This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json) Hash identifier: pWwnDTJSNqLglI0YLo1xqsAvKfxdqXb1Bj9bKOWW8Q4= Subject key identifier: E4:98:C0:70:55:AA:17:95:7C:9A:74:54:6B:9D:E3:9E:B4:1F:1B:1F Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Certificate serial: 019B3F11953B7824CAF4610C29FD1EC8B5FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft Manifest number: 04AA Signing time: Sun 21 Dec 2025 04:01:15 +0000 Manifest this update: Sun 21 Dec 2025 04:01:15 +0000 Manifest next update: Mon 22 Dec 2025 04:01:15 +0000 Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: uwaBM/NrfEvZbrZJQ+ajU8kBAWybASGouG9NuqwZNLE=) 2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:95:3b:78:24:ca:f4:61:0c:29:fd:1e:c8:b5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a Validity Not Before: Dec 21 04:01:15 2025 GMT Not After : Dec 22 04:01:15 2025 GMT Subject: CN=e498c07055aa17957c9a74546b9de39eb41f1b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:7f:24:d8:23:4a:8c:96:79:14:3e:ef:08: 31:16:7a:1a:4a:ea:c1:45:13:05:ca:2e:6e:2b:6d: 2e:cc:93:55:6c:a4:82:e4:98:8f:91:95:0d:5d:89: 20:ab:a0:34:af:d1:5b:49:45:67:53:b8:9a:22:cd: 86:1b:e8:ea:f8:fe:08:54:98:fe:b4:e1:9c:8d:97: 11:17:9b:61:be:51:36:17:54:f6:e6:b4:d8:c8:c5: 4c:54:a8:49:af:b9:b6:14:42:69:ca:e0:c5:33:23: 47:b6:a5:54:3c:66:44:2c:1c:fd:44:f6:14:86:01: 36:7e:7d:e4:4d:98:96:f3:3f:cd:1a:4d:bf:d2:73: 55:13:01:a1:b6:c4:17:2d:bc:20:9e:8a:10:22:72: 4d:19:59:54:30:44:14:b5:10:23:db:c3:39:c4:ad: 75:3d:6d:d0:73:d5:68:fc:c3:89:f8:f2:ff:86:84: dd:7b:3b:fe:55:91:13:a9:59:7a:60:2e:31:94:98: 8b:b5:24:5a:c3:28:f1:55:c7:7f:d5:94:32:c2:7a: 86:ab:03:03:96:46:77:b6:f2:d9:a5:91:3a:55:8a: fc:aa:34:51:19:0e:a3:81:aa:94:aa:8a:54:b4:3c: 65:be:7a:7f:fa:28:02:01:d0:4f:11:b7:c1:c3:44: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:98:C0:70:55:AA:17:95:7C:9A:74:54:6B:9D:E3:9E:B4:1F:1B:1F X509v3 Authority Key Identifier: keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:72:cb:52:24:54:14:27:7b:98:0a:20:20:21:b6:9e:19: 29:ed:76:cc:19:cc:b8:07:f1:21:1f:1e:78:f8:21:ba:6a:a7: 02:4a:20:11:18:5f:2b:4c:d9:ec:ba:4f:f3:b1:f0:97:c2:e3: 80:c7:0e:f6:cd:fb:d5:f7:23:49:ff:da:f3:f6:c1:82:0f:f8: 2b:a3:b7:06:62:a9:2c:1c:a7:74:6e:11:99:aa:78:57:77:83: fd:51:e9:61:9a:59:c3:27:86:80:92:5e:cf:6e:57:a1:bb:43: ec:8f:64:6f:85:60:d5:32:c3:3f:c4:61:3c:85:ec:f2:59:e2: 06:73:7d:9b:c6:74:f2:be:6c:ff:36:a6:07:31:4a:46:74:66: ae:26:ac:5a:82:9e:76:c3:27:e9:20:d3:01:94:7d:13:4f:51: 21:92:cd:ea:9e:8b:88:85:e0:f4:4f:53:01:68:3f:e0:cc:0e: 3d:2d:f3:93:be:b5:c7:27:df:a7:81:b8:8e:89:52:53:d0:be: ac:36:3b:e3:e0:6e:32:7b:38:21:17:08:f0:08:a3:a4:43:2d: 55:91:90:90:1b:10:f2:43:d8:4a:29:1f:e7:6c:6d:2f:00:bd: 61:0c:cf:df:79:44:0e:5b:74:4c:bd:da:0a:62:35:a9:13:1b: 45:07:15:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZU7eCTK9GEMKf0eyLX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky NzkyM2EwHhcNMjUxMjIxMDQwMTE1WhcNMjUxMjIyMDQwMTE1WjAzMTEwLwYDVQQD EyhlNDk4YzA3MDU1YWExNzk1N2M5YTc0NTQ2YjlkZTM5ZWI0MWYxYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwB/JNgjSoyWeRQ+7wgxFnoaSurB RRMFyi5uK20uzJNVbKSC5JiPkZUNXYkgq6A0r9FbSUVnU7iaIs2GG+jq+P4IVJj+ tOGcjZcRF5thvlE2F1T25rTYyMVMVKhJr7m2FEJpyuDFMyNHtqVUPGZELBz9RPYU hgE2fn3kTZiW8z/NGk2/0nNVEwGhtsQXLbwgnooQInJNGVlUMEQUtRAj28M5xK11 PW3Qc9Vo/MOJ+PL/hoTdezv+VZETqVl6YC4xlJiLtSRawyjxVcd/1ZQywnqGqwMD lkZ3tvLZpZE6VYr8qjRRGQ6jgaqUqopUtDxlvnp/+igCAdBPEbfBw0QE9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSYwHBVqheVfJp0VGud4560HxsfMB8GA1UdIwQY MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgByy1Ik VBQne5gKICAhtp4ZKe12zBnMuAfxIR8eePghumqnAkogERhfK0zZ7LpP87Hwl8Lj gMcO9s371fcjSf/a8/bBgg/4K6O3BmKpLByndG4Rmap4V3eD/VHpYZpZwyeGgJJe z25XobtD7I9kb4Vg1TLDP8RhPIXs8lniBnN9m8Z08r5s/zamBzFKRnRmriasWoKe dsMn6SDTAZR9E09RIZLN6p6LiIXg9E9TAWg/4MwOPS3zk761xyffp4G4jolSU9C+ rDY74+BuMns4IRcI8AijpEMtVZGQkBsQ8kPYSikf52xtLwC9YQzP33lEDlt0TL3a CmI1qRMbRQcVmw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:05 2025 by rpki-client