This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json) Hash identifier: pU4+TlyM11awIJw8q0xbIZqmUkF+/qAbJFDqYFGFsZY= Subject key identifier: E5:BA:79:30:D9:09:E3:78:BC:82:CD:6E:D5:3D:5F:7E:D8:A1:9A:73 Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Certificate serial: 019B6FFD4B2E9F958DE972DC00B30C62B67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft Manifest number: 14FE Signing time: Tue 30 Dec 2025 16:00:29 +0000 Manifest this update: Tue 30 Dec 2025 16:00:29 +0000 Manifest next update: Wed 31 Dec 2025 16:00:29 +0000 Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: ysiUmD+nLN1OJlPgBKuJPnVHSi18UiXX4dSMSE4Gp8M=) 2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=) 3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:4b:2e:9f:95:8d:e9:72:dc:00:b3:0c:62:b6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f Validity Not Before: Dec 30 16:00:29 2025 GMT Not After : Dec 31 16:00:29 2025 GMT Subject: CN=e5ba7930d909e378bc82cd6ed53d5f7ed8a19a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:62:50:e4:25:c0:a2:21:52:0a:ab:0d:4e: fe:31:b9:14:46:e7:cb:16:9d:d7:78:c2:4a:91:e7: 96:c3:33:cb:d6:7f:1e:05:ea:26:97:ca:b7:ed:b3: 8d:5d:1a:31:4d:f0:04:7a:98:11:75:48:cf:91:cf: 73:cc:84:a8:9c:4a:0c:8f:59:06:1c:25:18:37:be: e0:61:b1:05:ac:de:3e:9b:84:1b:b7:81:f4:a2:0d: db:13:dc:ad:bb:5d:60:c1:09:0a:03:b7:76:42:2f: 50:ff:95:62:71:ae:9d:ce:1b:6c:0d:28:a8:cc:15: c6:d9:32:10:7c:ae:df:d1:12:b7:0a:a6:57:80:aa: 04:7b:52:f1:49:d7:fe:eb:da:f0:5b:94:9f:3d:bf: 46:e0:c9:78:20:06:6d:94:81:03:4c:cf:3c:6b:25: 01:0d:91:07:39:8c:5b:db:14:26:ea:dc:71:91:d2: f4:30:ed:9f:ef:18:dc:ae:d3:9a:ad:7b:c6:0a:99: fd:3c:49:30:a3:53:c2:35:e2:03:04:94:02:de:7b: a6:b4:93:11:9f:a1:56:a6:1f:5f:f2:73:69:8d:df: f4:b5:6c:90:3a:33:63:85:03:9f:5e:e6:22:ce:00: 30:20:b1:59:3d:03:d4:4b:ab:e2:63:c3:63:cf:36: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:79:30:D9:09:E3:78:BC:82:CD:6E:D5:3D:5F:7E:D8:A1:9A:73 X509v3 Authority Key Identifier: keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f6:0b:a5:53:71:30:cc:88:91:d0:60:82:50:ad:fc:83:60: eb:3c:7a:e1:2f:df:e1:3c:9d:cc:b7:44:71:81:b1:ea:52:ad: 65:40:27:9f:35:e2:23:1c:b4:be:3e:17:00:6a:09:98:86:f4: 70:0f:3b:3d:8f:80:a4:22:41:04:de:7d:75:04:3a:d3:0b:c1: 80:3f:30:d0:e6:80:04:7e:ca:dc:2e:7d:18:8c:f1:56:0a:27: 5c:c2:12:13:d1:d1:45:7f:29:6b:e2:c1:80:01:48:e6:51:67: 29:26:be:f1:45:23:89:e7:00:f5:e4:07:86:fc:08:8f:41:e8: 5c:a2:89:af:9f:53:44:43:dc:38:77:1a:e1:5f:d2:0d:07:1c: fb:33:63:f2:16:44:6a:40:06:75:e9:ee:b8:3a:16:17:5e:39: bd:89:8c:d2:0f:d4:44:c6:61:59:a1:d0:32:93:7a:09:c7:0e: 89:69:07:6c:30:28:ac:4e:68:b6:0c:dc:26:af:af:5b:db:68: 98:8d:58:15:0f:7d:ea:22:04:7e:07:72:3c:ea:33:d0:a5:e6: 73:36:78:34:12:aa:d3:a5:3d:45:71:33:02:8b:fd:70:86:c7: b5:e8:f1:8f:e5:e8:da:70:f3:37:cc:ed:c6:ae:1c:79:73:a6: 3b:77:ba:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/Usun5WN6XLcALMMYrZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj NjcyNGYwHhcNMjUxMjMwMTYwMDI5WhcNMjUxMjMxMTYwMDI5WjAzMTEwLwYDVQQD EyhlNWJhNzkzMGQ5MDllMzc4YmM4MmNkNmVkNTNkNWY3ZWQ4YTE5YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+9iUOQlwKIhUgqrDU7+MbkURufL Fp3XeMJKkeeWwzPL1n8eBeoml8q37bONXRoxTfAEepgRdUjPkc9zzISonEoMj1kG HCUYN77gYbEFrN4+m4Qbt4H0og3bE9ytu11gwQkKA7d2Qi9Q/5Vica6dzhtsDSio zBXG2TIQfK7f0RK3CqZXgKoEe1LxSdf+69rwW5SfPb9G4Ml4IAZtlIEDTM88ayUB DZEHOYxb2xQm6txxkdL0MO2f7xjcrtOarXvGCpn9PEkwo1PCNeIDBJQC3numtJMR n6FWph9f8nNpjd/0tWyQOjNjhQOfXuYizgAwILFZPQPUS6viY8Njzzb5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW6eTDZCeN4vILNbtU9X37YoZpzMB8GA1UdIwQY MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1 LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvYLpVNx MMyIkdBgglCt/INg6zx64S/f4TydzLdEcYGx6lKtZUAnnzXiIxy0vj4XAGoJmIb0 cA87PY+ApCJBBN59dQQ60wvBgD8w0OaABH7K3C59GIzxVgonXMISE9HRRX8pa+LB gAFI5lFnKSa+8UUjiecA9eQHhvwIj0HoXKKJr59TREPcOHca4V/SDQcc+zNj8hZE akAGdenuuDoWF145vYmM0g/URMZhWaHQMpN6CccOiWkHbDAorE5otgzcJq+vW9to mI1YFQ996iIEfgdyPOoz0KXmczZ4NBKq06U9RXEzAov9cIbHtejxj+Xo2nDzN8zt xq4ceXOmO3e6Zg== -----END CERTIFICATE-----Generated at Wed Dec 31 01:46:05 2025 by rpki-client