This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json) Hash identifier: kKN6n/f04vTbZxWqMtGnm9Zxw0WznGpdopMa85R1diY= Subject key identifier: BB:FE:E5:FA:55:D4:18:92:69:80:CF:2C:BA:33:C3:B2:B9:2A:23:46 Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316 Certificate serial: 019AF208BF9650951D335361E71A704AFDAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=) 2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=) 3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: Qnobuwzx0Hv0Oa9NyWpP/izznRdCgkIcLZeOqzobXH8=) 4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=) 5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=) 6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=) 7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=) 8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:96:50:95:1d:33:53:61:e7:1a:70:4a:fd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=bbfee5fa55d418926980cf2cba33c3b2b92a2346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:9d:7f:14:40:40:5a:8c:83:35:fc:fb:31: 2c:52:0a:da:09:d1:15:5b:21:86:6c:c2:1f:57:a3: 92:91:b2:44:8f:9d:65:98:8d:86:b0:3e:59:3c:2f: 3b:da:6a:5a:63:64:72:34:f6:c2:fd:8b:02:b9:25: b6:fd:39:6e:69:0c:a2:6b:75:e5:f5:8f:0c:65:25: 7c:6f:08:84:e5:64:d7:34:5d:22:81:05:c3:1e:3f: b4:c4:3e:d6:0e:d8:30:6a:dd:ff:50:fb:47:d1:b1: d2:c3:be:a1:7f:37:c5:57:a9:b6:5e:e1:75:11:b7: 26:c9:17:d9:25:62:55:1d:fd:da:0d:8e:27:97:1e: be:97:bd:ca:f3:97:42:5f:54:f6:0b:d9:e2:55:45: 89:a8:07:00:78:0c:bf:11:87:03:1f:0b:56:6f:4f: 00:05:c1:cd:4a:a6:5f:f8:fe:23:46:5d:8f:d7:7d: 34:72:11:6b:97:9d:e7:01:5c:77:cc:fa:01:dd:41: f9:2c:f7:61:93:47:9f:d2:84:3c:1e:d0:f8:12:67: 71:4d:2d:d9:bc:99:20:b8:f1:3e:c1:27:ec:4e:72: c8:18:29:49:e3:7e:c9:df:8f:07:0e:5e:97:50:17: de:10:37:07:39:46:06:16:e8:01:a6:d4:23:38:52: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FE:E5:FA:55:D4:18:92:69:80:CF:2C:BA:33:C3:B2:B9:2A:23:46 X509v3 Authority Key Identifier: keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1e:ab:96:76:42:90:57:c0:48:fe:25:e5:eb:c9:18:bd:26: d7:eb:a2:39:b3:49:16:6a:fa:c0:e2:f1:c3:2c:4b:f7:37:26: 8c:f6:21:30:d0:5f:51:0d:eb:9c:17:19:bf:05:95:01:88:51: c0:b5:34:fb:a3:17:dc:81:20:7b:d8:85:2e:65:23:6d:81:08: fb:59:7c:c9:69:e3:d1:c7:89:4f:c0:ed:74:3d:7b:ba:a4:3f: 01:82:0f:93:a2:38:ea:f1:2e:df:87:2a:b4:85:d2:1e:ca:c2: 13:cd:96:46:b7:08:f5:e7:d2:73:0a:19:79:1b:c2:c7:ea:b0: 3f:3e:4a:1e:5b:4b:3f:7f:a2:31:b2:7c:01:e7:58:e2:16:64: 23:7f:00:7b:a5:ea:6f:74:e7:9c:d8:8d:f3:7b:c7:df:22:cb: a2:ac:c8:e0:29:8c:6d:63:eb:90:f8:34:70:73:25:a3:1a:07: d6:d2:4c:21:6c:cc:82:2b:79:cb:72:0b:a9:83:23:f8:3f:b4: 1d:1a:f2:43:22:04:05:84:dd:22:c1:c2:55:9d:5f:a0:df:48: 7e:05:65:e2:9f:9a:12:52:4a:bb:c3:a5:1f:74:1f:29:38:d6: 12:fa:70:2d:07:82:7c:cc:cd:d6:71:d3:a1:d4:84:c6:94:63: 40:67:a8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL+WUJUdM1Nh5xpwSv2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw NGIzMTYwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EyhiYmZlZTVmYTU1ZDQxODkyNjk4MGNmMmNiYTMzYzNiMmI5MmEyMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXqdfxRAQFqMgzX8+zEsUgraCdEV WyGGbMIfV6OSkbJEj51lmI2GsD5ZPC872mpaY2RyNPbC/YsCuSW2/TluaQyia3Xl 9Y8MZSV8bwiE5WTXNF0igQXDHj+0xD7WDtgwat3/UPtH0bHSw76hfzfFV6m2XuF1 EbcmyRfZJWJVHf3aDY4nlx6+l73K85dCX1T2C9niVUWJqAcAeAy/EYcDHwtWb08A BcHNSqZf+P4jRl2P1300chFrl53nAVx3zPoB3UH5LPdhk0ef0oQ8HtD4EmdxTS3Z vJkguPE+wSfsTnLIGClJ437J348HDl6XUBfeEDcHOUYGFugBptQjOFIEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLv+5fpV1BiSaYDPLLozw7K5KiNGMB8GA1UdIwQY MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1 LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx6rlnZC kFfASP4l5evJGL0m1+uiObNJFmr6wOLxwyxL9zcmjPYhMNBfUQ3rnBcZvwWVAYhR wLU0+6MX3IEge9iFLmUjbYEI+1l8yWnj0ceJT8DtdD17uqQ/AYIPk6I46vEu34cq tIXSHsrCE82WRrcI9efScwoZeRvCx+qwPz5KHltLP3+iMbJ8AedY4hZkI38Ae6Xq b3TnnNiN83vH3yLLoqzI4CmMbWPrkPg0cHMloxoH1tJMIWzMgit5y3ILqYMj+D+0 HRryQyIEBYTdIsHCVZ1foN9IfgVl4p+aElJKu8OlH3QfKTjWEvpwLQeCfMzN1nHT odSExpRjQGeozg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:46 2025 by rpki-client