This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json) Hash identifier: 5XG4nFTg6/N4py8Im3KPiaihPVJ3cnxJE7Gq05LOfjM= Subject key identifier: 67:F6:DD:5D:2C:73:38:EA:5A:EB:A6:F0:B0:07:F3:21:E5:4A:8F:28 Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e Certificate serial: 019B75C857A12E97B36B5CA43D0688D045BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft Manifest number: 0AD2 Signing time: Wed 31 Dec 2025 19:00:22 +0000 Manifest this update: Wed 31 Dec 2025 19:00:22 +0000 Manifest next update: Thu 01 Jan 2026 19:00:22 +0000 Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: GkAHM8KOGw6v7R1r+iYlpMh99nbrRul9D+MXbKpuiEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c8:57:a1:2e:97:b3:6b:5c:a4:3d:06:88:d0:45:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e Validity Not Before: Dec 31 19:00:22 2025 GMT Not After : Jan 1 19:00:22 2026 GMT Subject: CN=67f6dd5d2c7338ea5aeba6f0b007f321e54a8f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:c0:57:2c:af:22:0a:5e:b3:2f:81:1a:3e: 86:e8:74:c3:ee:28:53:9b:d5:ca:ab:cb:c6:4f:82: 4f:c5:6c:5c:d6:a6:d2:76:8c:ea:8f:d5:bd:3e:fb: 36:1f:2a:f4:14:51:a1:1b:02:68:42:3c:7c:77:5d: e2:fb:88:85:7d:ad:fa:6a:36:e9:c3:a8:27:ea:a8: 7d:1b:a6:5b:c2:3a:47:a7:ef:0e:92:e1:3c:f7:f2: c6:06:72:9b:82:2b:12:27:f5:70:e9:fd:de:8c:2a: 1b:52:d7:7d:06:25:9d:7a:95:52:b6:c2:16:d1:ab: c1:41:cc:95:dc:8c:fc:50:37:7e:2d:b4:dc:fc:88: ab:21:f9:ca:2f:d6:b5:00:7e:b5:a5:6a:42:6e:d4: dd:ef:45:c1:1b:b7:e6:b0:de:3c:dc:22:4f:68:5d: 00:90:60:7b:a5:cd:e4:05:8b:d9:7b:fb:8e:65:79: 2c:77:38:c7:e4:ba:d8:57:5b:73:29:a5:a8:00:2e: ad:ff:ec:9d:a6:89:0a:da:05:57:e4:96:8e:4d:0e: 49:b1:65:c0:40:ce:0d:7c:12:c2:32:16:9d:df:aa: d9:2b:72:f0:2a:14:82:cf:f0:50:80:eb:a4:5d:ee: bf:a2:87:42:5d:f7:28:07:ce:2d:56:55:13:00:30: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:DD:5D:2C:73:38:EA:5A:EB:A6:F0:B0:07:F3:21:E5:4A:8F:28 X509v3 Authority Key Identifier: keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:eb:84:f6:91:6f:5f:d6:53:3e:b9:d8:9a:98:bd:7c:2b:cd: 89:b9:48:83:f5:d6:21:bc:13:41:0b:08:24:f7:90:c5:62:f0: c3:c2:6e:04:a3:2e:06:8c:70:60:ea:aa:e2:2b:ab:b9:02:6f: 4f:76:5b:fc:66:6e:1a:d7:4b:54:b9:7f:9a:73:af:54:94:e1: a7:d1:1e:25:36:89:bc:78:dc:d5:d9:e0:b7:34:5d:85:1b:3e: 93:2f:61:98:db:ca:f7:5a:0d:db:c0:1c:12:ee:9a:b6:82:5c: 21:ce:ea:99:c4:4a:c2:a8:80:36:4d:4e:a2:96:9f:58:1c:0b: 8f:65:16:bd:09:47:9a:49:ba:df:44:a5:c8:16:2c:0f:a7:a1: ff:45:a4:11:ae:ba:6a:ef:56:4b:27:f7:63:3a:77:62:6e:99: a3:56:14:6d:b0:33:57:e4:cf:d5:86:7a:16:05:e1:83:45:b0: f6:44:e7:fb:30:57:65:07:a8:f7:1b:62:2b:a2:f5:77:4b:83: d0:38:da:45:7b:3b:7b:0f:7a:15:a0:16:0c:6e:78:5b:a7:25: 7a:44:6d:38:b6:90:9d:43:78:94:84:d4:5d:92:cb:86:eb:90: 9d:3b:73:13:76:38:e4:c6:b1:a3:3e:50:1a:33:ab:72:c5:c7: 72:c1:8b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1yFehLpeza1ykPQaI0EW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NDM1MWE4NjdiOWRhZTlkYjY3NjQzMDZiZDczMjA1OWY2 ZDk5OWUwHhcNMjUxMjMxMTkwMDIyWhcNMjYwMTAxMTkwMDIyWjAzMTEwLwYDVQQD Eyg2N2Y2ZGQ1ZDJjNzMzOGVhNWFlYmE2ZjBiMDA3ZjMyMWU1NGE4ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPnAVyyvIgpesy+BGj6G6HTD7ihT m9XKq8vGT4JPxWxc1qbSdozqj9W9Pvs2Hyr0FFGhGwJoQjx8d13i+4iFfa36ajbp w6gn6qh9G6ZbwjpHp+8OkuE89/LGBnKbgisSJ/Vw6f3ejCobUtd9BiWdepVStsIW 0avBQcyV3Iz8UDd+LbTc/IirIfnKL9a1AH61pWpCbtTd70XBG7fmsN483CJPaF0A kGB7pc3kBYvZe/uOZXksdzjH5LrYV1tzKaWoAC6t/+ydpokK2gVX5JaOTQ5JsWXA QM4NfBLCMhad36rZK3LwKhSCz/BQgOukXe6/oodCXfcoB84tVlUTADCCzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf23V0sczjqWuum8LAH8yHlSo8oMB8GA1UdIwQY MBaAFCVDUahnudrp22dkMGvXMgWfbZmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgt MjA1Y2E2Njg4NTY0LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgtMjA1Y2E2Njg4NTY0 LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOuE9pFv X9ZTPrnYmpi9fCvNiblIg/XWIbwTQQsIJPeQxWLww8JuBKMuBoxwYOqq4iuruQJv T3Zb/GZuGtdLVLl/mnOvVJThp9EeJTaJvHjc1dngtzRdhRs+ky9hmNvK91oN28Ac Eu6atoJcIc7qmcRKwqiANk1OopafWBwLj2UWvQlHmkm630SlyBYsD6eh/0WkEa66 au9WSyf3Yzp3Ym6Zo1YUbbAzV+TP1YZ6FgXhg0Ww9kTn+zBXZQeo9xtiK6L1d0uD 0DjaRXs7ew96FaAWDG54W6clekRtOLaQnUN4lITUXZLLhuuQnTtzE3Y45Maxoz5Q GjOrcsXHcsGLBg== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:30 2026 by rpki-client