This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json) Hash identifier: gsuHBwBJXwAffUK1qubVBmIyMKYZSlIfXCy3qummEnA= Subject key identifier: 58:08:65:BD:98:10:45:92:22:71:B2:81:86:24:28:B0:1B:F8:CF:5A Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Certificate serial: 019B32D6A75E3B40B630F5E831A22DBD7D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft Manifest number: 05FA Signing time: Thu 18 Dec 2025 19:01:26 +0000 Manifest this update: Thu 18 Dec 2025 19:01:26 +0000 Manifest next update: Fri 19 Dec 2025 19:01:26 +0000 Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: EpQlm3KSOOk9dOU+jA7WUYM0c4xM37hxqLzNu4Fakc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:a7:5e:3b:40:b6:30:f5:e8:31:a2:2d:bd:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04 Validity Not Before: Dec 18 19:01:26 2025 GMT Not After : Dec 19 19:01:26 2025 GMT Subject: CN=580865bd981045922271b281862428b01bf8cf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:21:ca:73:31:1b:58:0b:11:dc:3f:1d:39: 61:68:b2:ca:30:d0:a2:45:94:d5:03:8a:14:a9:3e: 5a:2d:42:6b:f3:fe:9d:e2:73:0a:5d:82:3f:40:fc: 4a:18:10:f7:3f:5c:27:a3:f1:7b:a7:cb:0b:a1:10: c8:03:51:7d:90:fc:bb:5a:88:fa:9e:70:17:0b:72: a4:af:d5:09:d5:39:e0:5d:7f:dd:d2:13:67:81:e3: 8e:5f:1c:f3:ca:f2:88:42:98:9d:3e:92:66:4d:41: ea:ab:3a:70:dd:33:5a:57:7c:2d:22:58:e8:00:08: 4f:e2:ef:f0:75:65:cf:bc:49:9e:7c:61:ba:13:71: 51:23:c2:00:fb:90:00:13:de:86:5b:a8:45:4b:d4: 3a:57:ca:ec:b5:a4:12:ef:d0:5a:9a:e2:d8:0a:9e: a2:9e:81:4f:2a:37:c9:a9:30:3a:79:25:35:c4:58: c4:c6:ec:3d:c3:a8:ce:01:b7:ad:ad:de:fa:2c:66: 3a:44:70:22:00:89:0a:b9:ad:22:f8:bb:72:b6:b0: 7b:55:e6:29:3f:79:01:8a:7f:b2:78:c7:52:b3:2a: 1b:6c:c8:00:c6:5f:fd:14:a6:51:73:7d:e8:52:37: 53:c0:3c:2d:d8:c9:9c:65:5c:c1:51:ed:19:57:20: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:65:BD:98:10:45:92:22:71:B2:81:86:24:28:B0:1B:F8:CF:5A X509v3 Authority Key Identifier: keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4f:9b:69:57:e6:a2:74:29:c7:1f:bb:1d:a1:3b:2a:ee:64: 02:98:8b:19:3f:7c:e7:a6:3d:fc:b5:9b:69:31:68:4d:1f:61: 74:10:a4:56:cd:b4:95:27:5b:e6:f2:50:30:35:3d:85:2c:56: 4c:dc:c8:59:1c:5d:34:db:64:53:04:bf:d6:5b:5c:72:a8:ae: 32:f0:8f:74:7f:00:fa:0e:54:cc:88:7d:96:f9:0c:fb:2f:7c: 4a:ef:ef:3d:60:cf:f8:e8:3d:2c:ea:58:40:c6:66:c1:53:74: f4:ea:85:82:a0:9a:a6:cd:0c:52:41:d3:ba:d0:c5:11:c9:77: 45:fd:84:a6:51:29:93:09:27:62:57:78:45:ee:5e:5e:c4:21: 67:a9:ec:d2:39:de:19:61:ae:06:5e:79:e8:b5:c5:79:65:0b: 7c:01:22:fe:36:ae:57:d0:aa:9d:82:c1:32:a4:e9:6f:f6:6f: 29:5a:b6:a3:0f:13:59:2c:d9:ad:88:2c:cf:6f:f7:ae:44:37: 84:dc:1b:89:7d:e6:10:77:b8:e7:0f:6a:68:6f:dd:aa:af:2f: 6a:00:3d:09:e0:39:9f:1f:4a:57:45:68:0d:d2:33:bc:f2:ed: 6b:5a:da:f7:66:3e:4f:62:12:80:84:63:7f:80:19:1e:bb:27: e9:d8:e4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1qdeO0C2MPXoMaItvX0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj ZWViMDQwHhcNMjUxMjE4MTkwMTI2WhcNMjUxMjE5MTkwMTI2WjAzMTEwLwYDVQQD Eyg1ODA4NjViZDk4MTA0NTkyMjI3MWIyODE4NjI0MjhiMDFiZjhjZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY8hynMxG1gLEdw/HTlhaLLKMNCi RZTVA4oUqT5aLUJr8/6d4nMKXYI/QPxKGBD3P1wno/F7p8sLoRDIA1F9kPy7Woj6 nnAXC3Kkr9UJ1TngXX/d0hNngeOOXxzzyvKIQpidPpJmTUHqqzpw3TNaV3wtIljo AAhP4u/wdWXPvEmefGG6E3FRI8IA+5AAE96GW6hFS9Q6V8rstaQS79BamuLYCp6i noFPKjfJqTA6eSU1xFjExuw9w6jOAbetrd76LGY6RHAiAIkKua0i+LtytrB7VeYp P3kBin+yeMdSsyobbMgAxl/9FKZRc33oUjdTwDwt2MmcZVzBUe0ZVyBddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgIZb2YEEWSInGygYYkKLAb+M9aMB8GA1UdIwQY MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU+baVfm onQpxx+7HaE7Ku5kApiLGT9856Y9/LWbaTFoTR9hdBCkVs20lSdb5vJQMDU9hSxW TNzIWRxdNNtkUwS/1ltccqiuMvCPdH8A+g5UzIh9lvkM+y98Su/vPWDP+Og9LOpY QMZmwVN09OqFgqCaps0MUkHTutDFEcl3Rf2EplEpkwknYld4Re5eXsQhZ6ns0jne GWGuBl556LXFeWULfAEi/jauV9CqnYLBMqTpb/ZvKVq2ow8TWSzZrYgsz2/3rkQ3 hNwbiX3mEHe45w9qaG/dqq8vagA9CeA5nx9KV0VoDdIzvPLta1ra92Y+T2ISgIRj f4AZHrsn6djkgQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:04 2025 by rpki-client