This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft File: JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json) Hash identifier: DAEBY6Y/bnzO9DdiLYUD/z22IxRH9ZwL7XZv2TBKAps= Subject key identifier: B5:80:D2:B8:DE:16:A9:8F:44:D8:12:37:E6:9B:E2:C4:75:9C:22:BC Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43 Certificate issuer: /CN=262762b73be226b171999412625acc7270244343 Certificate serial: 019B32687DB48BCE3A4FFBDB584905F5132A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft Manifest number: 03D1 Signing time: Thu 18 Dec 2025 17:01:07 +0000 Manifest this update: Thu 18 Dec 2025 17:01:07 +0000 Manifest next update: Fri 19 Dec 2025 17:01:07 +0000 Files and hashes: 1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: 4iOMXYadNdQW41t0askMOwLBshPZEaK3bH9tutiz3To=) 2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:7d:b4:8b:ce:3a:4f:fb:db:58:49:05:f5:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262762b73be226b171999412625acc7270244343 Validity Not Before: Dec 18 17:01:07 2025 GMT Not After : Dec 19 17:01:07 2025 GMT Subject: CN=b580d2b8de16a98f44d81237e69be2c4759c22bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:d9:69:d3:65:7b:19:06:3c:d1:b8:ef:3e: f2:fa:a7:0e:54:82:30:3f:d0:9c:9a:2d:f0:96:5f: f3:6d:43:4b:93:ca:4c:eb:a4:b7:d8:1a:93:6f:6b: a1:0b:87:a9:4f:f1:90:60:eb:5c:30:14:4b:80:3a: 3b:03:15:bd:52:f0:f1:c2:a4:10:f5:2f:30:bb:a2: f3:c8:bb:c3:77:1e:ba:2b:53:f5:13:a3:1a:3c:0d: 4d:43:f4:1d:ec:2d:9e:46:6f:76:63:ed:90:6e:dd: bb:a2:65:ca:ac:89:dd:85:7b:a2:6f:c4:a4:81:44: 32:a7:f2:64:54:40:7a:93:60:2e:67:37:8b:22:4a: 01:5a:4a:4b:2c:a1:b9:a0:ec:a7:d1:6c:48:b5:de: ba:8b:7e:57:0b:81:98:22:4a:78:1b:ff:fa:a2:79: 69:ad:01:a6:f9:7b:b2:6e:31:e6:9e:bf:60:ba:fd: f6:74:91:34:22:f8:cd:bc:47:60:7c:12:88:2e:b8: 59:cf:a0:af:eb:2f:b2:27:da:44:a9:b4:9e:4c:52: ba:e5:ea:44:1c:f6:e7:21:9e:26:c1:d3:45:fe:65: 7d:8c:69:99:5b:94:29:d6:7c:80:1c:f0:b3:e1:0b: 6d:55:d7:54:9d:13:5c:ff:96:e9:72:a7:5c:f1:f8: d3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:80:D2:B8:DE:16:A9:8F:44:D8:12:37:E6:9B:E2:C4:75:9C:22:BC X509v3 Authority Key Identifier: keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a8:5a:77:ce:9d:8c:ab:62:74:92:6a:84:f5:c1:34:3e:79: 6e:59:4a:c5:b5:fe:f8:c6:2c:75:8b:41:ff:e5:3f:bf:f2:41: 51:52:5d:e0:32:b3:30:41:21:81:34:d2:3c:6a:6e:1a:42:09: 6f:7e:21:17:ee:4a:32:0c:17:7f:8a:be:5c:b1:9b:39:67:8e: 93:9a:b1:db:73:26:5d:89:b5:09:3d:c7:49:b8:9c:b1:33:1a: ef:54:b7:78:93:51:30:c5:b7:b3:df:dd:14:6b:93:a4:4f:14: 46:c5:6e:c0:96:c1:c9:77:71:5f:47:88:10:9d:6c:ec:71:43: bf:85:fc:a0:e7:b0:98:10:85:ea:93:03:38:01:08:48:2e:76: 71:d9:01:e2:68:ab:9d:6a:c5:f2:fc:a3:0c:5c:40:94:1e:6f: 4b:89:87:2a:46:3f:5f:50:33:93:f7:77:12:3c:4b:e3:6c:cc: 70:ad:ad:ba:b2:a1:6b:b9:5e:b9:db:75:21:f8:e3:49:e9:8e: b4:07:1b:86:2b:09:20:d7:40:bb:ce:2f:88:94:7e:22:01:d6: 63:38:d7:74:db:1b:38:13:cd:18:3c:8b:90:f6:aa:5a:3f:10: 51:84:be:31:95:20:98:5d:3c:bf:cf:ab:39:12:31:b6:a3:d5: 00:19:42:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaH20i846T/vbWEkF9RMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2Mjc2MmI3M2JlMjI2YjE3MTk5OTQxMjYyNWFjYzcyNzAy NDQzNDMwHhcNMjUxMjE4MTcwMTA3WhcNMjUxMjE5MTcwMTA3WjAzMTEwLwYDVQQD EyhiNTgwZDJiOGRlMTZhOThmNDRkODEyMzdlNjliZTJjNDc1OWMyMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWHZadNlexkGPNG47z7y+qcOVIIw P9Ccmi3wll/zbUNLk8pM66S32BqTb2uhC4epT/GQYOtcMBRLgDo7AxW9UvDxwqQQ 9S8wu6LzyLvDdx66K1P1E6MaPA1NQ/Qd7C2eRm92Y+2Qbt27omXKrIndhXuib8Sk gUQyp/JkVEB6k2AuZzeLIkoBWkpLLKG5oOyn0WxItd66i35XC4GYIkp4G//6onlp rQGm+XuybjHmnr9guv32dJE0IvjNvEdgfBKILrhZz6Cv6y+yJ9pEqbSeTFK65epE HPbnIZ4mwdNF/mV9jGmZW5Qp1nyAHPCz4QttVddUnRNc/5bpcqdc8fjTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWA0rjeFqmPRNgSN+ab4sR1nCK8MB8GA1UdIwQY MBaAFCYnYrc74iaxcZmUEmJazHJwJENDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgt MmM0YzA2NmZjMjkxLzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kYjU0N2UtZjQzMS00ZDc4LTlmMzgtMmM0YzA2NmZjMjkx LzEvSmlkaXR6dmlKckZ4bVpRU1lsck1jbkFrUTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqhad86d jKtidJJqhPXBND55bllKxbX++MYsdYtB/+U/v/JBUVJd4DKzMEEhgTTSPGpuGkIJ b34hF+5KMgwXf4q+XLGbOWeOk5qx23MmXYm1CT3HSbicsTMa71S3eJNRMMW3s9/d FGuTpE8URsVuwJbByXdxX0eIEJ1s7HFDv4X8oOewmBCF6pMDOAEISC52cdkB4mir nWrF8vyjDFxAlB5vS4mHKkY/X1Azk/d3EjxL42zMcK2turKha7leudt1IfjjSemO tAcbhisJINdAu84viJR+IgHWYzjXdNsbOBPNGDyLkPaqWj8QUYS+MZUgmF08v8+r ORIxtqPVABlCbg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:01:52 2025 by rpki-client