This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json) Hash identifier: f+RsHhkNKjLTSaFJuVZEup1CIpzFvoYfZFTAl9Iz6ng= Subject key identifier: B3:84:50:19:8C:95:FE:C1:BA:F7:A1:2D:AD:06:D9:BC:29:5E:A4:F5 Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Certificate serial: 019B4438EB3665FE19E9C94ED24001F49025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:02:19 +0000 Manifest this update: Mon 22 Dec 2025 04:02:19 +0000 Manifest next update: Tue 23 Dec 2025 04:02:19 +0000 Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: TV2q1hEtW+c9It7K82yWcHOJP2uTgf9W2CfBNYk60f4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:eb:36:65:fe:19:e9:c9:4e:d2:40:01:f4:90:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf Validity Not Before: Dec 22 04:02:19 2025 GMT Not After : Dec 23 04:02:19 2025 GMT Subject: CN=b38450198c95fec1baf7a12dad06d9bc295ea4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:55:14:e3:c1:cb:e1:ba:8d:b9:09:a1:5a: a0:7f:cb:24:52:eb:7c:9f:06:35:16:0a:26:09:96: 7b:e3:9a:4a:56:94:11:1f:93:98:ce:12:13:a3:67: 92:ba:45:8f:ef:76:98:84:e2:34:75:74:64:83:ba: 99:bd:17:2f:43:e0:c7:93:08:ae:81:dc:f7:4b:30: 88:54:ab:89:72:d1:cf:85:e4:58:0c:1c:2d:48:9e: c7:ee:68:8f:4b:90:96:52:a4:5d:3a:29:5b:9a:8b: 49:20:c7:27:ca:0c:10:50:af:c8:c1:b2:ef:25:c7: 17:68:77:2c:9c:6d:e1:be:41:e1:d6:d8:cc:08:dd: 97:46:bd:98:08:ec:54:72:13:29:c5:4f:da:26:32: 88:9b:30:38:58:39:ce:a5:ec:5b:e5:a1:d2:2d:c9: 40:20:be:69:78:44:ee:52:65:60:4c:be:25:8f:d8: a3:eb:99:cc:ae:e2:7e:4d:59:c6:6d:ab:2f:5b:57: 46:4b:e6:e6:be:1a:56:1a:eb:88:2a:cf:4d:b0:03: 67:cf:2c:82:33:05:46:d0:df:75:a5:ee:f7:d3:bb: 78:3f:f0:30:88:83:c0:47:c4:00:d7:a5:3f:6d:18: 5d:68:69:da:d3:3a:91:fe:2f:e8:6e:e5:46:44:96: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:84:50:19:8C:95:FE:C1:BA:F7:A1:2D:AD:06:D9:BC:29:5E:A4:F5 X509v3 Authority Key Identifier: keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3f:c1:6f:31:bb:80:78:cd:c3:ff:cc:f4:c2:44:f8:d9:0a: 09:80:39:29:3a:31:04:03:cc:bb:e1:fa:38:f2:2f:3e:e4:13: 11:8f:b9:26:0c:7d:57:2d:fe:cd:19:33:1b:ca:d3:94:57:36: e9:ea:58:b4:0e:56:63:6b:f6:75:4f:b5:c0:3d:b8:25:8c:b5: 3a:d5:64:ba:6c:29:26:3c:47:3b:13:8f:f1:92:dc:e9:60:cf: 47:62:e0:34:bc:5d:99:65:b5:60:fa:07:6f:24:bf:04:24:fc: 22:b3:44:ee:7c:be:20:33:5e:c0:b6:94:52:f2:90:9a:ae:27: 0f:ec:a8:f7:4e:9b:69:62:b8:4d:67:87:ee:a9:90:e9:ae:52: d5:6f:3d:ab:56:21:9f:d3:b2:fd:c5:01:5c:34:a2:16:73:ba: 60:85:fb:e3:ad:5b:97:0e:2f:98:b4:68:9e:a9:e3:7c:30:ff: 3c:6d:41:9d:ad:e8:50:c4:98:25:04:c9:61:fc:8e:fa:49:50: 54:52:92:6b:b9:43:4d:75:4f:85:51:34:cc:5f:a3:cf:a1:94: ab:cd:26:f1:f9:a6:2b:ec:4f:30:0d:d2:cd:d6:3b:69:46:af: d3:a6:ba:c0:79:7e:22:b3:c5:89:bb:46:ea:5e:43:ad:8e:69: a1:84:7f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOs2Zf4Z6clO0kAB9JAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz ZmQ3Y2YwHhcNMjUxMjIyMDQwMjE5WhcNMjUxMjIzMDQwMjE5WjAzMTEwLwYDVQQD EyhiMzg0NTAxOThjOTVmZWMxYmFmN2ExMmRhZDA2ZDliYzI5NWVhNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B9VFOPBy+G6jbkJoVqgf8skUut8 nwY1FgomCZZ745pKVpQRH5OYzhITo2eSukWP73aYhOI0dXRkg7qZvRcvQ+DHkwiu gdz3SzCIVKuJctHPheRYDBwtSJ7H7miPS5CWUqRdOilbmotJIMcnygwQUK/IwbLv JccXaHcsnG3hvkHh1tjMCN2XRr2YCOxUchMpxU/aJjKImzA4WDnOpexb5aHSLclA IL5peETuUmVgTL4lj9ij65nMruJ+TVnGbasvW1dGS+bmvhpWGuuIKs9NsANnzyyC MwVG0N91pe7307t4P/AwiIPAR8QA16U/bRhdaGna0zqR/i/obuVGRJYukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOEUBmMlf7BuvehLa0G2bwpXqT1MB8GA1UdIwQY MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj/BbzG7 gHjNw//M9MJE+NkKCYA5KToxBAPMu+H6OPIvPuQTEY+5Jgx9Vy3+zRkzG8rTlFc2 6epYtA5WY2v2dU+1wD24JYy1OtVkumwpJjxHOxOP8ZLc6WDPR2LgNLxdmWW1YPoH byS/BCT8IrNE7ny+IDNewLaUUvKQmq4nD+yo906baWK4TWeH7qmQ6a5S1W89q1Yh n9Oy/cUBXDSiFnO6YIX7461blw4vmLRonqnjfDD/PG1Bna3oUMSYJQTJYfyO+klQ VFKSa7lDTXVPhVE0zF+jz6GUq80m8fmmK+xPMA3SzdY7aUav06a6wHl+IrPFibtG 6l5DrY5poYR/3A== -----END CERTIFICATE-----Generated at Mon Dec 22 05:15:40 2025 by rpki-client