This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json) Hash identifier: 1OZohMfQmzYwq1te/nHKJrRYhsiOvqs+mFBwyWqTo2o= Subject key identifier: 04:05:9B:6C:EF:2E:72:1C:55:46:EF:57:A7:5B:E3:02:9F:25:B3:87 Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d Certificate serial: 019B3AC6D54F3B357EA3FDA8C010D8930018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft Manifest number: 0A8D Signing time: Sat 20 Dec 2025 08:01:07 +0000 Manifest this update: Sat 20 Dec 2025 08:01:07 +0000 Manifest next update: Sun 21 Dec 2025 08:01:07 +0000 Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: vHAInHa6dSkBcaWl5MgaNF/UhmW8O5ck1BQa+tF1ZG4=) 2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d5:4f:3b:35:7e:a3:fd:a8:c0:10:d8:93:00:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d Validity Not Before: Dec 20 08:01:07 2025 GMT Not After : Dec 21 08:01:07 2025 GMT Subject: CN=04059b6cef2e721c5546ef57a75be3029f25b387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:68:23:89:ac:60:60:c1:28:d7:90:ae:9a: ee:5f:3f:c6:70:54:99:46:f1:79:1f:df:00:52:5c: 55:8c:f4:14:56:dd:02:f5:3c:ab:9b:c2:ab:d7:1d: 33:21:05:79:09:e5:ca:8f:59:f1:e9:18:2e:4c:3a: ce:a3:a3:e9:8d:6a:b3:2a:b2:9b:38:f9:92:67:5c: 1a:bd:6e:c6:d4:df:50:04:ad:3b:8e:fd:0b:17:65: 51:e2:c3:3b:42:67:18:65:4e:4a:37:4f:07:b0:df: e4:5a:14:d3:6c:48:ac:ed:10:5f:b6:c5:d0:84:32: 38:52:b1:c2:e0:7f:b8:5b:53:e0:b7:39:9b:e9:65: 6f:f4:86:0f:40:49:b8:3b:bf:26:7f:b0:e4:54:91: 33:e5:13:4f:4e:c3:af:5b:12:0b:a5:2c:0b:92:ad: d1:f0:7f:2f:2d:a3:2b:f3:3c:fc:06:4e:83:2c:15: 66:03:ba:48:ca:fe:6f:38:5d:1c:c0:ad:0e:ac:c4: b7:eb:2e:4a:41:68:81:8a:4d:01:0a:99:ad:47:f6: 1d:af:ee:63:91:24:d2:3e:78:e1:5b:f5:d0:ba:cb: 95:07:96:36:d2:23:c8:bb:d8:5e:0a:3f:5d:43:c7: fb:69:13:8a:14:28:c0:4d:b1:1a:95:8a:95:cc:01: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:05:9B:6C:EF:2E:72:1C:55:46:EF:57:A7:5B:E3:02:9F:25:B3:87 X509v3 Authority Key Identifier: keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:35:a0:e6:49:cb:96:2c:c5:c8:e3:5d:73:7b:21:de:5f: f6:bf:6e:29:2d:08:3e:43:c9:34:a1:43:71:12:88:34:14:8d: 10:17:08:41:05:e0:df:da:ea:68:4e:bb:16:2a:64:91:70:a4: 65:d3:b5:18:e2:db:a5:45:12:c1:b4:80:15:34:b7:88:a7:29: 8a:f6:68:c1:84:5a:22:cd:1f:b4:ab:f9:d2:74:c7:30:d1:c8: a7:35:40:f1:76:49:ad:d8:ed:c3:58:ba:c4:ab:82:e4:73:10: d3:f6:8d:9e:1e:ee:91:68:2d:d1:6b:10:99:36:a8:4c:ad:6f: 0f:17:94:e8:44:b1:79:bb:41:38:b6:d7:eb:06:70:49:2f:d9: 34:7b:a6:f9:93:c4:10:ed:cb:4a:e3:20:98:22:cb:05:65:5a: 7d:15:f6:d8:30:9d:fc:5e:09:9c:fc:43:c2:62:f2:53:26:2d: d4:da:9a:12:62:26:62:84:55:0a:d2:63:47:40:55:1d:2f:a2: cc:f2:be:05:28:45:ea:dc:42:c4:1b:ce:cb:ca:c6:15:58:0e: c2:dc:e8:66:fd:ac:d6:c8:20:62:92:7e:08:44:36:da:44:90: fa:0c:ef:b7:83:80:ec:c3:71:2d:b1:7b:e1:11:15:66:c4:c4: f1:1e:4c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtVPOzV+o/2owBDYkwAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTgyNzdkMWZlYWI1MjM4N2VhYjI2ZjhkY2NhOTI2MGMy NThhM2QwHhcNMjUxMjIwMDgwMTA3WhcNMjUxMjIxMDgwMTA3WjAzMTEwLwYDVQQD EygwNDA1OWI2Y2VmMmU3MjFjNTU0NmVmNTdhNzViZTMwMjlmMjViMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryNoI4msYGDBKNeQrpruXz/GcFSZ RvF5H98AUlxVjPQUVt0C9Tyrm8Kr1x0zIQV5CeXKj1nx6RguTDrOo6PpjWqzKrKb OPmSZ1wavW7G1N9QBK07jv0LF2VR4sM7QmcYZU5KN08HsN/kWhTTbEis7RBftsXQ hDI4UrHC4H+4W1Pgtzmb6WVv9IYPQEm4O78mf7DkVJEz5RNPTsOvWxILpSwLkq3R 8H8vLaMr8zz8Bk6DLBVmA7pIyv5vOF0cwK0OrMS36y5KQWiBik0BCpmtR/Ydr+5j kSTSPnjhW/XQusuVB5Y20iPIu9heCj9dQ8f7aROKFCjATbEalYqVzAGM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQFm2zvLnIcVUbvV6db4wKfJbOHMB8GA1UdIwQY MBaAFCXoJ30f6rUjh+qyb43MqSYMJYo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMt YmFmMjU3MmU4MDkzLzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jZTBlZGQtODBkNC00YWY2LWJhZWMtYmFmMjU3MmU4MDkz LzEvSmVnbmZSX3F0U09INnJKdmpjeXBKZ3dsaWowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAw1oOZJ y5YsxcjjXXN7Id5f9r9uKS0IPkPJNKFDcRKINBSNEBcIQQXg39rqaE67FipkkXCk ZdO1GOLbpUUSwbSAFTS3iKcpivZowYRaIs0ftKv50nTHMNHIpzVA8XZJrdjtw1i6 xKuC5HMQ0/aNnh7ukWgt0WsQmTaoTK1vDxeU6ESxebtBOLbX6wZwSS/ZNHum+ZPE EO3LSuMgmCLLBWVafRX22DCd/F4JnPxDwmLyUyYt1NqaEmImYoRVCtJjR0BVHS+i zPK+BShF6txCxBvOy8rGFVgOwtzoZv2s1sggYpJ+CEQ22kSQ+gzvt4OA7MNxLbF7 4REVZsTE8R5MKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:49 2025 by rpki-client