This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json) Hash identifier: EhzMb5pkPRAkwwENLT0uNAuogbgMQK0OShT+p0Tr8hg= Subject key identifier: BB:52:48:1F:F7:45:28:CD:50:07:AA:A1:EF:91:F2:0F:72:91:EE:04 Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Certificate serial: 019B432557496B89DFDAFDE91F7AB6022ED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft Manifest number: 14D1 Signing time: Sun 21 Dec 2025 23:01:19 +0000 Manifest this update: Sun 21 Dec 2025 23:01:19 +0000 Manifest next update: Mon 22 Dec 2025 23:01:19 +0000 Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: GfkQlW+G4FSzWTfwSaffp8ydUEku+Y4gyW8ll3VE/34=) 2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:57:49:6b:89:df:da:fd:e9:1f:7a:b6:02:2e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468 Validity Not Before: Dec 21 23:01:19 2025 GMT Not After : Dec 22 23:01:19 2025 GMT Subject: CN=bb52481ff74528cd5007aaa1ef91f20f7291ee04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:fd:41:55:48:99:c5:55:86:81:5f:b3:63: 54:95:32:77:b1:47:50:32:7d:43:f7:e1:85:c6:14: 3a:ed:0e:b5:99:c0:e0:1d:01:60:f2:13:a9:34:67: 2c:15:14:7e:08:d1:13:cc:33:5b:df:58:1a:2a:11: f2:f8:b6:b0:c1:f7:da:13:31:e1:c7:7a:37:b7:ab: 47:27:fd:8b:e9:1e:58:d3:00:56:1d:32:ba:f4:fd: c6:31:e2:1f:eb:30:d6:66:61:d6:1d:6d:b9:a7:fa: 10:8e:c1:d5:7d:69:64:5b:d8:79:dc:12:a0:86:75: 02:63:6e:ca:dc:0f:a8:5f:eb:4b:0d:2b:aa:1b:f1: 20:5a:92:1c:6a:5d:c0:9c:47:2c:46:86:b9:13:61: 1c:58:81:3f:8c:b0:12:14:09:e8:32:f4:ef:68:ca: 0f:0f:8a:02:b2:61:fb:c9:46:e1:8e:fc:98:46:a4: 35:95:27:c0:4f:0b:9a:07:78:34:70:8b:48:ef:d4: 20:ad:b4:44:50:05:c5:47:72:d8:65:be:6c:74:df: 25:82:97:5a:f9:70:ca:68:ff:25:a7:0f:11:46:a4: 18:dc:11:33:8c:1d:f8:a9:dd:a8:b3:37:e6:1e:6c: 8c:e2:a4:2e:fd:30:8c:24:eb:df:45:ee:07:93:90: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:52:48:1F:F7:45:28:CD:50:07:AA:A1:EF:91:F2:0F:72:91:EE:04 X509v3 Authority Key Identifier: keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:8a:64:7c:fe:43:82:ed:a9:09:51:1b:96:81:6b:f6:e5: a3:1e:fe:df:e9:3a:95:5c:cb:22:85:80:96:7c:61:bf:3b:2a: 3e:ab:9b:b5:46:21:71:04:db:dc:01:9c:6d:06:d0:76:af:05: 11:88:76:a4:89:a8:3f:cd:8b:38:40:cb:46:b1:6c:7c:e8:e8: d2:78:49:0a:62:bb:fb:1f:14:09:75:a2:a8:fc:00:6b:47:d3: 05:2f:df:6b:cc:ca:9a:af:1f:04:1a:5c:2d:dc:a4:15:5b:79: a9:37:ca:28:ac:3f:54:f4:45:1c:28:07:98:da:22:a9:06:c9: 83:36:56:47:96:46:6b:a0:1e:a9:2e:34:79:4f:8c:1f:cb:fe: 1b:ac:d9:37:da:74:88:99:13:24:a9:0f:78:ed:07:39:4e:bf: 18:06:9e:ff:71:7c:1a:69:d0:59:59:dd:67:e6:53:2a:c9:2a: 90:ed:8a:5d:df:5d:ce:77:9d:af:85:24:c4:cd:97:b7:42:b2: e3:0d:48:c8:0f:b4:df:e6:01:a2:45:6b:46:1f:0d:d1:34:1a: 6c:55:6c:2d:41:e3:f0:8a:ff:cf:87:ae:40:73:d4:ff:af:dc: 96:15:ad:24:aa:37:4a:a0:00:72:e5:30:a3:ed:e4:aa:41:cc: 39:98:e7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVdJa4nf2v3pH3q2Ai7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OTdlZTViZWE5NWI2ZmNhOTJkN2M4MDA1YjI1MzFkMGQ1 MTA0NjgwHhcNMjUxMjIxMjMwMTE5WhcNMjUxMjIyMjMwMTE5WjAzMTEwLwYDVQQD EyhiYjUyNDgxZmY3NDUyOGNkNTAwN2FhYTFlZjkxZjIwZjcyOTFlZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/j9QVVImcVVhoFfs2NUlTJ3sUdQ Mn1D9+GFxhQ67Q61mcDgHQFg8hOpNGcsFRR+CNETzDNb31gaKhHy+LawwffaEzHh x3o3t6tHJ/2L6R5Y0wBWHTK69P3GMeIf6zDWZmHWHW25p/oQjsHVfWlkW9h53BKg hnUCY27K3A+oX+tLDSuqG/EgWpIcal3AnEcsRoa5E2EcWIE/jLASFAnoMvTvaMoP D4oCsmH7yUbhjvyYRqQ1lSfATwuaB3g0cItI79QgrbREUAXFR3LYZb5sdN8lgpda +XDKaP8lpw8RRqQY3BEzjB34qd2oszfmHmyM4qQu/TCMJOvfRe4Hk5C7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtSSB/3RSjNUAeqoe+R8g9yke4EMB8GA1UdIwQY MBaAFCaX7lvqlbb8qS18gAWyUx0NUQRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt ODdmMTI5ZGMwZmYyLzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy LzEvSnBmdVctcVZ0dnlwTFh5QUJiSlRIUTFSQkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS2KZHz+ Q4LtqQlRG5aBa/blox7+3+k6lVzLIoWAlnxhvzsqPqubtUYhcQTb3AGcbQbQdq8F EYh2pImoP82LOEDLRrFsfOjo0nhJCmK7+x8UCXWiqPwAa0fTBS/fa8zKmq8fBBpc LdykFVt5qTfKKKw/VPRFHCgHmNoiqQbJgzZWR5ZGa6AeqS40eU+MH8v+G6zZN9p0 iJkTJKkPeO0HOU6/GAae/3F8GmnQWVndZ+ZTKskqkO2KXd9dznedr4UkxM2Xt0Ky 4w1IyA+03+YBokVrRh8N0TQabFVsLUHj8Ir/z4euQHPU/6/clhWtJKo3SqAAcuUw o+3kqkHMOZjnrA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:24 2025 by rpki-client