This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft File: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json) Hash identifier: n2d+wIRVPKHRnObs5E5zNMLEgHack6CSFhmbHcwMirE= Subject key identifier: 07:51:E4:55:F6:52:0F:7D:4A:6E:C6:FC:AB:C8:AB:72:7F:BD:C2:0A Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35 Certificate issuer: /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835 Certificate serial: 019B5305F609A59C833F4D9D8E8FBD65915F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft Manifest number: 092A Signing time: Thu 25 Dec 2025 01:00:58 +0000 Manifest this update: Thu 25 Dec 2025 01:00:58 +0000 Manifest next update: Fri 26 Dec 2025 01:00:58 +0000 Files and hashes: 1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: hilnI34GTeymVZ5DtCqP1AuPodaw5ioVUuW/KHpADlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:f6:09:a5:9c:83:3f:4d:9d:8e:8f:bd:65:91:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835 Validity Not Before: Dec 25 01:00:58 2025 GMT Not After : Dec 26 01:00:58 2025 GMT Subject: CN=0751e455f6520f7d4a6ec6fcabc8ab727fbdc20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:d0:7c:fa:de:3a:88:d8:f7:3e:d5:21:6e: e4:43:23:c5:04:d7:db:74:ad:50:27:32:9c:d5:b2: 32:8b:7f:32:6b:38:b3:98:7b:84:95:15:d0:97:f3: 27:25:a7:71:6c:62:36:40:97:c8:82:7d:20:66:42: 0d:65:cc:02:22:9b:d0:a0:e4:79:7a:d6:2e:5a:b0: 7c:b5:60:f8:43:32:a0:ec:02:9c:88:00:03:61:6e: 3b:76:88:e9:26:53:87:9f:53:5c:47:90:93:51:d8: 77:49:89:8a:09:c0:98:b3:30:21:b8:2d:56:4a:f0: 14:ef:21:78:1f:02:29:6b:d7:c8:bd:3b:9c:54:d2: e5:1e:5f:0f:88:12:9e:96:f9:9a:ec:d2:d3:bb:20: b8:ea:03:e1:ef:12:6f:32:12:ab:0d:73:93:61:c2: e2:e2:16:fb:80:2d:89:8b:9d:5e:61:2f:53:42:91: 19:ef:44:83:f9:1d:e7:5b:62:8e:79:18:85:59:4f: 87:ff:b3:7d:a5:3c:f3:a5:cb:29:29:27:c2:5b:df: e7:65:4a:6e:a6:d2:97:85:c4:da:bc:89:ab:03:3b: 15:0a:1a:a6:db:96:18:73:6b:35:49:16:dc:99:b3: 07:20:8d:37:9b:86:52:3d:a4:67:ec:97:6c:b3:f6: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:51:E4:55:F6:52:0F:7D:4A:6E:C6:FC:AB:C8:AB:72:7F:BD:C2:0A X509v3 Authority Key Identifier: keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dd:9b:e9:18:80:40:c9:99:ea:cc:51:9d:9d:6f:03:3e:81: 85:6b:b9:ae:8d:82:dc:14:fc:79:eb:40:b4:4b:0c:65:b3:df: 30:ef:55:9d:c2:11:c8:2e:e7:3e:af:40:75:68:38:ea:3f:ec: 1c:d1:4b:b2:60:7c:a4:f8:44:45:77:af:ce:88:f0:68:14:e0: ad:c8:f8:65:f7:70:c8:26:d8:aa:39:87:75:3d:34:cf:c5:c9: 26:5e:37:f7:ce:83:88:cf:e6:f0:da:53:97:1e:ce:84:ad:7e: 80:28:34:2b:95:c4:31:af:f5:d8:bb:a8:41:b3:de:54:86:2e: 45:1a:51:f9:6f:15:c0:59:10:10:9e:19:f8:52:ca:90:58:68: 10:23:04:9d:a1:9a:cc:fe:42:ec:c0:e1:96:19:ca:ef:b0:f9: f3:82:b8:c1:16:da:9f:3d:a0:49:f9:fa:d0:48:d0:75:5d:b5: bd:02:d3:04:fd:00:6c:df:fc:7c:53:d3:ce:58:b9:b4:78:75: e5:9e:c2:00:3f:e7:e1:35:5d:da:d5:20:27:ac:4f:64:be:d9: 03:17:9c:62:0a:db:b4:1c:c8:76:f3:70:a3:67:52:ce:03:a6: 4b:a3:66:51:e6:28:ec:0a:f9:17:d9:3c:87:f3:06:d4:7a:90: 70:25:aa:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBfYJpZyDP02djo+9ZZFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ODdiYmFhMDIyYzM5OWZkZGM0MzUxYmIyZTBhZmEwOTg1 YTU4MzUwHhcNMjUxMjI1MDEwMDU4WhcNMjUxMjI2MDEwMDU4WjAzMTEwLwYDVQQD EygwNzUxZTQ1NWY2NTIwZjdkNGE2ZWM2ZmNhYmM4YWI3MjdmYmRjMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rnQfPreOojY9z7VIW7kQyPFBNfb dK1QJzKc1bIyi38yazizmHuElRXQl/MnJadxbGI2QJfIgn0gZkINZcwCIpvQoOR5 etYuWrB8tWD4QzKg7AKciAADYW47dojpJlOHn1NcR5CTUdh3SYmKCcCYszAhuC1W SvAU7yF4HwIpa9fIvTucVNLlHl8PiBKelvma7NLTuyC46gPh7xJvMhKrDXOTYcLi 4hb7gC2Ji51eYS9TQpEZ70SD+R3nW2KOeRiFWU+H/7N9pTzzpcspKSfCW9/nZUpu ptKXhcTavImrAzsVChqm25YYc2s1SRbcmbMHII03m4ZSPaRn7Jdss/aUPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdR5FX2Ug99Sm7G/KvIq3J/vcIKMB8GA1UdIwQY MBaAFCSHu6oCLDmf3cQ1G7Lgr6CYWlg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEt MjljY2VhNmU5YTU4LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEtMjljY2VhNmU5YTU4 LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt2b6RiA QMmZ6sxRnZ1vAz6BhWu5ro2C3BT8eetAtEsMZbPfMO9VncIRyC7nPq9AdWg46j/s HNFLsmB8pPhERXevzojwaBTgrcj4ZfdwyCbYqjmHdT00z8XJJl43986DiM/m8NpT lx7OhK1+gCg0K5XEMa/12LuoQbPeVIYuRRpR+W8VwFkQEJ4Z+FLKkFhoECMEnaGa zP5C7MDhlhnK77D584K4wRbanz2gSfn60EjQdV21vQLTBP0AbN/8fFPTzli5tHh1 5Z7CAD/n4TVd2tUgJ6xPZL7ZAxecYgrbtBzIdvNwo2dSzgOmS6NmUeYo7Ar5F9k8 h/MG1HqQcCWqTg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:31 2025 by rpki-client