This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json) Hash identifier: XBbZHBh1M8Wc2n8PzAsvGLpWjCDe3Aun6a4jgeUCaEA= Subject key identifier: 66:84:76:4D:B1:A7:DD:E3:CB:2C:32:E7:CA:19:FC:A3:FC:9E:F4:0F Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Certificate serial: 019B4E4D9A8D5F7F27EA750102A2324651B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft Manifest number: 156D Signing time: Wed 24 Dec 2025 03:01:07 +0000 Manifest this update: Wed 24 Dec 2025 03:01:07 +0000 Manifest next update: Thu 25 Dec 2025 03:01:07 +0000 Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: IlsixpbTZkajt2u7M6JUs0TYkdaWY70/MtnyjLd6hYU=) 2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:9a:8d:5f:7f:27:ea:75:01:02:a2:32:46:51:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12 Validity Not Before: Dec 24 03:01:07 2025 GMT Not After : Dec 25 03:01:07 2025 GMT Subject: CN=6684764db1a7dde3cb2c32e7ca19fca3fc9ef40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:fc:57:53:79:85:cb:0d:56:25:5d:7e:60: 28:2b:ff:46:ea:d3:96:e3:a4:e5:33:d4:24:27:5f: da:e9:e6:d5:32:96:64:24:1c:1e:04:94:a0:f1:e4: dc:90:3d:14:5f:77:8f:5d:a1:cb:63:c5:10:43:49: af:2d:b9:b7:24:09:bf:77:5f:e1:10:d3:93:51:c2: 37:d1:ac:32:fb:07:b3:31:47:53:fb:5d:bc:f9:a5: 89:b6:06:48:5f:a4:38:31:27:14:b6:b7:fe:8e:53: 65:2f:c9:23:4a:56:eb:d2:be:cf:bf:bd:b6:22:28: 35:e6:d5:45:e7:6d:91:a1:d9:b2:8a:cf:78:9f:3c: 16:f5:80:b5:96:04:3b:55:55:b8:c4:14:49:0d:f8: 03:9c:45:a8:d8:b4:2a:69:fa:d0:7a:ff:db:f3:b1: 27:61:08:ee:f5:2c:e6:e7:08:6d:b1:3b:74:87:b7: c6:88:0b:df:a1:dd:00:be:48:37:6d:46:02:d6:94: 1e:33:ea:f3:62:2b:62:b2:e0:10:27:9f:c3:ba:91: 6e:f9:53:95:78:a5:58:f2:4b:9e:4f:75:5b:c2:7d: 42:1b:30:bf:7b:5f:f5:12:6c:4e:84:73:ae:e8:73: 65:95:7c:69:71:c3:19:6f:ab:31:fb:df:69:8e:4b: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:84:76:4D:B1:A7:DD:E3:CB:2C:32:E7:CA:19:FC:A3:FC:9E:F4:0F X509v3 Authority Key Identifier: keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5b:d5:4a:6e:f8:15:92:16:68:73:2b:b2:67:fb:e3:9f:bb: 99:75:d7:00:e8:d5:cf:bc:9d:f2:38:37:8d:30:20:37:2f:66: 6f:ed:b5:82:f7:0c:fa:40:9a:a2:a0:5d:03:cb:af:ed:0f:17: 18:44:2b:74:01:1c:a7:2a:28:14:89:0e:a3:e8:4b:71:88:db: aa:06:1d:f4:1c:53:ac:93:24:53:f3:d4:a9:76:54:b1:f7:d8: ba:12:aa:b1:8c:b0:28:d6:60:fd:93:1d:b4:e8:68:ff:c9:66: 7c:c9:29:35:ec:b4:6a:e5:27:9a:ed:35:a5:00:2b:a1:29:fd: 14:61:2f:9d:c5:72:7c:63:31:33:d4:06:db:f0:da:81:12:fd: 4d:63:ab:1c:62:35:0b:8c:77:b3:be:ac:f8:3d:bf:dc:f2:d4: 0c:76:f6:65:1c:c4:0c:a3:b6:9f:32:c5:78:3c:9c:14:ac:b1: 18:1a:57:7e:3b:29:48:3f:08:24:8a:e1:b8:aa:ba:f1:26:50: 79:eb:2d:20:33:5d:57:45:65:2b:80:a0:59:6f:2f:ec:e6:6d: bc:bf:67:67:07:1d:53:33:51:18:8c:b2:c1:b0:8d:d5:a6:51: 4b:92:5a:a0:4f:71:8d:2d:04:e7:2e:34:15:07:f8:5f:0c:3e: 78:8f:cd:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTZqNX38n6nUBAqIyRlG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi ZDVmMTIwHhcNMjUxMjI0MDMwMTA3WhcNMjUxMjI1MDMwMTA3WjAzMTEwLwYDVQQD Eyg2Njg0NzY0ZGIxYTdkZGUzY2IyYzMyZTdjYTE5ZmNhM2ZjOWVmNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzz8V1N5hcsNViVdfmAoK/9G6tOW 46TlM9QkJ1/a6ebVMpZkJBweBJSg8eTckD0UX3ePXaHLY8UQQ0mvLbm3JAm/d1/h ENOTUcI30awy+wezMUdT+128+aWJtgZIX6Q4MScUtrf+jlNlL8kjSlbr0r7Pv722 Iig15tVF522Rodmyis94nzwW9YC1lgQ7VVW4xBRJDfgDnEWo2LQqafrQev/b87En YQju9Szm5whtsTt0h7fGiAvfod0Avkg3bUYC1pQeM+rzYitisuAQJ5/DupFu+VOV eKVY8kueT3Vbwn1CGzC/e1/1EmxOhHOu6HNllXxpccMZb6sx+99pjks+6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaEdk2xp93jyywy58oZ/KP8nvQPMB8GA1UdIwQY MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3 LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlvVSm74 FZIWaHMrsmf745+7mXXXAOjVz7yd8jg3jTAgNy9mb+21gvcM+kCaoqBdA8uv7Q8X GEQrdAEcpyooFIkOo+hLcYjbqgYd9BxTrJMkU/PUqXZUsffYuhKqsYywKNZg/ZMd tOho/8lmfMkpNey0auUnmu01pQAroSn9FGEvncVyfGMxM9QG2/DagRL9TWOrHGI1 C4x3s76s+D2/3PLUDHb2ZRzEDKO2nzLFeDycFKyxGBpXfjspSD8IJIrhuKq68SZQ eestIDNdV0VlK4CgWW8v7OZtvL9nZwcdUzNRGIyywbCN1aZRS5JaoE9xjS0E5y40 FQf4Xww+eI/Nrg== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:59 2025 by rpki-client