This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json) Hash identifier: ZNjUlNNrgRb2s92PP0E9aMt9LKszSRhttSxZH8MqkLU= Subject key identifier: 1C:85:06:59:F1:2C:C8:D3:89:99:9E:26:F7:F0:60:B8:82:5A:9F:49 Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df Certificate serial: 019B4E4D4A7D20EDF53F8807083ADA49A723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft Manifest number: 0D7D Signing time: Wed 24 Dec 2025 03:00:46 +0000 Manifest this update: Wed 24 Dec 2025 03:00:46 +0000 Manifest next update: Thu 25 Dec 2025 03:00:46 +0000 Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: E0RE8241u/Bn9Vv3i29S1V7HzCevJdyC6I8O2l9IL60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:4a:7d:20:ed:f5:3f:88:07:08:3a:da:49:a7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df Validity Not Before: Dec 24 03:00:46 2025 GMT Not After : Dec 25 03:00:46 2025 GMT Subject: CN=1c850659f12cc8d389999e26f7f060b8825a9f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:33:83:99:0c:4d:7b:7e:ea:3e:d0:69:11: ac:f9:0c:95:72:fc:12:b3:da:76:4e:a5:13:1a:a7: c9:57:81:d3:a7:1b:49:b2:b4:44:ad:9d:21:f4:2b: 28:4b:68:66:3a:58:2a:40:15:0e:21:f9:ce:84:c9: a9:9d:00:ee:78:d3:5c:47:ff:10:28:58:d8:bf:67: 84:88:e6:2b:e1:c2:79:b1:93:b0:53:d2:bc:84:57: 19:8a:e3:af:53:09:9c:2a:e1:d0:e8:11:0a:eb:49: 89:fc:69:08:30:b3:b9:7c:7f:28:7d:c0:36:16:3e: 33:a7:04:b8:20:2b:b6:bb:f1:dc:ac:0e:ed:82:19: 02:d0:f9:d4:c5:c0:74:c1:69:a6:c6:e6:30:b1:ea: 78:d0:51:61:36:9b:51:db:2c:8f:bd:05:81:8d:86: 96:9d:39:7b:26:50:b9:bd:42:a7:1f:45:82:60:4a: b6:65:89:63:9a:fd:59:fa:72:1d:99:c2:f0:59:6b: e9:0d:64:f1:6c:4d:8a:86:97:af:ce:8e:71:19:46: 99:68:a6:89:7d:07:11:35:b2:51:a1:75:61:47:1e: cf:48:3c:2d:51:e8:b5:8a:34:74:be:c6:cc:a8:c1: 52:d0:ac:e0:f5:56:09:38:17:52:15:e2:82:d7:42: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:06:59:F1:2C:C8:D3:89:99:9E:26:F7:F0:60:B8:82:5A:9F:49 X509v3 Authority Key Identifier: keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:3b:3a:7e:c4:ca:2f:be:19:a3:67:2e:5c:f9:17:53:35: 29:c7:56:ae:09:4d:89:51:b8:d0:7b:79:0e:2d:17:18:cb:f8: b0:db:9f:07:aa:3f:f0:b8:69:e8:3c:e0:30:32:80:61:9f:97: 46:cb:27:b0:14:aa:55:01:00:e6:ec:bb:11:aa:28:7f:d4:b2: d0:ea:0e:4d:f3:fc:b4:c1:63:40:b7:59:96:84:9b:f1:a4:f7: e4:5c:a5:b4:65:1e:23:63:88:fc:43:b5:4b:9c:1b:28:77:c6: 08:5c:c3:ce:78:74:c0:0b:7c:1b:b7:0e:55:21:95:32:d9:d0: 48:3e:d9:bd:eb:52:84:63:ee:57:72:97:fd:1e:d7:c0:05:ef: 3e:30:00:d5:a4:a3:a3:bd:d2:1f:87:a4:c0:fa:57:f9:d5:b2: f0:09:57:c1:af:c8:30:68:ad:23:46:73:85:1a:82:db:6c:2e: 3e:9d:45:70:71:01:3a:00:08:0d:e0:6f:cb:32:c7:c3:ff:f2: d3:8a:66:4f:01:80:d2:a3:6f:6d:75:69:4e:23:d5:37:3a:59: 9d:54:aa:f0:ab:ad:9d:6c:86:72:56:aa:c6:01:11:1f:9a:bb: f9:b1:58:71:42:25:02:d9:c9:2e:ab:7f:55:a3:f9:7d:e3:d7: 68:fa:12:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTUp9IO31P4gHCDraSacjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDRjNjE1ZTBkYjBjNWI5OGE4MGIyNWI1MmQ4OTMyZGJm ZDA1ZGYwHhcNMjUxMjI0MDMwMDQ2WhcNMjUxMjI1MDMwMDQ2WjAzMTEwLwYDVQQD EygxYzg1MDY1OWYxMmNjOGQzODk5OTllMjZmN2YwNjBiODgyNWE5ZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMIzg5kMTXt+6j7QaRGs+QyVcvwS s9p2TqUTGqfJV4HTpxtJsrRErZ0h9CsoS2hmOlgqQBUOIfnOhMmpnQDueNNcR/8Q KFjYv2eEiOYr4cJ5sZOwU9K8hFcZiuOvUwmcKuHQ6BEK60mJ/GkIMLO5fH8ofcA2 Fj4zpwS4ICu2u/HcrA7tghkC0PnUxcB0wWmmxuYwsep40FFhNptR2yyPvQWBjYaW nTl7JlC5vUKnH0WCYEq2ZYljmv1Z+nIdmcLwWWvpDWTxbE2Khpevzo5xGUaZaKaJ fQcRNbJRoXVhRx7PSDwtUei1ijR0vsbMqMFS0Kzg9VYJOBdSFeKC10J7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByFBlnxLMjTiZmeJvfwYLiCWp9JMB8GA1UdIwQY MBaAFI8ExhXg2wxbmKgLJbUtiTLb/QXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgt ZjJiMGIyN2ExY2I2LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgtZjJiMGIyN2ExY2I2 LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEns7On7E yi++GaNnLlz5F1M1KcdWrglNiVG40Ht5Di0XGMv4sNufB6o/8Lhp6DzgMDKAYZ+X RssnsBSqVQEA5uy7Eaoof9Sy0OoOTfP8tMFjQLdZloSb8aT35FyltGUeI2OI/EO1 S5wbKHfGCFzDznh0wAt8G7cOVSGVMtnQSD7ZvetShGPuV3KX/R7XwAXvPjAA1aSj o73SH4ekwPpX+dWy8AlXwa/IMGitI0ZzhRqC22wuPp1FcHEBOgAIDeBvyzLHw//y 04pmTwGA0qNvbXVpTiPVNzpZnVSq8KutnWyGclaqxgERH5q7+bFYcUIlAtnJLqt/ VaP5fePXaPoSlA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:26 2025 by rpki-client