This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json) Hash identifier: 31dMeouJPZwBa0ZSLFDDXCe0ZHdbFumGmmuyqv+cBQM= Subject key identifier: 1F:BF:CE:FC:1F:15:2F:5A:29:5F:FF:80:DD:68:4C:B4:B6:BB:34:9D Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9 Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9 Certificate serial: 019B30E8C26901FC31EC565C4090E31DD59F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 10:01:58 +0000 Manifest this update: Thu 18 Dec 2025 10:01:58 +0000 Manifest next update: Fri 19 Dec 2025 10:01:58 +0000 Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: /DyufZq+VZUWb+AYwuXAVTbrBBEpC8NWHrVNUoX1B54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:c2:69:01:fc:31:ec:56:5c:40:90:e3:1d:d5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9 Validity Not Before: Dec 18 10:01:58 2025 GMT Not After : Dec 19 10:01:58 2025 GMT Subject: CN=1fbfcefc1f152f5a295fff80dd684cb4b6bb349d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:a0:09:fc:59:a1:ce:15:e3:a8:a3:42:d4: 5f:de:be:fa:9a:8f:53:4d:fc:27:25:d5:7f:0a:7c: fa:9a:36:af:d7:5d:b2:70:d7:b9:74:71:5d:06:96: ea:8e:61:62:25:af:34:4b:56:09:b5:22:a2:9b:8a: 3b:8e:71:04:2c:45:44:c8:08:37:d7:6c:0c:6e:0f: 0f:ab:60:51:32:47:e8:11:26:62:fe:e1:99:5c:35: 14:b4:e3:77:e3:61:39:c5:56:cd:7c:3c:d2:d3:ac: ad:9a:5b:a0:92:d5:49:7e:7d:1d:7b:96:65:e7:50: 2e:63:cc:d8:a6:ef:ba:f1:33:45:d5:1d:de:01:b6: cb:7d:c1:21:24:84:0e:d6:dd:1e:aa:8b:90:68:56: e3:0c:2c:aa:56:0f:5d:e3:9a:99:2a:93:65:94:60: 24:ba:63:61:27:c6:fe:d5:cf:6a:80:79:dc:cc:c7: 31:de:da:75:ee:7c:48:5e:c3:92:70:a8:be:a1:4c: 05:00:7c:60:9d:86:d3:c7:f4:f7:ee:10:8f:77:69: d3:8f:bd:31:89:4e:52:da:60:f6:d3:99:18:04:d8: 35:f4:e4:60:2a:8e:1f:93:f8:df:fa:fa:9f:74:a3: 97:27:34:ad:b7:2f:28:e2:6b:03:f3:83:f7:39:27: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:CE:FC:1F:15:2F:5A:29:5F:FF:80:DD:68:4C:B4:B6:BB:34:9D X509v3 Authority Key Identifier: keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:92:db:15:0a:98:1a:0e:3b:f5:52:1e:7d:e7:3a:c6:39:62: 67:18:36:ae:9c:f5:5c:84:bd:dd:b4:92:33:d8:6b:c5:63:77: 88:d9:fe:e1:52:6c:eb:5d:ec:c0:10:c3:6f:49:d3:29:6d:f1: a5:d4:0f:af:b8:06:a0:84:c7:61:58:8c:e0:d8:22:59:2a:9c: 0f:31:27:c0:7e:04:0e:86:ab:ec:97:c4:7e:b8:da:d8:a2:f2: 46:8b:08:bb:a3:59:0b:9e:74:51:d6:07:8e:07:ad:b2:48:1e: 5e:7e:d4:6c:2f:c9:a9:78:87:88:b6:c0:8a:2a:8d:6c:03:17: 0c:3e:fe:7d:9e:5c:c6:3e:f4:48:72:3b:5c:c5:66:98:6c:78: fb:93:98:99:95:02:bc:b4:0b:76:88:60:82:61:a1:db:ef:37: 60:ba:08:66:f2:d4:c3:b2:3f:08:1b:80:65:e1:e7:fd:c4:97: 1a:5e:e4:e9:f5:f6:0f:fe:54:cb:b8:8b:d4:ac:bc:d3:83:b4: 76:3c:3c:2f:fb:78:17:aa:c7:12:76:4b:7f:1a:6c:7e:21:5f: 2f:e6:a4:1d:52:b6:5b:5d:39:a0:ad:34:2c:45:4a:dd:93:27: 93:b1:ce:15:cc:3d:e6:72:a8:77:6c:40:68:37:f5:b4:e2:2b: cd:1a:3e:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6MJpAfwx7FZcQJDjHdWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDVjZDQwYzgwNDliZTlhOWFlN2YwMzMzNmFiZDNmZTA4 MmFmYjkwHhcNMjUxMjE4MTAwMTU4WhcNMjUxMjE5MTAwMTU4WjAzMTEwLwYDVQQD EygxZmJmY2VmYzFmMTUyZjVhMjk1ZmZmODBkZDY4NGNiNGI2YmIzNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10SgCfxZoc4V46ijQtRf3r76mo9T TfwnJdV/Cnz6mjav112ycNe5dHFdBpbqjmFiJa80S1YJtSKim4o7jnEELEVEyAg3 12wMbg8Pq2BRMkfoESZi/uGZXDUUtON342E5xVbNfDzS06ytmlugktVJfn0de5Zl 51AuY8zYpu+68TNF1R3eAbbLfcEhJIQO1t0eqouQaFbjDCyqVg9d45qZKpNllGAk umNhJ8b+1c9qgHnczMcx3tp17nxIXsOScKi+oUwFAHxgnYbTx/T37hCPd2nTj70x iU5S2mD205kYBNg19ORgKo4fk/jf+vqfdKOXJzStty8o4msD84P3OSeqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+/zvwfFS9aKV//gN1oTLS2uzSdMB8GA1UdIwQY MBaAFCZFzUDIBJvpqa5/AzNqvT/ggq+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtYTlFNZ0VtLW1wcm44RE0ycTlQLUNDcjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kOTczMmItNGRmOS00NWM2LWE5MWUt YzExNDlhMDE4MTVmLzEvSmtYTlFNZ0VtLW1wcm44RE0ycTlQLUNDcjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kOTczMmItNGRmOS00NWM2LWE5MWUtYzExNDlhMDE4MTVm LzEvSmtYTlFNZ0VtLW1wcm44RE0ycTlQLUNDcjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5LbFQqY Gg479VIefec6xjliZxg2rpz1XIS93bSSM9hrxWN3iNn+4VJs613swBDDb0nTKW3x pdQPr7gGoITHYViM4NgiWSqcDzEnwH4EDoar7JfEfrja2KLyRosIu6NZC550UdYH jgetskgeXn7UbC/JqXiHiLbAiiqNbAMXDD7+fZ5cxj70SHI7XMVmmGx4+5OYmZUC vLQLdohggmGh2+83YLoIZvLUw7I/CBuAZeHn/cSXGl7k6fX2D/5Uy7iL1Ky804O0 djw8L/t4F6rHEnZLfxpsfiFfL+akHVK2W105oK00LEVK3ZMnk7HOFcw95nKod2xA aDf1tOIrzRo+5Q== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:59 2025 by rpki-client