This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json) Hash identifier: 0MSBfLrYMqU1CYamBtOnihsTOuQnzvRYRxg2mAnOhZY= Subject key identifier: BB:61:D0:47:88:D4:E4:4C:58:FE:7A:A0:22:D1:C9:D6:24:03:CC:C6 Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d Certificate serial: 019B650D09FC91901907282040A36BCE6B8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft Manifest number: 12F9 Signing time: Sun 28 Dec 2025 13:01:51 +0000 Manifest this update: Sun 28 Dec 2025 13:01:51 +0000 Manifest next update: Mon 29 Dec 2025 13:01:51 +0000 Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=) 2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: d3FPvc6VHFDHKxaou79BoL2q2DBJj+02t7a99Oywmw4=) 3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:09:fc:91:90:19:07:28:20:40:a3:6b:ce:6b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d Validity Not Before: Dec 28 13:01:51 2025 GMT Not After : Dec 29 13:01:51 2025 GMT Subject: CN=bb61d04788d4e44c58fe7aa022d1c9d62403ccc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:f1:e6:5a:56:36:22:aa:5c:f5:c8:7e:82: 08:89:b1:04:85:f9:14:49:ff:f7:7b:2b:f9:69:a3: e5:84:c0:f5:53:53:8a:50:f6:91:0b:d8:d8:ea:cc: 3b:03:0f:01:ee:49:11:20:ca:d8:81:56:f1:b4:d3: ec:3c:9c:bf:3f:63:3c:f8:e4:1d:3a:05:4b:f7:af: 71:b0:13:e2:e6:27:f3:a4:99:bd:55:ac:2a:4e:79: 44:a1:07:9e:9a:4f:3d:48:8a:d4:8a:ab:4e:42:35: bb:ee:4a:dd:96:23:5e:40:ef:75:72:a1:6a:ab:86: e5:b4:76:b9:3b:d1:29:49:5a:fc:75:48:96:08:60: 76:14:57:e2:e3:c3:18:70:82:58:7c:13:2a:57:5a: ec:d1:53:4c:f7:4d:81:1f:7d:96:ee:99:d5:fc:31: 0a:1f:76:40:e8:c3:bb:56:9b:69:8b:25:a5:04:72: f7:d2:bc:c0:74:ae:cb:20:42:14:9b:12:33:e2:ec: 21:7c:c8:cc:24:75:91:d2:79:7e:f4:6b:a2:aa:1e: c2:40:ca:0f:43:f3:8d:dc:d5:8a:51:15:2a:60:14: 41:4b:88:96:63:c7:e5:07:34:81:7d:a9:38:1c:7e: ac:23:51:38:2f:58:30:c3:5c:fc:00:2a:77:e0:47: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:D0:47:88:D4:E4:4C:58:FE:7A:A0:22:D1:C9:D6:24:03:CC:C6 X509v3 Authority Key Identifier: keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:50:dd:bb:e4:ec:4a:38:f1:2c:58:9f:9f:04:bf:cd:72:7c: b4:b7:34:05:64:45:18:c0:31:8c:87:a9:f7:ad:87:4b:64:00: 38:94:e9:a6:f5:6b:12:5e:fa:8b:11:28:62:26:5e:12:d0:63: 74:e3:41:af:0a:f7:a8:95:32:12:cf:0a:fe:56:f8:1d:41:53: 20:9b:14:82:a4:46:5a:28:4b:7f:04:02:9d:18:ac:91:aa:fe: ea:fa:2a:ae:d1:b0:a8:5f:b1:de:50:ca:52:a9:78:aa:e0:1a: e8:7b:39:39:e9:ca:fd:2f:c9:fb:94:c9:be:cf:d9:88:d8:f5: 27:46:54:dc:7b:b8:69:20:2d:48:83:89:ac:22:99:2b:2e:58: 3d:67:41:50:18:eb:35:7f:95:91:46:cc:06:d9:13:8e:a7:e7: b1:5e:d9:99:66:dd:98:ac:65:08:75:ae:99:6a:c7:4b:5d:03: 4a:55:e1:82:74:47:44:d2:46:67:f0:8c:37:4c:53:b5:73:06: b5:2e:ca:8d:f7:90:19:26:c7:31:66:a3:eb:eb:d9:0e:1a:dd: b7:4c:ad:99:96:97:2c:bf:88:6b:60:48:4b:27:cd:1b:ed:d8: 42:ab:f4:1b:ce:35:25:16:ee:d9:a6:3e:74:d4:00:b0:b9:dc: 6a:c4:a3:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDQn8kZAZByggQKNrzmuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDUxMDgwNDAwOTQwZmY0N2M4MDdkZDY3NDJiZWNiYjRl ZGYyMmQwHhcNMjUxMjI4MTMwMTUxWhcNMjUxMjI5MTMwMTUxWjAzMTEwLwYDVQQD EyhiYjYxZDA0Nzg4ZDRlNDRjNThmZTdhYTAyMmQxYzlkNjI0MDNjY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Tx5lpWNiKqXPXIfoIIibEEhfkU Sf/3eyv5aaPlhMD1U1OKUPaRC9jY6sw7Aw8B7kkRIMrYgVbxtNPsPJy/P2M8+OQd OgVL969xsBPi5ifzpJm9VawqTnlEoQeemk89SIrUiqtOQjW77krdliNeQO91cqFq q4bltHa5O9EpSVr8dUiWCGB2FFfi48MYcIJYfBMqV1rs0VNM902BH32W7pnV/DEK H3ZA6MO7VptpiyWlBHL30rzAdK7LIEIUmxIz4uwhfMjMJHWR0nl+9Guiqh7CQMoP Q/ON3NWKURUqYBRBS4iWY8flBzSBfak4HH6sI1E4L1gww1z8ACp34Ee5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLth0EeI1ORMWP56oCLRydYkA8zGMB8GA1UdIwQY MBaAFCQFEIBACUD/R8gH3WdCvsu07fItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzct NWQzOWQ1MDE4Zjc4LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzctNWQzOWQ1MDE4Zjc4 LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1Ddu+Ts SjjxLFifnwS/zXJ8tLc0BWRFGMAxjIep962HS2QAOJTppvVrEl76ixEoYiZeEtBj dONBrwr3qJUyEs8K/lb4HUFTIJsUgqRGWihLfwQCnRiskar+6voqrtGwqF+x3lDK Uql4quAa6Hs5OenK/S/J+5TJvs/ZiNj1J0ZU3Hu4aSAtSIOJrCKZKy5YPWdBUBjr NX+VkUbMBtkTjqfnsV7ZmWbdmKxlCHWumWrHS10DSlXhgnRHRNJGZ/CMN0xTtXMG tS7KjfeQGSbHMWaj6+vZDhrdt0ytmZaXLL+Ia2BISyfNG+3YQqv0G841JRbu2aY+ dNQAsLncasSjhg== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:20 2025 by rpki-client