This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft File: J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json) Hash identifier: ///7YCrtv24FcqSgOlcspmFTDnq3NFM8Xxl28JQVQUg= Subject key identifier: 11:1D:CD:6C:B8:55:22:11:5E:B7:88:DD:F9:F2:0C:00:06:E9:10:FE Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B Certificate issuer: /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b Certificate serial: 019B33E8BA4F79E48CBA7DCAC560709EEB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft Manifest number: 07E0 Signing time: Fri 19 Dec 2025 00:00:48 +0000 Manifest this update: Fri 19 Dec 2025 00:00:48 +0000 Manifest next update: Sat 20 Dec 2025 00:00:48 +0000 Files and hashes: 1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: FvFuHQ/9+F4Ig3S+sG+qoWIIq/nZXrJgr2WyPRyc6q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ba:4f:79:e4:8c:ba:7d:ca:c5:60:70:9e:eb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b Validity Not Before: Dec 19 00:00:48 2025 GMT Not After : Dec 20 00:00:48 2025 GMT Subject: CN=111dcd6cb85522115eb788ddf9f20c0006e910fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:00:54:b4:3d:c2:ad:67:9f:75:11:fd:4c: 1c:f6:33:79:f3:3b:d1:25:e8:b6:68:9d:23:d1:78: ff:39:5c:e1:d7:b4:39:15:4c:ae:88:6c:02:bb:75: 68:9a:bd:d8:e9:0f:8a:1b:63:48:d3:1a:63:2b:76: d8:19:1d:23:31:60:48:de:3b:55:1d:1b:8c:11:0b: c5:84:0e:2e:73:06:bc:31:1e:34:52:28:2c:97:1f: 0d:56:d0:74:8b:79:e2:a1:71:6d:04:16:52:cd:53: 53:37:fc:b5:de:b0:3f:1d:f0:90:84:8e:40:f8:bd: 49:28:1e:b9:7a:ff:56:89:57:ae:0a:5a:e5:d1:bd: ae:49:13:41:9d:ff:25:0d:7b:7c:e6:0a:6d:3d:2b: 9a:cd:42:c4:d3:e2:4c:26:c9:e4:49:ab:86:21:19: 03:fe:aa:c4:f3:79:73:1d:95:64:47:4d:15:c8:b8: 9e:45:25:86:db:31:16:0c:20:09:ba:4a:a8:e8:41: 42:5b:3f:79:0c:fa:56:b8:7d:0a:42:f6:d9:c3:a8: af:b0:bb:42:6b:5f:cc:4b:30:7f:a1:55:4a:f5:54: e2:76:54:7c:a9:de:40:c6:97:2d:71:ab:56:db:77: 9e:b8:34:b8:c4:25:6a:ab:db:9d:6e:33:e4:8c:8b: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1D:CD:6C:B8:55:22:11:5E:B7:88:DD:F9:F2:0C:00:06:E9:10:FE X509v3 Authority Key Identifier: keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:62:90:eb:d1:b7:0a:c2:09:59:4f:da:d6:5f:87:16:f7:6c: b2:c1:1f:0a:cb:56:cd:83:e1:fb:c3:b1:76:68:78:2b:f4:75: fb:9e:d2:fc:6d:47:67:fc:69:79:ae:40:8c:f9:f1:ec:c9:fa: ec:a5:da:c2:d6:fc:3c:46:30:10:cb:de:35:97:fc:ea:b8:1d: 77:01:2d:22:67:40:71:7c:80:fc:83:7f:83:b1:23:b1:40:f3: 1b:3e:30:c5:6d:03:aa:fb:0f:96:8a:59:f1:3a:03:af:b6:eb: b5:76:d5:90:80:c1:9d:2b:47:31:dd:79:e9:d5:d0:e7:af:71: 36:85:d6:1b:77:cd:e7:ec:c4:75:27:f3:18:a4:07:a7:cf:2d: 54:37:17:82:74:2e:4e:7f:e0:11:e9:73:66:41:7c:9f:70:e6: 39:6b:33:ba:c7:c5:87:4f:1e:60:ea:5d:ae:71:d0:b4:20:63: dc:b4:d6:5e:c3:81:71:89:18:33:44:63:70:36:f9:43:5f:30: af:63:65:98:bd:fb:9f:a2:8b:9f:d1:f7:92:80:97:7c:5b:0c: 93:83:54:00:de:e3:93:33:bd:a2:09:d4:81:2b:7f:b2:4e:e1: 47:d4:c1:77:43:0d:f0:04:7a:25:e9:96:2d:d0:4f:8d:07:ed: e9:85:5d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LpPeeSMun3KxWBwnut9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODM3OTAzNTA4NzBmZGI1YjI2NzRiYzYxYzhkOGZkNjJk NzcxOWIwHhcNMjUxMjE5MDAwMDQ4WhcNMjUxMjIwMDAwMDQ4WjAzMTEwLwYDVQQD EygxMTFkY2Q2Y2I4NTUyMjExNWViNzg4ZGRmOWYyMGMwMDA2ZTkxMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4AVLQ9wq1nn3UR/Uwc9jN58zvR Jei2aJ0j0Xj/OVzh17Q5FUyuiGwCu3Vomr3Y6Q+KG2NI0xpjK3bYGR0jMWBI3jtV HRuMEQvFhA4ucwa8MR40Uigslx8NVtB0i3nioXFtBBZSzVNTN/y13rA/HfCQhI5A +L1JKB65ev9WiVeuClrl0b2uSRNBnf8lDXt85gptPSuazULE0+JMJsnkSauGIRkD /qrE83lzHZVkR00VyLieRSWG2zEWDCAJukqo6EFCWz95DPpWuH0KQvbZw6ivsLtC a1/MSzB/oVVK9VTidlR8qd5AxpctcatW23eeuDS4xCVqq9udbjPkjIuCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEdzWy4VSIRXreI3fnyDAAG6RD+MB8GA1UdIwQY MBaAFCeDeQNQhw/bWyZ0vGHI2P1i13GbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQt ZWNjNWZiYTA4MzQwLzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQtZWNjNWZiYTA4MzQw LzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGKQ69G3 CsIJWU/a1l+HFvdsssEfCstWzYPh+8Oxdmh4K/R1+57S/G1HZ/xpea5AjPnx7Mn6 7KXawtb8PEYwEMveNZf86rgddwEtImdAcXyA/IN/g7EjsUDzGz4wxW0DqvsPlopZ 8ToDr7brtXbVkIDBnStHMd156dXQ569xNoXWG3fN5+zEdSfzGKQHp88tVDcXgnQu Tn/gEelzZkF8n3DmOWszusfFh08eYOpdrnHQtCBj3LTWXsOBcYkYM0RjcDb5Q18w r2NlmL37n6KLn9H3koCXfFsMk4NUAN7jkzO9ognUgSt/sk7hR9TBd0MN8AR6JemW LdBPjQft6YVdLA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:46:01 2025 by rpki-client