This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json) Hash identifier: JVQvC2nWmAbKVBO9+CMvC+veP7gYjETTf9e35eSaTa0= Subject key identifier: 98:BA:CF:57:D2:FD:77:5E:9E:5C:4C:B9:D4:54:4A:C2:33:A3:85:A4 Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50 Certificate serial: 019B4392C4F349AF9D39292D3C50EF03DEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 01:00:50 +0000 Manifest this update: Mon 22 Dec 2025 01:00:50 +0000 Manifest next update: Tue 23 Dec 2025 01:00:50 +0000 Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: TvigSjrVhcp83Bpg9F/oGRIAkCOKVyavDEKgiOGJ2CA=) 2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:c4:f3:49:af:9d:39:29:2d:3c:50:ef:03:de:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50 Validity Not Before: Dec 22 01:00:50 2025 GMT Not After : Dec 23 01:00:50 2025 GMT Subject: CN=98bacf57d2fd775e9e5c4cb9d4544ac233a385a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:e2:99:07:3f:9c:73:15:12:29:78:de:39: 5e:d7:c8:6e:4a:11:b8:14:8d:01:2e:68:f6:9c:31: a9:78:59:13:12:d5:76:b0:9a:60:bf:24:22:83:0b: 3d:0a:ca:9c:aa:b2:d0:94:54:b9:a4:fa:5f:56:17: 74:b9:00:04:c7:22:ec:d4:ba:27:5a:0e:00:37:52: 8c:1e:8e:7a:55:27:a2:f6:c4:d4:48:b7:6b:ea:6c: 19:48:90:98:06:14:2d:dc:71:a4:68:ba:80:3f:f3: b6:39:76:c5:71:5e:2e:c2:2b:c6:17:29:b9:4a:a3: 0c:79:4c:af:8a:e5:fb:23:af:fe:55:7e:ec:f8:4e: 13:27:ff:62:ee:e2:f6:42:a9:b0:f8:a1:b9:14:4d: 3c:bc:1e:f0:9a:38:14:e5:8f:5e:3b:70:c5:b3:af: b0:03:3a:d2:f0:5c:41:e7:54:c4:75:48:12:8e:0d: ad:40:8c:9b:00:f9:b1:c7:bc:eb:de:4c:10:bb:74: ef:cf:44:ab:9d:8a:fe:78:19:30:82:22:53:9e:43: 4b:57:60:e0:a3:09:56:00:ed:4f:5f:d4:6b:ce:05: 5b:4a:04:37:37:18:51:39:ec:f2:fa:cf:95:81:e4: 5c:03:e9:9f:c5:0a:20:32:28:3d:92:23:b2:17:78: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:CF:57:D2:FD:77:5E:9E:5C:4C:B9:D4:54:4A:C2:33:A3:85:A4 X509v3 Authority Key Identifier: keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ec:a8:48:ea:e7:68:02:7d:9a:c1:5c:b6:05:5e:62:72:84: 5d:07:2e:51:64:a6:3d:dc:ee:f6:4e:b8:df:ca:97:3a:cb:ce: 93:df:4c:94:6b:15:82:bb:90:90:e8:1b:61:6b:a5:b8:de:58: ae:48:13:19:9b:22:f5:29:6d:95:2b:d5:cf:e8:94:b3:fe:ee: cd:b3:ca:c4:be:40:ba:ad:51:c4:6f:8a:63:a8:93:cb:2d:22: cb:7b:59:c4:c4:b5:ad:44:c9:9d:c2:4c:17:ef:0a:3c:39:e3: 4f:cd:02:ef:58:09:cb:5c:47:ee:25:7f:14:e9:79:4a:5b:19: a8:95:1a:5e:c2:a8:d6:d6:12:06:18:07:b2:74:61:19:39:32: 66:86:1b:90:75:84:09:ab:c6:ae:e4:68:e1:0f:16:7d:06:c0: 36:77:96:4d:2d:8c:4b:c4:59:91:2e:a8:3a:4e:1e:e6:8d:76: 90:27:b0:f7:07:ab:5d:92:40:7c:7d:be:36:28:a8:91:4b:01: ab:cd:c6:29:2f:4e:85:2c:42:56:06:6d:c9:4e:f0:18:92:79: 6f:83:c3:87:3a:2e:1f:ed:ff:ba:db:4b:02:3e:67:5d:7e:db: b8:e6:53:0f:d3:8c:b8:65:71:44:cf:f9:9f:2a:af:16:d8:27: 20:10:98:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDksTzSa+dOSktPFDvA96oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0 OGFkNTAwHhcNMjUxMjIyMDEwMDUwWhcNMjUxMjIzMDEwMDUwWjAzMTEwLwYDVQQD Eyg5OGJhY2Y1N2QyZmQ3NzVlOWU1YzRjYjlkNDU0NGFjMjMzYTM4NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6LimQc/nHMVEil43jle18huShG4 FI0BLmj2nDGpeFkTEtV2sJpgvyQigws9CsqcqrLQlFS5pPpfVhd0uQAExyLs1Lon Wg4AN1KMHo56VSei9sTUSLdr6mwZSJCYBhQt3HGkaLqAP/O2OXbFcV4uwivGFym5 SqMMeUyviuX7I6/+VX7s+E4TJ/9i7uL2Qqmw+KG5FE08vB7wmjgU5Y9eO3DFs6+w AzrS8FxB51TEdUgSjg2tQIybAPmxx7zr3kwQu3Tvz0SrnYr+eBkwgiJTnkNLV2Dg owlWAO1PX9RrzgVbSgQ3NxhROezy+s+VgeRcA+mfxQogMig9kiOyF3hZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi6z1fS/XdenlxMudRUSsIzo4WkMB8GA1UdIwQY MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0 LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeyoSOrn aAJ9msFctgVeYnKEXQcuUWSmPdzu9k6438qXOsvOk99MlGsVgruQkOgbYWuluN5Y rkgTGZsi9SltlSvVz+iUs/7uzbPKxL5Auq1RxG+KY6iTyy0iy3tZxMS1rUTJncJM F+8KPDnjT80C71gJy1xH7iV/FOl5SlsZqJUaXsKo1tYSBhgHsnRhGTkyZoYbkHWE CavGruRo4Q8WfQbANneWTS2MS8RZkS6oOk4e5o12kCew9werXZJAfH2+NiiokUsB q83GKS9OhSxCVgZtyU7wGJJ5b4PDhzouH+3/uttLAj5nXX7buOZTD9OMuGVxRM/5 nyqvFtgnIBCYzw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:50:45 2025 by rpki-client