This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json) Hash identifier: 3ryvlg5hBILYK0wbUHoAHOUWRR/Qlp8P96hL+Q4WL34= Subject key identifier: 76:40:3F:D3:1F:06:6E:F1:F5:7D:27:C7:30:B7:FA:BE:7E:5D:68:85 Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Certificate serial: 019B3E6D5C8A96E23060B5DD8C9C49C6B1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft Manifest number: 14C9 Signing time: Sun 21 Dec 2025 01:01:53 +0000 Manifest this update: Sun 21 Dec 2025 01:01:53 +0000 Manifest next update: Mon 22 Dec 2025 01:01:53 +0000 Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: v9gAiqJjW6srSqc3XPTGzdQpEXwAzkSI18vVCiK05aY=) 2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:5c:8a:96:e2:30:60:b5:dd:8c:9c:49:c6:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6 Validity Not Before: Dec 21 01:01:53 2025 GMT Not After : Dec 22 01:01:53 2025 GMT Subject: CN=76403fd31f066ef1f57d27c730b7fabe7e5d6885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:28:35:ed:fe:a1:35:59:d0:9e:e9:6d:be: eb:fa:b6:e3:94:24:53:0e:19:bb:5c:c7:f9:de:2a: ef:01:f5:20:84:f8:33:7a:20:e0:ef:ae:23:31:f5: 03:aa:7b:88:13:7c:de:aa:8f:fb:06:b3:c5:b8:bd: b7:ef:6e:a6:0b:cd:06:ab:9f:1d:88:4f:18:a4:20: 5c:d8:b2:75:6c:ff:90:f2:4f:5d:e6:ae:2c:3d:db: 97:54:fd:a9:27:fe:6b:e7:ca:00:bb:f2:90:48:af: ef:a7:7f:a6:d7:89:7d:9b:f1:f1:f6:07:ef:dd:a9: 64:aa:0b:51:81:e4:11:e1:11:d0:f9:42:6e:68:3d: 1e:ec:be:fd:78:7e:2f:eb:f9:46:4f:4e:2b:20:26: 49:52:52:90:3f:25:49:59:74:a1:d0:59:d3:64:79: d2:fa:eb:01:48:1c:fe:75:e9:ba:ce:6a:75:a7:bc: 28:7e:75:95:4f:80:fd:41:7d:4b:08:07:55:96:b8: aa:68:75:24:18:5d:95:95:ae:e2:04:81:49:f7:42: 08:c5:3f:df:21:73:db:4d:10:f5:8e:69:1e:6d:d3: 6f:1c:d2:2b:7a:c6:59:88:e9:df:b8:8b:a5:33:ba: 41:8c:8e:e7:ce:d8:11:26:99:92:ef:85:1c:b7:97: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:3F:D3:1F:06:6E:F1:F5:7D:27:C7:30:B7:FA:BE:7E:5D:68:85 X509v3 Authority Key Identifier: keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:47:e5:64:e0:96:0e:5c:6c:0c:57:34:1e:ff:03:a7:50:be: 75:a1:7a:0e:24:36:83:77:8c:61:18:ae:e3:82:ed:2c:5a:0a: 3c:d1:1a:39:66:dc:86:a2:7d:77:5e:78:1d:9d:1e:24:a5:85: 17:fd:e2:3e:28:4b:e7:04:db:c5:e5:fc:db:45:85:d4:23:12: d0:b6:35:72:d5:4d:bc:35:3e:31:a5:a0:62:97:c3:7f:4f:27: f0:ae:c1:7d:70:2e:c0:12:03:05:09:2c:7d:25:e0:0f:30:55: 92:69:d3:ea:51:c9:2b:3b:5d:fe:aa:49:b8:00:2b:b7:58:d5: 50:77:5c:cc:57:2e:08:a6:47:3e:df:93:a3:5c:c6:5b:13:1d: c3:c6:08:fa:ba:2e:92:38:31:d1:0a:2f:89:7a:cf:de:a9:11: 83:6a:83:49:f6:94:1d:d4:90:9e:7c:50:fb:8c:69:ae:cc:ac: 78:b8:d4:93:d2:17:68:0e:b4:bc:e7:56:7a:54:34:2e:13:59: cc:0f:64:a7:95:fb:64:91:a5:89:78:7b:26:9f:bf:1f:5d:54: 79:b8:eb:37:d8:ce:03:a2:68:77:d0:1b:7a:2b:a3:dc:e1:ce: d6:ed:d5:18:f5:c4:16:a8:b9:c9:8c:80:07:65:a7:45:c9:bc: d9:0f:d3:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVyKluIwYLXdjJxJxrHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MWY0MjI0ZmZlODkzZTliODM3ODM5YWEwYTY4YTAwMzgw ZjU0YzYwHhcNMjUxMjIxMDEwMTUzWhcNMjUxMjIyMDEwMTUzWjAzMTEwLwYDVQQD Eyg3NjQwM2ZkMzFmMDY2ZWYxZjU3ZDI3YzczMGI3ZmFiZTdlNWQ2ODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaQoNe3+oTVZ0J7pbb7r+rbjlCRT Dhm7XMf53irvAfUghPgzeiDg764jMfUDqnuIE3zeqo/7BrPFuL23726mC80Gq58d iE8YpCBc2LJ1bP+Q8k9d5q4sPduXVP2pJ/5r58oAu/KQSK/vp3+m14l9m/Hx9gfv 3alkqgtRgeQR4RHQ+UJuaD0e7L79eH4v6/lGT04rICZJUlKQPyVJWXSh0FnTZHnS +usBSBz+dem6zmp1p7wofnWVT4D9QX1LCAdVlriqaHUkGF2Vla7iBIFJ90IIxT/f IXPbTRD1jmkebdNvHNIresZZiOnfuIulM7pBjI7nztgRJpmS74Uct5cFEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZAP9MfBm7x9X0nxzC3+r5+XWiFMB8GA1UdIwQY MBaAFCUfQiT/6JPpuDeDmqCmigA4D1TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzct MTBjNzUwYzZlMzUxLzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9jMGU2NTEtODVkMS00YjMyLThmYzctMTBjNzUwYzZlMzUx LzEvSlI5Q0pQX29rLW00TjRPYW9LYUtBRGdQVk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0flZOCW DlxsDFc0Hv8Dp1C+daF6DiQ2g3eMYRiu44LtLFoKPNEaOWbchqJ9d154HZ0eJKWF F/3iPihL5wTbxeX820WF1CMS0LY1ctVNvDU+MaWgYpfDf08n8K7BfXAuwBIDBQks fSXgDzBVkmnT6lHJKztd/qpJuAArt1jVUHdczFcuCKZHPt+To1zGWxMdw8YI+rou kjgx0QoviXrP3qkRg2qDSfaUHdSQnnxQ+4xprsyseLjUk9IXaA60vOdWelQ0LhNZ zA9kp5X7ZJGliXh7Jp+/H11UebjrN9jOA6Jod9Abeiuj3OHO1u3VGPXEFqi5yYyA B2WnRcm82Q/Tyg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:52 2025 by rpki-client