This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json) Hash identifier: CHeyn4IAM+ZFtBwcsFhhB+vuqr+iHB5q4uuH1ekSUCI= Subject key identifier: 9E:43:1A:80:0B:68:FA:C6:7B:19:7A:B3:F6:43:7F:06:BD:D3:79:7F Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Certificate serial: 019B405B56D38D4594B13E37E8F212A285CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft Manifest number: 1028 Signing time: Sun 21 Dec 2025 10:01:26 +0000 Manifest this update: Sun 21 Dec 2025 10:01:26 +0000 Manifest next update: Mon 22 Dec 2025 10:01:26 +0000 Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: YWPdkQUAHzmSCNbJxIdvf9euKFb+aBGjBJWqeZv+RiA=) 2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:56:d3:8d:45:94:b1:3e:37:e8:f2:12:a2:85:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3 Validity Not Before: Dec 21 10:01:26 2025 GMT Not After : Dec 22 10:01:26 2025 GMT Subject: CN=9e431a800b68fac67b197ab3f6437f06bdd3797f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:8e:c1:5d:4b:3c:08:50:d6:5d:32:b9:22: 14:f5:d8:59:77:cc:b3:9f:ce:a7:94:17:1c:e6:40: 77:68:f9:27:f2:0f:89:d8:65:42:31:b2:d6:43:ba: 38:1a:45:e8:c9:d9:7e:f5:f5:4e:77:f4:e3:bb:af: ba:2b:1e:7e:8c:0e:04:7a:02:38:f3:b6:a9:af:ba: d7:06:60:0a:ab:92:b9:51:45:70:ba:3f:fb:14:ad: 6c:80:f5:07:f1:db:0f:21:fd:9e:77:46:51:be:6f: a6:89:5d:62:ed:0b:63:9b:9a:49:ad:45:60:4f:b7: 70:0b:14:41:e6:e1:0c:3b:f3:2f:5a:6c:ec:fc:41: b8:35:24:26:c7:7d:83:5c:21:95:f6:ab:6f:7d:87: a9:27:55:a6:10:f1:ea:64:f0:64:fe:41:2a:ea:c6: d7:2f:8e:6e:27:d9:14:17:c3:65:6d:66:40:f8:19: ee:13:95:3c:f9:57:0e:39:e6:da:dc:a8:b7:5d:ba: 2d:2d:24:c4:24:68:94:6f:49:16:34:27:9b:98:85: 43:d0:3a:11:c6:29:cb:1e:66:49:b8:7f:04:b4:5d: f6:f3:83:8e:96:85:27:07:6a:37:7a:fb:af:30:8d: 47:e4:93:a2:9a:21:e0:06:ff:e1:82:3a:b9:08:7b: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:1A:80:0B:68:FA:C6:7B:19:7A:B3:F6:43:7F:06:BD:D3:79:7F X509v3 Authority Key Identifier: keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:65:9c:a2:82:35:11:54:cd:40:5f:af:23:44:d6:7d:f6:78: 82:c8:2f:54:85:c1:17:ff:1b:57:ee:c6:80:9b:21:d7:e6:4a: 76:d7:7c:30:76:bd:f7:a6:62:bd:d6:44:f4:92:f4:49:09:39: 33:12:57:ca:68:20:9d:5a:da:4f:69:55:08:25:0f:80:d1:bd: c5:c4:36:70:f4:08:0c:6e:c5:43:30:aa:27:3c:bc:58:c0:c7: ce:f0:70:3e:e4:9d:26:96:2d:a1:ef:2c:bf:75:c2:2f:6f:f0: 35:e6:1c:77:61:29:93:46:97:1f:d4:d0:82:4d:9a:0f:24:dd: f4:7c:8a:80:3a:8e:fb:24:da:92:bc:43:f0:92:c3:15:80:f0: 78:c8:9f:9c:45:bf:d2:db:3a:40:1d:91:69:75:ec:ce:da:f2: a8:11:a5:48:03:a3:3e:b8:92:95:74:00:12:0d:c6:2b:2d:85: cc:86:a9:e4:bc:a4:32:52:3c:6e:43:11:7c:56:07:8a:05:63: 04:e3:12:49:85:ea:e2:7c:8e:bd:d2:3e:1e:42:1d:cb:fd:19: 27:d4:ba:6d:44:7f:03:4f:e5:14:8b:27:4b:7e:09:2a:78:b8: 5a:bc:7a:75:cf:7e:9a:0c:32:48:55:a3:c6:bd:d5:06:2a:cd: 67:83:4f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW1bTjUWUsT436PISooXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw OWZiYzMwHhcNMjUxMjIxMTAwMTI2WhcNMjUxMjIyMTAwMTI2WjAzMTEwLwYDVQQD Eyg5ZTQzMWE4MDBiNjhmYWM2N2IxOTdhYjNmNjQzN2YwNmJkZDM3OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWyOwV1LPAhQ1l0yuSIU9dhZd8yz n86nlBcc5kB3aPkn8g+J2GVCMbLWQ7o4GkXoydl+9fVOd/Tju6+6Kx5+jA4EegI4 87apr7rXBmAKq5K5UUVwuj/7FK1sgPUH8dsPIf2ed0ZRvm+miV1i7Qtjm5pJrUVg T7dwCxRB5uEMO/MvWmzs/EG4NSQmx32DXCGV9qtvfYepJ1WmEPHqZPBk/kEq6sbX L45uJ9kUF8NlbWZA+BnuE5U8+VcOOeba3Ki3XbotLSTEJGiUb0kWNCebmIVD0DoR xinLHmZJuH8EtF3284OOloUnB2o3evuvMI1H5JOimiHgBv/hgjq5CHvA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5DGoALaPrGexl6s/ZDfwa903l/MB8GA1UdIwQY MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGWcooI1 EVTNQF+vI0TWffZ4gsgvVIXBF/8bV+7GgJsh1+ZKdtd8MHa996ZivdZE9JL0SQk5 MxJXymggnVraT2lVCCUPgNG9xcQ2cPQIDG7FQzCqJzy8WMDHzvBwPuSdJpYtoe8s v3XCL2/wNeYcd2Epk0aXH9TQgk2aDyTd9HyKgDqO+yTakrxD8JLDFYDweMifnEW/ 0ts6QB2RaXXsztryqBGlSAOjPriSlXQAEg3GKy2FzIap5LykMlI8bkMRfFYHigVj BOMSSYXq4nyOvdI+HkIdy/0ZJ9S6bUR/A0/lFIsnS34JKni4Wrx6dc9+mgwySFWj xr3VBirNZ4NP0w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:32:29 2025 by rpki-client