This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json) Hash identifier: sFaSCmhC9nwjaVyvidbJRCpBKyNl4E1Wi8zFbqgPYrI= Subject key identifier: 0A:5A:10:6E:1E:7F:09:D8:21:80:37:EF:96:3B:BB:84:72:9F:7D:05 Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166 Certificate serial: 019B4211FFABF577F1752E8B3A1FD45484A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft Manifest number: 0357 Signing time: Sun 21 Dec 2025 18:00:34 +0000 Manifest this update: Sun 21 Dec 2025 18:00:34 +0000 Manifest next update: Mon 22 Dec 2025 18:00:34 +0000 Files and hashes: 1: 1h6gN1SZbM_oJcTPp9NbAagbc4o.asa (hash: h3Wjsu3+QR6ofaVjL0FeIcVMNhc6ZkMEHqU4DxerWHk=) 2: JFbIS27IKVFB-sXMdYdpnlEymqA.roa (hash: y1iRyb0r9qXHHkGFrahYiSMyCM8wsIM4hJtuQx44zzA=) 3: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: tEuoJHG3foKv1byje51jVaf6NvLdFU12d5yi00oUG7A=) 4: jfhk4LSasdsv5oNazrLR2L8vp1w.asa (hash: iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:11:ff:ab:f5:77:f1:75:2e:8b:3a:1f:d4:54:84:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166 Validity Not Before: Dec 21 18:00:34 2025 GMT Not After : Dec 22 18:00:34 2025 GMT Subject: CN=0a5a106e1e7f09d8218037ef963bbb84729f7d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:cc:8c:c9:a5:c6:44:61:74:64:d7:04:8a: a3:c9:63:1a:67:1d:08:05:1b:d5:fd:41:6b:b0:08: 5a:b5:cd:5f:a9:9c:37:20:a0:56:6d:bc:3d:26:1a: f1:2d:c0:86:eb:1d:a6:d3:ec:2b:5a:f4:4a:a3:5a: 35:c8:39:d0:04:2c:79:d8:e8:6e:c4:3e:ca:c1:ff: 44:ef:4f:ec:ef:dd:fc:ba:b1:55:44:67:0f:e2:e7: 8f:99:88:8a:e5:ae:3f:6f:09:bb:82:59:a6:3c:63: b0:c6:10:14:26:60:10:9a:15:7f:18:41:f0:97:03: b9:8d:80:00:b4:76:05:8f:a5:32:4f:72:61:0e:ae: 31:7c:57:ed:6a:ea:ca:77:9a:b9:64:46:bf:d0:e4: d3:d4:5e:b1:67:6e:d5:6c:96:cd:9f:32:cd:af:71: 1e:56:d7:6f:ac:8a:80:0c:94:05:e3:f2:23:ae:e8: 5b:f1:3e:c2:00:6c:e0:b1:95:d6:6a:22:8d:cf:19: 97:f5:1b:f8:32:9e:a8:81:00:4f:5d:9e:6c:d6:84: 30:57:c3:73:2b:21:dd:4e:2a:28:a0:6f:47:fc:bc: 79:1d:ab:bb:41:1d:bb:72:37:bd:50:c2:18:cf:5e: f5:b9:6b:58:d1:2f:70:8f:48:ea:ad:b9:51:8c:3f: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:10:6E:1E:7F:09:D8:21:80:37:EF:96:3B:BB:84:72:9F:7D:05 X509v3 Authority Key Identifier: keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d1:b4:ab:4c:13:76:9d:59:5a:46:b0:b7:12:a0:8e:48:8c: c9:8e:ad:cc:d7:b5:2b:31:19:35:f6:1e:66:fd:7e:d5:c4:06: dd:16:f1:70:8a:93:39:d6:52:d3:64:d5:8c:1d:27:6c:00:91: aa:26:a7:d6:68:df:64:84:bb:2c:79:d7:c2:97:56:71:09:c2: 36:8a:30:17:4d:6c:6a:f1:4f:c5:6a:57:44:ce:fc:a6:8c:06: a8:73:7e:8a:3b:8e:4a:37:a0:3e:4f:c3:c0:ce:f6:f3:64:e7: 8b:d2:2c:a3:d4:ff:e6:9b:be:0e:07:8a:e4:af:5e:8b:6a:6b: c7:6f:08:3c:0e:aa:f7:95:cc:d4:9a:79:e8:03:51:95:8a:26: 9e:2c:c4:e5:9e:c0:bf:fd:99:47:7b:eb:54:d6:19:55:76:a2: c4:96:49:ff:81:75:2d:9f:41:d4:6e:9f:64:1d:68:68:ea:c5: a8:23:c8:3c:d4:61:e8:48:b8:a6:65:eb:18:8c:7f:01:8b:45: 99:34:12:19:65:c0:1c:cc:c1:8d:8a:bd:e3:52:16:e4:4f:d0: 6e:9f:4e:c3:88:dc:be:9a:ea:9f:6f:65:24:01:00:00:2c:dc: 59:af:ce:24:66:bb:77:ca:bb:e3:63:d8:dd:33:a9:3b:9a:06: 75:0f:72:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEf+r9XfxdS6LOh/UVISiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw ZjMxNjYwHhcNMjUxMjIxMTgwMDM0WhcNMjUxMjIyMTgwMDM0WjAzMTEwLwYDVQQD EygwYTVhMTA2ZTFlN2YwOWQ4MjE4MDM3ZWY5NjNiYmI4NDcyOWY3ZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfXMjMmlxkRhdGTXBIqjyWMaZx0I BRvV/UFrsAhatc1fqZw3IKBWbbw9JhrxLcCG6x2m0+wrWvRKo1o1yDnQBCx52Ohu xD7Kwf9E70/s7938urFVRGcP4uePmYiK5a4/bwm7glmmPGOwxhAUJmAQmhV/GEHw lwO5jYAAtHYFj6UyT3JhDq4xfFftaurKd5q5ZEa/0OTT1F6xZ27VbJbNnzLNr3Ee VtdvrIqADJQF4/Ijruhb8T7CAGzgsZXWaiKNzxmX9Rv4Mp6ogQBPXZ5s1oQwV8Nz KyHdTioooG9H/Lx5Hau7QR27cje9UMIYz171uWtY0S9wj0jqrblRjD8BOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApaEG4efwnYIYA375Y7u4Ryn30FMB8GA1UdIwQY MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt OGM0NTZhZjZiNmJiLzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdG0q0wT dp1ZWkawtxKgjkiMyY6tzNe1KzEZNfYeZv1+1cQG3RbxcIqTOdZS02TVjB0nbACR qian1mjfZIS7LHnXwpdWcQnCNoowF01savFPxWpXRM78powGqHN+ijuOSjegPk/D wM7282Tni9Iso9T/5pu+DgeK5K9ei2prx28IPA6q95XM1Jp56ANRlYomnizE5Z7A v/2ZR3vrVNYZVXaixJZJ/4F1LZ9B1G6fZB1oaOrFqCPIPNRh6Ei4pmXrGIx/AYtF mTQSGWXAHMzBjYq941IW5E/Qbp9Ow4jcvprqn29lJAEAACzcWa/OJGa7d8q742PY 3TOpO5oGdQ9y6g== -----END CERTIFICATE-----Generated at Sun Dec 21 23:38:34 2025 by rpki-client