This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json) Hash identifier: DGpOTBG/Ur+zk6vmop6eSfWBMh17LiLTGHEUVnWj3cI= Subject key identifier: B9:90:7E:B4:AE:14:B0:14:2F:FC:4B:3A:54:13:20:33:B3:98:52:58 Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59 Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59 Certificate serial: 019B6CC59186609DC08E51BC179C4ECA70CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft Manifest number: 151F Signing time: Tue 30 Dec 2025 01:00:45 +0000 Manifest this update: Tue 30 Dec 2025 01:00:45 +0000 Manifest next update: Wed 31 Dec 2025 01:00:45 +0000 Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: V1l9GXdsik94pH5LSiKPtA4/DlGsJf7sTUk+fg8ZtnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:91:86:60:9d:c0:8e:51:bc:17:9c:4e:ca:70:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59 Validity Not Before: Dec 30 01:00:45 2025 GMT Not After : Dec 31 01:00:45 2025 GMT Subject: CN=b9907eb4ae14b0142ffc4b3a54132033b3985258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:e7:6d:e0:bb:a1:5d:97:c3:f2:82:08:13: 9e:f7:68:66:bd:91:b5:87:d5:3a:a0:95:39:b1:2b: ca:0f:0f:e2:42:fe:2e:1f:41:1a:f7:c4:b2:fa:09: b0:92:0f:82:d3:58:73:57:f1:0d:a6:5c:13:82:6a: 04:25:09:1e:6d:06:78:cd:a8:83:e7:2b:5f:65:ca: 7b:fa:18:41:48:55:92:ed:dd:89:6d:5f:f0:27:1b: d8:7d:e1:ee:66:76:a5:fc:40:1b:f6:9d:be:7c:fa: 3d:e2:89:b4:a8:07:41:bf:95:f7:bd:5a:c6:db:e3: 15:fb:3d:72:1a:57:8e:ee:0b:3c:f8:ae:54:19:e3: e6:6b:60:39:49:7b:f9:a3:30:9a:e1:e6:0a:6b:cb: db:cf:24:81:90:d3:1e:61:55:a8:9b:97:45:a1:c2: 30:d6:f1:0b:32:bf:ed:70:25:6f:6b:43:60:d6:ed: 6c:77:d4:7a:d8:44:48:2c:36:ae:12:f2:0e:c7:23: 75:3a:fd:16:c4:74:26:ea:e7:c4:01:ca:25:07:a8: cb:63:84:70:14:13:5a:dc:e5:dd:d5:9a:c1:cc:23: 7d:04:94:5b:12:d4:8b:6a:0f:db:ef:59:a8:a1:48: e6:fa:b3:2b:78:4f:79:ae:02:8b:51:95:86:4d:15: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:7E:B4:AE:14:B0:14:2F:FC:4B:3A:54:13:20:33:B3:98:52:58 X509v3 Authority Key Identifier: keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:37:bd:01:3f:b1:a4:39:9f:5b:69:53:dc:56:e6:8c:6c:20: 18:b3:5f:b7:6c:a6:52:e5:21:57:8f:de:d3:ec:ad:b2:d0:bc: 2f:f1:c2:80:da:f3:e7:65:57:5d:48:12:c0:0a:71:46:14:8b: dd:f7:92:9c:c0:b3:97:29:5b:f2:c0:b2:7b:f5:08:7a:53:a8: c3:5a:85:f0:1e:a6:58:f9:b8:c3:0d:e8:5d:39:9b:38:98:59: 4c:48:fb:2a:21:15:8a:af:15:8b:46:49:3f:8d:28:e7:05:ec: 89:00:8f:b3:bf:0c:29:c9:70:24:70:d7:9b:ec:da:e9:20:28: 92:f6:d0:60:0b:cb:2e:a3:1d:00:d7:73:4f:91:3e:47:e9:9c: 6f:41:ae:17:56:e9:cb:cf:58:e3:e5:3a:85:05:56:c7:d2:97: 07:af:0d:6d:f7:47:64:04:1d:b0:41:8d:c9:05:30:34:aa:08: fc:8d:3c:a1:36:fb:01:6e:f4:03:35:87:de:82:39:9c:1d:ec: 1a:b6:55:0b:dd:79:0a:53:39:40:fd:a6:55:cc:a4:dd:31:c2: eb:44:a3:96:89:83:a0:5e:bb:f2:97:a0:84:c6:ff:84:f6:ba: 4d:0e:c1:a3:02:06:eb:9f:d1:b2:94:cf:04:94:9a:92:b2:0b: 5b:5e:af:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxZGGYJ3AjlG8F5xOynDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl MmZjNTkwHhcNMjUxMjMwMDEwMDQ1WhcNMjUxMjMxMDEwMDQ1WjAzMTEwLwYDVQQD EyhiOTkwN2ViNGFlMTRiMDE0MmZmYzRiM2E1NDEzMjAzM2IzOTg1MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXnbeC7oV2Xw/KCCBOe92hmvZG1 h9U6oJU5sSvKDw/iQv4uH0Ea98Sy+gmwkg+C01hzV/ENplwTgmoEJQkebQZ4zaiD 5ytfZcp7+hhBSFWS7d2JbV/wJxvYfeHuZnal/EAb9p2+fPo94om0qAdBv5X3vVrG 2+MV+z1yGleO7gs8+K5UGePma2A5SXv5ozCa4eYKa8vbzySBkNMeYVWom5dFocIw 1vELMr/tcCVva0Ng1u1sd9R62ERILDauEvIOxyN1Ov0WxHQm6ufEAcolB6jLY4Rw FBNa3OXd1ZrBzCN9BJRbEtSLag/b71mooUjm+rMreE95rgKLUZWGTRXLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmQfrSuFLAUL/xLOlQTIDOzmFJYMB8GA1UdIwQY MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2 LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACje9AT+x pDmfW2lT3FbmjGwgGLNft2ymUuUhV4/e0+ytstC8L/HCgNrz52VXXUgSwApxRhSL 3feSnMCzlylb8sCye/UIelOow1qF8B6mWPm4ww3oXTmbOJhZTEj7KiEViq8Vi0ZJ P40o5wXsiQCPs78MKclwJHDXm+za6SAokvbQYAvLLqMdANdzT5E+R+mcb0GuF1bp y89Y4+U6hQVWx9KXB68NbfdHZAQdsEGNyQUwNKoI/I08oTb7AW70AzWH3oI5nB3s GrZVC915ClM5QP2mVcyk3THC60SjlomDoF678peghMb/hPa6TQ7BowIG65/RspTP BJSakrILW16v5Q== -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:44 2025 by rpki-client