This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json) Hash identifier: oF21RcNEwND+1DAbKzmNhdbR8Svpe8F7oEBh8y9mmxk= Subject key identifier: 5C:1F:A4:12:53:38:D8:46:5A:E0:5B:D0:AA:01:F8:9A:3F:C1:89:E5 Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019AF087F1A9A5B734589610C401AEBA2E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft Manifest number: 14BC Signing time: Fri 05 Dec 2025 22:00:32 +0000 Manifest this update: Fri 05 Dec 2025 22:00:32 +0000 Manifest next update: Sat 06 Dec 2025 22:00:32 +0000 Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: WkDdq9+f0HODj5IpYBI6mvU7ObMzhjaI7moU3nLT2f0=) 2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=) 3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f1:a9:a5:b7:34:58:96:10:c4:01:ae:ba:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Dec 5 22:00:32 2025 GMT Not After : Dec 6 22:00:32 2025 GMT Subject: CN=5c1fa4125338d8465ae05bd0aa01f89a3fc189e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:38:b7:fe:3c:cc:8e:bf:dc:a2:d1:87:3d: 89:3d:12:05:a3:ed:d8:b0:e8:c9:98:56:fa:6f:16: f0:8d:ac:02:db:fe:69:94:f4:c8:8c:e8:fe:c0:40: c1:04:d5:4a:5e:c2:6e:b4:1e:62:09:61:19:2b:28: 8c:6d:7a:fd:01:0b:fa:1b:b7:e6:d3:0c:29:64:cb: c4:d0:2c:e5:b6:c8:d1:f5:2d:16:f8:71:d3:63:e2: c0:f6:6e:e5:9d:2e:b1:b1:83:0b:f5:01:24:0d:fb: ea:e2:04:45:50:f7:26:8a:f7:b8:4e:86:0b:16:82: 69:c5:11:36:24:6b:1c:a0:55:ac:7a:0e:31:40:7a: fc:7f:12:82:a7:3c:1b:03:62:0e:08:bd:1e:a8:65: 6d:97:ff:42:c2:95:b8:66:70:4c:af:81:66:69:1c: 05:5f:79:a2:b6:cd:bf:72:98:33:14:ac:c5:b7:4c: ba:e7:a0:7d:da:03:d1:bd:4c:5b:4f:14:b5:0c:a0: 66:90:3c:44:0c:9c:3a:84:8c:9c:4a:3c:cc:75:50: ba:8a:ea:fd:cb:28:b8:ac:04:ad:89:6c:88:f9:89: 83:20:31:10:de:22:37:2b:23:e0:92:e3:37:a1:27: 28:48:ea:06:98:92:39:a0:8a:3e:1c:db:1d:bd:b9: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1F:A4:12:53:38:D8:46:5A:E0:5B:D0:AA:01:F8:9A:3F:C1:89:E5 X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:44:23:b3:8c:86:9d:dc:48:7d:72:c2:b7:02:28:af:d3: c1:04:3d:4b:28:ac:5d:66:e6:7e:f8:26:0d:db:d9:03:f1:6d: fb:fc:61:98:ff:66:5b:81:2b:82:30:a1:ad:b1:53:02:9a:71: 40:6d:35:96:b8:7c:a3:27:87:e7:b3:8c:f8:67:de:fc:f0:83: 6c:1d:03:ba:03:db:c8:5d:fa:ee:4b:d2:62:31:5d:ba:f3:7b: 4b:88:b7:18:79:72:75:1c:47:c2:9e:0b:fb:92:a8:46:c5:d3: ae:e2:a4:ee:ad:2c:46:06:b8:ee:3e:61:aa:d2:df:5e:81:3d: 61:cf:2f:11:0b:ac:fb:30:a5:56:50:3b:ff:2f:22:9e:be:f4: 0c:1c:37:57:d9:cd:7a:02:92:89:30:49:3f:cb:b6:7c:d1:dc: f7:fe:8b:c2:9b:52:69:35:1d:9a:ef:ad:9a:be:33:af:7e:69: 0b:cd:c1:8c:4f:f2:c9:86:9e:e5:f8:89:3c:22:d3:50:98:f7: a3:2b:ca:c2:56:16:2b:e2:9e:dd:26:4e:ca:8f:c6:35:b2:cd: 26:0f:57:93:df:29:70:8a:18:15:27:67:c6:55:4e:76:7c:d3: 0f:b4:96:5a:fa:e3:12:0f:36:68:02:6b:0b:29:51:a5:6b:25: e6:a4:c9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/Gppbc0WJYQxAGuui4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjUxMjA1MjIwMDMyWhcNMjUxMjA2MjIwMDMyWjAzMTEwLwYDVQQD Eyg1YzFmYTQxMjUzMzhkODQ2NWFlMDViZDBhYTAxZjg5YTNmYzE4OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPU4t/48zI6/3KLRhz2JPRIFo+3Y sOjJmFb6bxbwjawC2/5plPTIjOj+wEDBBNVKXsJutB5iCWEZKyiMbXr9AQv6G7fm 0wwpZMvE0CzltsjR9S0W+HHTY+LA9m7lnS6xsYML9QEkDfvq4gRFUPcmive4ToYL FoJpxRE2JGscoFWseg4xQHr8fxKCpzwbA2IOCL0eqGVtl/9CwpW4ZnBMr4FmaRwF X3mits2/cpgzFKzFt0y656B92gPRvUxbTxS1DKBmkDxEDJw6hIycSjzMdVC6iur9 yyi4rAStiWyI+YmDIDEQ3iI3KyPgkuM3oScoSOoGmJI5oIo+HNsdvbmw7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwfpBJTONhGWuBb0KoB+Jo/wYnlMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9FEI7OM hp3cSH1ywrcCKK/TwQQ9SyisXWbmfvgmDdvZA/Ft+/xhmP9mW4ErgjChrbFTAppx QG01lrh8oyeH57OM+Gfe/PCDbB0DugPbyF367kvSYjFduvN7S4i3GHlydRxHwp4L +5KoRsXTruKk7q0sRga47j5hqtLfXoE9Yc8vEQus+zClVlA7/y8inr70DBw3V9nN egKSiTBJP8u2fNHc9/6LwptSaTUdmu+tmr4zr35pC83BjE/yyYae5fiJPCLTUJj3 oyvKwlYWK+Ke3SZOyo/GNbLNJg9Xk98pcIoYFSdnxlVOdnzTD7SWWvrjEg82aAJr CylRpWsl5qTJhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:06 2025 by rpki-client