRsPtMn1VP2Vr5BOoGux4Utl0JxgyGEfg5RjX9SMtgPM2SIm frigIB8NKZ9OZ6a6YigyOBQTnTSuNFeNMj1PJk/yUZ8+PyYjk23bi4HCBLbcwK3/ SABoAS+neAu8ZKP3vHSXiNjPg1uZC0zJw2yYi/F8wZz3K2tx4mYqzjrYOA1kAzz/ Jhphwn5bcrk9delz0ILoj4OCTS7jdhAkeD3UU9351JGIzmFtg5E3L0W4qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo03Z3kXkFWvKgK9EP63FtoxcqKMB8GA1UdIwQY MBaAFCXbAGHy2K4UA0l8oX4aiN8jBI+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmIt MmFjYmUzZDUzZGZiLzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmItMmFjYmUzZDUzZGZi LzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonUesDhR eSyylL9vQ6L7Mukc5NXS9rzwGaUUIHy9q04DaP6UCeCQBLsWBiw0bDkA8hxQuDBr awcWApN4h1c5Aop0QAKi0U2RcAfLkzPvCeg8ukXM74QlwG2hUsCml6nXIFKCnF31 aoCrSmPL3xBB1aUIIALIyNUVYZpQOIb+cyPguADeXa73t07AxbBcjtI71cs0Nn9X ZKWCaovOcwoIW0Dz3mYAFSKN6SnZZg7rohsQnFO5qQJFDqTucAJyUvqcsui0oNqg QDVIPM6gww8+rpsWyt0naHvidOCNfmToQInVUUN0x36ViGB9BptGjfzcElCHApSb bTVYzdfuOrDB4w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:07 2025 by rpki-client