This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json) Hash identifier: P4ngEX3yXm4SvMZbkJk1//h+U1s5pCkaWxJH/Ps++h4= Subject key identifier: 92:CA:5E:E9:D8:DF:D0:96:98:54:61:CA:B8:65:E7:2B:5E:F5:C7:EE Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c Certificate serial: 019B32D5D9948BBEE922A80206CF68EE78E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:00:34 +0000 Manifest this update: Thu 18 Dec 2025 19:00:34 +0000 Manifest next update: Fri 19 Dec 2025 19:00:34 +0000 Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: ct4qDDV696u80M4Kjm7SYQgC5V+QAWyf390qhIMgvUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:d9:94:8b:be:e9:22:a8:02:06:cf:68:ee:78:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c Validity Not Before: Dec 18 19:00:34 2025 GMT Not After : Dec 19 19:00:34 2025 GMT Subject: CN=92ca5ee9d8dfd096985461cab865e72b5ef5c7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:c2:37:cb:62:cc:92:d3:db:5a:33:e2:81: f3:22:50:14:33:1b:e8:41:56:3a:36:f3:b8:13:d0: d6:b2:32:2d:e1:40:a0:cc:14:2f:c0:0c:70:b2:ce: 7b:92:2e:5b:78:d1:36:2a:91:a3:30:1c:13:48:91: 64:39:06:4a:a2:1e:ae:cd:74:9b:d5:38:1e:69:a7: 85:15:b7:ec:ee:fb:54:8c:fc:6c:9c:5c:d3:dc:1a: 67:55:d0:57:2a:07:04:a8:95:a0:50:7d:46:9d:e1: f1:a6:fa:f7:e5:e0:8d:04:6c:09:c5:0d:e6:0e:9b: c3:81:f3:af:89:b5:78:66:46:92:c2:a4:e3:a1:4a: bc:0b:3f:28:f5:16:f8:13:b1:11:1e:8d:6f:9e:1c: 8b:53:b6:cc:33:95:31:97:86:1a:ab:7c:eb:00:3a: 6e:d3:50:d5:db:5a:50:cd:e5:20:60:10:d3:f7:b2: ad:71:42:1c:73:b6:2c:cc:bc:31:40:e0:80:78:f0: 5f:b0:2f:42:a2:06:3c:53:8f:db:ef:dc:ce:81:14: c4:bf:b0:0e:d9:dd:89:ca:c9:24:35:ae:5a:65:0c: 9b:fe:9b:23:49:1d:0b:83:15:89:12:54:8a:7a:45: e3:3b:82:c6:5b:68:9f:1c:50:ba:c2:c1:e9:e6:fb: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CA:5E:E9:D8:DF:D0:96:98:54:61:CA:B8:65:E7:2B:5E:F5:C7:EE X509v3 Authority Key Identifier: keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:98:f5:b2:be:66:8c:4e:ec:97:b0:36:91:bb:31:9b:16: 6f:55:54:86:61:09:a8:a0:90:15:f0:df:02:ba:82:48:7e:26: ac:ce:50:a3:f2:04:37:a6:c8:05:78:ab:84:1f:f7:1f:e8:7a: d4:f4:cc:35:65:02:3e:04:55:6b:c4:77:78:5f:f7:1c:29:12: 0c:ce:76:a7:33:4a:38:e5:5b:1d:9c:93:5d:f5:cd:54:07:e3: a8:b0:9b:aa:06:d8:b7:70:ab:16:a1:b6:74:59:ca:9a:c0:4c: ea:95:ae:a1:49:df:3e:f3:85:98:03:12:7d:3a:f6:4a:0d:3a: 48:34:a4:1f:68:ed:00:4b:39:15:df:c6:b7:4c:94:2d:49:79: 5c:56:8d:49:5b:89:16:0b:90:5e:55:c8:7d:75:95:71:d6:8d: 38:29:97:32:0d:c2:73:18:9f:fe:92:09:ab:5d:30:ee:36:fa: 15:9f:d6:61:b5:72:a7:cf:e9:c2:cc:91:de:bd:35:1a:a0:ad: c2:09:d1:42:e2:f2:80:66:32:26:a1:24:7f:87:bd:ec:54:b7: 50:58:f0:32:44:4f:9d:34:a7:cb:97:54:50:6d:31:61:50:a2: d7:7b:52:05:8c:5c:9a:cb:65:db:40:e8:93:c4:19:ad:b9:9e: 08:5f:d9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1dmUi77pIqgCBs9o7njnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NDQyOTgxODk5NTljOTVhNmQ0YTc0Yjc1NGY0OTk2YTVh NWI2NWMwHhcNMjUxMjE4MTkwMDM0WhcNMjUxMjE5MTkwMDM0WjAzMTEwLwYDVQQD Eyg5MmNhNWVlOWQ4ZGZkMDk2OTg1NDYxY2FiODY1ZTcyYjVlZjVjN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAXCN8tizJLT21oz4oHzIlAUMxvo QVY6NvO4E9DWsjIt4UCgzBQvwAxwss57ki5beNE2KpGjMBwTSJFkOQZKoh6uzXSb 1TgeaaeFFbfs7vtUjPxsnFzT3BpnVdBXKgcEqJWgUH1GneHxpvr35eCNBGwJxQ3m DpvDgfOvibV4ZkaSwqTjoUq8Cz8o9Rb4E7ERHo1vnhyLU7bMM5Uxl4Yaq3zrADpu 01DV21pQzeUgYBDT97KtcUIcc7YszLwxQOCAePBfsC9CogY8U4/b79zOgRTEv7AO 2d2JyskkNa5aZQyb/psjSR0LgxWJElSKekXjO4LGW2ifHFC6wsHp5vv6NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLKXunY39CWmFRhyrhl5yte9cfuMB8GA1UdIwQY MBaAFCZEKYGJlZyVptSnS3VPSZalpbZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgt MDdjZDRhMDYxYzgwLzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgtMDdjZDRhMDYxYzgw LzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnCY9bK+ ZoxO7JewNpG7MZsWb1VUhmEJqKCQFfDfArqCSH4mrM5Qo/IEN6bIBXirhB/3H+h6 1PTMNWUCPgRVa8R3eF/3HCkSDM52pzNKOOVbHZyTXfXNVAfjqLCbqgbYt3CrFqG2 dFnKmsBM6pWuoUnfPvOFmAMSfTr2Sg06SDSkH2jtAEs5Fd/Gt0yULUl5XFaNSVuJ FguQXlXIfXWVcdaNOCmXMg3Ccxif/pIJq10w7jb6FZ/WYbVyp8/pwsyR3r01GqCt wgnRQuLygGYyJqEkf4e97FS3UFjwMkRPnTSny5dUUG0xYVCi13tSBYxcmstl20Do k8QZrbmeCF/ZSA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:05 2025 by rpki-client