This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json) Hash identifier: DUtwBhLtU+AMwQ0IyIzpbfCnA8yHRtUy2O7ivk6BcJE= Subject key identifier: 60:C3:B9:85:2D:17:3E:D9:EB:98:E9:86:2B:F1:80:13:41:71:CF:DB Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Certificate serial: 019B3C1080D34B3B5AAF764F76ABAD7DD6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft Manifest number: 0FB2 Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: qQA17rNMvGdPy9YPZQmI8NnnBJbEELHTYVufhauwisM=) 2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:80:d3:4b:3b:5a:af:76:4f:76:ab:ad:7d:d6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56 Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=60c3b9852d173ed9eb98e9862bf180134171cfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:67:9a:69:86:53:70:8e:e4:a9:bc:7a:b0: 40:9a:17:a4:9e:d6:46:11:22:d5:01:55:04:6a:f8: 27:e2:00:e1:50:ba:45:60:56:73:ab:4d:e4:bb:f1: 5c:35:8c:c0:11:95:19:81:da:4e:77:cf:86:d1:ee: ae:43:6a:90:74:e2:72:7c:38:39:c3:c1:99:be:c9: 82:7f:7d:d6:e1:dd:8d:c6:2d:0b:c4:56:4e:d4:fc: e8:4e:a2:34:bd:2b:a6:f6:36:b7:f1:c4:98:27:f0: ca:51:50:c1:39:8e:00:dc:99:b9:d9:4d:92:0c:10: 45:77:3e:53:05:d7:93:71:7e:f0:1a:a5:55:6c:c0: 01:32:04:49:19:5f:cb:b3:0a:85:50:be:48:65:42: 15:fb:82:8a:34:57:ff:2c:c2:ee:20:2b:3e:87:53: 7a:ff:1f:97:08:5b:3d:de:ef:2c:cb:74:5f:de:7d: db:45:26:ec:d3:c2:2b:4f:f2:54:e1:15:a5:c7:c4: 06:8a:72:9b:6d:e5:ce:55:b3:58:0c:97:b4:85:1e: 8e:aa:60:ca:5a:6b:51:b7:a1:38:7d:27:c9:0d:8c: db:70:07:e9:13:2c:53:9f:23:6e:49:66:e8:1a:4b: b1:51:bc:3d:85:26:ce:7a:b2:ce:03:83:4b:3e:44: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C3:B9:85:2D:17:3E:D9:EB:98:E9:86:2B:F1:80:13:41:71:CF:DB X509v3 Authority Key Identifier: keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a8:9a:1c:a4:07:8e:72:20:c5:c6:90:d7:07:0a:06:4f:9c: 65:13:7c:81:13:74:1a:e3:f7:c2:be:a1:85:b4:a0:8a:f0:61: d9:68:01:ae:d9:f8:69:9a:b5:28:b9:47:97:2c:6d:75:99:ec: b5:44:15:af:c4:8a:c8:e7:73:21:fe:b7:c9:5b:cc:0b:b9:62: 6c:21:e7:47:11:23:70:c8:aa:6e:a6:a4:0c:51:60:c8:07:c1: 50:8c:1e:82:bd:20:19:3b:3b:42:ad:28:fe:5e:24:33:47:59: 4f:2c:fd:4f:22:74:eb:65:59:8e:02:39:32:a6:fa:24:33:ec: cc:fa:b6:3c:6f:04:83:7d:28:5a:e5:19:a4:0b:f3:ab:be:38: fd:31:39:d6:20:04:ee:81:58:76:49:11:58:cc:e9:a6:0f:cd: ed:58:97:19:ab:38:a9:3d:9f:7d:1c:e9:27:e7:91:4b:d0:d0: ba:4d:94:78:e8:ca:0f:31:b7:52:45:c5:c5:d7:36:b7:03:ab: 42:db:f3:e0:c7:e6:0d:d2:3f:ee:82:81:67:ec:2f:d7:c8:02: c3:b5:36:37:7b:c6:b0:13:25:c3:ef:98:8c:cc:ec:38:ac:99: b0:26:39:37:4f:b7:3d:af:a7:bb:69:fc:66:9d:87:7c:44:46: 18:7c:25:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIDTSztar3ZPdqutfdauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OWI4YTM3NDg0NDBjOWQ1YzJjNTA4YmQwM2I0NmQ3Mjcz ZWVlNTYwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD Eyg2MGMzYjk4NTJkMTczZWQ5ZWI5OGU5ODYyYmYxODAxMzQxNzFjZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DxnmmmGU3CO5Km8erBAmhekntZG ESLVAVUEavgn4gDhULpFYFZzq03ku/FcNYzAEZUZgdpOd8+G0e6uQ2qQdOJyfDg5 w8GZvsmCf33W4d2Nxi0LxFZO1PzoTqI0vSum9ja38cSYJ/DKUVDBOY4A3Jm52U2S DBBFdz5TBdeTcX7wGqVVbMABMgRJGV/LswqFUL5IZUIV+4KKNFf/LMLuICs+h1N6 /x+XCFs93u8sy3Rf3n3bRSbs08IrT/JU4RWlx8QGinKbbeXOVbNYDJe0hR6OqmDK WmtRt6E4fSfJDYzbcAfpEyxTnyNuSWboGkuxUbw9hSbOerLOA4NLPkSy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDDuYUtFz7Z65jphivxgBNBcc/bMB8GA1UdIwQY MBaAFCabijdIRAydXCxQi9A7RtcnPu5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2Qt Zjg3YmMxNzNkMmFhLzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2QtZjg3YmMxNzNkMmFh LzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaiaHKQH jnIgxcaQ1wcKBk+cZRN8gRN0GuP3wr6hhbSgivBh2WgBrtn4aZq1KLlHlyxtdZns tUQVr8SKyOdzIf63yVvMC7libCHnRxEjcMiqbqakDFFgyAfBUIwegr0gGTs7Qq0o /l4kM0dZTyz9TyJ062VZjgI5Mqb6JDPszPq2PG8Eg30oWuUZpAvzq744/TE51iAE 7oFYdkkRWMzppg/N7ViXGas4qT2ffRzpJ+eRS9DQuk2UeOjKDzG3UkXFxdc2twOr Qtvz4MfmDdI/7oKBZ+wv18gCw7U2N3vGsBMlw++YjMzsOKyZsCY5N0+3Pa+nu2n8 Zp2HfERGGHwlvw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:55:10 2025 by rpki-client