This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json) Hash identifier: kw8LfYPUJRwkJY7enI87T4dLRIN2BxPyODqTjyLDKCc= Subject key identifier: C3:16:B3:60:ED:38:17:E8:84:C8:1D:9B:F4:90:A3:65:9E:53:FB:2C Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Certificate serial: 019AF12EB0658E69159213C74B423A15CE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft Manifest number: 0A4F Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: Dy3KJszar/MSaY3M0DHI4YTsHkiao47ruyNzDcUM86Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b0:65:8e:69:15:92:13:c7:4b:42:3a:15:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=c316b360ed3817e884c81d9bf490a3659e53fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:3c:6f:ba:20:b2:b3:13:46:aa:a4:ad:25: 85:1b:92:b7:62:7a:f9:f0:ed:c9:87:49:a9:8f:36: b4:7d:c2:3c:31:46:65:9f:35:aa:dd:f0:11:e3:26: 7e:aa:e0:4d:61:33:68:04:ea:02:92:26:4e:1d:d0: 6b:8f:26:5f:8d:d8:07:56:3c:cb:ab:12:90:02:09: 7b:e7:b7:aa:e3:d9:e1:f7:69:39:d1:63:35:9e:f8: c6:3e:ce:62:24:3c:bf:91:f0:35:6b:8b:65:4d:39: 1d:b4:69:be:82:19:19:27:f1:e4:15:4c:e0:b2:03: bc:2b:23:28:c9:4b:f4:81:69:f9:13:7f:45:34:8c: 28:fb:6f:e3:dc:65:1d:88:93:9f:6b:b0:d2:9b:27: f9:5a:af:ee:7c:c1:34:42:c2:66:d1:ca:07:5d:b1: 25:e4:ad:93:58:e6:03:41:8a:16:4c:44:25:20:31: 3a:9b:ed:0f:25:77:5d:43:3c:3e:d2:02:ab:52:4c: e9:c2:b3:46:3b:57:e7:2c:e7:96:3d:fa:2e:48:e3: 29:f7:30:36:98:a3:07:82:d1:c4:16:e6:7c:e2:0a: d5:47:be:3f:c4:5b:eb:00:1c:9b:b0:ee:85:6b:fa: e3:35:95:cd:6c:61:03:63:0a:bc:5b:6c:5b:69:0a: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:16:B3:60:ED:38:17:E8:84:C8:1D:9B:F4:90:A3:65:9E:53:FB:2C X509v3 Authority Key Identifier: keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:0f:6a:17:70:9a:fe:f5:5e:01:65:c6:ca:05:02:da:4c: 9f:f4:aa:1b:c0:75:3e:ff:30:9e:ea:6b:56:aa:5d:1d:3a:fb: 6b:f4:0c:4e:b6:d7:ad:4c:ba:34:9b:e3:ae:34:3f:b9:53:ad: b6:2c:f9:35:1b:48:cf:13:7c:c5:9b:fb:e7:c8:d3:99:4a:66: 3d:24:f6:dc:21:fb:d5:38:c9:65:07:c7:2c:b6:29:94:93:dc: c2:52:46:1a:70:22:87:4c:62:c8:80:75:fc:75:35:e6:24:62: 75:ba:6a:ad:d9:2e:0f:37:f9:78:1b:64:b5:ba:25:a2:a3:a1: b7:28:cc:cb:24:3c:4a:81:74:bb:25:6e:62:f9:bb:56:af:35: 97:21:2b:ca:18:ed:48:c0:74:6e:20:b3:df:3f:7d:31:b0:d7: 6e:79:a6:c4:c5:41:06:d3:97:bd:05:22:5a:f4:72:1a:42:98: 2f:98:be:1d:ff:0d:df:56:b8:0e:1f:a8:c4:23:7c:eb:8d:b3: 94:a4:b5:0b:d3:44:09:f6:15:e7:41:c1:ba:6a:b2:d5:22:86: 9d:dd:7f:89:ec:13:75:7f:02:d8:c4:93:dd:ec:f0:a3:c3:86: f9:dc:53:f0:3e:52:5b:b6:d9:fa:7b:57:8a:61:29:81:8a:39: aa:ef:87:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrBljmkVkhPHS0I6Fc5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTM0MzRlMWNmNjkwYWQyNmQ0N2EwM2IzZmMzNWE4MDJh NzliNTgwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD EyhjMzE2YjM2MGVkMzgxN2U4ODRjODFkOWJmNDkwYTM2NTllNTNmYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvew8b7ogsrMTRqqkrSWFG5K3Ynr5 8O3Jh0mpjza0fcI8MUZlnzWq3fAR4yZ+quBNYTNoBOoCkiZOHdBrjyZfjdgHVjzL qxKQAgl757eq49nh92k50WM1nvjGPs5iJDy/kfA1a4tlTTkdtGm+ghkZJ/HkFUzg sgO8KyMoyUv0gWn5E39FNIwo+2/j3GUdiJOfa7DSmyf5Wq/ufME0QsJm0coHXbEl 5K2TWOYDQYoWTEQlIDE6m+0PJXddQzw+0gKrUkzpwrNGO1fnLOeWPfouSOMp9zA2 mKMHgtHEFuZ84grVR74/xFvrABybsO6Fa/rjNZXNbGEDYwq8W2xbaQr2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMWs2DtOBfohMgdm/SQo2WeU/ssMB8GA1UdIwQY MBaAFCZTQ04c9pCtJtR6A7P8NagCp5tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUt Y2JhNWQ5NzhmMzcxLzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUtY2JhNWQ5NzhmMzcx LzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo60Pahdw mv71XgFlxsoFAtpMn/SqG8B1Pv8wnuprVqpdHTr7a/QMTrbXrUy6NJvjrjQ/uVOt tiz5NRtIzxN8xZv758jTmUpmPST23CH71TjJZQfHLLYplJPcwlJGGnAih0xiyIB1 /HU15iRidbpqrdkuDzf5eBtktboloqOhtyjMyyQ8SoF0uyVuYvm7Vq81lyEryhjt SMB0biCz3z99MbDXbnmmxMVBBtOXvQUiWvRyGkKYL5i+Hf8N31a4Dh+oxCN8642z lKS1C9NECfYV50HBumqy1SKGnd1/iewTdX8C2MST3ezwo8OG+dxT8D5SW7bZ+ntX imEpgYo5qu+HwA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:59 2025 by rpki-client