This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft File: JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json) Hash identifier: io06gfyqfmIgzeiR9BxVtQ68MBv8US3to82+XzBya28= Subject key identifier: 85:13:A2:54:3D:DE:0D:AF:45:E3:12:5D:7E:B8:7B:FA:09:E5:98:E6 Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8 Certificate issuer: /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8 Certificate serial: 019B416DDCC8907D668D3DA8E9C6A9C9C4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 15:01:17 +0000 Manifest this update: Sun 21 Dec 2025 15:01:17 +0000 Manifest next update: Mon 22 Dec 2025 15:01:17 +0000 Files and hashes: 1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: Gc6L1xYUrwXKHds19beMlMy1B0OEMYBLUrtQhjLZmHU=) 2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:dc:c8:90:7d:66:8d:3d:a8:e9:c6:a9:c9:c4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8 Validity Not Before: Dec 21 15:01:17 2025 GMT Not After : Dec 22 15:01:17 2025 GMT Subject: CN=8513a2543dde0daf45e3125d7eb87bfa09e598e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:1a:84:30:0d:f3:c1:40:7b:f6:40:14:76: c8:2a:a7:d0:8c:77:8c:b6:48:ca:bd:b7:70:b1:58: 3d:16:90:21:5e:1d:e5:4b:b5:ed:f5:ad:06:b1:d4: f3:fd:61:dd:2c:f5:d3:06:2d:24:52:3d:ef:ad:38: a0:b0:2a:8e:4c:71:1c:52:4e:47:52:1a:d6:dd:90: 90:dd:6e:2d:98:83:37:e9:4e:0a:89:e3:b2:1a:39: 1a:84:d6:c7:45:96:df:04:2b:07:ea:02:29:bd:2f: 48:22:bb:b1:37:63:3f:56:00:21:50:09:9a:ca:0e: 98:20:73:3c:7d:2e:e6:d8:6a:a5:d9:6b:c7:4f:e7: b2:40:74:2c:f3:b3:aa:41:2f:c0:3e:bd:62:fe:50: 6e:a6:a7:a5:ff:98:9e:bb:fc:e8:c2:6c:b8:9d:7a: 55:49:bf:cb:59:ea:5a:5e:b6:13:59:66:6c:44:ef: be:5b:50:8d:93:81:3f:8b:02:0f:a1:ff:e2:c4:62: d5:5b:d6:ab:19:36:3e:5d:f9:55:c6:af:54:11:c4: 57:08:03:86:b2:ea:87:95:85:eb:45:5e:ef:88:5d: 04:b6:ae:3f:c8:78:e9:bb:80:65:4d:1b:f6:67:5f: a0:86:9e:6d:b9:1f:96:1c:bb:8a:21:f0:40:1a:7b: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:A2:54:3D:DE:0D:AF:45:E3:12:5D:7E:B8:7B:FA:09:E5:98:E6 X509v3 Authority Key Identifier: keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9d:73:23:e6:a5:45:5e:32:d9:18:67:77:5d:9b:42:98:5e: 90:30:37:01:dd:e0:e1:8c:5c:49:fb:1d:56:63:cb:c0:02:8c: 2e:2f:1c:aa:fc:a0:2f:89:35:8b:94:ff:9b:e7:03:54:07:18: fb:6c:6e:a4:c9:b9:15:92:f6:15:dc:69:aa:36:8c:26:28:92: 0a:f9:84:b6:d0:e6:2c:0d:73:55:fa:60:b9:9a:59:52:db:a1: 87:b7:85:91:ca:a4:4d:ee:ca:bf:f1:2f:22:fd:50:83:03:de: 4b:bd:83:51:1e:18:f1:0d:bb:7d:c0:50:d0:d9:3b:7f:2a:5c: 58:84:67:50:d3:05:22:4d:b1:8d:bf:84:b2:27:c5:bc:ee:26: 6a:ae:a8:b7:9c:9b:6a:74:d4:b0:f6:53:21:63:2a:49:6c:58: 47:19:a6:6b:fa:2f:07:a3:ae:8f:e8:48:4e:88:ba:0f:8d:64: b8:a6:fd:5d:5d:57:b0:6a:d1:b1:5d:ca:67:23:d5:6f:3e:6a: 83:63:d9:b4:e1:86:94:04:5e:68:a5:8e:b9:1e:ca:94:19:57: 08:00:70:69:22:4c:af:94:db:60:60:de:16:74:2f:49:55:3c: 6b:0e:55:8c:da:64:19:03:61:3a:4d:2e:73:09:bc:8f:2f:5e: d9:3c:70:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbdzIkH1mjT2o6capycSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OThhNTc1NGRlZTllZWY2ZjIyNDU2MmNiODIzOWFjOGJk YjA1YjgwHhcNMjUxMjIxMTUwMTE3WhcNMjUxMjIyMTUwMTE3WjAzMTEwLwYDVQQD Eyg4NTEzYTI1NDNkZGUwZGFmNDVlMzEyNWQ3ZWI4N2JmYTA5ZTU5OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6kahDAN88FAe/ZAFHbIKqfQjHeM tkjKvbdwsVg9FpAhXh3lS7Xt9a0GsdTz/WHdLPXTBi0kUj3vrTigsCqOTHEcUk5H UhrW3ZCQ3W4tmIM36U4KieOyGjkahNbHRZbfBCsH6gIpvS9IIruxN2M/VgAhUAma yg6YIHM8fS7m2Gql2WvHT+eyQHQs87OqQS/APr1i/lBupqel/5ieu/zowmy4nXpV Sb/LWepaXrYTWWZsRO++W1CNk4E/iwIPof/ixGLVW9arGTY+XflVxq9UEcRXCAOG suqHlYXrRV7viF0Etq4/yHjpu4BlTRv2Z1+ghp5tuR+WHLuKIfBAGnvFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUTolQ93g2vReMSXX64e/oJ5ZjmMB8GA1UdIwQY MBaAFCaYpXVN7p7vbyJFYsuCOayL2wW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMt MGYwODU1OWQ3ZDE4LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMtMGYwODU1OWQ3ZDE4 LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ1zI+al RV4y2Rhnd12bQphekDA3Ad3g4YxcSfsdVmPLwAKMLi8cqvygL4k1i5T/m+cDVAcY +2xupMm5FZL2FdxpqjaMJiiSCvmEttDmLA1zVfpguZpZUtuhh7eFkcqkTe7Kv/Ev Iv1QgwPeS72DUR4Y8Q27fcBQ0Nk7fypcWIRnUNMFIk2xjb+EsifFvO4maq6ot5yb anTUsPZTIWMqSWxYRxmma/ovB6Ouj+hIToi6D41kuKb9XV1XsGrRsV3KZyPVbz5q g2PZtOGGlAReaKWOuR7KlBlXCABwaSJMr5TbYGDeFnQvSVU8aw5VjNpkGQNhOk0u cwm8jy9e2Txw9A== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:14 2025 by rpki-client