This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json) Hash identifier: 03aT9j2bvoedXVwj9aNlM9DjR8Lt257hemjhdFbCixg= Subject key identifier: 96:21:AD:D0:DA:E4:30:78:50:19:87:E9:8F:03:6E:DA:0A:76:41:A5 Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e Certificate serial: 019AF27718F86C6AB3B3FC099FA7FD8C17B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft Manifest number: 0A8E Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: EWo/x5dksziBOwdYUp55/xiYE+2mx5mK53hHxqT7ziA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:18:f8:6c:6a:b3:b3:fc:09:9f:a7:fd:8c:17:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=9621add0dae43078501987e98f036eda0a7641a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:f8:84:d3:d3:1c:8b:fe:c4:1e:a9:e2:29: 91:82:78:23:63:52:33:b3:f6:80:e4:7b:76:5c:7c: 38:d2:3b:7b:10:7c:e0:ca:ca:67:d6:f6:35:c2:ce: 40:e3:42:c7:ad:7d:cf:b3:f3:56:fe:ab:77:bb:83: 94:10:7f:99:79:e1:71:69:9f:46:cf:7b:80:26:fa: ec:b8:d3:2a:d1:e3:34:3b:94:80:e1:fd:e2:1d:f3: 5e:cc:49:4c:54:0c:6e:d0:00:ad:3d:a6:aa:10:f2: e9:a9:3e:02:01:1d:81:14:94:d1:ba:7c:88:b9:d3: aa:9d:79:ed:3c:5f:29:ad:66:59:dc:f0:e3:f5:e6: ce:aa:47:9f:46:7c:be:eb:bf:fd:72:c9:b8:b3:bd: 8a:df:6d:8c:e1:97:6a:b1:80:d9:ab:19:9a:db:47: 56:00:a6:9c:33:0d:79:39:5b:c0:05:4a:91:2e:ed: 8e:f2:0b:58:ad:a6:52:09:fc:f2:d2:d1:a1:69:2d: 20:70:d8:86:05:08:d8:64:eb:0d:e4:16:a4:65:09: ac:f8:3a:28:de:ee:16:1d:15:d3:b8:5e:c2:34:9d: e8:f0:3f:96:ab:61:0c:7b:a6:35:f0:0e:16:64:07: ef:f4:77:93:4c:0f:e9:48:23:da:f9:0b:a7:1b:29: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:21:AD:D0:DA:E4:30:78:50:19:87:E9:8F:03:6E:DA:0A:76:41:A5 X509v3 Authority Key Identifier: keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:78:87:ef:41:d8:7d:87:1f:fd:02:9c:a1:67:c8:4f:7d:d4: a8:3e:6b:b3:59:61:16:55:e6:83:e9:6d:4b:64:58:90:ba:78: 4a:e7:97:e6:2c:4d:a4:12:fd:7e:06:17:a6:f1:04:c9:8c:c4: c5:d4:64:f8:ff:2a:c9:35:ac:df:a3:4e:cb:ad:67:a0:22:05: cb:d9:43:84:89:cf:ab:91:0a:1d:e4:a3:d6:fe:e2:a7:e5:47: ca:48:b7:8d:97:b5:e1:9c:96:a8:e4:c3:8d:fa:84:f2:ef:ab: 4d:7a:41:d0:de:b9:b2:9c:de:bc:ba:13:9a:dc:58:c7:ad:5e: 26:65:d8:11:85:aa:ec:c7:0d:e4:3f:96:9b:fc:a8:68:0b:ac: 77:45:64:df:23:73:7f:73:be:ad:20:d3:31:62:58:4d:a7:01: 58:38:72:ab:4f:c5:50:4b:ce:db:38:78:f9:e7:c7:69:bc:e0: 1b:69:98:b7:51:c1:6d:95:a5:8a:c1:e0:5e:8d:f5:0e:99:0d: f2:d9:23:ea:e5:ad:2f:08:f1:14:6e:01:29:73:76:58:96:12: 57:52:8d:46:9b:5e:19:cb:85:0b:e5:2a:d8:fd:34:72:ec:21: 3f:96:57:e9:41:ca:2a:21:93:b1:cb:af:fb:b8:fb:95:01:b7: be:63:91:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxj4bGqzs/wJn6f9jBe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDM1MWE4NjdiOWRhZTlkYjY3NjQzMDZiZDczMjA1OWY2 ZDk5OWUwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg5NjIxYWRkMGRhZTQzMDc4NTAxOTg3ZTk4ZjAzNmVkYTBhNzY0MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnf4hNPTHIv+xB6p4imRgngjY1Iz s/aA5Ht2XHw40jt7EHzgyspn1vY1ws5A40LHrX3Ps/NW/qt3u4OUEH+ZeeFxaZ9G z3uAJvrsuNMq0eM0O5SA4f3iHfNezElMVAxu0ACtPaaqEPLpqT4CAR2BFJTRunyI udOqnXntPF8prWZZ3PDj9ebOqkefRny+67/9csm4s72K322M4ZdqsYDZqxma20dW AKacMw15OVvABUqRLu2O8gtYraZSCfzy0tGhaS0gcNiGBQjYZOsN5BakZQms+Doo 3u4WHRXTuF7CNJ3o8D+Wq2EMe6Y18A4WZAfv9HeTTA/pSCPa+QunGynzlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYhrdDa5DB4UBmH6Y8DbtoKdkGlMB8GA1UdIwQY MBaAFCVDUahnudrp22dkMGvXMgWfbZmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgt MjA1Y2E2Njg4NTY0LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgtMjA1Y2E2Njg4NTY0 LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3iH70HY fYcf/QKcoWfIT33UqD5rs1lhFlXmg+ltS2RYkLp4SueX5ixNpBL9fgYXpvEEyYzE xdRk+P8qyTWs36NOy61noCIFy9lDhInPq5EKHeSj1v7ip+VHyki3jZe14ZyWqOTD jfqE8u+rTXpB0N65spzevLoTmtxYx61eJmXYEYWq7McN5D+Wm/yoaAusd0Vk3yNz f3O+rSDTMWJYTacBWDhyq0/FUEvO2zh4+efHabzgG2mYt1HBbZWlisHgXo31DpkN 8tkj6uWtLwjxFG4BKXN2WJYSV1KNRpteGcuFC+Uq2P00cuwhP5ZX6UHKKiGTscuv +7j7lQG3vmORfg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:07 2025 by rpki-client