This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json) Hash identifier: E3VEKAlHRYoVguxO43/yPVlE51NAChkVAzVBtc91VcE= Subject key identifier: 47:F3:87:57:33:01:53:BF:16:48:D0:2B:11:4E:E4:FB:56:F7:CC:1B Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019B62AFC6FE6B832A7E821AD6EEFCE0B0A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft Manifest number: 1092 Signing time: Sun 28 Dec 2025 02:00:45 +0000 Manifest this update: Sun 28 Dec 2025 02:00:45 +0000 Manifest next update: Mon 29 Dec 2025 02:00:45 +0000 Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: EEX9u9a9yhO243UtEYaNCFlXKjkLvyQctgjrO4dpOIw=) 2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:c6:fe:6b:83:2a:7e:82:1a:d6:ee:fc:e0:b0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Dec 28 02:00:45 2025 GMT Not After : Dec 29 02:00:45 2025 GMT Subject: CN=47f38757330153bf1648d02b114ee4fb56f7cc1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:de:17:4c:1d:d0:b4:95:48:2f:a1:c1:4e: b8:e1:54:9d:ac:77:ba:5a:ae:75:a2:c6:04:1e:d4: ad:77:b2:2a:87:2c:bd:f2:98:dc:30:53:d9:f0:f0: b3:82:30:11:68:79:29:b8:34:d4:fe:10:f1:4c:37: ff:85:b2:1d:90:c7:ab:c1:5c:38:44:4b:3f:4d:03: b9:58:1e:31:d1:5b:7d:03:38:a6:74:4f:8c:1c:42: 1c:51:48:76:08:a1:1b:ce:56:29:f1:78:bb:b8:ea: c7:39:74:45:b8:2a:05:cb:08:c3:9a:9b:d3:77:38: 34:5f:30:ab:ba:eb:7f:37:3c:db:e3:c6:29:8a:9a: c9:ea:31:ff:c6:b8:9d:2d:37:4d:2d:95:9a:06:a8: 73:e4:2b:45:87:ef:8f:fa:f4:d9:82:13:d0:9d:18: 82:0d:19:0e:c4:98:45:fe:77:31:99:35:5e:5e:42: 89:93:a7:20:76:12:83:92:d5:f4:a2:db:55:7c:16: 58:ec:0a:05:21:55:4f:5d:3a:b4:04:e4:56:aa:3f: a3:ea:55:71:97:dc:f4:f9:d1:46:61:f2:f9:c9:e4: 82:8e:12:c9:b9:52:e0:53:92:9f:f4:a9:33:48:75: 45:b6:f3:62:24:52:3b:5e:03:60:9e:f2:d0:dd:6f: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:87:57:33:01:53:BF:16:48:D0:2B:11:4E:E4:FB:56:F7:CC:1B X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:7c:ce:d8:cd:bd:37:45:1f:24:0c:4f:0c:2c:55:f1:82:4a: d6:f0:12:f2:41:3b:be:1e:b7:9b:98:6b:5b:10:65:43:99:fc: 10:b2:dc:99:18:63:1b:7d:1b:67:c5:d4:ee:69:7c:9f:69:87: 1d:3c:65:91:6c:b2:a2:71:a0:46:d6:2b:0c:cf:00:b3:16:d9: 5f:2b:20:ca:36:36:45:53:4d:0b:2e:60:e5:7b:7a:8b:53:c2: 6c:ac:6f:1a:7a:46:5a:4e:53:4e:3c:cd:58:e0:6b:ff:61:ba: 7c:ee:b8:bc:e1:c0:0f:cc:91:23:ad:90:ab:f4:06:a5:13:e9: 21:8a:a0:40:98:e2:6c:94:4b:21:af:f1:eb:64:20:ec:42:e8: 1a:56:ba:38:e1:95:a9:37:86:77:3b:bd:f2:2d:e2:f8:4c:7f: 92:e7:38:1d:b2:64:31:fe:f3:53:db:22:4c:66:7c:42:99:28: 86:91:ab:b6:16:04:ae:a0:88:ad:1a:6e:32:f8:2c:6b:69:c7: f9:db:c0:10:15:45:a3:da:53:a3:27:0e:ac:3e:f4:a6:61:05: 89:f4:98:b8:ff:d3:88:4a:0d:f2:08:80:91:bf:30:69:62:3b: 8a:6b:7f:84:0e:d2:f1:74:b0:88:1b:c9:f9:22:a2:ee:a5:e2: f4:14:86:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir8b+a4MqfoIa1u784LCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjUxMjI4MDIwMDQ1WhcNMjUxMjI5MDIwMDQ1WjAzMTEwLwYDVQQD Eyg0N2YzODc1NzMzMDE1M2JmMTY0OGQwMmIxMTRlZTRmYjU2ZjdjYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3beF0wd0LSVSC+hwU644VSdrHe6 Wq51osYEHtStd7Iqhyy98pjcMFPZ8PCzgjARaHkpuDTU/hDxTDf/hbIdkMerwVw4 REs/TQO5WB4x0Vt9AzimdE+MHEIcUUh2CKEbzlYp8Xi7uOrHOXRFuCoFywjDmpvT dzg0XzCruut/Nzzb48YpiprJ6jH/xridLTdNLZWaBqhz5CtFh++P+vTZghPQnRiC DRkOxJhF/ncxmTVeXkKJk6cgdhKDktX0ottVfBZY7AoFIVVPXTq0BORWqj+j6lVx l9z0+dFGYfL5yeSCjhLJuVLgU5Kf9KkzSHVFtvNiJFI7XgNgnvLQ3W+UDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfzh1czAVO/FkjQKxFO5PtW98wbMB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXzO2M29 N0UfJAxPDCxV8YJK1vAS8kE7vh63m5hrWxBlQ5n8ELLcmRhjG30bZ8XU7ml8n2mH HTxlkWyyonGgRtYrDM8AsxbZXysgyjY2RVNNCy5g5Xt6i1PCbKxvGnpGWk5TTjzN WOBr/2G6fO64vOHAD8yRI62Qq/QGpRPpIYqgQJjibJRLIa/x62Qg7ELoGla6OOGV qTeGdzu98i3i+Ex/kuc4HbJkMf7zU9siTGZ8QpkohpGrthYErqCIrRpuMvgsa2nH +dvAEBVFo9pToycOrD70pmEFifSYuP/TiEoN8giAkb8waWI7imt/hA7S8XSwiBvJ +SKi7qXi9BSGuA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:07 2025 by rpki-client