This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json) Hash identifier: oMw6Pw4GCal0ePYZorgGi0a4bxt0c91BkYKAZpt45Og= Subject key identifier: 79:22:A2:A9:9D:BB:71:57:EF:F7:34:57:96:C0:90:A0:B2:ED:D7:38 Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e Certificate serial: 019B4FCF6ADC67CE04B8CD7B2F431BB0574B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft Manifest number: 178C Signing time: Wed 24 Dec 2025 10:02:31 +0000 Manifest this update: Wed 24 Dec 2025 10:02:31 +0000 Manifest next update: Thu 25 Dec 2025 10:02:31 +0000 Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: Xxum2JJNpIw4xQ1RBA8hpXojcbQ0wt1YSZzQyjdsWkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:6a:dc:67:ce:04:b8:cd:7b:2f:43:1b:b0:57:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e Validity Not Before: Dec 24 10:02:31 2025 GMT Not After : Dec 25 10:02:31 2025 GMT Subject: CN=7922a2a99dbb7157eff7345796c090a0b2edd738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a3:87:9a:99:df:79:66:ed:41:0a:fa:28:b0: 1c:76:c6:e7:d4:96:3f:41:79:6c:e6:17:8f:88:d2: 08:18:cb:a0:82:4a:aa:d3:8c:ed:81:7d:11:16:90: cb:02:30:68:29:56:6f:a6:30:db:96:dc:98:d1:4a: ab:4d:ff:93:bf:ad:69:ec:dc:53:2a:a5:72:46:ac: 09:be:a5:a5:38:46:dc:f2:ae:9e:7b:05:b7:e4:42: 0b:eb:99:6a:64:2f:2a:6b:5b:90:2f:3f:36:a4:75: f4:d7:ad:e7:c2:f7:70:73:d0:b4:10:58:a0:65:65: bd:84:40:fa:99:ea:ac:03:44:40:6b:1f:25:df:b4: d8:93:35:fb:59:4b:02:fa:fd:af:42:93:9f:3b:10: 3d:40:63:2a:a0:08:67:09:3f:32:ab:71:34:e6:46: bc:6a:b6:66:54:a2:1e:63:e7:94:7e:78:a7:b7:65: ae:48:b3:a7:b4:69:37:62:c2:65:bd:62:68:10:d7: fd:a9:44:3d:61:b4:5b:b0:73:fc:4f:02:cc:52:38: 78:b1:eb:78:22:c5:06:b8:9e:97:af:dd:5f:30:22: 89:32:24:82:3e:4e:d6:e1:6d:ad:38:19:51:b6:83: e1:7e:4b:55:6d:28:09:e1:54:d1:5b:ea:d3:95:64: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:A2:A9:9D:BB:71:57:EF:F7:34:57:96:C0:90:A0:B2:ED:D7:38 X509v3 Authority Key Identifier: keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4f:e8:36:34:aa:53:5c:c3:42:9a:c3:1b:07:99:96:c4:90: 78:96:99:db:72:38:dd:f8:ca:55:90:d5:0d:74:46:b8:27:d1: 58:ae:46:a1:59:f4:de:bc:b5:7e:6b:a5:f0:53:86:66:cd:1c: 60:01:c9:80:47:ad:08:44:0c:f0:a3:79:85:09:6b:a4:91:12: 42:bd:ff:60:86:5d:8b:6b:d2:e2:bf:6f:f1:c4:09:9b:c6:88: 64:b3:1a:1d:d8:df:27:a6:18:a0:ef:83:02:27:ec:3f:3b:8f: f0:b2:8d:46:75:02:dd:b5:20:ad:06:18:ff:c4:ea:9d:4b:53: 8c:14:67:d5:7d:55:7e:d9:fe:97:ad:31:5b:86:5e:94:43:cb: 68:a0:8a:53:b8:34:29:3a:3d:c4:72:da:8f:a2:d6:e5:fe:2b: dc:0e:05:f1:53:b8:53:23:0c:dc:14:72:8c:fc:20:f4:ef:64: 11:2c:3f:5d:58:31:e1:e0:f1:5f:7a:6d:70:18:66:e6:6d:3e: df:23:57:3a:5f:5b:82:ae:6c:34:b6:9b:2a:13:76:38:5b:1a: 9d:d4:2b:46:47:5d:80:8d:e5:91:13:a1:5f:a9:3c:a3:07:3a: 6d:cd:e4:8f:19:ff:63:ff:bf:0c:08:bb:14:43:b5:27:4e:64: 22:4c:ca:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz2rcZ84EuM17L0MbsFdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmE4Nzk1ZjNlN2UyZDJjN2M5MGYxYzM2NjZjZjdmOTI4 M2RhOWUwHhcNMjUxMjI0MTAwMjMxWhcNMjUxMjI1MTAwMjMxWjAzMTEwLwYDVQQD Eyg3OTIyYTJhOTlkYmI3MTU3ZWZmNzM0NTc5NmMwOTBhMGIyZWRkNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aOHmpnfeWbtQQr6KLAcdsbn1JY/ QXls5hePiNIIGMuggkqq04ztgX0RFpDLAjBoKVZvpjDbltyY0UqrTf+Tv61p7NxT KqVyRqwJvqWlOEbc8q6eewW35EIL65lqZC8qa1uQLz82pHX0163nwvdwc9C0EFig ZWW9hED6meqsA0RAax8l37TYkzX7WUsC+v2vQpOfOxA9QGMqoAhnCT8yq3E05ka8 arZmVKIeY+eUfnint2WuSLOntGk3YsJlvWJoENf9qUQ9YbRbsHP8TwLMUjh4set4 IsUGuJ6Xr91fMCKJMiSCPk7W4W2tOBlRtoPhfktVbSgJ4VTRW+rTlWT2nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkioqmdu3FX7/c0V5bAkKCy7dc4MB8GA1UdIwQY MBaAFCW6h5Xz5+LSx8kPHDZmz3+Sg9qeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMt NGVkZGJlYjgzODdiLzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81NDg0MTctNWIwMS00ZjVlLWI5YjMtNGVkZGJlYjgzODdi LzEvSmJxSGxmUG40dExIeVE4Y05tYlBmNUtEMnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0/oNjSq U1zDQprDGweZlsSQeJaZ23I43fjKVZDVDXRGuCfRWK5GoVn03ry1fmul8FOGZs0c YAHJgEetCEQM8KN5hQlrpJESQr3/YIZdi2vS4r9v8cQJm8aIZLMaHdjfJ6YYoO+D AifsPzuP8LKNRnUC3bUgrQYY/8TqnUtTjBRn1X1Vftn+l60xW4ZelEPLaKCKU7g0 KTo9xHLaj6LW5f4r3A4F8VO4UyMM3BRyjPwg9O9kESw/XVgx4eDxX3ptcBhm5m0+ 3yNXOl9bgq5sNLabKhN2OFsandQrRkddgI3lkROhX6k8owc6bc3kjxn/Y/+/DAi7 FEO1J05kIkzKqw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:51 2025 by rpki-client