This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json) Hash identifier: P/2akHC7tM2MwKwhTFHF+gCcBOoJokEUuLteiiwWYCY= Subject key identifier: B4:AE:58:9C:AE:20:84:AF:DC:F0:1D:A9:8D:42:99:C1:2A:99:4E:76 Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Certificate serial: 019AF19BB5B164EB83A7E433E6636F3CEEF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft Manifest number: 153D Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 8dt8VfGJlaPghe4QATCWezSud0mXL5YVCCR6EeA+RLk=) 2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b5:b1:64:eb:83:a7:e4:33:e6:63:6f:3c:ee:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=b4ae589cae2084afdcf01da98d4299c12a994e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:80:0e:88:5e:a5:5a:fe:c2:00:67:1c:47: 7a:e9:86:7d:d2:27:0c:c8:76:12:57:1c:a0:9b:3a: 4a:e7:22:83:48:fb:00:91:7f:d1:04:1d:6e:38:77: aa:3a:5a:09:2b:fd:a7:7f:b5:82:1f:f6:3b:2e:41: cb:49:87:5b:38:17:01:0b:d1:8a:37:d4:cf:28:45: 61:99:75:0f:79:5e:4d:f9:17:c2:77:e0:19:2a:1a: dc:79:78:1f:6b:fc:6d:fa:14:71:73:a6:6f:4c:a3: 37:78:a0:7f:39:6c:6d:87:c1:62:9e:4f:50:50:15: 42:e5:3f:ca:1f:a9:28:aa:e3:cf:04:a0:bc:36:42: 96:69:a3:51:76:31:97:6d:32:85:63:3a:58:ad:d8: 29:82:65:0c:58:47:e1:54:39:11:01:48:da:29:b3: a3:79:20:5a:d5:2a:6f:dc:e5:33:55:36:62:fb:ea: 8c:e7:e3:a3:2a:49:c6:1f:47:14:8f:ca:de:f8:43: 51:bd:79:af:43:e7:f7:96:66:5a:46:cb:55:56:84: d0:25:31:a7:bd:08:85:82:af:d5:20:19:15:55:d2: 8e:9e:38:8b:ee:16:9b:3c:fd:7d:fc:09:c8:a1:6d: 6f:d8:8a:75:66:2a:c6:00:5f:78:2a:c2:f6:f7:97: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AE:58:9C:AE:20:84:AF:DC:F0:1D:A9:8D:42:99:C1:2A:99:4E:76 X509v3 Authority Key Identifier: keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8e:24:71:67:f3:cf:07:f9:47:3e:ef:40:18:55:5d:8e:22: 7e:3b:38:3b:ad:63:6d:b4:73:d5:63:a6:36:0b:a3:b7:e1:f7: cb:1e:cc:9a:c1:e1:19:b2:45:7b:68:a8:e0:52:00:17:73:c7: 45:72:75:e2:30:e5:fd:a5:6f:a3:a7:5c:c4:dd:e8:ef:9f:bb: bf:2e:d0:bb:6b:19:a2:b9:30:8b:a8:e4:cc:53:22:a6:54:9d: 8c:e9:5b:e4:6e:b8:46:5f:d2:71:ef:16:bc:1d:ce:31:e7:eb: 44:4b:44:58:50:23:66:07:fe:73:36:a9:10:b2:f0:49:d9:31: 00:65:f3:57:d5:0d:45:95:04:2f:fc:42:9d:56:da:a1:59:1b: 8b:36:96:d6:92:89:a4:0d:3a:76:57:0c:82:08:60:1a:92:b6: 60:d4:8e:fa:c6:7c:a6:fc:ee:ad:be:0c:e7:62:47:8f:2a:b8: 2b:8e:07:b2:cc:c3:1f:e8:b6:b1:22:ba:69:d0:f4:16:90:a5: 46:b5:ea:ef:70:e0:ba:c0:81:7b:ca:3b:bd:2e:f0:3e:80:f7: bf:05:ac:03:57:45:49:12:ae:e5:59:cb:12:8a:1d:77:d6:93: e7:d4:5b:bd:5c:b8:32:c0:c4:e9:99:1f:e7:8c:98:5d:d8:c1: f0:94:09:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7WxZOuDp+Qz5mNvPO7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi ZDVmMTIwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD EyhiNGFlNTg5Y2FlMjA4NGFmZGNmMDFkYTk4ZDQyOTljMTJhOTk0ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1CADohepVr+wgBnHEd66YZ90icM yHYSVxygmzpK5yKDSPsAkX/RBB1uOHeqOloJK/2nf7WCH/Y7LkHLSYdbOBcBC9GK N9TPKEVhmXUPeV5N+RfCd+AZKhrceXgfa/xt+hRxc6ZvTKM3eKB/OWxth8Fink9Q UBVC5T/KH6koquPPBKC8NkKWaaNRdjGXbTKFYzpYrdgpgmUMWEfhVDkRAUjaKbOj eSBa1Spv3OUzVTZi++qM5+OjKknGH0cUj8re+ENRvXmvQ+f3lmZaRstVVoTQJTGn vQiFgq/VIBkVVdKOnjiL7habPP19/AnIoW1v2Ip1ZirGAF94KsL295fgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSuWJyuIISv3PAdqY1CmcEqmU52MB8GA1UdIwQY MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3 LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI4kcWfz zwf5Rz7vQBhVXY4ifjs4O61jbbRz1WOmNgujt+H3yx7MmsHhGbJFe2io4FIAF3PH RXJ14jDl/aVvo6dcxN3o75+7vy7Qu2sZorkwi6jkzFMiplSdjOlb5G64Rl/Sce8W vB3OMefrREtEWFAjZgf+czapELLwSdkxAGXzV9UNRZUEL/xCnVbaoVkbizaW1pKJ pA06dlcMgghgGpK2YNSO+sZ8pvzurb4M52JHjyq4K44HsszDH+i2sSK6adD0FpCl RrXq73DgusCBe8o7vS7wPoD3vwWsA1dFSRKu5VnLEoodd9aT59RbvVy4MsDE6Zkf 54yYXdjB8JQJpA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:49 2025 by rpki-client