This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft File: jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json) Hash identifier: pTaWzsfzNgyd5xhTTnlWmzshYELiBfwtWK+nlAWac+E= Subject key identifier: AE:7D:D7:FC:04:D9:6B:44:2A:B9:90:32:07:5B:F1:34:72:31:6E:43 Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019B251A506BFC6C83201E37C7194811C66F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft Manifest number: 49 Signing time: Tue 16 Dec 2025 03:00:40 +0000 Manifest this update: Tue 16 Dec 2025 03:00:40 +0000 Manifest next update: Wed 17 Dec 2025 03:00:40 +0000 Files and hashes: 1: FJssQUG-5WpajvHpyzR6SI1qsiY.roa (hash: 8p9Ojnq2EsfJr6DYc4W+gY6tO6sh3FzfrhiKvLdrJvw=) 2: hChaNSU7h8cdh-e93nEgJaejH8c.roa (hash: Gudwjiq/t5T7NuD7RxID02xwuiRTjEdOLzGaGDACPKc=) 3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: KFKFpO14640AVg3vHs22XZIfAVkisWH2v6COWmIV0cw=) 4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:50:6b:fc:6c:83:20:1e:37:c7:19:48:11:c6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Dec 16 03:00:40 2025 GMT Not After : Dec 17 03:00:40 2025 GMT Subject: CN=ae7dd7fc04d96b442ab99032075bf13472316e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:e1:f6:64:6e:98:69:e4:f6:07:0e:af:bf: 15:b8:2c:5a:71:94:c7:92:98:49:c4:7f:c0:c6:6d: 90:a7:a1:cb:1f:2c:db:f5:10:22:82:60:8b:9e:3d: e3:91:5d:f9:ee:fa:d1:7f:68:f8:ca:ef:2e:76:88: 3a:23:df:01:c8:47:29:62:2e:3b:6f:ab:90:2e:ac: 29:22:ba:1d:6b:ad:99:2c:d9:d5:8c:08:c2:b1:44: 93:31:af:c1:1d:7e:c9:8e:77:1d:71:07:60:63:a9: 58:c8:76:41:0c:45:d5:f7:5f:79:70:87:f1:c9:11: 8d:91:9e:24:53:5c:11:19:22:e8:17:4a:45:fa:f1: 03:bb:98:f7:43:2f:3c:11:53:3a:31:6b:6b:41:8f: 4c:ec:82:18:98:c6:e8:49:f4:2e:38:29:66:13:cb: b0:4c:63:3c:0e:92:15:a5:b7:13:d7:ea:8c:00:48: aa:c5:57:86:d1:13:39:16:7a:2e:9e:21:cc:53:92: 56:a9:34:4a:e5:1c:63:83:c3:65:86:4e:72:1e:ff: 13:a7:80:14:48:8e:9a:cc:a8:3f:15:26:10:e0:5a: e4:88:51:0f:eb:0c:88:ae:5e:08:e9:86:51:55:1d: c3:c8:de:12:39:90:f2:b8:63:77:5f:87:7e:20:d0: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7D:D7:FC:04:D9:6B:44:2A:B9:90:32:07:5B:F1:34:72:31:6E:43 X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ad:37:bf:85:ee:cf:d2:b6:4c:61:04:01:a4:1a:a0:c4:da: 9f:d5:fe:86:11:84:ba:cb:65:13:0f:6c:4e:13:15:94:fc:53: 18:6c:5f:7b:af:ff:a1:f3:14:ad:c6:db:ee:2d:c7:22:a0:08: c8:fa:6b:1c:ff:04:34:a2:9c:a3:b6:50:13:71:fe:40:07:1b: 55:1b:f9:c2:ad:1a:f2:9e:c3:1e:6a:2d:99:77:1f:23:79:cf: ea:57:c6:f3:23:c9:1d:9d:f7:8e:22:6f:69:e7:91:35:01:c7: 6a:a3:a4:c8:7e:82:ba:b6:5f:25:fe:3f:b8:1f:29:35:d0:a3: 63:58:06:5a:de:9e:ba:f0:39:f2:a5:6c:ec:85:6a:74:54:41: 21:2e:63:df:6f:4d:d4:84:6a:fc:06:e2:22:f0:41:1a:b0:00: b7:b7:2b:83:b7:ad:1b:b0:82:e6:49:ba:a6:cf:4d:2e:d8:1c: 07:55:ca:93:57:44:b2:3c:e3:9d:ee:42:c8:6c:57:5a:1f:29: 22:4c:25:30:d8:62:41:6a:c9:7a:5e:4f:fe:a2:34:21:e6:e4: ab:05:a0:6c:44:89:f6:b5:a0:49:11:85:70:b5:0e:9c:a6:5e: 1f:17:73:ed:86:40:ca:90:bb:e8:b9:75:61:f6:3a:64:4e:63: c8:cf:ac:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGlBr/GyDIB43xxlIEcZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjUxMjE2MDMwMDQwWhcNMjUxMjE3MDMwMDQwWjAzMTEwLwYDVQQD EyhhZTdkZDdmYzA0ZDk2YjQ0MmFiOTkwMzIwNzViZjEzNDcyMzE2ZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGTh9mRumGnk9gcOr78VuCxacZTH kphJxH/Axm2Qp6HLHyzb9RAigmCLnj3jkV357vrRf2j4yu8udog6I98ByEcpYi47 b6uQLqwpIroda62ZLNnVjAjCsUSTMa/BHX7JjncdcQdgY6lYyHZBDEXV9195cIfx yRGNkZ4kU1wRGSLoF0pF+vEDu5j3Qy88EVM6MWtrQY9M7IIYmMboSfQuOClmE8uw TGM8DpIVpbcT1+qMAEiqxVeG0RM5FnouniHMU5JWqTRK5Rxjg8Nlhk5yHv8Tp4AU SI6azKg/FSYQ4FrkiFEP6wyIrl4I6YZRVR3DyN4SOZDyuGN3X4d+INACdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK591/wE2WtEKrmQMgdb8TRyMW5DMB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq03v4Xu z9K2TGEEAaQaoMTan9X+hhGEustlEw9sThMVlPxTGGxfe6//ofMUrcbb7i3HIqAI yPprHP8ENKKco7ZQE3H+QAcbVRv5wq0a8p7DHmotmXcfI3nP6lfG8yPJHZ33jiJv aeeRNQHHaqOkyH6CurZfJf4/uB8pNdCjY1gGWt6euvA58qVs7IVqdFRBIS5j329N 1IRq/AbiIvBBGrAAt7crg7etG7CC5km6ps9NLtgcB1XKk1dEsjzjne5CyGxXWh8p IkwlMNhiQWrJel5P/qI0IebkqwWgbESJ9rWgSRGFcLUOnKZeHxdz7YZAypC76Ll1 YfY6ZE5jyM+sSA== -----END CERTIFICATE-----Generated at Tue Dec 16 12:42:25 2025 by rpki-client