This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json) Hash identifier: CV0U4l5IFaeF5njhhT87DjZYu8M8jbkL0YYJBsr/6S0= Subject key identifier: AF:05:EF:BE:3A:3D:C0:FF:94:3D:AA:C9:60:5D:8B:6B:97:F7:81:AF Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Certificate serial: 019B4A04833C2DB56047E7E696C1D7C7444E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft Manifest number: 0A7D Signing time: Tue 23 Dec 2025 07:02:48 +0000 Manifest this update: Tue 23 Dec 2025 07:02:48 +0000 Manifest next update: Wed 24 Dec 2025 07:02:48 +0000 Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: vzrtsBh1Sj/332wG2gA9tUs1C9CFcnMTuKzxEsWAaDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:83:3c:2d:b5:60:47:e7:e6:96:c1:d7:c7:44:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Validity Not Before: Dec 23 07:02:48 2025 GMT Not After : Dec 24 07:02:48 2025 GMT Subject: CN=af05efbe3a3dc0ff943daac9605d8b6b97f781af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:ed:41:97:cc:a7:8c:6f:dd:a7:38:35:72: 17:d0:53:78:fa:49:86:43:67:da:45:73:38:d5:4b: 37:7d:92:9e:bf:59:66:90:cc:f1:e8:a0:86:c8:a5: 37:53:34:2b:09:a6:0a:e7:24:71:80:04:f1:d4:3a: 29:9b:63:2e:7e:f6:94:e8:22:16:2d:0c:7f:01:2c: 79:20:c4:28:bf:75:84:96:b9:df:8c:ae:42:bc:6c: c9:37:f0:26:86:c1:27:fb:d5:25:3d:44:3c:64:75: 6e:5b:39:2e:1f:45:c4:bc:52:9a:85:e4:e4:d2:38: 85:8b:9c:bc:3a:2e:ae:30:71:c4:fe:4b:3c:d3:6f: 19:06:36:ee:ec:36:46:1a:49:86:d0:f1:fc:1c:d6: 6c:1a:94:78:67:d9:57:99:63:30:5b:1c:87:12:b8: e5:2a:96:4f:5b:ef:54:47:7f:28:66:9c:98:10:24: a4:d3:64:a8:e4:f6:85:99:a7:f6:da:ee:d4:d3:97: a2:35:8f:ab:c2:06:3b:72:c6:8a:ce:b6:82:05:78: f3:f1:83:ed:b7:6c:48:3f:7d:a5:e6:7c:79:21:04: 58:cc:ee:33:26:4e:21:56:81:60:26:ac:5e:55:37: 7a:aa:58:43:ae:8d:fc:7c:7c:1a:1a:c8:2c:74:b4: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:EF:BE:3A:3D:C0:FF:94:3D:AA:C9:60:5D:8B:6B:97:F7:81:AF X509v3 Authority Key Identifier: keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5a:0e:d2:e0:51:85:4d:30:33:a2:e9:86:ea:fd:2a:c7:e4: bd:ea:7a:8f:40:98:4e:6c:28:4f:33:c5:db:50:4e:8f:d1:2f: 62:f7:4f:4f:a5:df:23:6e:9a:d9:a1:dd:9b:2f:64:77:85:da: 5e:65:19:bf:ae:8d:1f:46:1f:a0:3f:ce:f2:4c:35:e5:20:b2: f6:92:e1:39:9d:a1:c8:69:b8:7d:7f:57:7b:30:d6:da:97:47: 2d:eb:a2:4a:6d:f3:56:25:dd:59:5b:5a:65:ef:97:0f:37:f8: 77:61:ec:e2:ac:36:01:e6:29:3a:c2:10:b9:1e:00:0d:7d:a1: d4:be:ae:f4:cb:9b:74:0b:9e:07:26:ed:6a:6b:86:64:01:ce: d8:5d:65:a6:5f:19:18:dc:29:55:86:13:b9:1a:b1:50:43:d9: 12:7a:9e:5f:5e:91:1f:43:03:8a:d4:c1:13:51:49:23:c7:ad: ef:d0:bf:f6:11:b4:c2:be:31:4f:01:87:fd:2a:9d:79:67:15: eb:c2:be:40:1a:df:bc:96:b5:eb:f0:fb:27:6d:e3:6a:6a:6b: 0b:2f:af:e4:cb:e2:f1:85:43:19:6a:d1:1f:30:65:4a:ef:de: f2:96:67:75:2c:a1:70:8d:ae:6b:e5:d4:d8:c5:94:ae:fe:10: 73:d5:59:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBIM8LbVgR+fmlsHXx0ROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTM0MzRlMWNmNjkwYWQyNmQ0N2EwM2IzZmMzNWE4MDJh NzliNTgwHhcNMjUxMjIzMDcwMjQ4WhcNMjUxMjI0MDcwMjQ4WjAzMTEwLwYDVQQD EyhhZjA1ZWZiZTNhM2RjMGZmOTQzZGFhYzk2MDVkOGI2Yjk3Zjc4MWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ijtQZfMp4xv3ac4NXIX0FN4+kmG Q2faRXM41Us3fZKev1lmkMzx6KCGyKU3UzQrCaYK5yRxgATx1Dopm2MufvaU6CIW LQx/ASx5IMQov3WElrnfjK5CvGzJN/AmhsEn+9UlPUQ8ZHVuWzkuH0XEvFKaheTk 0jiFi5y8Oi6uMHHE/ks8028ZBjbu7DZGGkmG0PH8HNZsGpR4Z9lXmWMwWxyHErjl KpZPW+9UR38oZpyYECSk02So5PaFmaf22u7U05eiNY+rwgY7csaKzraCBXjz8YPt t2xIP32l5nx5IQRYzO4zJk4hVoFgJqxeVTd6qlhDro38fHwaGsgsdLQJ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8F7746PcD/lD2qyWBdi2uX94GvMB8GA1UdIwQY MBaAFCZTQ04c9pCtJtR6A7P8NagCp5tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUt Y2JhNWQ5NzhmMzcxLzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUtY2JhNWQ5NzhmMzcx LzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVoO0uBR hU0wM6Lphur9Ksfkvep6j0CYTmwoTzPF21BOj9EvYvdPT6XfI26a2aHdmy9kd4Xa XmUZv66NH0YfoD/O8kw15SCy9pLhOZ2hyGm4fX9XezDW2pdHLeuiSm3zViXdWVta Ze+XDzf4d2Hs4qw2AeYpOsIQuR4ADX2h1L6u9MubdAueBybtamuGZAHO2F1lpl8Z GNwpVYYTuRqxUEPZEnqeX16RH0MDitTBE1FJI8et79C/9hG0wr4xTwGH/SqdeWcV 68K+QBrfvJa16/D7J23jamprCy+v5Mvi8YVDGWrRHzBlSu/e8pZndSyhcI2ua+XU 2MWUrv4Qc9VZOw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:47 2025 by rpki-client