This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json) Hash identifier: zBXmlQTZ2b8TD93rrBvyHIMT3tur9C8hPnwbIi0F1bo= Subject key identifier: 54:CF:23:A3:EE:DC:C2:53:C9:8B:30:6F:84:FF:5E:98:8D:04:3A:1F Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb Certificate serial: 019B5BD2C216831FA6191F05E689553B6838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft Manifest number: 0F43 Signing time: Fri 26 Dec 2025 18:01:37 +0000 Manifest this update: Fri 26 Dec 2025 18:01:37 +0000 Manifest next update: Sat 27 Dec 2025 18:01:37 +0000 Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: wVPuLdt+AS1MpBbEdZ/i3YMdW+0PLK1sc4FiTkxLRKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:c2:16:83:1f:a6:19:1f:05:e6:89:55:3b:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb Validity Not Before: Dec 26 18:01:37 2025 GMT Not After : Dec 27 18:01:37 2025 GMT Subject: CN=54cf23a3eedcc253c98b306f84ff5e988d043a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:67:96:c7:4f:24:c2:fa:56:bc:7d:97:26:d6: 91:23:47:2f:75:ce:09:2e:0d:0e:fc:f2:68:31:18: c2:a9:2b:2d:15:f4:3a:57:ba:3c:2a:1a:af:ce:8e: 22:ee:1d:db:7e:70:4d:26:5b:9c:59:b6:41:52:de: 42:fa:fd:53:81:d5:e1:8c:7f:24:50:e6:45:05:c1: 0b:68:bf:8d:ea:34:be:62:27:e1:0b:17:bc:f3:6e: 0f:ba:f9:a4:3b:c0:6e:59:0e:ee:ee:37:ac:ab:a8: b7:ee:58:b1:0a:e8:86:63:04:bc:51:7b:d1:de:f6: be:71:15:20:a8:00:4d:d4:f1:3d:bf:40:51:99:5b: e7:e4:40:59:3a:19:7b:95:f4:ce:4b:5a:c5:0a:fe: da:d0:f9:0e:d8:d7:8f:c7:37:5c:ff:20:88:ff:e4: 23:8a:b5:e6:62:e8:d6:ff:7d:60:a7:2c:38:a2:ea: 69:ab:a3:47:18:1c:07:80:ec:a1:69:06:00:aa:30: 54:45:c3:8f:c9:17:1c:a5:bb:1f:93:73:9c:68:7b: 3d:cb:5d:fd:bc:9d:57:a1:52:00:3b:b1:bc:02:0b: 6f:3b:8b:cd:1e:4c:f7:93:21:dc:cc:90:7c:23:ea: e8:f7:5e:4b:cf:01:0c:97:a6:b6:80:6a:86:52:b2: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CF:23:A3:EE:DC:C2:53:C9:8B:30:6F:84:FF:5E:98:8D:04:3A:1F X509v3 Authority Key Identifier: keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:5d:69:50:54:5c:32:6b:b3:c8:ea:59:a7:71:ed:e1:45: 5d:1e:d3:d4:b5:a6:19:85:51:89:4c:9c:9c:98:cf:26:e1:1e: 1b:52:d9:a4:d6:91:6c:78:69:e9:0f:f7:3d:6a:18:6f:14:03: 7b:be:95:85:92:2b:93:15:64:ac:a1:da:c0:cc:88:d3:75:d5: e0:54:9a:45:57:10:21:17:f2:e6:81:48:a0:e0:41:3c:24:67: b2:f3:00:21:67:76:27:44:c5:01:a1:6b:7f:74:ad:1b:cc:28: 8d:de:66:2c:da:20:ef:b7:2e:56:2c:43:ea:a6:9a:72:40:71: 28:ee:67:52:84:75:5f:47:dd:d8:7e:16:69:25:38:17:7c:0e: 18:4b:af:ca:0a:4d:9e:29:47:71:a9:9a:03:32:2a:07:30:fd: 5a:0f:9f:a2:0a:41:d1:f8:e0:31:35:4a:28:9a:0e:31:62:c1: 7b:fe:6c:e9:db:c0:9d:73:c2:b1:8f:77:75:a8:2a:34:c0:ae: 73:e5:3b:41:60:60:47:d7:29:ee:71:c5:6e:a2:a2:87:0c:ef: e8:89:94:75:bd:09:26:cb:2b:62:7d:98:90:40:b9:27:53:c6: ae:bc:ed:84:71:e8:ef:a2:b9:3a:ff:7b:1e:84:50:2c:b5:ef: 7e:c9:88:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0sIWgx+mGR8F5olVO2g4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm MjE1ZWIwHhcNMjUxMjI2MTgwMTM3WhcNMjUxMjI3MTgwMTM3WjAzMTEwLwYDVQQD Eyg1NGNmMjNhM2VlZGNjMjUzYzk4YjMwNmY4NGZmNWU5ODhkMDQzYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22eWx08kwvpWvH2XJtaRI0cvdc4J Lg0O/PJoMRjCqSstFfQ6V7o8Khqvzo4i7h3bfnBNJlucWbZBUt5C+v1TgdXhjH8k UOZFBcELaL+N6jS+YifhCxe8824PuvmkO8BuWQ7u7jesq6i37lixCuiGYwS8UXvR 3va+cRUgqABN1PE9v0BRmVvn5EBZOhl7lfTOS1rFCv7a0PkO2NePxzdc/yCI/+Qj irXmYujW/31gpyw4ouppq6NHGBwHgOyhaQYAqjBURcOPyRccpbsfk3OcaHs9y139 vJ1XoVIAO7G8AgtvO4vNHkz3kyHczJB8I+ro915LzwEMl6a2gGqGUrJfxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTPI6Pu3MJTyYswb4T/XpiNBDofMB8GA1UdIwQY MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2 LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNZdaVBU XDJrs8jqWadx7eFFXR7T1LWmGYVRiUycnJjPJuEeG1LZpNaRbHhp6Q/3PWoYbxQD e76VhZIrkxVkrKHawMyI03XV4FSaRVcQIRfy5oFIoOBBPCRnsvMAIWd2J0TFAaFr f3StG8wojd5mLNog77cuVixD6qaackBxKO5nUoR1X0fd2H4WaSU4F3wOGEuvygpN nilHcamaAzIqBzD9Wg+fogpB0fjgMTVKKJoOMWLBe/5s6dvAnXPCsY93dagqNMCu c+U7QWBgR9cp7nHFbqKihwzv6ImUdb0JJssrYn2YkEC5J1PGrrzthHHo76K5Ov97 HoRQLLXvfsmIAA== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:13 2025 by rpki-client