This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json) Hash identifier: N5M5lcmf0w19vL+2UE6FAeZJGO/Kqy7MxVbXe9taiis= Subject key identifier: 08:67:AC:F5:2F:13:79:B2:3C:EE:34:16:5B:6D:98:53:13:B4:4E:46 Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019B533CCD7FA9ECEE1D22B2A2D5829EE10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft Manifest number: 108A Signing time: Thu 25 Dec 2025 02:00:52 +0000 Manifest this update: Thu 25 Dec 2025 02:00:52 +0000 Manifest next update: Fri 26 Dec 2025 02:00:52 +0000 Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: pgmi6BxbJXsX3hbBRBCSbtHoq79ICuEqzj6ZRq5TS18=) 2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:cd:7f:a9:ec:ee:1d:22:b2:a2:d5:82:9e:e1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Dec 25 02:00:52 2025 GMT Not After : Dec 26 02:00:52 2025 GMT Subject: CN=0867acf52f1379b23cee34165b6d985313b44e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:10:ae:fd:d2:15:20:db:c4:e0:4f:18:b8: 7f:c7:65:9f:5d:c2:b0:79:e6:67:17:bb:12:6e:50: 76:6b:ae:fb:2e:ad:6f:9b:11:c0:e3:ec:22:05:0c: e7:77:fb:ef:fb:dd:e8:2f:a9:7a:68:a6:3f:ca:ae: 32:ed:43:90:08:7f:dd:79:49:0a:cb:05:78:73:4f: 19:64:10:d9:9d:56:a7:ec:67:3d:38:fd:73:86:75: 86:5a:13:cc:4e:be:4a:19:31:9d:99:f8:dc:7b:27: 0a:b7:6e:6b:12:86:a4:32:ae:a1:35:76:f9:2c:ba: 8d:32:8c:aa:fd:1a:f5:2c:07:f6:49:52:57:88:42: 24:69:b6:55:db:b2:c4:32:ae:0a:db:5c:b7:ef:1b: 3c:fc:8c:54:55:ae:10:0f:2f:0a:e0:01:87:5f:6b: 77:74:31:ed:99:72:51:61:75:05:98:72:d3:ce:68: ab:79:c8:84:96:20:ec:cb:79:41:26:4f:7b:75:0e: 88:4f:e6:51:c8:ec:37:df:08:1b:09:ae:31:1e:a4: 61:49:2a:b6:c9:33:ad:fb:68:58:f3:2f:02:57:0f: cf:83:70:0f:09:cc:bb:aa:cb:85:77:c2:32:17:e3: d1:79:2f:76:cf:21:0b:e7:f2:f9:83:5a:f9:f2:c3: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:67:AC:F5:2F:13:79:B2:3C:EE:34:16:5B:6D:98:53:13:B4:4E:46 X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8f:a0:27:0f:0d:70:ac:01:e4:17:e3:4e:28:93:04:64:37: 10:a5:4a:5c:d1:12:87:90:3e:2f:bb:f7:b7:cb:d0:9f:26:81: c8:0f:b6:35:91:8e:47:32:15:46:86:ec:7b:68:a8:01:00:ae: 51:3b:df:78:4f:df:56:9c:03:e2:ab:51:a5:36:3d:1d:a3:65: 39:4e:a3:aa:50:d8:f3:02:dd:70:db:52:58:4f:59:10:18:ec: 0a:aa:02:55:a2:57:f4:9c:84:45:46:5f:c1:32:ae:cc:14:33: 08:68:48:5a:02:b4:61:5f:de:f0:1f:eb:57:a2:af:64:d9:b3: a5:72:75:67:8f:76:9e:b7:ce:f9:96:42:49:2d:a7:be:57:89: dd:0a:73:e9:09:92:65:15:88:d0:91:5d:3f:74:7f:81:1a:aa: 59:30:23:62:2e:8b:65:3e:f9:5c:5a:18:25:a3:13:b4:92:fb: 6a:20:c2:9e:44:ff:76:2f:26:7b:29:f3:e8:42:f6:30:be:93: f7:4e:fc:a6:6a:19:47:95:1f:db:ca:e5:a1:48:5c:6c:ca:d1: c0:82:4d:f6:3f:86:53:43:f3:51:8c:ab:22:9f:70:ba:0a:1b: 4b:09:2a:57:92:e5:1c:ce:55:0b:75:3b:be:89:b4:96:f5:1c: 2a:91:32:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPM1/qezuHSKyotWCnuELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjUxMjI1MDIwMDUyWhcNMjUxMjI2MDIwMDUyWjAzMTEwLwYDVQQD EygwODY3YWNmNTJmMTM3OWIyM2NlZTM0MTY1YjZkOTg1MzEzYjQ0ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlokQrv3SFSDbxOBPGLh/x2WfXcKw eeZnF7sSblB2a677Lq1vmxHA4+wiBQznd/vv+93oL6l6aKY/yq4y7UOQCH/deUkK ywV4c08ZZBDZnVan7Gc9OP1zhnWGWhPMTr5KGTGdmfjceycKt25rEoakMq6hNXb5 LLqNMoyq/Rr1LAf2SVJXiEIkabZV27LEMq4K21y37xs8/IxUVa4QDy8K4AGHX2t3 dDHtmXJRYXUFmHLTzmireciEliDsy3lBJk97dQ6IT+ZRyOw33wgbCa4xHqRhSSq2 yTOt+2hY8y8CVw/Pg3APCcy7qsuFd8IyF+PReS92zyEL5/L5g1r58sPO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhnrPUvE3myPO40FlttmFMTtE5GMB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4+gJw8N cKwB5BfjTiiTBGQ3EKVKXNESh5A+L7v3t8vQnyaByA+2NZGORzIVRobse2ioAQCu UTvfeE/fVpwD4qtRpTY9HaNlOU6jqlDY8wLdcNtSWE9ZEBjsCqoCVaJX9JyERUZf wTKuzBQzCGhIWgK0YV/e8B/rV6KvZNmzpXJ1Z492nrfO+ZZCSS2nvleJ3Qpz6QmS ZRWI0JFdP3R/gRqqWTAjYi6LZT75XFoYJaMTtJL7aiDCnkT/di8meynz6EL2ML6T 9078pmoZR5Uf28rloUhcbMrRwIJN9j+GU0PzUYyrIp9wugobSwkqV5LlHM5VC3U7 vom0lvUcKpEy/A== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:24 2025 by rpki-client