This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json) Hash identifier: errrzQHi8TuqQvQvjRk9VvpEXbPbBiqyZ2MACkOlsmc= Subject key identifier: DE:CB:98:95:F1:C8:FE:0C:F1:C3:46:CD:A5:67:0C:A7:35:99:05:44 Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019B39EA8C3A66DBAE55D8E590B8560F8D6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft Manifest number: 14E2 Signing time: Sat 20 Dec 2025 04:00:31 +0000 Manifest this update: Sat 20 Dec 2025 04:00:31 +0000 Manifest next update: Sun 21 Dec 2025 04:00:31 +0000 Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: qNcdYPKai94WXGA2vYfIrGGXJCeI3+cUWBFCGwH4r4I=) 2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=) 3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:8c:3a:66:db:ae:55:d8:e5:90:b8:56:0f:8d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Dec 20 04:00:31 2025 GMT Not After : Dec 21 04:00:31 2025 GMT Subject: CN=decb9895f1c8fe0cf1c346cda5670ca735990544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:48:29:71:c0:a2:fd:cf:7f:2d:16:6d:a7: ef:43:b0:43:49:23:35:09:fb:af:93:fb:4f:6c:df: 7f:77:e7:ff:2b:fe:82:f5:1e:65:8d:d6:44:0f:79: 7c:7d:49:b2:45:44:45:b3:75:ee:f8:8a:17:9e:4e: c4:58:e4:7a:11:d7:10:4d:02:85:f5:dd:f4:81:24: ac:5a:4a:46:80:04:86:a3:cb:16:21:41:49:8b:f8: 03:66:08:04:68:67:0f:24:a6:5c:32:c1:72:cc:61: ba:03:d6:de:ea:47:83:02:83:67:ce:b3:98:6c:36: dc:df:17:25:74:be:0b:9f:4d:bb:6a:78:8c:5c:08: 35:79:28:42:72:7f:4a:4d:d6:0a:ef:d4:4e:0b:30: 92:04:e3:50:31:53:8e:d2:8c:3b:38:da:11:a6:c2: c4:9b:4d:23:39:28:bc:1e:3a:7c:65:9d:23:9e:7a: 23:7c:a2:ca:0b:c8:73:95:fe:95:d5:21:de:db:70: 45:08:4a:65:b8:30:0c:87:39:62:68:a7:3c:d3:dd: ae:a0:bc:c2:68:84:8a:02:78:41:13:48:80:64:ff: 44:54:ee:85:00:85:b3:8b:73:5f:06:cb:fa:79:a6: 4a:09:19:6c:f8:01:c1:9b:39:f9:06:61:b8:3e:0c: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:98:95:F1:C8:FE:0C:F1:C3:46:CD:A5:67:0C:A7:35:99:05:44 X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:84:3b:ef:ce:c6:b8:85:13:fd:f0:6c:1c:58:b7:1d:8d:2e: 09:ed:69:02:ee:80:d3:97:0f:8e:d6:72:53:c5:00:67:b5:84: d0:4e:6d:93:75:19:d2:75:61:d4:7a:a8:32:5e:0d:0a:d7:4b: 4f:08:52:66:21:c0:22:96:76:28:d2:06:99:0e:c7:07:65:32: 9e:f0:b0:03:47:13:08:83:3f:41:4c:83:e6:03:81:03:a7:84: 14:3a:6d:66:6c:ad:fa:f4:af:3c:c3:41:f1:72:d8:b0:05:1e: 26:9c:57:fa:3c:c7:76:cd:bb:6e:a6:a6:54:38:38:4e:23:3f: e2:ad:f7:7e:72:b8:dd:ad:f5:07:a6:83:9c:46:a6:ae:e9:4b: f8:88:e7:c1:c7:24:ae:73:c0:9c:ec:58:2e:74:f6:f8:cb:b5: e3:09:bb:69:53:f7:47:36:08:6c:8e:05:dc:fd:83:9f:c1:8b: a3:16:73:db:54:a0:e7:b9:96:62:93:5d:c3:50:c5:db:8c:61: 59:fc:12:2f:d1:79:71:4d:11:16:43:25:81:d1:dc:de:87:44: d1:db:6c:af:db:f7:ba:4c:d2:06:07:75:47:04:c8:39:bf:c5: 5d:37:65:bc:2a:7e:92:df:fa:3f:f3:9d:72:ff:0c:ec:31:b0: a7:7b:0c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ow6ZtuuVdjlkLhWD41vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjUxMjIwMDQwMDMxWhcNMjUxMjIxMDQwMDMxWjAzMTEwLwYDVQQD EyhkZWNiOTg5NWYxYzhmZTBjZjFjMzQ2Y2RhNTY3MGNhNzM1OTkwNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y1IKXHAov3Pfy0WbafvQ7BDSSM1 Cfuvk/tPbN9/d+f/K/6C9R5ljdZED3l8fUmyRURFs3Xu+IoXnk7EWOR6EdcQTQKF 9d30gSSsWkpGgASGo8sWIUFJi/gDZggEaGcPJKZcMsFyzGG6A9be6keDAoNnzrOY bDbc3xcldL4Ln027aniMXAg1eShCcn9KTdYK79ROCzCSBONQMVOO0ow7ONoRpsLE m00jOSi8Hjp8ZZ0jnnojfKLKC8hzlf6V1SHe23BFCEpluDAMhzliaKc8092uoLzC aISKAnhBE0iAZP9EVO6FAIWzi3NfBsv6eaZKCRls+AHBmzn5BmG4Pgx0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7LmJXxyP4M8cNGzaVnDKc1mQVEMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4Q7787G uIUT/fBsHFi3HY0uCe1pAu6A05cPjtZyU8UAZ7WE0E5tk3UZ0nVh1HqoMl4NCtdL TwhSZiHAIpZ2KNIGmQ7HB2UynvCwA0cTCIM/QUyD5gOBA6eEFDptZmyt+vSvPMNB 8XLYsAUeJpxX+jzHds27bqamVDg4TiM/4q33fnK43a31B6aDnEamrulL+Ijnwcck rnPAnOxYLnT2+Mu14wm7aVP3RzYIbI4F3P2Dn8GLoxZz21Sg57mWYpNdw1DF24xh WfwSL9F5cU0RFkMlgdHc3odE0dtsr9v3ukzSBgd1RwTIOb/FXTdlvCp+kt/6P/Od cv8M7DGwp3sMyw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:28:39 2025 by rpki-client