This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json) Hash identifier: pK4JP1tZYIxxda0vgDvp3d8khcAlR20i05VNj04PYyw= Subject key identifier: 14:7E:51:39:76:07:0C:F8:D1:68:FB:8B:2C:9C:97:F7:51:B7:B3:6C Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b Certificate serial: 019B2F6711169A353CFE86AA49FF243506BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:00:42 +0000 Manifest this update: Thu 18 Dec 2025 03:00:42 +0000 Manifest next update: Fri 19 Dec 2025 03:00:42 +0000 Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: DDjyLmkgRL7OKMieTnUaxRk+g2i33354LRpo9LsQr9Q=) 2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:11:16:9a:35:3c:fe:86:aa:49:ff:24:35:06:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b Validity Not Before: Dec 18 03:00:42 2025 GMT Not After : Dec 19 03:00:42 2025 GMT Subject: CN=147e513976070cf8d168fb8b2c9c97f751b7b36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b6:26:3e:73:77:89:69:95:7a:23:40:fb:6f: 18:54:0b:5f:ed:0e:2a:f1:6f:cf:cb:a6:bc:75:9c: c4:97:b2:0a:43:8f:72:24:06:6a:27:7c:c0:7a:ef: 33:be:7d:34:b1:92:c6:9f:78:62:1f:28:d2:e0:7f: 98:00:a0:79:e1:a5:c1:63:fa:96:f7:e8:fa:43:66: aa:2d:cb:09:2c:41:87:9e:38:71:3a:1c:44:d2:b0: 7a:d8:a8:00:50:e2:10:13:08:4c:37:c8:11:92:a7: 59:5f:a4:39:96:ce:05:66:9b:4a:4e:4c:a2:69:60: 00:95:c6:fe:f7:b8:12:dc:e6:58:1c:f3:49:bb:21: e2:b3:f0:3e:7c:8e:fb:4c:72:ca:65:84:5d:d0:90: 04:11:38:05:5f:f2:04:53:ef:98:63:7b:5f:24:19: 9f:0d:68:6e:db:c2:59:58:28:d1:ee:c7:5a:70:a0: d6:9a:77:84:5b:1d:7a:ce:54:95:ff:62:c5:13:74: 3a:ab:f1:69:81:44:d1:cf:68:62:b3:aa:95:6d:36: b1:4b:21:1a:fc:eb:2f:33:ec:dd:64:04:08:51:e8: 5b:37:6f:9c:91:21:78:41:b6:5b:0d:ac:5f:1e:6a: 6e:49:65:25:2d:ad:26:85:15:68:1d:39:93:dd:cf: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:51:39:76:07:0C:F8:D1:68:FB:8B:2C:9C:97:F7:51:B7:B3:6C X509v3 Authority Key Identifier: keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4c:0c:f8:af:10:fe:01:7f:30:ab:8c:85:6f:1b:9f:65:06: 39:55:07:7c:4d:6f:c7:c2:1d:63:c6:b1:da:4c:63:b9:7f:24: 0e:e4:a8:45:91:82:de:d7:73:90:6d:d2:28:b1:02:0e:99:e8: 89:73:d8:e6:8c:25:0c:7e:24:6c:80:e6:ce:f9:ce:c3:f8:cd: 63:4e:c7:0d:7a:1e:41:95:5d:73:4a:a6:3c:43:5b:da:48:ae: b2:41:6b:9a:5c:16:e4:83:f4:83:5e:90:1a:25:dc:2e:e3:d3: 99:f2:83:cc:ae:fe:42:33:3d:89:f8:16:07:af:94:91:e5:31: 12:10:5b:e8:aa:d8:5f:a9:1b:7b:4a:77:9f:36:57:c8:36:85: ed:17:8b:06:79:ac:97:ee:a9:cd:59:ae:39:8c:c1:cf:c1:a1: 36:fe:c5:5b:7e:54:5c:b6:cc:02:2b:3c:63:22:fd:2a:3a:4d: fd:39:d7:aa:db:b7:ce:9f:1b:9f:bb:8d:0b:b1:bd:dd:3e:f7: 50:8d:81:66:72:bb:b6:72:85:aa:c0:08:1f:56:cc:45:f6:67: af:8c:6a:43:32:f5:29:b1:6a:43:e8:bc:41:d3:0a:84:26:b1: a6:7c:9c:f4:d9:31:14:fc:28:03:86:bd:68:91:e2:e5:eb:f8: 3d:69:9f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxEWmjU8/oaqSf8kNQa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOWIxZmUzMTJmMDA5ZjIwOGVhOGEyYjczMjBjZWE3NjVk ZDUxOGIwHhcNMjUxMjE4MDMwMDQyWhcNMjUxMjE5MDMwMDQyWjAzMTEwLwYDVQQD EygxNDdlNTEzOTc2MDcwY2Y4ZDE2OGZiOGIyYzljOTdmNzUxYjdiMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rYmPnN3iWmVeiNA+28YVAtf7Q4q 8W/Py6a8dZzEl7IKQ49yJAZqJ3zAeu8zvn00sZLGn3hiHyjS4H+YAKB54aXBY/qW 9+j6Q2aqLcsJLEGHnjhxOhxE0rB62KgAUOIQEwhMN8gRkqdZX6Q5ls4FZptKTkyi aWAAlcb+97gS3OZYHPNJuyHis/A+fI77THLKZYRd0JAEETgFX/IEU++YY3tfJBmf DWhu28JZWCjR7sdacKDWmneEWx16zlSV/2LFE3Q6q/FpgUTRz2his6qVbTaxSyEa /OsvM+zdZAQIUehbN2+ckSF4QbZbDaxfHmpuSWUlLa0mhRVoHTmT3c9TYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR+UTl2Bwz40Wj7iyycl/dRt7NsMB8GA1UdIwQY MBaAFI6bH+MS8AnyCOqKK3Mgzqdl3VGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUt YTg1Mzk5ZGI2MGJmLzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUtYTg1Mzk5ZGI2MGJm LzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0wM+K8Q /gF/MKuMhW8bn2UGOVUHfE1vx8IdY8ax2kxjuX8kDuSoRZGC3tdzkG3SKLECDpno iXPY5owlDH4kbIDmzvnOw/jNY07HDXoeQZVdc0qmPENb2kiuskFrmlwW5IP0g16Q GiXcLuPTmfKDzK7+QjM9ifgWB6+UkeUxEhBb6KrYX6kbe0p3nzZXyDaF7ReLBnms l+6pzVmuOYzBz8GhNv7FW35UXLbMAis8YyL9KjpN/TnXqtu3zp8bn7uNC7G93T73 UI2BZnK7tnKFqsAIH1bMRfZnr4xqQzL1KbFqQ+i8QdMKhCaxpnyc9NkxFPwoA4a9 aJHi5ev4PWmf4g== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:13 2025 by rpki-client