This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json) Hash identifier: KKQKb4AjQ/dW782bWDORxMnQmMP+McEYPiFfoWKfpuQ= Subject key identifier: E7:F2:23:A7:3F:48:4A:51:3D:CA:72:FF:C7:4B:33:89:C4:B9:64:31 Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87 Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87 Certificate serial: 019B31FA7B0C05FA738E405B0CBC972C61AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft Manifest number: 10B3 Signing time: Thu 18 Dec 2025 15:00:57 +0000 Manifest this update: Thu 18 Dec 2025 15:00:57 +0000 Manifest next update: Fri 19 Dec 2025 15:00:57 +0000 Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: 6LTM07m6BK2OSZS732a2vkMxRxI4vBvR4fv8A4tJjYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:7b:0c:05:fa:73:8e:40:5b:0c:bc:97:2c:61:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87 Validity Not Before: Dec 18 15:00:57 2025 GMT Not After : Dec 19 15:00:57 2025 GMT Subject: CN=e7f223a73f484a513dca72ffc74b3389c4b96431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:90:5c:11:73:95:0b:a8:f5:8f:b3:3b:b4: e3:97:a3:5f:70:de:21:9a:54:dc:ff:01:2b:3c:3a: 8b:0c:37:6c:9e:a5:4e:27:2e:94:7e:d8:4e:60:1d: b3:1b:90:79:0a:4a:31:90:e6:43:2c:b5:5d:f1:ad: ac:f0:74:af:7b:b5:a6:3f:2b:e1:ad:29:6f:bc:d0: 78:62:d8:ae:c0:66:e5:21:39:48:0e:11:c8:b6:6c: 05:00:25:f9:90:e7:c1:41:f8:42:ed:d9:b4:b6:91: 9c:e6:3c:53:cf:9f:16:05:32:e8:87:5f:55:74:2c: 5c:1a:9f:2d:13:d2:60:08:54:a1:17:99:74:6b:9e: 0e:39:ac:46:40:1a:6a:fa:23:6e:55:8d:0f:84:e1: 2f:54:39:e6:57:9d:6f:21:b1:5b:c8:d1:2e:5b:a8: 8a:c7:c2:94:db:51:63:56:02:30:39:c3:47:61:91: 53:8d:69:04:12:fa:96:41:2d:ba:19:a3:27:a4:e5: b7:91:7b:d5:f2:fe:96:3a:67:b7:5c:70:a3:5f:68: fb:b8:f6:68:95:86:d5:6c:57:f0:4f:f1:b0:28:ec: 54:8d:b2:01:d0:4d:ae:ea:87:cd:32:de:7d:63:40: 30:16:4b:a6:02:01:91:21:54:67:50:ca:8d:b0:b5: 49:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:23:A7:3F:48:4A:51:3D:CA:72:FF:C7:4B:33:89:C4:B9:64:31 X509v3 Authority Key Identifier: keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:61:ba:5d:8e:8d:84:39:95:43:32:6f:7d:ba:ba:fb:3d:6c: cc:75:d8:d8:8e:eb:a9:b1:e7:4e:73:4e:56:dd:ee:0f:ac:b9: 85:78:46:28:70:55:7e:0b:71:e2:f8:17:85:2b:38:e5:c4:5b: eb:8c:9d:64:65:65:13:fe:63:08:62:ba:1a:b6:d7:02:89:2a: 60:1c:f0:a8:b2:93:6a:e6:55:42:0f:1d:45:65:00:ed:22:fc: dc:5e:a9:24:17:7a:15:7c:34:6c:35:22:de:8a:54:7c:f4:58: 57:6e:de:0d:4b:f9:35:61:0b:ee:60:31:87:2a:63:52:81:9f: bc:ca:c1:e0:95:ec:2e:6d:31:66:b7:66:d3:86:e8:8a:e9:e8: a8:63:fb:7f:db:1d:b6:b7:4b:3c:84:54:61:09:b4:b2:78:00: 5f:f1:4a:83:52:01:1b:a6:36:1b:0f:05:d7:b0:9f:57:3e:8c: 85:c4:b0:b9:c0:cc:21:54:32:58:47:b7:f4:c2:8f:f4:02:f9: 0d:66:d7:f4:a6:9a:a9:af:49:be:94:a3:93:d8:0d:18:63:21: ce:ff:73:13:3b:1c:b4:85:b7:d7:9f:b2:25:24:e7:88:41:71: bd:e7:be:b5:ab:ee:a4:67:9d:2e:b1:39:30:bf:90:48:16:be: 53:80:3c:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+nsMBfpzjkBbDLyXLGGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYjA3NmU1OWY0OWI1ZGNhY2IzNzUxODYwN2U2OTViMDRj ZGJmODcwHhcNMjUxMjE4MTUwMDU3WhcNMjUxMjE5MTUwMDU3WjAzMTEwLwYDVQQD EyhlN2YyMjNhNzNmNDg0YTUxM2RjYTcyZmZjNzRiMzM4OWM0Yjk2NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t+QXBFzlQuo9Y+zO7Tjl6NfcN4h mlTc/wErPDqLDDdsnqVOJy6UfthOYB2zG5B5CkoxkOZDLLVd8a2s8HSve7WmPyvh rSlvvNB4YtiuwGblITlIDhHItmwFACX5kOfBQfhC7dm0tpGc5jxTz58WBTLoh19V dCxcGp8tE9JgCFShF5l0a54OOaxGQBpq+iNuVY0PhOEvVDnmV51vIbFbyNEuW6iK x8KU21FjVgIwOcNHYZFTjWkEEvqWQS26GaMnpOW3kXvV8v6WOme3XHCjX2j7uPZo lYbVbFfwT/GwKOxUjbIB0E2u6ofNMt59Y0AwFkumAgGRIVRnUMqNsLVJSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfyI6c/SEpRPcpy/8dLM4nEuWQxMB8GA1UdIwQY MBaAFIywduWfSbXcrLN1GGB+aVsEzb+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTZkMTAtZjM0ZS00ZDNhLWEyMGEt NGM0NzY0NjgzOTA3LzEvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mMTZkMTAtZjM0ZS00ZDNhLWEyMGEtNGM0NzY0NjgzOTA3 LzEvakxCMjVaOUp0ZHlzczNVWVlINXBXd1ROdjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamG6XY6N hDmVQzJvfbq6+z1szHXY2I7rqbHnTnNOVt3uD6y5hXhGKHBVfgtx4vgXhSs45cRb 64ydZGVlE/5jCGK6GrbXAokqYBzwqLKTauZVQg8dRWUA7SL83F6pJBd6FXw0bDUi 3opUfPRYV27eDUv5NWEL7mAxhypjUoGfvMrB4JXsLm0xZrdm04boiunoqGP7f9sd trdLPIRUYQm0sngAX/FKg1IBG6Y2Gw8F17CfVz6MhcSwucDMIVQyWEe39MKP9AL5 DWbX9Kaaqa9JvpSjk9gNGGMhzv9zEzsctIW315+yJSTniEFxvee+tavupGedLrE5 ML+QSBa+U4A8OQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:54 2025 by rpki-client