This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json) Hash identifier: ergAKOgiAGePbr9J7c/xYe00Ga9jIEYObC4UhK9KjwQ= Subject key identifier: 4E:EC:8C:07:38:4E:0F:31:FD:6A:F7:BD:2C:1F:8D:2D:7C:FF:1B:CE Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce Certificate serial: 019B6BE9A4276C41BDEA07A189DE8860AAEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft Manifest number: 0E35 Signing time: Mon 29 Dec 2025 21:00:32 +0000 Manifest this update: Mon 29 Dec 2025 21:00:32 +0000 Manifest next update: Tue 30 Dec 2025 21:00:32 +0000 Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=) 2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: gXnKJLQKt3xoyw+mHf9I++RYYsm8Z5sGu69QkHHjKjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:a4:27:6c:41:bd:ea:07:a1:89:de:88:60:aa:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce Validity Not Before: Dec 29 21:00:32 2025 GMT Not After : Dec 30 21:00:32 2025 GMT Subject: CN=4eec8c07384e0f31fd6af7bd2c1f8d2d7cff1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:8d:03:f4:5e:fc:b2:a9:8f:78:41:74:d4: 21:78:85:c2:c8:97:81:e1:37:5f:ea:c6:50:34:3b: b8:74:57:69:cb:aa:1d:45:3a:41:dd:c5:31:0e:21: 25:ce:2d:14:b9:6d:b8:8d:52:de:66:89:64:01:93: d4:5b:60:ca:ad:9b:c9:cb:30:2e:b1:e1:6d:94:56: 3b:e1:09:ec:5c:ca:4b:3e:d8:3b:4b:5a:e4:69:f0: ea:a8:82:b4:74:9b:5a:45:f1:52:1c:ef:e5:8f:47: 01:e2:20:91:47:05:5d:0f:c6:20:f8:bf:fb:58:bb: 2c:e2:ac:f9:b6:7c:56:a2:1f:47:32:ea:f6:ff:49: 69:f2:75:76:0c:4c:32:eb:c0:7d:00:11:0e:fa:11: e2:7b:ff:fc:12:cc:be:2f:03:22:a5:99:27:f4:dc: 44:3b:df:c3:3e:d9:a0:c6:13:14:87:88:a2:b6:aa: e7:66:32:c0:2f:58:18:67:4c:b0:86:79:be:72:42: 9b:b1:ee:9c:c2:ec:78:5d:18:1f:74:6e:40:b6:de: 85:1f:54:6a:48:9c:85:a8:7f:da:b5:3c:48:ef:02: 3c:6e:3a:02:2b:38:2b:cf:ed:46:78:93:4b:94:12: fc:1e:6f:1c:20:7e:41:71:ad:52:1d:27:b5:9c:2d: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EC:8C:07:38:4E:0F:31:FD:6A:F7:BD:2C:1F:8D:2D:7C:FF:1B:CE X509v3 Authority Key Identifier: keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:09:fd:a6:0f:6b:c0:7d:f6:be:1e:aa:31:cd:a0:65:ca:b2: d6:86:12:e3:49:c0:27:c5:d8:28:11:c7:ea:08:ac:9c:73:2a: 6e:44:7a:91:2b:78:9a:5e:cf:6d:3e:19:12:59:64:c0:cb:b6: 23:b7:5d:e3:4a:41:5c:d7:bf:78:da:bd:c5:60:bb:09:f7:a2: 80:38:26:77:d1:a2:1f:48:78:37:4b:57:e8:9d:9d:d0:f4:ab: bb:01:ad:a1:ee:14:38:af:a3:85:cb:bb:d4:08:7a:66:a3:b7: fa:0d:9a:c3:85:ac:49:c5:b3:e4:16:9c:8b:b1:67:91:8d:f0: f0:0d:43:81:36:fc:bd:7c:85:e2:9c:2a:2d:ba:72:10:8d:b6: d9:e5:fd:c6:ca:99:54:2a:5f:3e:f9:7d:65:a7:4e:85:53:90: f7:eb:c4:9e:21:12:f2:f4:ae:f9:66:e3:dd:2a:13:ff:65:c4: 11:e6:fa:a5:80:d9:82:0e:74:2d:dc:1c:06:18:87:e7:86:c6: 52:e7:ff:bc:13:5f:05:66:10:ba:51:d7:01:0f:88:6e:4d:ff: 92:c5:18:c2:17:44:ed:ad:b4:f0:64:56:96:a3:7a:84:1d:5b: cd:9d:83:52:e3:06:8d:4f:e5:2d:4a:17:c8:73:45:ad:55:8e: ab:c1:7d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6aQnbEG96gehid6IYKrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJkZTkzNzBjMjBlZjFiYTRkN2ZlMWJiMDE4ZjNmNmRm ZGM5Y2UwHhcNMjUxMjI5MjEwMDMyWhcNMjUxMjMwMjEwMDMyWjAzMTEwLwYDVQQD Eyg0ZWVjOGMwNzM4NGUwZjMxZmQ2YWY3YmQyYzFmOGQyZDdjZmYxYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n2NA/Re/LKpj3hBdNQheIXCyJeB 4Tdf6sZQNDu4dFdpy6odRTpB3cUxDiElzi0UuW24jVLeZolkAZPUW2DKrZvJyzAu seFtlFY74QnsXMpLPtg7S1rkafDqqIK0dJtaRfFSHO/lj0cB4iCRRwVdD8Yg+L/7 WLss4qz5tnxWoh9HMur2/0lp8nV2DEwy68B9ABEO+hHie//8Esy+LwMipZkn9NxE O9/DPtmgxhMUh4iitqrnZjLAL1gYZ0ywhnm+ckKbse6cwux4XRgfdG5Att6FH1Rq SJyFqH/atTxI7wI8bjoCKzgrz+1GeJNLlBL8Hm8cIH5Bca1SHSe1nC3gHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7sjAc4Tg8x/Wr3vSwfjS18/xvOMB8GA1UdIwQY MBaAFCRS3pNwwg7xuk1/4bsBjz9t/cnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUt OGVhMmQxNGE2NDJlLzEvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi81MTA2NWItOTA0Zi00Y2UzLThmZTUtOGVhMmQxNGE2NDJl LzEvSkZMZWszRENEdkc2VFhfaHV3R1BQMjM5eWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwn9pg9r wH32vh6qMc2gZcqy1oYS40nAJ8XYKBHH6gisnHMqbkR6kSt4ml7PbT4ZEllkwMu2 I7dd40pBXNe/eNq9xWC7CfeigDgmd9GiH0h4N0tX6J2d0PSruwGtoe4UOK+jhcu7 1Ah6ZqO3+g2aw4WsScWz5Baci7FnkY3w8A1DgTb8vXyF4pwqLbpyEI222eX9xsqZ VCpfPvl9ZadOhVOQ9+vEniES8vSu+Wbj3SoT/2XEEeb6pYDZgg50LdwcBhiH54bG Uuf/vBNfBWYQulHXAQ+Ibk3/ksUYwhdE7a208GRWlqN6hB1bzZ2DUuMGjU/lLUoX yHNFrVWOq8F9hA== -----END CERTIFICATE-----Generated at Tue Dec 30 03:18:26 2025 by rpki-client