This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json) Hash identifier: 3IX0Y8TP12i4X+2LYzy4ZvJUUMby2lJgOT4EIBQEIuQ= Subject key identifier: 4E:32:D3:76:56:F4:13:2F:20:DD:9C:BF:DC:9D:A9:95:59:DF:1B:81 Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6 Certificate serial: 019B341FE4062F4C8EFB88734531CA46D053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft Manifest number: 10B5 Signing time: Fri 19 Dec 2025 01:01:03 +0000 Manifest this update: Fri 19 Dec 2025 01:01:03 +0000 Manifest next update: Sat 20 Dec 2025 01:01:03 +0000 Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: 2jlUAY0uw5NduPHA34T0KBAPbR3xQ5tqHRD6/qA/+Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:e4:06:2f:4c:8e:fb:88:73:45:31:ca:46:d0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6 Validity Not Before: Dec 19 01:01:03 2025 GMT Not After : Dec 20 01:01:03 2025 GMT Subject: CN=4e32d37656f4132f20dd9cbfdc9da99559df1b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:fc:26:f5:87:45:cb:ec:77:94:a6:83:54: 35:67:9b:76:61:1e:a3:64:60:e2:5f:69:39:68:f4: a7:d2:a6:fc:c7:aa:5c:26:28:94:96:b0:e8:75:76: 86:66:40:27:3f:34:44:e2:df:2f:99:0b:c1:db:d9: 7f:cf:55:9d:ac:93:b3:7f:d3:1c:79:52:b6:20:d4: 50:9f:55:62:14:98:21:9f:3c:0d:f7:98:9a:03:d4: 0b:a9:10:8b:6f:d6:f0:dd:6e:74:f9:8b:de:8b:65: ac:23:0b:45:c8:07:ee:88:18:24:1d:81:5f:c1:5c: 11:7b:87:57:94:5f:9c:f8:47:fa:a8:b5:9e:51:64: 43:4a:6e:a0:62:fc:ab:e0:60:f0:f2:e9:ac:92:f1: 43:18:f5:37:9d:ee:91:3d:c9:29:fe:56:34:1c:8c: 05:7d:2c:77:27:cf:13:52:9e:79:2d:4c:d3:55:60: b8:34:fc:ca:16:48:d5:99:54:a0:7a:40:7c:b7:f6: c8:d2:57:84:2c:ab:5c:33:68:bf:6b:c8:ca:d2:93: d3:86:fc:9f:be:4d:2d:9b:b3:d0:87:c4:e8:b0:f2: 90:f4:7c:de:3f:c6:f7:89:ef:c2:2c:53:a7:bf:d3: df:ec:90:a1:f9:f5:fa:40:83:7f:1b:f4:3a:43:e0: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:32:D3:76:56:F4:13:2F:20:DD:9C:BF:DC:9D:A9:95:59:DF:1B:81 X509v3 Authority Key Identifier: keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:04:db:4b:73:37:cc:bc:ec:93:f6:5f:3d:39:59:40:28:7c: cb:3a:a3:e5:fb:0f:b0:f6:63:0c:6b:8a:a5:c5:0b:7c:04:50: 72:26:82:6a:75:e9:c5:77:83:01:6e:e2:a8:64:12:ce:f1:a9: b7:b7:5d:69:4b:71:29:fe:1a:ac:f8:f6:97:1d:f1:a8:c8:6f: 44:9e:29:61:86:f9:9c:ea:fc:40:32:bc:a4:d4:40:d5:88:d0: a2:c9:02:89:81:bc:d2:dd:49:6f:bf:59:d6:8a:dc:1f:60:6c: a4:b5:13:db:33:c1:ca:c3:88:1a:ea:b2:bc:6f:0c:b3:34:e1: 3b:18:15:68:06:18:b4:87:fa:09:00:9e:f5:41:ea:c3:d6:79: a6:1f:db:7a:9c:54:22:4b:80:b9:25:66:ae:1d:61:0b:be:69: 20:ee:60:b0:f0:c6:d1:2f:34:7f:07:32:7d:07:df:be:7e:5c: 0e:20:13:cf:2b:2d:36:c0:39:61:4c:1a:b4:9e:b2:2c:99:66: 49:b7:4a:b3:8a:c8:29:06:db:42:07:13:45:48:72:6f:6e:19: f3:a0:a6:3b:61:59:c5:23:36:8a:cf:2f:d5:5f:7e:64:09:f7: df:40:4a:52:b4:02:a1:b0:aa:70:2d:95:c8:b6:22:0d:34:78: d4:3a:3d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H+QGL0yO+4hzRTHKRtBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmU0ZTkwOWJlYjZjMmExZDJkNjY4MmIwOWM2ODJhMjQx YzRiYzYwHhcNMjUxMjE5MDEwMTAzWhcNMjUxMjIwMDEwMTAzWjAzMTEwLwYDVQQD Eyg0ZTMyZDM3NjU2ZjQxMzJmMjBkZDljYmZkYzlkYTk5NTU5ZGYxYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDH8JvWHRcvsd5Smg1Q1Z5t2YR6j ZGDiX2k5aPSn0qb8x6pcJiiUlrDodXaGZkAnPzRE4t8vmQvB29l/z1WdrJOzf9Mc eVK2INRQn1ViFJghnzwN95iaA9QLqRCLb9bw3W50+Yvei2WsIwtFyAfuiBgkHYFf wVwRe4dXlF+c+Ef6qLWeUWRDSm6gYvyr4GDw8umskvFDGPU3ne6RPckp/lY0HIwF fSx3J88TUp55LUzTVWC4NPzKFkjVmVSgekB8t/bI0leELKtcM2i/a8jK0pPThvyf vk0tm7PQh8TosPKQ9HzeP8b3ie/CLFOnv9Pf7JCh+fX6QIN/G/Q6Q+CbXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4y03ZW9BMvIN2cv9ydqZVZ3xuBMB8GA1UdIwQY MBaAFCW+TpCb62wqHS1mgrCcaCokHEvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEt NzUzZGZjZGFhNmJmLzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEtNzUzZGZjZGFhNmJm LzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkATbS3M3 zLzsk/ZfPTlZQCh8yzqj5fsPsPZjDGuKpcULfARQciaCanXpxXeDAW7iqGQSzvGp t7ddaUtxKf4arPj2lx3xqMhvRJ4pYYb5nOr8QDK8pNRA1YjQoskCiYG80t1Jb79Z 1orcH2BspLUT2zPBysOIGuqyvG8MszThOxgVaAYYtIf6CQCe9UHqw9Z5ph/bepxU IkuAuSVmrh1hC75pIO5gsPDG0S80fwcyfQffvn5cDiATzystNsA5YUwatJ6yLJlm SbdKs4rIKQbbQgcTRUhyb24Z86CmO2FZxSM2is8v1V9+ZAn330BKUrQCobCqcC2V yLYiDTR41Do9uA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:15:46 2025 by rpki-client