This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json) Hash identifier: JVwHfcQJoKTN0+bwmNUcxVpUT7zF/KNIaTwKlwQE0CM= Subject key identifier: 16:46:16:D2:73:28:1B:7A:3E:7B:F2:91:00:72:AD:FB:12:13:92:E2 Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Certificate serial: 019B51BD056B948A1F477F56977207725EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft Manifest number: 0A81 Signing time: Wed 24 Dec 2025 19:01:40 +0000 Manifest this update: Wed 24 Dec 2025 19:01:40 +0000 Manifest next update: Thu 25 Dec 2025 19:01:40 +0000 Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: v0EZ98SA/h+SvRY8nN+piXO2VXZ4JBFb5f2B4lPw4lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:05:6b:94:8a:1f:47:7f:56:97:72:07:72:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58 Validity Not Before: Dec 24 19:01:40 2025 GMT Not After : Dec 25 19:01:40 2025 GMT Subject: CN=164616d273281b7a3e7bf2910072adfb121392e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:e4:10:35:82:19:70:aa:bf:30:7c:ac:ea: 59:d6:c4:95:bd:4a:3d:82:22:b0:b9:84:d0:ce:50: 85:2c:61:31:5f:10:53:92:5a:db:d7:58:ba:59:29: df:ec:4b:c8:c0:21:92:24:9d:27:8a:57:23:76:40: 55:89:40:62:55:50:4d:be:d9:f9:2f:c3:b1:0f:83: 30:ff:e4:33:1b:aa:4c:61:3e:0f:ef:e9:59:fa:a1: 6c:18:67:6a:2c:b8:82:94:d2:af:5c:5e:eb:4f:6c: 7a:93:fe:77:f1:9a:38:f1:a9:6e:83:c0:1b:03:b2: b9:35:5f:4b:cc:3e:80:ed:e4:3b:8b:7f:72:9e:b0: c7:1e:26:23:5c:81:18:af:0b:fa:89:13:a1:16:67: 9a:1d:5e:39:c9:60:a6:9e:63:68:5c:df:82:36:8b: 29:42:40:d6:be:f8:ca:92:84:09:a6:14:ae:bf:26: 4d:2c:62:7c:99:17:74:20:5c:54:bc:84:8a:d0:46: ed:3d:d0:c1:c0:96:4e:6f:9b:0e:c8:fe:b9:29:48: ce:58:39:c1:c8:c3:d1:af:22:57:64:1d:25:32:c9: ce:8c:69:00:68:ac:f2:4d:43:7f:0c:04:99:0b:ba: 8c:e8:5e:bb:3b:9c:aa:43:6a:6f:76:c2:77:b8:c2: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:46:16:D2:73:28:1B:7A:3E:7B:F2:91:00:72:AD:FB:12:13:92:E2 X509v3 Authority Key Identifier: keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:33:8d:ed:6c:71:c4:27:25:61:9c:24:20:27:45:6e:73:65: 19:ec:94:45:49:2b:b8:19:a9:55:80:69:23:4a:5f:fa:85:69: 4d:4b:ce:43:2a:35:12:36:e6:05:30:1e:b9:5b:77:92:d7:c6: 92:d6:76:5f:ba:8e:5d:2e:39:00:a1:fe:05:34:e3:21:07:2a: 4d:5d:d3:dd:fa:a7:e5:26:dd:a7:0c:42:68:fa:e2:70:3e:40: 5d:eb:db:cf:f6:6d:fb:5e:a6:71:6f:91:26:bf:ce:7a:89:ce: 13:2e:a3:db:e7:ef:98:5e:e2:e9:78:9e:87:ca:43:bf:7d:da: fd:8b:e9:51:b6:f0:5b:0b:07:c2:31:5e:18:55:af:de:87:35: 32:d1:e6:b1:8f:cf:e2:31:ef:09:cb:92:2a:a8:06:34:8a:4c: 9a:d1:3d:92:52:a9:5f:8e:2f:73:09:b7:07:41:98:5e:ce:c9: f7:a2:2a:82:88:63:b2:73:15:4b:a3:17:59:56:13:48:0d:bc: 5f:27:f9:f4:18:da:7b:d3:be:51:24:1d:0c:85:b1:00:99:dd: 03:e8:ce:5e:30:ee:ff:cc:e8:b4:e8:08:5b:be:52:f8:68:30: cb:d1:c0:b9:a8:58:c4:1e:8d:27:db:41:5a:71:09:7e:10:0f: c3:d2:c7:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvQVrlIofR39Wl3IHcl6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTM0MzRlMWNmNjkwYWQyNmQ0N2EwM2IzZmMzNWE4MDJh NzliNTgwHhcNMjUxMjI0MTkwMTQwWhcNMjUxMjI1MTkwMTQwWjAzMTEwLwYDVQQD EygxNjQ2MTZkMjczMjgxYjdhM2U3YmYyOTEwMDcyYWRmYjEyMTM5MmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wrkEDWCGXCqvzB8rOpZ1sSVvUo9 giKwuYTQzlCFLGExXxBTklrb11i6WSnf7EvIwCGSJJ0nilcjdkBViUBiVVBNvtn5 L8OxD4Mw/+QzG6pMYT4P7+lZ+qFsGGdqLLiClNKvXF7rT2x6k/538Zo48alug8Ab A7K5NV9LzD6A7eQ7i39ynrDHHiYjXIEYrwv6iROhFmeaHV45yWCmnmNoXN+CNosp QkDWvvjKkoQJphSuvyZNLGJ8mRd0IFxUvISK0EbtPdDBwJZOb5sOyP65KUjOWDnB yMPRryJXZB0lMsnOjGkAaKzyTUN/DASZC7qM6F67O5yqQ2pvdsJ3uMKW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZGFtJzKBt6PnvykQByrfsSE5LiMB8GA1UdIwQY MBaAFCZTQ04c9pCtJtR6A7P8NagCp5tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUt Y2JhNWQ5NzhmMzcxLzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9jYmExY2UtZjAxZS00Zjk0LWI1YWUtY2JhNWQ5NzhmMzcx LzEvSmxORFRoejJrSzBtMUhvRHNfdzFxQUtubTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDON7Wxx xCclYZwkICdFbnNlGeyURUkruBmpVYBpI0pf+oVpTUvOQyo1EjbmBTAeuVt3ktfG ktZ2X7qOXS45AKH+BTTjIQcqTV3T3fqn5SbdpwxCaPricD5AXevbz/Zt+16mcW+R Jr/OeonOEy6j2+fvmF7i6Xieh8pDv33a/YvpUbbwWwsHwjFeGFWv3oc1MtHmsY/P 4jHvCcuSKqgGNIpMmtE9klKpX44vcwm3B0GYXs7J96IqgohjsnMVS6MXWVYTSA28 Xyf59Bjae9O+USQdDIWxAJndA+jOXjDu/8zotOgIW75S+Ggwy9HAuahYxB6NJ9tB WnEJfhAPw9LHzA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:45:02 2025 by rpki-client