This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json) Hash identifier: B0sEAZG9rJjHrZXxCdrwL9qU/hPW1ZWPCA/biummUiM= Subject key identifier: 3D:8C:7F:1C:7F:2F:F0:A7:8C:EA:F8:29:FD:1F:96:0D:CD:F2:A4:85 Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27 Certificate serial: 019B2F67067FC68C28A7FD5612FE6F788995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 03:00:39 +0000 Manifest this update: Thu 18 Dec 2025 03:00:39 +0000 Manifest next update: Fri 19 Dec 2025 03:00:39 +0000 Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: ToEPIOWZ9E47r5lHML+re1RMGU7j6GgGwa6YXLYKJNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:06:7f:c6:8c:28:a7:fd:56:12:fe:6f:78:89:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27 Validity Not Before: Dec 18 03:00:39 2025 GMT Not After : Dec 19 03:00:39 2025 GMT Subject: CN=3d8c7f1c7f2ff0a78ceaf829fd1f960dcdf2a485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:4b:47:df:58:49:fe:96:94:34:95:34:02: d9:45:f4:f3:98:7a:d2:d4:51:24:be:db:fa:60:82: 2e:fe:31:b6:5d:55:5c:cc:2f:e7:6e:07:ef:7e:38: 5a:7c:34:fa:17:68:05:87:fd:e2:b2:0d:9e:ac:03: 3f:77:55:c4:87:23:12:20:15:d3:bc:99:70:08:a9: 68:7a:ca:db:51:7c:c1:26:bc:f1:c4:4b:e9:66:9e: ae:29:b3:7a:71:f4:80:31:b4:5f:0b:dd:d0:17:c2: df:4d:d4:cb:59:e4:43:d3:53:48:4b:81:d3:74:1a: d2:5a:58:6b:9f:bc:ce:c3:9a:3a:25:df:ec:16:59: fd:17:16:b3:19:1d:79:7f:b5:23:99:6d:ae:e0:0d: f2:8c:1b:3f:5e:ca:dd:79:8c:35:42:44:65:8b:cc: 04:14:9e:f0:c2:5d:a1:f1:b2:13:2c:37:6f:de:99: e2:0c:07:4d:0c:87:a9:dd:3d:6a:ca:8a:94:31:23: 89:65:be:34:04:fb:3b:9e:96:e2:54:03:ad:3e:01: 59:a7:6c:ac:ba:51:b9:f0:78:3e:fa:51:cd:3a:20: 1d:ee:e9:71:02:88:44:b6:ba:e3:f5:88:31:35:d9: f9:e8:6d:79:a2:4f:58:c9:86:0e:e8:0a:a2:6b:a6: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8C:7F:1C:7F:2F:F0:A7:8C:EA:F8:29:FD:1F:96:0D:CD:F2:A4:85 X509v3 Authority Key Identifier: keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:5d:59:23:be:0f:cb:72:18:ae:a8:6c:dd:46:a1:b7:ef:af: 6b:e0:a5:e9:a3:3f:1d:d4:ef:71:41:d0:ac:fc:bf:07:4f:8d: 4f:32:4d:b4:5d:4b:1c:3b:bc:ed:62:68:bd:8d:87:6a:c5:fe: 5d:5e:cd:b6:76:4a:2f:6f:25:d4:d8:79:0b:7e:92:a2:75:2f: f7:cc:5c:c6:c6:b0:9c:7f:c5:bf:a4:c0:00:33:05:f9:ca:dd: ec:c8:86:07:a0:7c:5c:f8:68:b8:37:27:92:17:a8:fa:8f:50: 5a:f7:9e:0c:0b:fd:0e:28:19:bb:d9:c5:be:2d:ed:b7:ab:15: ec:d2:59:27:52:57:64:6b:02:8a:88:b6:fc:b2:b9:8d:19:97: 39:4e:17:cf:94:79:fa:52:ae:cf:d2:79:f5:03:c9:0b:bb:86: a7:eb:2c:a7:4a:6b:89:a9:94:29:80:6a:7f:bf:c8:57:aa:55: 06:3c:87:4d:93:d3:c5:8b:10:e1:32:d1:eb:4e:24:79:ae:88: e9:4f:41:25:da:5e:d5:de:a0:e5:16:ac:17:37:51:c4:b2:e4: 1d:b8:39:d9:5b:e0:93:54:a0:47:39:5a:26:c4:ac:cf:73:70: 64:18:08:d7:92:63:43:03:6a:6e:80:d4:eb:5e:9a:53:92:cd: 9a:f7:cb:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZwZ/xowop/1WEv5veImVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl NDRlMjcwHhcNMjUxMjE4MDMwMDM5WhcNMjUxMjE5MDMwMDM5WjAzMTEwLwYDVQQD EygzZDhjN2YxYzdmMmZmMGE3OGNlYWY4MjlmZDFmOTYwZGNkZjJhNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4RLR99YSf6WlDSVNALZRfTzmHrS 1FEkvtv6YIIu/jG2XVVczC/nbgfvfjhafDT6F2gFh/3isg2erAM/d1XEhyMSIBXT vJlwCKloesrbUXzBJrzxxEvpZp6uKbN6cfSAMbRfC93QF8LfTdTLWeRD01NIS4HT dBrSWlhrn7zOw5o6Jd/sFln9FxazGR15f7UjmW2u4A3yjBs/XsrdeYw1QkRli8wE FJ7wwl2h8bITLDdv3pniDAdNDIep3T1qyoqUMSOJZb40BPs7npbiVAOtPgFZp2ys ulG58Hg++lHNOiAd7ulxAohEtrrj9YgxNdn56G15ok9YyYYO6Aqia6ZCHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2Mfxx/L/CnjOr4Kf0flg3N8qSFMB8GA1UdIwQY MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvF1ZI74P y3IYrqhs3Uaht++va+Cl6aM/HdTvcUHQrPy/B0+NTzJNtF1LHDu87WJovY2HasX+ XV7NtnZKL28l1Nh5C36SonUv98xcxsawnH/Fv6TAADMF+crd7MiGB6B8XPhouDcn kheo+o9QWveeDAv9DigZu9nFvi3tt6sV7NJZJ1JXZGsCioi2/LK5jRmXOU4Xz5R5 +lKuz9J59QPJC7uGp+ssp0priamUKYBqf7/IV6pVBjyHTZPTxYsQ4TLR604kea6I 6U9BJdpe1d6g5RasFzdRxLLkHbg52Vvgk1SgRzlaJsSsz3NwZBgI15JjQwNqboDU 616aU5LNmvfLIA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:30:50 2025 by rpki-client