This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json) Hash identifier: 07XjcG5l6teU33ZEv0uBCqEga+c1V/s2GBYPBjnUurI= Subject key identifier: B4:92:D6:48:44:67:FF:B5:D7:B3:62:F6:F0:1B:99:FB:DF:F1:B2:80 Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32 Certificate serial: 019B416D892B5A3CD2D7958B8CFB93078D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft Manifest number: 0F2B Signing time: Sun 21 Dec 2025 15:00:56 +0000 Manifest this update: Sun 21 Dec 2025 15:00:56 +0000 Manifest next update: Mon 22 Dec 2025 15:00:56 +0000 Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=) 2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: tP2YDLmi2td5hm9QhB3IB1mbxg6R9kPVc7BUDpk0sek=) 3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:89:2b:5a:3c:d2:d7:95:8b:8c:fb:93:07:8d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b660a611980c68273139e32affb74b454a9d32 Validity Not Before: Dec 21 15:00:56 2025 GMT Not After : Dec 22 15:00:56 2025 GMT Subject: CN=b492d6484467ffb5d7b362f6f01b99fbdff1b280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:35:45:4a:be:2f:25:80:82:8f:2c:33:0f: b3:2f:d7:84:19:79:c1:d1:b7:1d:1a:2e:7a:32:33: fb:3d:75:00:82:e4:36:9e:b5:b8:6b:be:53:38:bb: 0b:89:49:1b:4a:5c:48:29:55:b3:dc:16:68:da:00: 53:78:2c:fb:e6:f8:3d:09:40:e7:f8:91:de:35:86: e7:2b:3f:83:c0:7b:9b:20:4b:2d:6b:52:19:8e:47: 5e:94:a1:cb:da:f4:38:95:e2:5d:63:9a:f3:8c:88: 31:b6:ec:92:3e:f2:8e:1d:64:00:01:f6:33:da:34: 29:9d:d2:08:af:68:ef:63:8e:6a:0e:98:b9:13:f7: eb:56:b2:14:ca:e8:97:08:30:fa:77:ff:e2:1d:5a: 34:6c:7f:42:45:6f:ac:f8:02:7f:a6:e2:07:c5:d4: 50:1f:d9:cc:df:f3:9b:77:2b:28:4b:d7:f5:62:20: c3:2a:a3:1f:02:e9:d1:8c:8a:3d:bd:b5:8d:bb:91: 79:52:ff:4e:f7:33:11:25:97:95:98:e2:9f:c0:46: 0e:de:5a:33:ab:68:da:89:1f:06:40:42:b1:be:69: 25:3f:b4:d4:45:17:b5:e3:fe:dc:bf:23:8d:a9:48: d4:85:d3:98:07:08:19:48:67:1b:6b:74:01:ec:49: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:92:D6:48:44:67:FF:B5:D7:B3:62:F6:F0:1B:99:FB:DF:F1:B2:80 X509v3 Authority Key Identifier: keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:18:b8:5b:2d:7d:82:b9:2a:ac:5a:87:35:69:55:a4:d4:37: 7c:7b:e6:f2:39:6c:1e:0b:88:c4:e1:e8:e6:b5:9f:e0:ba:70: e0:b5:69:14:1f:60:9c:08:7c:d4:50:74:6c:0a:cf:4a:92:dc: 9a:7f:59:2b:6f:ae:fe:e7:40:81:93:2b:67:dc:f4:59:28:25: 10:a1:7a:55:e2:6c:f0:bc:95:61:f3:52:ce:8e:31:18:66:b6: cf:8e:36:f3:15:76:1b:33:bc:7b:cc:e0:f2:3a:cc:17:c8:07: c9:17:77:96:17:7e:d7:4f:05:0e:05:87:54:3a:3b:49:f7:c3: 91:19:78:24:90:70:5c:60:30:95:db:86:32:81:db:bf:48:13: 79:0c:8f:e0:7c:87:21:b2:4c:bd:3e:95:a4:87:b8:0c:ba:84: 56:e6:97:6e:cb:d5:57:89:55:1f:74:b3:12:56:77:4a:50:55: 63:19:7a:70:4c:89:8a:b0:17:dd:88:61:22:74:1e:98:0f:54: 15:2d:e2:3f:78:ad:26:1b:08:12:71:b4:54:57:6e:77:e2:b9: 4f:f1:41:46:f2:4a:17:42:09:47:b1:e1:1a:cf:5a:f1:c5:54: c4:3b:e2:2e:19:c7:4e:b8:69:ec:70:26:e4:b9:ae:41:f5:6e: 1e:e8:85:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbYkrWjzS15WLjPuTB42LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0 YTlkMzIwHhcNMjUxMjIxMTUwMDU2WhcNMjUxMjIyMTUwMDU2WjAzMTEwLwYDVQQD EyhiNDkyZDY0ODQ0NjdmZmI1ZDdiMzYyZjZmMDFiOTlmYmRmZjFiMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoc1RUq+LyWAgo8sMw+zL9eEGXnB 0bcdGi56MjP7PXUAguQ2nrW4a75TOLsLiUkbSlxIKVWz3BZo2gBTeCz75vg9CUDn +JHeNYbnKz+DwHubIEsta1IZjkdelKHL2vQ4leJdY5rzjIgxtuySPvKOHWQAAfYz 2jQpndIIr2jvY45qDpi5E/frVrIUyuiXCDD6d//iHVo0bH9CRW+s+AJ/puIHxdRQ H9nM3/ObdysoS9f1YiDDKqMfAunRjIo9vbWNu5F5Uv9O9zMRJZeVmOKfwEYO3loz q2jaiR8GQEKxvmklP7TURRe14/7cvyONqUjUhdOYBwgZSGcba3QB7EnDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSS1khEZ/+117Ni9vAbmfvf8bKAMB8GA1UdIwQY MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5 LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRi4Wy19 grkqrFqHNWlVpNQ3fHvm8jlsHguIxOHo5rWf4Lpw4LVpFB9gnAh81FB0bArPSpLc mn9ZK2+u/udAgZMrZ9z0WSglEKF6VeJs8LyVYfNSzo4xGGa2z4428xV2GzO8e8zg 8jrMF8gHyRd3lhd+108FDgWHVDo7SffDkRl4JJBwXGAwlduGMoHbv0gTeQyP4HyH IbJMvT6VpIe4DLqEVuaXbsvVV4lVH3SzElZ3SlBVYxl6cEyJirAX3YhhInQemA9U FS3iP3itJhsIEnG0VFdud+K5T/FBRvJKF0IJR7HhGs9a8cVUxDviLhnHTrhp7HAm 5LmuQfVuHuiFvA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:20:33 2025 by rpki-client