This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json) Hash identifier: p3xzGb5CxauD0swbHECxhvlYKk5kyEPHczsAyIRZ3lA= Subject key identifier: 52:27:07:99:3C:C8:29:4C:15:AA:47:6E:4B:05:1D:AB:5B:67:A3:4D Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919 Certificate serial: 019B2FD53645FF25E269F0CB6575A4AD2417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft Manifest number: 0B22 Signing time: Thu 18 Dec 2025 05:01:00 +0000 Manifest this update: Thu 18 Dec 2025 05:01:00 +0000 Manifest next update: Fri 19 Dec 2025 05:01:00 +0000 Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: J6ei//ngWbjTWPi1FUt+q5o+cXFCguXpiPwov84IeBM=) 2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:36:45:ff:25:e2:69:f0:cb:65:75:a4:ad:24:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919 Validity Not Before: Dec 18 05:01:00 2025 GMT Not After : Dec 19 05:01:00 2025 GMT Subject: CN=522707993cc8294c15aa476e4b051dab5b67a34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:98:22:f0:e5:bf:36:0b:8c:6e:fe:90:58: 53:3b:58:c2:f6:c2:a2:12:15:4e:bc:e2:82:ce:0c: 44:e5:80:e3:2b:52:d1:e3:8b:e8:99:22:3f:4a:fa: 15:15:67:f0:e6:b1:f9:fb:e2:69:dc:7f:2c:1e:ae: e9:5c:52:69:0a:c2:78:59:e1:a3:6f:d3:f3:4d:16: 37:7f:7c:40:7c:08:f3:b4:43:62:1e:e1:2e:a4:ae: 57:da:d7:d9:b9:ef:4b:6d:a2:13:00:4e:1a:71:0d: 52:10:d6:51:4c:7c:d4:37:0a:8c:11:f5:75:e1:6c: e3:fa:ba:b7:78:04:d2:fd:b5:a3:4e:25:e0:f9:51: 74:37:55:c3:aa:a6:83:61:43:30:1e:af:cf:e3:66: 3a:dd:14:d6:46:0b:2f:d6:27:8b:7d:57:c0:f4:fe: f9:f1:70:68:c7:5b:16:13:63:09:e2:b0:d4:73:08: b4:9d:a3:4f:9b:47:84:16:55:13:31:ab:27:e2:49: 98:d9:ee:c8:9d:88:b7:a6:af:31:f4:9e:a6:68:74: 8d:9e:f1:35:45:6b:47:9b:7a:22:c1:8e:85:76:2a: df:4a:95:d3:43:12:87:14:6b:1c:bc:47:21:78:e2: e9:e7:c1:79:9b:25:12:bd:6e:3c:25:65:91:34:84: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:07:99:3C:C8:29:4C:15:AA:47:6E:4B:05:1D:AB:5B:67:A3:4D X509v3 Authority Key Identifier: keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:04:07:91:9b:9e:bd:3a:60:3f:e0:f4:f9:5d:08:e5:95:81: 16:80:71:c4:b5:2a:ea:72:05:30:d4:e1:7a:3d:88:0b:dc:57: 8a:23:2f:59:78:7d:8c:b0:d3:57:a3:a3:be:3c:9f:c4:ac:f5: f1:f1:f2:b1:46:d2:fc:25:94:3e:3c:d9:e8:14:38:f2:f4:a9: ee:e9:47:aa:d5:ce:5f:bb:6a:01:98:6e:ea:49:a8:0f:86:75: 40:4f:78:93:49:fd:73:f0:41:c8:01:df:68:36:f2:59:64:d4: 2c:af:98:44:52:09:c7:9f:8a:70:bc:41:ab:e4:7c:81:f7:5e: 90:f2:c4:c8:a7:48:ea:46:d8:67:ff:76:47:12:d2:5f:2f:d7: d0:51:04:1c:d0:c6:bf:18:bb:a2:55:d8:5b:e4:80:b1:ba:a9: 28:90:dd:8b:e4:ea:ab:06:d7:5c:86:d7:9b:a2:cb:cf:fd:c0: ee:21:f9:c5:27:28:bb:de:8b:70:40:7b:30:dc:c5:8b:c1:39: fa:3a:aa:75:b1:5d:45:a8:4f:af:35:3b:ab:70:ba:e5:c8:68: 5d:37:7f:3d:1d:9b:93:41:82:7b:4d:57:7d:ac:ee:07:2e:4d: 0e:9c:9e:a5:05:1b:52:e9:e6:29:24:1e:02:c7:e0:8d:ae:bb: 8c:d5:76:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1TZF/yXiafDLZXWkrSQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWEzNmEzOGU5ZTU2MjQ3NmFlNzBiOTE1MDI4ZTMwMTg3 MTI5MTkwHhcNMjUxMjE4MDUwMTAwWhcNMjUxMjE5MDUwMTAwWjAzMTEwLwYDVQQD Eyg1MjI3MDc5OTNjYzgyOTRjMTVhYTQ3NmU0YjA1MWRhYjViNjdhMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQyYIvDlvzYLjG7+kFhTO1jC9sKi EhVOvOKCzgxE5YDjK1LR44vomSI/SvoVFWfw5rH5++Jp3H8sHq7pXFJpCsJ4WeGj b9PzTRY3f3xAfAjztENiHuEupK5X2tfZue9LbaITAE4acQ1SENZRTHzUNwqMEfV1 4Wzj+rq3eATS/bWjTiXg+VF0N1XDqqaDYUMwHq/P42Y63RTWRgsv1ieLfVfA9P75 8XBox1sWE2MJ4rDUcwi0naNPm0eEFlUTMasn4kmY2e7InYi3pq8x9J6maHSNnvE1 RWtHm3oiwY6FdirfSpXTQxKHFGscvEcheOLp58F5myUSvW48JWWRNIRl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFInB5k8yClMFapHbksFHatbZ6NNMB8GA1UdIwQY MBaAFI5aNqOOnlYkdq5wuRUCjjAYcSkZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEt ZGYwZTYxOWEwYjgyLzEvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEtZGYwZTYxOWEwYjgy LzEvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwQHkZue vTpgP+D0+V0I5ZWBFoBxxLUq6nIFMNThej2IC9xXiiMvWXh9jLDTV6OjvjyfxKz1 8fHysUbS/CWUPjzZ6BQ48vSp7ulHqtXOX7tqAZhu6kmoD4Z1QE94k0n9c/BByAHf aDbyWWTULK+YRFIJx5+KcLxBq+R8gfdekPLEyKdI6kbYZ/92RxLSXy/X0FEEHNDG vxi7olXYW+SAsbqpKJDdi+TqqwbXXIbXm6LLz/3A7iH5xScou96LcEB7MNzFi8E5 +jqqdbFdRahPrzU7q3C65choXTd/PR2bk0GCe01XfazuBy5NDpyepQUbUunmKSQe Asfgja67jNV2Rw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:50:25 2025 by rpki-client