This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json) Hash identifier: F9RVethoq6KAB68TuxaX2a8SOfTUs3xQ3dKIWOfCqT4= Subject key identifier: B2:5A:11:72:25:CD:5E:BF:69:99:AA:22:B1:2A:F2:31:D7:62:0E:59 Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df Certificate serial: 019AF19AD0C464E5607D032C4A259820774B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft Manifest number: 0D4D Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: fHfKv5jUd059x7v836obQUlxBkmo5gQ3IPLoZqDzdmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d0:c4:64:e5:60:7d:03:2c:4a:25:98:20:77:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=b25a117225cd5ebf6999aa22b12af231d7620e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:a6:8c:16:cb:1c:08:97:1a:b4:b5:30:95: ee:0f:b4:79:2f:b7:ec:7d:d2:49:55:5e:03:fe:ea: 7f:f5:1e:35:09:bd:a1:f8:98:5f:96:4b:c4:e1:4b: 53:98:1c:dd:40:04:2d:c4:bc:53:17:da:9d:76:40: ed:eb:59:12:3b:0d:b8:e9:c5:01:c5:c7:4d:fa:c4: 05:5f:bd:59:62:57:62:b6:e7:e5:a5:86:a7:e0:3e: 15:89:1c:75:48:a8:17:62:72:c3:03:df:05:20:c6: 16:7e:4c:85:ad:a3:59:48:68:1e:ab:2d:f4:c8:53: 2c:33:d1:9f:aa:4b:99:34:7f:88:df:5f:a4:7e:da: e4:e5:1c:7d:cd:70:da:52:06:04:e0:b1:33:d4:a9: 46:77:f4:b7:b1:38:47:86:07:2f:5a:35:bd:a8:a0: e1:f8:19:79:ad:cf:5e:fe:cb:84:be:59:dd:17:17: 8d:d6:96:47:1f:98:c8:66:2c:f3:8f:15:55:e7:a6: c5:7a:22:14:60:5e:bb:cc:f9:37:44:e4:52:84:5c: 0f:9c:c0:33:56:e1:77:95:85:99:0d:cb:a9:a7:68: 23:7b:66:86:ff:71:8e:9f:a4:25:a0:1a:ef:db:f1: a2:63:db:25:0f:af:21:0d:42:81:24:49:82:3c:5c: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:11:72:25:CD:5E:BF:69:99:AA:22:B1:2A:F2:31:D7:62:0E:59 X509v3 Authority Key Identifier: keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:89:61:4d:af:e7:f9:a8:e3:a4:70:d2:16:4c:cc:67:9d:ab: ba:6c:89:b2:49:6a:3b:b1:c4:35:54:28:04:c0:b7:85:95:9e: 63:ee:28:b4:80:14:79:0a:03:6a:d7:03:2f:ec:eb:72:c6:c1: 04:48:c6:f1:ee:ba:a8:a2:a6:c4:be:2b:04:ea:54:7d:2d:71: ac:94:7c:88:3d:5d:18:b6:ee:d7:16:93:ef:43:16:f9:6a:39: 93:94:20:0c:87:a4:64:56:4b:30:43:c3:19:18:8e:88:4c:b2: 93:c5:12:71:97:ff:7b:ec:8e:19:27:e1:82:7b:c0:fc:54:ed: de:75:0e:b2:46:4d:19:fe:00:8d:54:34:17:d3:6f:dc:68:58: 95:50:73:a9:5d:3b:e1:d1:d5:5d:74:fd:b0:40:19:22:ab:17: c4:06:65:1e:76:c7:86:28:e1:a2:ca:33:22:1e:41:97:7e:18: e7:83:81:c4:28:81:1c:0c:8f:9f:b8:6c:da:f6:b4:ae:eb:7b: 45:f5:bc:7f:98:55:32:d8:b1:5a:cb:54:f2:75:44:32:5c:92: 27:a2:56:a9:ed:82:13:c0:35:01:6f:b8:82:2b:db:23:c9:d9: 23:f9:78:53:f5:b4:7d:bf:2b:2b:72:27:6d:9d:1c:cf:bb:09: 23:17:43:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtDEZOVgfQMsSiWYIHdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDRjNjE1ZTBkYjBjNWI5OGE4MGIyNWI1MmQ4OTMyZGJm ZDA1ZGYwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhiMjVhMTE3MjI1Y2Q1ZWJmNjk5OWFhMjJiMTJhZjIzMWQ3NjIwZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooWmjBbLHAiXGrS1MJXuD7R5L7fs fdJJVV4D/up/9R41Cb2h+JhflkvE4UtTmBzdQAQtxLxTF9qddkDt61kSOw246cUB xcdN+sQFX71ZYldituflpYan4D4ViRx1SKgXYnLDA98FIMYWfkyFraNZSGgeqy30 yFMsM9GfqkuZNH+I31+kftrk5Rx9zXDaUgYE4LEz1KlGd/S3sThHhgcvWjW9qKDh +Bl5rc9e/suEvlndFxeN1pZHH5jIZizzjxVV56bFeiIUYF67zPk3RORShFwPnMAz VuF3lYWZDcupp2gje2aG/3GOn6QloBrv2/GiY9slD68hDUKBJEmCPFxf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJaEXIlzV6/aZmqIrEq8jHXYg5ZMB8GA1UdIwQY MBaAFI8ExhXg2wxbmKgLJbUtiTLb/QXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgt ZjJiMGIyN2ExY2I2LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgtZjJiMGIyN2ExY2I2 LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcolhTa/n +ajjpHDSFkzMZ52rumyJsklqO7HENVQoBMC3hZWeY+4otIAUeQoDatcDL+zrcsbB BEjG8e66qKKmxL4rBOpUfS1xrJR8iD1dGLbu1xaT70MW+Wo5k5QgDIekZFZLMEPD GRiOiEyyk8UScZf/e+yOGSfhgnvA/FTt3nUOskZNGf4AjVQ0F9Nv3GhYlVBzqV07 4dHVXXT9sEAZIqsXxAZlHnbHhijhosozIh5Bl34Y54OBxCiBHAyPn7hs2va0rut7 RfW8f5hVMtixWstU8nVEMlySJ6JWqe2CE8A1AW+4givbI8nZI/l4U/W0fb8rK3In bZ0cz7sJIxdDkw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:23 2025 by rpki-client