This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json) Hash identifier: 6vRLpphVtx5UN8favrXhiVeSRHN5xQ3mva9B7EIIlKM= Subject key identifier: 2E:D8:9C:C1:C9:27:9E:2D:6C:DC:AA:AE:59:3D:19:A5:66:02:42:4E Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Certificate serial: 019B68E95E214E5012B3991E26426605D23D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft Manifest number: 0616 Signing time: Mon 29 Dec 2025 07:01:22 +0000 Manifest this update: Mon 29 Dec 2025 07:01:22 +0000 Manifest next update: Tue 30 Dec 2025 07:01:22 +0000 Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: fmaWIIUnX9E6ieFIc2SWQdpSsfa46xA6EbLYmjJpvpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:5e:21:4e:50:12:b3:99:1e:26:42:66:05:d2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Validity Not Before: Dec 29 07:01:22 2025 GMT Not After : Dec 30 07:01:22 2025 GMT Subject: CN=2ed89cc1c9279e2d6cdcaaae593d19a56602424e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:c1:52:ed:11:da:a6:6b:2d:ef:be:ef:e5: 3b:00:9d:50:f0:65:a3:94:ac:8b:e6:28:51:a3:07: 18:7b:ed:a3:92:79:3c:b5:74:01:dd:35:b9:11:d8: db:cd:a0:b6:ca:24:62:d3:07:a8:27:eb:e2:10:5c: 14:8b:3d:2c:c2:9d:da:72:ed:28:b0:3d:f9:44:29: 97:c7:9d:89:3e:1b:b9:73:b1:58:32:b9:f7:b2:f7: 6c:b9:9b:0a:be:08:52:f7:b5:bd:fc:0b:f0:fd:bf: c7:c3:54:02:8e:05:c3:2e:69:c3:ee:37:26:a3:62: 92:6e:e3:c1:c8:17:7c:a7:a1:dc:77:62:01:e5:1e: 9d:29:f3:72:14:aa:b5:6b:94:fc:79:61:d4:17:93: 53:6c:70:ec:22:9b:54:d0:9b:0c:83:38:1c:72:65: 3f:57:88:51:69:bf:80:bb:99:5f:e6:55:60:91:29: cd:25:22:97:58:eb:9c:91:9c:7a:33:76:43:cf:49: 77:80:ee:0f:a6:8b:a8:9f:df:53:66:c1:13:65:5d: 0f:84:3c:83:46:27:14:b2:ec:33:2a:2e:fc:72:37: 3b:0f:2c:d2:bb:b0:70:14:23:91:e5:09:39:0c:13: d3:86:dd:e9:ef:0b:a1:15:5f:e4:34:0f:09:ff:d7: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D8:9C:C1:C9:27:9E:2D:6C:DC:AA:AE:59:3D:19:A5:66:02:42:4E X509v3 Authority Key Identifier: keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:32:67:c7:79:dd:5d:ad:c7:c0:6b:7e:fe:49:0c:cf:66: 84:38:37:89:7e:40:1b:c7:13:9d:46:8b:ea:b2:8f:89:e7:b9: 67:eb:c8:da:81:38:f9:e3:2b:de:f6:b1:46:20:11:cd:d5:c0: 4b:61:50:61:e8:c4:c2:43:24:1d:13:a0:e5:f8:20:06:79:88: 2f:3b:be:84:f5:b9:11:59:bd:a3:54:53:b6:fd:e9:45:0b:da: cb:ae:19:bd:e6:65:69:43:45:2b:de:6e:fd:3e:88:f0:01:b7: cd:2a:03:b3:4a:c3:21:23:82:c9:1b:13:4a:c0:bc:80:fb:cd: 52:39:12:86:07:8c:44:87:f2:d9:98:19:e3:80:6f:11:52:1b: 9d:8a:07:21:dc:39:5c:77:c8:fb:40:89:9f:91:85:3b:03:b1: 87:bb:6a:c8:2f:7b:1f:3f:0d:3d:22:69:f7:33:3a:cc:94:15: 97:cb:e0:67:16:cd:01:14:00:7e:57:fe:38:fe:a8:e2:d0:5f: f7:2f:6b:e5:cf:f1:ab:e1:71:da:27:4b:67:cf:60:89:d5:b8: a2:da:14:3f:13:f3:0c:1c:30:89:00:79:c7:fe:26:d5:4f:ed: 73:bf:d3:35:d5:1e:70:1d:e1:51:b2:54:3b:53:0f:22:60:50: cd:ed:38:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6V4hTlASs5keJkJmBdI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj ZWViMDQwHhcNMjUxMjI5MDcwMTIyWhcNMjUxMjMwMDcwMTIyWjAzMTEwLwYDVQQD EygyZWQ4OWNjMWM5Mjc5ZTJkNmNkY2FhYWU1OTNkMTlhNTY2MDI0MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIjBUu0R2qZrLe++7+U7AJ1Q8GWj lKyL5ihRowcYe+2jknk8tXQB3TW5EdjbzaC2yiRi0weoJ+viEFwUiz0swp3acu0o sD35RCmXx52JPhu5c7FYMrn3svdsuZsKvghS97W9/Avw/b/Hw1QCjgXDLmnD7jcm o2KSbuPByBd8p6Hcd2IB5R6dKfNyFKq1a5T8eWHUF5NTbHDsIptU0JsMgzgccmU/ V4hRab+Au5lf5lVgkSnNJSKXWOuckZx6M3ZDz0l3gO4Ppouon99TZsETZV0PhDyD RicUsuwzKi78cjc7DyzSu7BwFCOR5Qk5DBPTht3p7wuhFV/kNA8J/9ecFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7YnMHJJ54tbNyqrlk9GaVmAkJOMB8GA1UdIwQY MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFkyZ8d5 3V2tx8Brfv5JDM9mhDg3iX5AG8cTnUaL6rKPiee5Z+vI2oE4+eMr3vaxRiARzdXA S2FQYejEwkMkHROg5fggBnmILzu+hPW5EVm9o1RTtv3pRQvay64ZveZlaUNFK95u /T6I8AG3zSoDs0rDISOCyRsTSsC8gPvNUjkShgeMRIfy2ZgZ44BvEVIbnYoHIdw5 XHfI+0CJn5GFOwOxh7tqyC97Hz8NPSJp9zM6zJQVl8vgZxbNARQAflf+OP6o4tBf 9y9r5c/xq+Fx2idLZ89gidW4otoUPxPzDBwwiQB5x/4m1U/tc7/TNdUecB3hUbJU O1MPImBQze04qQ== -----END CERTIFICATE-----Generated at Mon Dec 29 14:41:03 2025 by rpki-client