This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json) Hash identifier: TXqbS1m18EvnE5n20u1cL0UEP5rfx15lH9z4UPOaihM= Subject key identifier: 1A:B5:2A:4D:94:50:A4:D5:F1:5E:0F:91:63:50:6D:B3:63:36:DB:28 Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Certificate serial: 019B50A99714F48F87BDD621558E0511ADE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft Manifest number: 1274 Signing time: Wed 24 Dec 2025 14:00:50 +0000 Manifest this update: Wed 24 Dec 2025 14:00:50 +0000 Manifest next update: Thu 25 Dec 2025 14:00:50 +0000 Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: 5XjiVMMYb2gWO9ryZCPBh1M4cVhA4ZCVT1uexVpgHhU=) 2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=) 3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:97:14:f4:8f:87:bd:d6:21:55:8e:05:11:ad:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b Validity Not Before: Dec 24 14:00:50 2025 GMT Not After : Dec 25 14:00:50 2025 GMT Subject: CN=1ab52a4d9450a4d5f15e0f9163506db36336db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:88:9b:c1:e2:80:30:5c:96:bd:cb:db:08: 6d:41:e3:23:f1:31:b8:c3:35:f2:ea:35:d4:4c:9c: 22:88:ee:80:b6:0b:e0:9f:24:20:49:51:e5:f5:6b: b2:bf:7b:3c:ad:90:d8:62:9d:be:3b:f2:40:d6:c6: ab:52:ff:79:b0:66:dd:4f:79:5b:3d:8b:83:57:95: fe:fe:3c:c4:c0:87:c2:ff:b0:26:63:76:b9:fb:d2: 9f:b4:97:87:c3:b9:41:a4:4d:14:c7:57:47:1c:05: 0a:e6:e5:cd:00:aa:37:09:49:dd:00:c9:ac:dd:f5: 3e:24:78:2b:fe:64:a1:19:a3:f5:0c:0f:0a:50:4a: b5:ff:b9:02:f5:73:12:73:53:08:0d:ab:35:ca:3c: 56:6e:2e:dd:45:aa:10:5e:4d:f7:eb:a3:25:9e:1b: a1:27:a2:ca:f4:bf:39:61:54:bb:00:25:41:f0:71: 99:9f:63:ef:4d:6a:89:b2:6c:81:b4:b3:8a:01:46: 80:87:cb:5c:0c:48:7c:83:8f:26:4b:f0:6c:c4:69: 45:fc:c8:4b:f4:f0:03:d9:dc:28:d2:9a:5f:19:3a: 5f:95:34:65:a5:7c:63:cd:68:9e:14:4a:7f:df:3d: 2b:23:a4:d2:71:2b:90:60:de:4d:be:12:7f:5c:ee: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:2A:4D:94:50:A4:D5:F1:5E:0F:91:63:50:6D:B3:63:36:DB:28 X509v3 Authority Key Identifier: keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fd:31:69:4e:a5:16:56:77:1a:17:b4:4a:37:df:80:56:1a: 1d:be:c3:4e:2e:58:8e:6a:3f:a1:ca:f9:1d:98:42:92:99:a2: bd:2b:46:28:39:84:2b:d2:55:5f:26:31:34:ee:48:c0:90:de: 70:3b:50:8a:91:d9:29:29:44:77:cf:c9:75:8e:75:fb:b5:1f: bd:b3:20:e9:98:a5:08:8d:f7:ce:d9:4d:15:5d:42:c0:cf:15: fb:f7:ab:67:dd:3d:2c:be:a2:ff:20:fd:7d:f2:fb:72:eb:ba: 1d:52:6e:f9:ee:a0:c3:28:17:e7:87:71:ed:8c:cf:2b:58:d5: d8:b6:f7:a3:e1:dd:b0:2c:2e:5f:b4:0c:84:ea:14:56:9c:ae: 90:62:f9:f9:c9:0a:1b:05:7f:d7:dd:2e:b9:e4:d0:77:9c:63: 72:b9:2b:d5:66:73:b3:a6:11:b3:12:83:28:b7:af:c4:6a:c9: e6:1a:f2:bf:ec:2e:7b:a4:76:8d:57:87:4a:cc:b0:ce:8e:04: 9b:e9:78:4f:97:95:d2:95:f3:b4:d3:8e:33:ea:8f:75:ab:30: 96:64:bd:e8:32:ac:c4:2e:a6:19:34:31:bd:a3:7a:59:71:b1: b2:e8:bf:b8:34:72:d5:b6:61:e3:55:d9:0e:29:b0:20:80:c0: bd:34:3e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqZcU9I+HvdYhVY4FEa3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm MDJkNWIwHhcNMjUxMjI0MTQwMDUwWhcNMjUxMjI1MTQwMDUwWjAzMTEwLwYDVQQD EygxYWI1MmE0ZDk0NTBhNGQ1ZjE1ZTBmOTE2MzUwNmRiMzYzMzZkYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOWIm8HigDBclr3L2whtQeMj8TG4 wzXy6jXUTJwiiO6AtgvgnyQgSVHl9Wuyv3s8rZDYYp2+O/JA1sarUv95sGbdT3lb PYuDV5X+/jzEwIfC/7AmY3a5+9KftJeHw7lBpE0Ux1dHHAUK5uXNAKo3CUndAMms 3fU+JHgr/mShGaP1DA8KUEq1/7kC9XMSc1MIDas1yjxWbi7dRaoQXk3366Mlnhuh J6LK9L85YVS7ACVB8HGZn2PvTWqJsmyBtLOKAUaAh8tcDEh8g48mS/BsxGlF/MhL 9PAD2dwo0ppfGTpflTRlpXxjzWieFEp/3z0rI6TScSuQYN5NvhJ/XO7WKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq1Kk2UUKTV8V4PkWNQbbNjNtsoMB8GA1UdIwQY MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbf0xaU6l FlZ3Ghe0SjffgFYaHb7DTi5Yjmo/ocr5HZhCkpmivStGKDmEK9JVXyYxNO5IwJDe cDtQipHZKSlEd8/JdY51+7UfvbMg6ZilCI33ztlNFV1CwM8V+/erZ909LL6i/yD9 ffL7cuu6HVJu+e6gwygX54dx7YzPK1jV2Lb3o+HdsCwuX7QMhOoUVpyukGL5+ckK GwV/190uueTQd5xjcrkr1WZzs6YRsxKDKLevxGrJ5hryv+wue6R2jVeHSsywzo4E m+l4T5eV0pXztNOOM+qPdaswlmS96DKsxC6mGTQxvaN6WXGxsui/uDRy1bZh41XZ DimwIIDAvTQ+ug== -----END CERTIFICATE-----Generated at Wed Dec 24 23:28:15 2025 by rpki-client