This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json) Hash identifier: /rxH3HpugBlICQSLTmaXpLwbvi7JIbzewRKH3w5hNDA= Subject key identifier: 9F:11:BD:AD:93:37:A1:0F:83:53:73:38:35:41:B4:CE:01:96:60:D7 Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8 Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8 Certificate serial: 019B65E8264E8B1B4A0235B0FF19A4A8AE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft Manifest number: 12DF Signing time: Sun 28 Dec 2025 17:01:11 +0000 Manifest this update: Sun 28 Dec 2025 17:01:11 +0000 Manifest next update: Mon 29 Dec 2025 17:01:11 +0000 Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: X2gjQYBTLegxkC4VON3fbUd4c9YIwggLk/U1zwvbOzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:26:4e:8b:1b:4a:02:35:b0:ff:19:a4:a8:ae:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8 Validity Not Before: Dec 28 17:01:11 2025 GMT Not After : Dec 29 17:01:11 2025 GMT Subject: CN=9f11bdad9337a10f835373383541b4ce019660d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:41:2d:79:21:bd:93:2a:34:54:48:5d:5a: fa:a7:92:fe:a0:6d:6a:74:9e:05:80:3b:8d:4b:10: de:6d:61:cd:fc:f4:af:8b:65:b3:78:ca:95:2e:75: 47:f2:68:9e:c7:98:61:0b:80:bc:46:00:44:7a:41: 9e:2a:1c:f5:01:f4:1a:63:3a:08:d1:e2:16:9c:46: b6:84:e7:99:cd:a5:af:93:f5:7d:47:57:19:fb:88: 16:7d:e1:59:b1:8b:3d:b5:cc:ae:67:97:70:23:4a: e2:47:f5:1f:5a:97:7e:02:2a:36:aa:a7:35:be:7d: 64:14:5e:e6:14:46:f5:93:e2:f9:d3:9b:2a:b6:c4: 6b:2e:5d:82:f1:64:b7:e3:59:03:0f:03:78:b0:e3: a6:5d:2c:e3:db:00:96:0f:75:01:6a:dc:f1:08:aa: 23:d4:cf:bd:99:dc:a6:15:f8:73:18:aa:0a:89:3c: 2a:72:84:9c:e0:fe:59:c0:09:f1:6e:62:0e:d2:11: 22:82:f5:f3:a1:99:0e:8f:42:62:e6:85:85:fd:08: 58:8f:88:ca:8f:44:b8:4a:5e:c2:29:28:b7:7c:79: 7a:0a:18:a2:08:66:d6:b6:8a:01:86:e3:58:2a:fc: 39:98:6e:6d:68:be:4d:c0:29:a1:b0:f3:4f:cf:de: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:BD:AD:93:37:A1:0F:83:53:73:38:35:41:B4:CE:01:96:60:D7 X509v3 Authority Key Identifier: keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ba:66:c5:a2:f9:8e:8e:b4:35:b1:03:9d:8d:1a:6c:46:9a: 44:00:7c:10:e5:57:22:75:8c:ae:6f:0b:bf:3c:2c:de:3d:26: 8b:f8:37:b9:4a:79:4b:71:2c:f9:ef:c5:9b:7c:6c:e3:45:d2: da:6b:24:cd:8a:0e:e2:55:fe:f6:b4:ec:18:f9:bd:c7:6c:4f: ba:b3:7c:39:32:76:ee:9b:ce:67:e7:a7:cd:5d:fc:b5:9e:ec: df:2b:0d:15:78:af:06:6a:9b:dd:7f:87:6a:cf:53:5c:2e:9d: 1e:c6:26:1d:0d:eb:a8:d0:da:57:9d:c7:88:da:25:1c:37:53: 7b:dd:d1:a7:82:53:0c:31:c5:37:26:ea:e5:17:c9:04:77:f5: 6d:00:f8:26:02:2a:c6:53:34:ff:a2:d5:70:96:d3:47:8a:23: f0:88:b3:f6:ec:91:c4:c2:df:76:50:14:f2:f8:99:da:3b:70: b7:4e:d5:43:ab:ac:8b:9e:d6:6b:5a:41:a0:ee:3c:fe:7c:3f: 14:cd:54:37:bc:60:c0:29:fa:6d:9e:dd:1a:2a:98:3e:66:39: 89:e1:36:92:77:57:2a:3f:de:9f:54:a5:c8:c1:1b:54:de:8a: 26:da:cf:43:8f:fa:77:1d:59:f9:92:2b:a3:25:8a:ad:56:4d: 6e:13:65:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6CZOixtKAjWw/xmkqK4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTM0YjAzNzczMDVlY2JmZTM4M2IyMWI4NzQ3NDEwNmEx ZTRkZDgwHhcNMjUxMjI4MTcwMTExWhcNMjUxMjI5MTcwMTExWjAzMTEwLwYDVQQD Eyg5ZjExYmRhZDkzMzdhMTBmODM1MzczMzgzNTQxYjRjZTAxOTY2MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWtBLXkhvZMqNFRIXVr6p5L+oG1q dJ4FgDuNSxDebWHN/PSvi2WzeMqVLnVH8miex5hhC4C8RgBEekGeKhz1AfQaYzoI 0eIWnEa2hOeZzaWvk/V9R1cZ+4gWfeFZsYs9tcyuZ5dwI0riR/UfWpd+Aio2qqc1 vn1kFF7mFEb1k+L505sqtsRrLl2C8WS341kDDwN4sOOmXSzj2wCWD3UBatzxCKoj 1M+9mdymFfhzGKoKiTwqcoSc4P5ZwAnxbmIO0hEigvXzoZkOj0Ji5oWF/QhYj4jK j0S4Sl7CKSi3fHl6ChiiCGbWtooBhuNYKvw5mG5taL5NwCmhsPNPz96blQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8Rva2TN6EPg1NzODVBtM4BlmDXMB8GA1UdIwQY MBaAFPyTSwN3MF7L/jg7Ibh0dBBqHk3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmIt OWRlN2Y5MzVmYzAxLzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmItOWRlN2Y5MzVmYzAx LzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLpmxaL5 jo60NbEDnY0abEaaRAB8EOVXInWMrm8Lvzws3j0mi/g3uUp5S3Es+e/Fm3xs40XS 2mskzYoO4lX+9rTsGPm9x2xPurN8OTJ27pvOZ+enzV38tZ7s3ysNFXivBmqb3X+H as9TXC6dHsYmHQ3rqNDaV53HiNolHDdTe93Rp4JTDDHFNybq5RfJBHf1bQD4JgIq xlM0/6LVcJbTR4oj8Iiz9uyRxMLfdlAU8viZ2jtwt07VQ6usi57Wa1pBoO48/nw/ FM1UN7xgwCn6bZ7dGiqYPmY5ieE2kndXKj/en1SlyMEbVN6KJtrPQ4/6dx1Z+ZIr oyWKrVZNbhNlKQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:51 2025 by rpki-client