This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json) Hash identifier: J6Sgecp1D3qtwCbSUFd7/vSTJHgaYB2o6HNs9hPvljU= Subject key identifier: 31:BE:A2:1B:D0:E7:19:22:F1:F5:DA:5B:AD:65:98:67:AD:67:34:85 Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a Certificate serial: 019B42B7CB98DBB9E31558E8035BB392559B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft Manifest number: 171A Signing time: Sun 21 Dec 2025 21:01:39 +0000 Manifest this update: Sun 21 Dec 2025 21:01:39 +0000 Manifest next update: Mon 22 Dec 2025 21:01:39 +0000 Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: vDk3ABGrU6pFkKhKUUq2KbffYyzFmtv9mkLxjbbxmSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:cb:98:db:b9:e3:15:58:e8:03:5b:b3:92:55:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a Validity Not Before: Dec 21 21:01:39 2025 GMT Not After : Dec 22 21:01:39 2025 GMT Subject: CN=31bea21bd0e71922f1f5da5bad659867ad673485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:a1:56:56:5d:0a:cb:c8:92:48:b6:ba:c0: 4a:79:37:16:9b:2e:1e:ab:76:a0:e7:c8:dc:d7:ae: 75:85:1e:b9:aa:2a:fb:57:e3:31:60:d9:a6:2c:f0: d3:18:60:0f:1a:68:2d:6e:59:6d:7f:67:c5:01:c6: 0b:5b:58:d5:d7:46:e8:d2:88:fe:2f:88:11:d6:54: 2a:ed:d6:29:27:fd:8f:6f:48:0b:ec:a0:47:55:9c: ec:1a:6a:29:39:fd:a2:ab:3e:d9:9c:06:f3:47:5c: ed:92:02:76:0c:2b:6c:26:03:9b:e9:19:6e:83:c2: 17:5b:0f:af:44:ea:cb:b9:0a:90:9b:27:66:7c:ab: cc:0b:27:c1:83:40:e7:c3:82:da:43:28:cb:f2:84: 4a:1e:c5:36:f9:36:47:dd:b4:ab:b4:fe:5d:59:06: 17:e6:fc:e6:29:9d:69:4d:8c:08:98:ca:17:45:7c: 2b:48:8c:13:f4:ce:c8:ee:dd:b4:79:2d:2a:d1:7c: 21:3c:a4:ba:cc:c9:b9:c7:b2:bf:05:9b:d0:5e:48: e8:06:d7:1f:95:29:4d:53:14:16:02:4c:98:cd:07: 00:d7:c1:42:28:0f:b9:53:4b:0f:48:70:e1:6a:89: d5:10:e6:bd:a1:68:a0:ab:c0:21:5e:70:0a:76:1a: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BE:A2:1B:D0:E7:19:22:F1:F5:DA:5B:AD:65:98:67:AD:67:34:85 X509v3 Authority Key Identifier: keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dc:1b:e8:ba:62:ed:78:eb:cc:52:ba:0f:a3:c1:85:d5:82: b8:a9:b0:29:37:e9:32:bc:1e:b0:34:4a:f1:29:46:3f:ae:67: f0:4a:be:3d:d1:b6:6e:f6:95:6e:b3:8d:1a:85:a9:6e:f8:38: 19:ee:74:5f:30:19:0d:8a:07:dd:2a:bc:58:41:40:60:99:14: fd:08:fc:9f:de:2d:e9:d4:5a:47:00:2d:57:cf:d3:44:f5:50: 23:5c:eb:a8:32:a6:47:16:4e:d6:07:3c:08:48:b8:61:70:ec: 46:6b:c3:e0:2b:14:01:2e:0a:fe:a7:b4:e6:70:cd:6d:39:a3: d9:b5:61:48:9e:95:5b:a6:cc:5e:cc:e1:1a:2b:66:e2:39:45: 3b:5d:a2:3a:0a:18:95:4e:51:cd:a7:3f:62:9c:ec:de:6e:a3: d8:63:27:55:da:a2:79:bb:02:88:75:e0:16:dd:35:8e:f4:a2: 5e:a4:16:e4:cc:d5:f5:1b:ae:4e:04:e5:b5:83:18:01:17:70: 61:a8:d5:e3:12:dc:42:78:a5:4c:31:ec:76:de:62:52:f2:1d: d3:1b:65:c5:56:e9:d3:18:70:d2:1c:e3:1e:21:4f:e1:ae:1b: 3f:15:0f:24:61:54:ba:43:1d:4b:b2:b5:4b:bd:b4:2f:0a:b7: 36:3d:77:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt8uY27njFVjoA1uzklWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YWI2NzEzNmJmOTkwYWE4YmU4ODU3YTY4ZDJjMzk5ZWNk NjI5OWEwHhcNMjUxMjIxMjEwMTM5WhcNMjUxMjIyMjEwMTM5WjAzMTEwLwYDVQQD EygzMWJlYTIxYmQwZTcxOTIyZjFmNWRhNWJhZDY1OTg2N2FkNjczNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5ShVlZdCsvIkki2usBKeTcWmy4e q3ag58jc1651hR65qir7V+MxYNmmLPDTGGAPGmgtblltf2fFAcYLW1jV10bo0oj+ L4gR1lQq7dYpJ/2Pb0gL7KBHVZzsGmopOf2iqz7ZnAbzR1ztkgJ2DCtsJgOb6Rlu g8IXWw+vROrLuQqQmydmfKvMCyfBg0Dnw4LaQyjL8oRKHsU2+TZH3bSrtP5dWQYX 5vzmKZ1pTYwImMoXRXwrSIwT9M7I7t20eS0q0XwhPKS6zMm5x7K/BZvQXkjoBtcf lSlNUxQWAkyYzQcA18FCKA+5U0sPSHDhaonVEOa9oWigq8AhXnAKdhoD8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDG+ohvQ5xki8fXaW61lmGetZzSFMB8GA1UdIwQY MBaAFCSrZxNr+ZCqi+iFemjSw5ns1imaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wODg1MjEtMjM5OC00NTdiLWIxZTMt ZGQzMzYwMzkzMzkxLzEvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wODg1MjEtMjM5OC00NTdiLWIxZTMtZGQzMzYwMzkzMzkx LzEvSkt0bkUydjVrS3FMNklWNmFOTERtZXpXS1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNwb6Lpi 7XjrzFK6D6PBhdWCuKmwKTfpMrwesDRK8SlGP65n8Eq+PdG2bvaVbrONGoWpbvg4 Ge50XzAZDYoH3Sq8WEFAYJkU/Qj8n94t6dRaRwAtV8/TRPVQI1zrqDKmRxZO1gc8 CEi4YXDsRmvD4CsUAS4K/qe05nDNbTmj2bVhSJ6VW6bMXszhGitm4jlFO12iOgoY lU5Rzac/Ypzs3m6j2GMnVdqiebsCiHXgFt01jvSiXqQW5MzV9RuuTgTltYMYARdw YajV4xLcQnilTDHsdt5iUvId0xtlxVbp0xhw0hzjHiFP4a4bPxUPJGFUukMdS7K1 S720Lwq3Nj137g== -----END CERTIFICATE-----Generated at Mon Dec 22 01:25:40 2025 by rpki-client