This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft File: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json) Hash identifier: 2BwwAjQYPtT/qrbNtCbB+zgDUUG24h+npRzCjf1lzLk= Subject key identifier: 7F:F5:45:29:EA:69:1A:20:D7:17:F8:9F:3B:7E:0E:36:63:F0:BC:E7 Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08 Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08 Certificate serial: 019B51BE0DED66A23E2E952118A5562FAB54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft Manifest number: 0625 Signing time: Wed 24 Dec 2025 19:02:48 +0000 Manifest this update: Wed 24 Dec 2025 19:02:48 +0000 Manifest next update: Thu 25 Dec 2025 19:02:48 +0000 Files and hashes: 1: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (hash: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=) 2: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: 3HjAmG5K1sVT6moa+/6KrscvKVqvnhLFvxVSkBuFXFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:0d:ed:66:a2:3e:2e:95:21:18:a5:56:2f:ab:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08 Validity Not Before: Dec 24 19:02:48 2025 GMT Not After : Dec 25 19:02:48 2025 GMT Subject: CN=7ff54529ea691a20d717f89f3b7e0e3663f0bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:ef:39:17:0f:e2:a5:9a:9e:46:aa:2c:1d: b8:46:42:77:cf:a2:8e:e4:a6:29:de:d1:ae:aa:90: a8:09:c1:ca:7f:2d:3c:22:3a:3f:1d:79:e6:14:e8: a8:ed:a2:cb:d8:9f:19:8c:45:f1:c7:90:0b:a4:b3: ea:22:8c:df:77:73:56:9d:f4:b7:8e:e4:f2:8b:47: aa:47:d3:1f:33:f8:03:27:47:b4:b0:98:a2:e1:8a: c7:00:e7:f9:98:08:cf:93:3f:12:d5:75:db:02:07: 84:d9:45:d3:4a:e2:b6:1b:8a:64:cc:c9:58:21:57: 86:1e:76:a0:42:ed:67:50:46:4c:a5:2d:33:86:19: 69:9b:a1:d2:b1:8e:40:b5:be:f0:b5:a2:fc:eb:df: ef:cd:98:97:4d:28:a4:4e:3f:ed:f7:9f:16:10:a6: ac:d0:e6:86:51:26:d2:da:7c:66:68:df:b3:3a:8d: 96:a4:91:12:a9:11:d5:d1:34:54:06:ed:f9:e8:22: c1:e4:f2:4c:a8:be:45:87:37:40:4c:a8:bc:05:4e: 3f:df:da:24:61:00:83:aa:da:6d:3b:94:54:ab:d6: e5:30:69:de:2e:9c:e4:8c:ff:86:dd:cc:81:30:d1: 74:e4:e4:29:af:f6:2e:8a:ce:7f:13:1b:ee:b8:b6: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:45:29:EA:69:1A:20:D7:17:F8:9F:3B:7E:0E:36:63:F0:BC:E7 X509v3 Authority Key Identifier: keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:a1:9e:87:96:e3:22:85:36:d4:45:03:ce:22:53:b8:0d:fd: c1:55:af:15:3d:c9:67:0f:d5:3b:e1:d1:86:a1:93:32:07:98: 1d:9f:29:b2:59:13:d3:8f:56:a8:ac:7b:97:31:38:7c:cd:18: 0c:e6:43:82:18:2e:9f:c3:5a:57:30:75:d0:dc:b5:cc:83:29: d1:95:10:a7:a1:29:6a:83:f2:90:e3:99:4c:c0:9b:c6:36:fb: a9:6f:8d:03:da:64:46:58:ac:58:d3:fc:ea:78:56:06:4d:62: ef:a9:8c:46:fa:8e:6d:f4:e2:0e:be:d2:50:73:84:89:d0:ec: d3:42:d2:d0:d7:2b:4c:10:15:9e:7c:cf:af:55:ba:3e:4e:bb: 65:96:d8:db:76:db:19:96:d2:76:82:dc:fd:c3:c7:81:e2:f2: 6e:6b:45:e4:cf:ad:00:cd:4c:92:32:57:6d:c0:64:d1:57:47: 95:ff:db:d7:a8:18:09:97:84:ff:69:0a:84:ea:ec:e9:74:0a: 12:0e:4e:74:c9:9d:5b:61:14:1c:8a:b5:4c:98:92:ee:8c:e9: 03:bb:8b:ec:cd:fa:cb:c1:d7:d2:be:ce:ad:a6:87:dd:f8:94: a4:97:89:2a:4d:95:67:c0:e5:c8:66:68:36:fd:ac:ca:15:93: 0f:49:c9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvg3tZqI+LpUhGKVWL6tUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NWU4NWY4MjYyODg4YjU0YTg0OWJkY2Y0Y2VjNTAzMTY5 MTFhMDgwHhcNMjUxMjI0MTkwMjQ4WhcNMjUxMjI1MTkwMjQ4WjAzMTEwLwYDVQQD Eyg3ZmY1NDUyOWVhNjkxYTIwZDcxN2Y4OWYzYjdlMGUzNjYzZjBiY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllPvORcP4qWankaqLB24RkJ3z6KO 5KYp3tGuqpCoCcHKfy08Ijo/HXnmFOio7aLL2J8ZjEXxx5ALpLPqIozfd3NWnfS3 juTyi0eqR9MfM/gDJ0e0sJii4YrHAOf5mAjPkz8S1XXbAgeE2UXTSuK2G4pkzMlY IVeGHnagQu1nUEZMpS0zhhlpm6HSsY5Atb7wtaL869/vzZiXTSikTj/t958WEKas 0OaGUSbS2nxmaN+zOo2WpJESqRHV0TRUBu356CLB5PJMqL5FhzdATKi8BU4/39ok YQCDqtptO5RUq9blMGneLpzkjP+G3cyBMNF05OQpr/Yuis5/ExvuuLZwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/1RSnqaRog1xf4nzt+DjZj8LznMB8GA1UdIwQY MBaAFCZehfgmKIi1SoSb3PTOxQMWkRoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80OTE5MjUtZGY5MC00MDE0LThjYWYt NWFhMzY3ZDZhYjZlLzEvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80OTE5MjUtZGY5MC00MDE0LThjYWYtNWFhMzY3ZDZhYjZl LzEvSmw2Ri1DWW9pTFZLaEp2YzlNN0ZBeGFSR2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKGeh5bj IoU21EUDziJTuA39wVWvFT3JZw/VO+HRhqGTMgeYHZ8pslkT049WqKx7lzE4fM0Y DOZDghgun8NaVzB10Ny1zIMp0ZUQp6EpaoPykOOZTMCbxjb7qW+NA9pkRlisWNP8 6nhWBk1i76mMRvqObfTiDr7SUHOEidDs00LS0NcrTBAVnnzPr1W6Pk67ZZbY23bb GZbSdoLc/cPHgeLybmtF5M+tAM1MkjJXbcBk0VdHlf/b16gYCZeE/2kKhOrs6XQK Eg5OdMmdW2EUHIq1TJiS7ozpA7uL7M36y8HX0r7OraaH3fiUpJeJKk2VZ8DlyGZo Nv2syhWTD0nJ3Q== -----END CERTIFICATE-----Generated at Wed Dec 24 21:34:40 2025 by rpki-client