This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json) Hash identifier: XH6BWmlz8ZbkW2prHElfS7fgrIqSnMDNQTAjaAQ9nQU= Subject key identifier: 1F:03:8E:98:3D:D0:E5:9A:3B:D1:9F:21:45:82:11:4E:4D:C8:63:1D Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Certificate serial: 019B4815E2A01FF3FA5C3D2E01C5431E3655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft Manifest number: 1492 Signing time: Mon 22 Dec 2025 22:02:32 +0000 Manifest this update: Mon 22 Dec 2025 22:02:32 +0000 Manifest next update: Tue 23 Dec 2025 22:02:32 +0000 Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: FQxzRCEmF5xWvseFj9aJHDMxeHxY0UukCbl6JIe6OwQ=) 2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:e2:a0:1f:f3:fa:5c:3d:2e:01:c5:43:1e:36:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f Validity Not Before: Dec 22 22:02:32 2025 GMT Not After : Dec 23 22:02:32 2025 GMT Subject: CN=1f038e983dd0e59a3bd19f214582114e4dc8631d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:3f:84:21:56:7f:e7:af:ec:d5:eb:ee:99: 19:5f:71:d7:75:d4:74:9d:5b:fc:8c:28:1f:12:ba: 26:f6:cf:ab:2c:91:14:01:fd:98:8e:29:b6:66:c2: dd:79:74:8c:bf:34:d5:1e:68:9c:4a:3f:2a:cc:17: 4c:93:10:27:23:20:6d:b1:30:b2:c4:33:e0:42:c1: f6:9f:67:e3:ad:f8:04:8f:23:a0:89:9d:0e:65:ec: 75:b9:ae:ab:a5:96:d4:fd:0c:78:a7:3f:57:e0:51: 3f:2c:5a:3d:4e:3d:69:a6:80:8c:18:2e:c8:ac:75: ba:d1:70:4e:34:55:93:1b:64:f5:9d:d2:fb:e8:9b: 3f:eb:1f:c3:7d:cf:4f:04:5b:45:d5:8d:cb:8b:70: cf:80:7d:5d:f9:4a:bb:79:c4:f3:06:d9:f1:df:4a: c3:60:91:72:13:f9:29:73:dd:ca:33:b3:ed:15:bc: 41:79:1b:6e:0a:28:63:c3:16:85:ad:f8:7d:9e:e9: 39:e9:05:71:90:4d:ab:ab:52:46:e8:57:20:09:72: 13:d4:5a:1c:64:c0:31:0d:62:0e:1a:56:eb:7a:b4: c9:a5:38:6d:f2:42:c2:65:10:d3:74:1b:9c:a2:cc: 2f:38:02:37:10:06:65:2e:65:e9:7b:d2:e7:29:15: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:8E:98:3D:D0:E5:9A:3B:D1:9F:21:45:82:11:4E:4D:C8:63:1D X509v3 Authority Key Identifier: keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:82:69:14:02:9e:b8:26:77:4f:38:fe:8b:40:22:7d:13:bd: c3:81:82:9d:1b:fb:73:60:1b:25:2a:4e:a3:40:3e:3f:3c:73: 81:dd:e2:5e:cd:6c:a8:9d:f5:bd:23:41:e4:93:50:0a:b9:69: 6e:20:7e:d8:52:44:56:2a:b7:1b:22:c7:a1:ca:ee:12:aa:34: 60:bd:e0:a6:38:46:38:f5:16:13:74:a1:63:e6:38:9b:85:29: ef:a8:4d:4d:2a:6c:b0:18:65:8d:37:97:7a:95:2d:03:7d:3d: 4c:31:4d:d9:9a:d4:7c:db:b4:ba:79:b7:20:31:19:c3:d9:21: 60:f7:cf:4c:fa:33:ad:88:50:f7:07:1f:ac:6a:b7:9d:a0:5c: a9:da:3f:d6:98:96:80:3a:41:0c:24:28:b5:f7:d4:80:78:35: df:12:ff:23:b0:d3:3a:2d:27:51:6e:22:45:85:ea:2f:8b:6b: a8:94:a5:84:be:5f:2d:f3:ee:9b:45:1c:37:21:dd:a2:c7:ba: 85:47:c0:3b:fa:c7:4e:0b:9b:6b:1a:a6:47:cc:d9:a0:54:6f: 95:99:93:5d:71:ea:05:10:0f:b3:a6:6a:dd:b5:72:e7:07:bf: 59:e9:ae:b3:8b:d5:3d:61:91:00:d0:f4:89:6e:5f:0b:e7:0c: 80:08:8a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFeKgH/P6XD0uAcVDHjZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWZjZjJhYjZlNmRiYzE2MzRlZTU5MWZjMWI3NGE0MWRl M2VhNWYwHhcNMjUxMjIyMjIwMjMyWhcNMjUxMjIzMjIwMjMyWjAzMTEwLwYDVQQD EygxZjAzOGU5ODNkZDBlNTlhM2JkMTlmMjE0NTgyMTE0ZTRkYzg2MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIY/hCFWf+ev7NXr7pkZX3HXddR0 nVv8jCgfErom9s+rLJEUAf2Yjim2ZsLdeXSMvzTVHmicSj8qzBdMkxAnIyBtsTCy xDPgQsH2n2fjrfgEjyOgiZ0OZex1ua6rpZbU/Qx4pz9X4FE/LFo9Tj1ppoCMGC7I rHW60XBONFWTG2T1ndL76Js/6x/Dfc9PBFtF1Y3Li3DPgH1d+Uq7ecTzBtnx30rD YJFyE/kpc93KM7PtFbxBeRtuCihjwxaFrfh9nuk56QVxkE2rq1JG6FcgCXIT1Foc ZMAxDWIOGlbrerTJpTht8kLCZRDTdBucoswvOAI3EAZlLmXpe9LnKRW0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8Djpg90OWaO9GfIUWCEU5NyGMdMB8GA1UdIwQY MBaAFAifzyq25tvBY07lkfwbdKQd4+pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUt M2MwYjkyNTRhNmY4LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTI3M2MtZjA1My00MWY4LTg3MTUtM2MwYjkyNTRhNmY4 LzEvQ0pfUEtyYm0yOEZqVHVXUl9CdDBwQjNqNmw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIJpFAKe uCZ3Tzj+i0AifRO9w4GCnRv7c2AbJSpOo0A+Pzxzgd3iXs1sqJ31vSNB5JNQCrlp biB+2FJEViq3GyLHocruEqo0YL3gpjhGOPUWE3ShY+Y4m4Up76hNTSpssBhljTeX epUtA309TDFN2ZrUfNu0unm3IDEZw9khYPfPTPozrYhQ9wcfrGq3naBcqdo/1piW gDpBDCQotffUgHg13xL/I7DTOi0nUW4iRYXqL4trqJSlhL5fLfPum0UcNyHdose6 hUfAO/rHTgubaxqmR8zZoFRvlZmTXXHqBRAPs6Zq3bVy5we/Wemus4vVPWGRAND0 iW5fC+cMgAiKYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:35:14 2025 by rpki-client