This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json) Hash identifier: P1u74nTPa9gbpaZRDZEX53vN/njhLW1GujFK/g4wMjM= Subject key identifier: 6B:C0:4D:4A:46:66:BE:04:59:5B:6C:C3:39:CF:FF:D4:03:38:72:5B Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9 Certificate serial: 019AF27713AA5F33FE144920DD1EC7251951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft Manifest number: 018D Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: 7TU7T8a+PeeEZMJeREgYjLJkQCxDaw6YVoghs1XYVSM=) 2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:13:aa:5f:33:fe:14:49:20:dd:1e:c7:25:19:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265649691591e552a14889439cff70de56c08da9 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=6bc04d4a4666be04595b6cc339cfffd40338725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:91:b8:98:f5:c9:26:d7:83:9e:60:d1:01: e4:8e:dc:2f:5c:1b:c0:c4:e4:23:b6:d8:71:1d:a1: c3:79:79:c7:78:24:ff:45:99:e7:a1:7e:2c:d6:5c: ff:48:ee:07:08:f6:b8:42:da:96:01:3b:9a:84:f1: fa:19:bd:dd:d0:ce:69:18:3a:3c:d6:64:75:0a:61: 68:ab:42:e0:03:a1:35:fe:e3:87:e6:f3:d9:be:2e: bb:d8:a9:1d:ba:60:2b:85:c4:9c:0b:ff:58:2d:9a: ed:9a:98:e6:b0:01:f5:35:2f:93:0c:53:8f:3c:ad: f4:85:2e:90:45:f3:d5:4d:45:f2:98:e1:f3:5b:e4: 8a:7c:ec:ba:57:d4:b0:4d:b4:27:f9:38:df:63:cd: a3:cc:5b:5f:56:56:e5:8c:5f:78:4f:10:d6:c5:5d: 4d:4a:c3:e7:56:aa:42:28:28:c3:61:b8:c4:e7:79: b9:31:48:ea:93:ab:e0:68:db:6f:36:3f:fe:53:84: 9c:59:7b:29:50:38:7d:e6:a5:c1:cc:be:74:ca:2c: 5b:8f:61:da:df:1a:81:6c:79:d5:dc:a4:03:d6:03: 9c:df:6d:1f:be:c5:a2:7a:a6:b6:29:1c:7a:22:74: 09:56:7a:7e:7e:28:70:19:04:18:a5:f9:d3:4e:8c: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C0:4D:4A:46:66:BE:04:59:5B:6C:C3:39:CF:FF:D4:03:38:72:5B X509v3 Authority Key Identifier: keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:45:48:eb:21:74:bd:eb:b9:23:34:df:ad:18:71:28:ef:de: 5c:6b:ba:8d:b5:c1:a3:de:69:a9:76:e7:aa:8b:35:08:b0:f9: e2:18:86:e9:3c:0d:51:89:94:d6:af:cb:55:75:a8:6e:a5:91: b8:23:c9:69:9e:fd:e0:82:31:61:12:bf:62:b0:8b:fe:bf:a7: 6d:09:0b:2b:14:3a:4d:0e:2c:e9:5f:bf:63:68:f0:e6:bd:3a: 18:1c:22:b2:9c:71:3c:eb:31:27:41:cc:3d:53:ea:bc:95:9f: 22:b7:f6:4f:06:f9:5b:3a:d5:0d:c7:9b:59:67:64:77:2e:f0: ee:6d:7a:b0:ee:46:58:4e:f9:8e:74:c1:10:69:41:82:79:f5: 69:5c:3a:f5:5b:bd:bb:73:8b:5e:5a:8b:03:b4:9d:2a:99:9d: 9d:9f:75:c5:75:1a:0d:ed:b6:e2:fb:cd:da:fc:5b:b6:35:0c: 9b:a7:b1:ef:9e:ef:8c:b0:36:5a:e0:38:28:59:6c:cf:be:76: 71:ee:82:25:f3:3d:97:4b:27:f6:34:94:4e:68:9f:0b:f2:9b: 6a:a9:a9:39:2d:a0:01:af:50:bf:f8:b5:ac:99:05:4a:47:51: 7b:f1:da:6d:b9:25:cf:96:c7:39:01:01:20:6b:cf:ca:f0:b9: b1:79:60:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxOqXzP+FEkg3R7HJRlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTY0OTY5MTU5MWU1NTJhMTQ4ODk0MzljZmY3MGRlNTZj MDhkYTkwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD Eyg2YmMwNGQ0YTQ2NjZiZTA0NTk1YjZjYzMzOWNmZmZkNDAzMzg3MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL6RuJj1ySbXg55g0QHkjtwvXBvA xOQjtthxHaHDeXnHeCT/RZnnoX4s1lz/SO4HCPa4QtqWATuahPH6Gb3d0M5pGDo8 1mR1CmFoq0LgA6E1/uOH5vPZvi672KkdumArhcScC/9YLZrtmpjmsAH1NS+TDFOP PK30hS6QRfPVTUXymOHzW+SKfOy6V9SwTbQn+TjfY82jzFtfVlbljF94TxDWxV1N SsPnVqpCKCjDYbjE53m5MUjqk6vgaNtvNj/+U4ScWXspUDh95qXBzL50yixbj2Ha 3xqBbHnV3KQD1gOc320fvsWieqa2KRx6InQJVnp+fihwGQQYpfnTTox1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvATUpGZr4EWVtswznP/9QDOHJbMB8GA1UdIwQY MBaAFCZWSWkVkeVSoUiJQ5z/cN5WwI2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTct MTIxMDA5NGE0OGEzLzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTctMTIxMDA5NGE0OGEz LzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREVI6yF0 veu5IzTfrRhxKO/eXGu6jbXBo95pqXbnqos1CLD54hiG6TwNUYmU1q/LVXWobqWR uCPJaZ794IIxYRK/YrCL/r+nbQkLKxQ6TQ4s6V+/Y2jw5r06GBwispxxPOsxJ0HM PVPqvJWfIrf2Twb5WzrVDcebWWdkdy7w7m16sO5GWE75jnTBEGlBgnn1aVw69Vu9 u3OLXlqLA7SdKpmdnZ91xXUaDe224vvN2vxbtjUMm6ex757vjLA2WuA4KFlsz752 ce6CJfM9l0sn9jSUTmifC/KbaqmpOS2gAa9Qv/i1rJkFSkdRe/Habbklz5bHOQEB IGvPyvC5sXlgkg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:42 2025 by rpki-client