This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json) Hash identifier: 2cbwB5wXP2zXFa39rQgOcWZD/b42gmM/nAZw66qnl8k= Subject key identifier: B1:EF:54:EF:1A:87:45:2E:8B:FE:AF:28:E2:61:B7:28:90:6A:F2:A9 Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17 Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117 Certificate serial: 019AF31BC855CBA8CABF447F621E7AEAA6F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: w0srOaCozMH4ZODz5tTSekMt8LK1aiDlY6SDCR7thls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c8:55:cb:a8:ca:bf:44:7f:62:1e:7a:ea:a6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=b1ef54ef1a87452e8bfeaf28e261b728906af2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:40:b3:a7:92:e0:f6:91:19:a5:d2:e1:33: ea:02:1b:a3:9f:cd:f8:a9:a8:07:0c:64:05:56:d0: 41:80:a3:0f:e6:19:d4:92:ad:18:4e:d1:94:6c:2b: 94:37:74:bb:41:d9:77:3f:f1:0c:ee:b2:d8:96:f4: 08:94:ea:7a:ce:92:5a:ba:15:37:ea:0d:76:bf:66: 3c:69:ec:4b:a4:20:2b:6f:6c:c4:66:18:6b:d1:03: df:f3:9a:7f:d2:8e:9a:68:98:be:f4:eb:16:4d:b0: dc:67:68:db:4c:c7:e7:d3:ce:b8:29:a8:c2:30:c1: 64:da:37:b8:ec:75:c8:dd:60:06:87:b8:a9:49:5b: 92:ed:5a:9a:77:e5:51:8f:84:44:cb:53:9e:08:40: c6:19:3d:c7:29:fe:9b:d2:17:e8:df:1a:01:0e:24: 1a:aa:42:6f:2d:c5:d9:d6:fa:bc:27:2a:89:80:1e: cc:65:30:34:77:34:58:db:aa:28:d8:f2:4f:df:53: c3:d8:cd:80:ed:08:99:ea:7a:8f:36:1a:38:e3:aa: f4:3a:50:ca:b9:f0:09:e2:a8:27:94:ba:1a:13:b4: b8:24:64:4f:91:21:83:8e:84:19:b4:5e:41:a1:de: 1e:93:46:19:11:fd:5f:80:a7:38:ab:62:b1:33:0b: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:54:EF:1A:87:45:2E:8B:FE:AF:28:E2:61:B7:28:90:6A:F2:A9 X509v3 Authority Key Identifier: keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d4:82:6a:e3:a9:44:ad:9b:46:59:bd:e3:93:19:09:a3:6f: 2d:e7:61:be:a3:c5:26:8b:20:de:be:dd:20:f2:fc:86:d9:75: 7a:4d:de:3b:14:0d:97:7a:3f:52:1d:52:9d:c9:67:44:5f:4a: 47:6f:9f:f6:b1:9f:24:bf:a5:51:8b:9e:91:bd:00:02:24:37: 28:1c:0d:c6:37:48:60:90:5e:54:b0:30:7d:1d:dd:e6:82:2a: 09:e8:21:6b:0c:4a:14:e7:c5:88:2c:5b:a5:46:ee:6f:cf:31: 1c:f7:48:5c:fd:f8:6f:12:de:22:41:ae:5b:8a:a4:d7:e8:d9: 44:3b:2c:8b:45:91:e3:52:9b:dd:34:6f:27:61:2b:6a:ab:10: c6:44:71:14:b2:3b:68:c0:45:16:6e:66:35:04:0a:95:5a:1e: 7a:ce:9b:91:81:a3:93:1a:aa:2e:75:d0:67:8b:79:00:25:c5: f4:3c:f8:14:af:a4:ef:2f:15:eb:60:64:e3:c5:d8:d9:bd:6c: e8:9e:db:de:e1:8e:6e:ff:37:03:b8:9e:40:ce:ac:88:40:9b: 1d:b0:2b:fe:b2:14:4a:90:d5:48:92:0c:68:0a:1c:8b:89:78: 66:3e:9f:a2:a4:23:78:3b:22:42:a6:be:f8:48:19:73:e9:fc: 18:e8:32:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8hVy6jKv0R/Yh566qb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzUwMzVkZDM2ZGYwNzQ5ZjRkNjI5OWM4ZmNiZWQ2MTU1 YzAxMTcwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EyhiMWVmNTRlZjFhODc0NTJlOGJmZWFmMjhlMjYxYjcyODkwNmFmMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtshAs6eS4PaRGaXS4TPqAhujn834 qagHDGQFVtBBgKMP5hnUkq0YTtGUbCuUN3S7Qdl3P/EM7rLYlvQIlOp6zpJauhU3 6g12v2Y8aexLpCArb2zEZhhr0QPf85p/0o6aaJi+9OsWTbDcZ2jbTMfn0864KajC MMFk2je47HXI3WAGh7ipSVuS7Vqad+VRj4REy1OeCEDGGT3HKf6b0hfo3xoBDiQa qkJvLcXZ1vq8JyqJgB7MZTA0dzRY26oo2PJP31PD2M2A7QiZ6nqPNho446r0OlDK ufAJ4qgnlLoaE7S4JGRPkSGDjoQZtF5Bod4ek0YZEf1fgKc4q2KxMwtNawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHvVO8ah0Uui/6vKOJhtyiQavKpMB8GA1UdIwQY MBaAFCXFA13TbfB0n01imcj8vtYVXAEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQt NTllYjM4NGUwOTY3LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQtNTllYjM4NGUwOTY3 LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidSCauOp RK2bRlm945MZCaNvLedhvqPFJosg3r7dIPL8htl1ek3eOxQNl3o/Uh1SnclnRF9K R2+f9rGfJL+lUYuekb0AAiQ3KBwNxjdIYJBeVLAwfR3d5oIqCeghawxKFOfFiCxb pUbub88xHPdIXP34bxLeIkGuW4qk1+jZRDssi0WR41Kb3TRvJ2EraqsQxkRxFLI7 aMBFFm5mNQQKlVoees6bkYGjkxqqLnXQZ4t5ACXF9Dz4FK+k7y8V62Bk48XY2b1s 6J7b3uGObv83A7ieQM6siECbHbAr/rIUSpDVSJIMaAoci4l4Zj6foqQjeDsiQqa+ +EgZc+n8GOgyiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:54 2025 by rpki-client