This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json) Hash identifier: AdQbGWB4rwktLW7BUKKhpaysB2NCNMILm1bpgEK4LRk= Subject key identifier: 89:74:A0:50:09:51:87:80:AC:92:BF:E3:C5:F7:0C:5B:03:4D:4A:94 Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27 Certificate serial: 019AF19A8F7A2612C2695464B4AA286D13FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: ue1mzNjQOtrkxrWqtOVdR7qmgcRJJDYz2J3ss60SRDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:8f:7a:26:12:c2:69:54:64:b4:aa:28:6d:13:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27 Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=8974a05009518780ac92bfe3c5f70c5b034d4a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:86:c0:a1:72:81:aa:3a:f1:37:72:47:4d: 26:34:14:16:0b:29:71:3e:02:cd:40:8e:26:ae:5e: 45:60:0a:40:f0:9b:de:5e:e7:e1:51:86:54:3e:79: 8c:21:1f:40:93:83:c1:4e:5a:c9:d1:60:e8:68:f9: dd:4e:df:9b:ac:a3:f9:4d:5f:da:9e:c5:c7:a9:5f: d2:d9:a0:ac:f8:03:38:10:06:45:42:86:45:0e:f2: 96:43:ca:a3:34:7f:41:9c:24:ba:93:71:c4:37:31: cf:b1:78:9c:5f:61:59:ad:8f:52:4f:8a:b6:20:d8: 60:26:5d:1c:87:83:8f:17:82:40:e7:7c:ab:9a:27: 8f:bc:20:1b:ce:81:24:9b:62:bb:c6:6a:39:a9:a1: 29:27:3f:b1:7f:18:0d:fc:64:d6:36:90:5e:be:f0: 2d:d4:b1:3c:91:4d:23:ea:68:c0:9f:95:77:00:7b: 81:0b:b5:9f:2f:ae:81:07:a2:31:b4:cb:ea:0e:aa: d2:8a:93:ba:bf:6d:4a:3b:16:6e:e6:84:ea:4b:17: 95:0a:da:38:ae:f7:aa:94:ee:74:6a:38:b7:a5:68: e5:f9:f5:eb:90:13:a5:ea:c2:42:74:01:e5:f5:f8: 87:86:19:5b:98:c0:5c:25:44:fd:18:98:48:38:a8: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:A0:50:09:51:87:80:AC:92:BF:E3:C5:F7:0C:5B:03:4D:4A:94 X509v3 Authority Key Identifier: keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:de:69:bc:74:fa:b4:1a:21:47:d3:34:4c:00:70:bb:88:90: a4:7f:e8:5a:2d:7f:31:17:75:7d:01:48:ef:06:5a:1e:c2:29: a0:77:9e:a5:96:b4:b0:53:1b:31:f1:7f:0c:38:fc:fe:58:92: 89:9d:b9:14:08:8a:5d:c5:80:9a:29:fb:8b:c5:80:1c:5e:45: ee:8f:4d:fe:fd:f5:ea:d2:4e:63:21:22:6b:87:1c:b2:78:fa: f9:60:a2:c4:d2:f5:77:09:c3:91:39:ad:dd:8a:8d:ea:55:58: a2:f3:6c:3e:a7:13:45:13:a9:87:46:ca:41:d3:83:5c:28:ba: f3:82:00:81:1e:5c:19:3c:d7:08:bd:bd:54:76:4d:b5:20:e9: a3:92:0f:09:bd:c3:0a:6a:26:45:70:db:cd:1d:c2:70:4e:9a: 05:fa:96:9b:fe:16:86:8e:ba:ce:7d:06:a2:56:ff:db:2a:9f: 8a:51:10:5b:f7:4b:27:cf:80:c2:ba:e4:90:d9:21:e9:65:1f: 25:3c:d3:70:6d:65:86:17:b6:47:04:91:c4:86:28:46:22:cb: aa:cc:e1:99:34:97:33:b8:cc:97:64:e6:51:9d:d7:db:47:bc: a0:15:66:64:d9:e9:57:5e:7a:2f:a7:be:0c:af:4a:e7:ab:0e: c8:95:65:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmo96JhLCaVRktKoobRP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl NDRlMjcwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD Eyg4OTc0YTA1MDA5NTE4NzgwYWM5MmJmZTNjNWY3MGM1YjAzNGQ0YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjOGwKFygao68TdyR00mNBQWCylx PgLNQI4mrl5FYApA8JveXufhUYZUPnmMIR9Ak4PBTlrJ0WDoaPndTt+brKP5TV/a nsXHqV/S2aCs+AM4EAZFQoZFDvKWQ8qjNH9BnCS6k3HENzHPsXicX2FZrY9ST4q2 INhgJl0ch4OPF4JA53yrmiePvCAbzoEkm2K7xmo5qaEpJz+xfxgN/GTWNpBevvAt 1LE8kU0j6mjAn5V3AHuBC7WfL66BB6IxtMvqDqrSipO6v21KOxZu5oTqSxeVCto4 rveqlO50aji3pWjl+fXrkBOl6sJCdAHl9fiHhhlbmMBcJUT9GJhIOKgVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl0oFAJUYeArJK/48X3DFsDTUqUMB8GA1UdIwQY MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt5pvHT6 tBohR9M0TABwu4iQpH/oWi1/MRd1fQFI7wZaHsIpoHeepZa0sFMbMfF/DDj8/liS iZ25FAiKXcWAmin7i8WAHF5F7o9N/v316tJOYyEia4ccsnj6+WCixNL1dwnDkTmt 3YqN6lVYovNsPqcTRROph0bKQdODXCi684IAgR5cGTzXCL29VHZNtSDpo5IPCb3D CmomRXDbzR3CcE6aBfqWm/4Who66zn0Golb/2yqfilEQW/dLJ8+AwrrkkNkh6WUf JTzTcG1lhhe2RwSRxIYoRiLLqszhmTSXM7jMl2TmUZ3X20e8oBVmZNnpV156L6e+ DK9K56sOyJVlRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:08 2025 by rpki-client