This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft File: JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json) Hash identifier: uvkDHr6o5N56i0u5BExYGmkKmTpKOp4uOiwtnmCGpgQ= Subject key identifier: 7C:5B:27:96:63:E5:02:B3:C0:37:C9:29:8F:A2:4D:5F:96:2C:50:F3 Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19 Certificate issuer: /CN=25fa5fc46274edcde5cdceb0a948db120e339219 Certificate serial: 019AF1D2310407A31D7B8B3F3202C0F452EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft Manifest number: 0236 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: D8tLuiikCgJM9Sq2vcU2xz5gd8YN5D1olPe3Z6Oz0w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:31:04:07:a3:1d:7b:8b:3f:32:02:c0:f4:52:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219 Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=7c5b279663e502b3c037c9298fa24d5f962c50f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:67:8a:e2:8a:89:5a:10:a9:8f:e5:40:6f: ba:42:53:f5:9c:b1:5b:ab:59:eb:c1:14:c3:5c:a4: 34:e2:c1:cd:b5:e7:02:c2:17:fb:93:74:fe:79:a5: bb:aa:2d:22:e1:f7:6b:04:43:e3:32:1b:38:14:23: 61:b1:25:e2:cf:4c:90:4e:9a:66:b7:d7:4f:03:12: d1:2b:d4:23:44:fb:55:25:14:3d:37:96:a8:d6:0c: e4:ce:84:3d:6c:c3:f8:73:49:82:21:75:14:fb:2c: c3:ce:c2:bd:95:c3:76:f1:ce:53:89:74:aa:a9:2b: a9:59:fa:47:e1:5d:08:11:83:76:5b:39:11:f3:a0: 6d:9e:7b:b9:57:3f:98:4e:d7:fc:43:52:d7:36:19: a4:c9:74:7b:99:ad:f1:97:cf:35:fa:60:f1:7b:86: 1b:85:3b:16:72:5f:2c:c3:e7:c7:bf:09:36:ec:94: db:ac:0a:32:28:9e:4e:b5:c4:da:db:c4:b5:83:3e: c1:2a:66:a1:38:6a:4f:20:e9:5e:bb:7a:b6:a0:89: c4:ff:1e:e2:18:eb:75:33:b0:d1:db:b3:e4:99:74: 1b:7f:25:05:00:a7:c5:e5:a9:27:65:30:cc:a4:01: 79:fc:ce:4d:3b:4e:d8:7e:91:7b:ad:11:8e:bc:ea: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5B:27:96:63:E5:02:B3:C0:37:C9:29:8F:A2:4D:5F:96:2C:50:F3 X509v3 Authority Key Identifier: keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e2:ed:f7:18:6d:6b:d2:24:06:dc:92:4a:3b:ac:50:25:16: f3:eb:ab:eb:44:56:7a:b5:3c:3b:63:20:7a:de:b3:32:87:5b: 63:fe:f9:6b:90:ea:3f:8f:48:08:8e:2b:dd:83:12:68:83:1a: fa:6a:39:c2:dd:cf:da:95:03:3d:8d:6a:25:22:94:7a:96:e1: a7:10:ce:b2:9c:17:c0:a3:6b:5f:cb:1d:12:dc:b8:29:fa:83: b1:22:df:55:5f:bf:03:1d:9e:a5:9e:6c:5e:e0:f4:14:6a:c4: e4:13:9b:15:90:21:45:52:13:4f:c5:aa:71:f0:ed:67:ef:04: 22:f3:cc:23:4e:5d:b9:1a:1d:6b:01:18:db:21:1c:b2:81:be: a1:4a:d2:cb:77:32:62:aa:88:2c:fd:11:72:15:3b:5a:a1:5c: 4c:01:92:cd:63:b5:05:4f:3d:9f:d8:b4:0c:81:fa:53:e2:71: 59:27:e2:01:3e:79:cd:c1:11:b8:2b:32:93:b0:74:ca:ec:bb: 1c:3f:34:50:31:91:90:68:d6:78:a2:e0:08:33:9a:e8:8d:e3: 74:dd:dc:c3:d3:4e:8e:60:02:e0:29:93:f3:e8:07:92:6b:dc: 20:1b:41:ea:45:b8:0e:a4:07:07:cc:20:e9:d0:c0:27:88:ec: 91:91:44:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jEEB6Mde4s/MgLA9FLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZmE1ZmM0NjI3NGVkY2RlNWNkY2ViMGE5NDhkYjEyMGUz MzkyMTkwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg3YzViMjc5NjYzZTUwMmIzYzAzN2M5Mjk4ZmEyNGQ1Zjk2MmM1MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08pniuKKiVoQqY/lQG+6QlP1nLFb q1nrwRTDXKQ04sHNtecCwhf7k3T+eaW7qi0i4fdrBEPjMhs4FCNhsSXiz0yQTppm t9dPAxLRK9QjRPtVJRQ9N5ao1gzkzoQ9bMP4c0mCIXUU+yzDzsK9lcN28c5TiXSq qSupWfpH4V0IEYN2WzkR86Btnnu5Vz+YTtf8Q1LXNhmkyXR7ma3xl881+mDxe4Yb hTsWcl8sw+fHvwk27JTbrAoyKJ5OtcTa28S1gz7BKmahOGpPIOleu3q2oInE/x7i GOt1M7DR27PkmXQbfyUFAKfF5aknZTDMpAF5/M5NO07YfpF7rRGOvOqlbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxbJ5Zj5QKzwDfJKY+iTV+WLFDzMB8GA1UdIwQY MBaAFCX6X8RidO3N5c3OsKlI2xIOM5IZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81M2YyNjMtY2Y0MC00ZGM1LTg4NjUt N2RmZjQ4YzExZGI2LzEvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81M2YyNjMtY2Y0MC00ZGM1LTg4NjUtN2RmZjQ4YzExZGI2 LzEvSmZwZnhHSjA3YzNsemM2d3FVamJFZzR6a2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+Lt9xht a9IkBtySSjusUCUW8+ur60RWerU8O2Mget6zModbY/75a5DqP49ICI4r3YMSaIMa +mo5wt3P2pUDPY1qJSKUepbhpxDOspwXwKNrX8sdEty4KfqDsSLfVV+/Ax2epZ5s XuD0FGrE5BObFZAhRVITT8WqcfDtZ+8EIvPMI05duRodawEY2yEcsoG+oUrSy3cy YqqILP0RchU7WqFcTAGSzWO1BU89n9i0DIH6U+JxWSfiAT55zcERuCsyk7B0yuy7 HD80UDGRkGjWeKLgCDOa6I3jdN3cw9NOjmAC4CmT8+gHkmvcIBtB6kW4DqQHB8wg 6dDAJ4jskZFETQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:14 2025 by rpki-client