This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft File: JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft (raw, json) Hash identifier: Fml4Gi7yAK8tqhwfuFCypBVN1iyZ49svx1HwAI8QP3M= Subject key identifier: 71:06:24:E3:D1:96:FA:81:28:C3:FB:F0:13:AB:AB:B1:30:F0:E9:CA Authority key identifier: 25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 Certificate issuer: /CN=25a3f511d0095606a525084ae460836dc5d24397 Certificate serial: 019B57F54F04D5C0BFBEBEB8C77ACB259CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 00:00:52 +0000 Manifest this update: Fri 26 Dec 2025 00:00:52 +0000 Manifest next update: Sat 27 Dec 2025 00:00:52 +0000 Files and hashes: 1: JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl (hash: 8gHLmXIJFd2wNDMgTb1LEQbYo1K+SJ7jY2NeBdjQjp4=) 2: amXQGDZKy47wA0u5iNrCG12G65E.roa (hash: 1n+UabIeiKZ85p6BFII330KVf+1vpRK87qkxEEsolHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:4f:04:d5:c0:bf:be:be:b8:c7:7a:cb:25:9c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a3f511d0095606a525084ae460836dc5d24397 Validity Not Before: Dec 26 00:00:52 2025 GMT Not After : Dec 27 00:00:52 2025 GMT Subject: CN=710624e3d196fa8128c3fbf013ababb130f0e9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:9a:eb:7f:60:be:bb:26:50:72:64:2c:6c: 40:db:53:2b:51:91:15:72:8a:2a:ec:29:6b:de:df: ae:33:0b:0e:9f:b0:1b:57:52:00:8a:a2:d7:b9:65: 4a:aa:37:47:ff:d7:d1:22:bf:c2:4b:2d:6e:8d:f5: e8:41:e2:3a:08:39:eb:f3:e9:c8:55:3b:0b:a2:1e: f0:20:9b:be:65:16:64:0a:3e:e5:36:54:ff:57:f0: 6f:1a:97:fd:d3:fd:84:b1:ed:57:59:5e:4a:e7:2b: b2:bd:c2:8b:35:4f:6f:c6:65:0c:74:a0:4d:6e:9f: 25:38:21:0b:f1:66:64:93:de:3d:bd:17:78:c5:a3: 6c:ab:f2:9a:9e:15:6b:06:37:43:a9:bd:61:55:7f: 60:82:1e:bc:c4:06:c3:3d:5d:85:6a:6d:10:d0:d8: 1a:fb:b1:76:29:c8:f4:a4:0f:00:74:ce:0a:1d:fa: 21:38:b3:aa:f7:89:0c:7f:44:2e:7d:bc:b8:97:93: 0a:9f:c2:d8:dd:61:3d:e3:81:1b:60:ad:a5:58:cc: 0c:ee:ac:49:69:f1:58:0e:4a:17:85:b5:ce:8c:17: 20:79:b6:35:c6:f2:14:e3:f3:e8:af:d1:d5:5a:f9: 61:8a:aa:40:4a:8c:c1:c7:81:29:a3:8d:58:8b:59: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:24:E3:D1:96:FA:81:28:C3:FB:F0:13:AB:AB:B1:30:F0:E9:CA X509v3 Authority Key Identifier: keyid:25:A3:F5:11:D0:09:56:06:A5:25:08:4A:E4:60:83:6D:C5:D2:43:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaP1EdAJVgalJQhK5GCDbcXSQ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8b009-d923-4bff-a82f-e8b70aa442fd/1/JaP1EdAJVgalJQhK5GCDbcXSQ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:2a:be:56:7d:86:cc:17:65:ed:c0:16:3c:30:c9:0c:f4: 7c:ae:28:89:ae:83:44:1b:8f:8f:f6:bb:85:f2:03:c7:2c:5e: f1:e1:17:4c:ee:63:50:2d:5f:a9:3a:2b:10:2f:f1:50:94:27: fd:7d:e1:ec:51:56:84:ef:b9:23:0f:4b:b2:db:27:d5:52:67: 6b:1e:11:32:32:f7:a5:28:34:2d:c4:6e:57:13:5b:b1:54:65: 34:f8:0e:8c:85:78:8d:3d:a6:ab:f9:c7:c9:8e:7a:3e:ec:4b: b7:e3:39:2f:a1:43:f6:45:ca:57:5b:2b:8d:37:5f:04:91:70: 00:ae:25:c7:a4:dd:18:d9:6e:90:ef:00:f6:0e:a8:6b:58:12: af:d9:99:06:1d:84:16:c3:4a:d1:2b:91:ec:f7:3f:a1:10:4f: 62:2c:f8:7b:17:b1:be:3a:71:4c:ea:03:c3:e9:f4:f7:fc:c3: 58:d4:b0:4d:73:c5:f0:7b:4a:e9:cb:b3:5a:14:a8:21:7a:58: fc:b5:bf:59:c0:d2:e6:62:bd:3c:86:8d:5e:1e:98:cd:f4:38: 89:9f:8c:66:4f:2f:74:37:82:3b:2b:c3:61:e9:26:53:68:94: 1f:72:73:f7:34:67:76:f4:15:11:48:0f:bc:87:9b:99:58:59: 19:e1:00:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9U8E1cC/vr64x3rLJZzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTNmNTExZDAwOTU2MDZhNTI1MDg0YWU0NjA4MzZkYzVk MjQzOTcwHhcNMjUxMjI2MDAwMDUyWhcNMjUxMjI3MDAwMDUyWjAzMTEwLwYDVQQD Eyg3MTA2MjRlM2QxOTZmYTgxMjhjM2ZiZjAxM2FiYWJiMTMwZjBlOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT+a639gvrsmUHJkLGxA21MrUZEV cooq7Clr3t+uMwsOn7AbV1IAiqLXuWVKqjdH/9fRIr/CSy1ujfXoQeI6CDnr8+nI VTsLoh7wIJu+ZRZkCj7lNlT/V/BvGpf90/2Ese1XWV5K5yuyvcKLNU9vxmUMdKBN bp8lOCEL8WZkk949vRd4xaNsq/KanhVrBjdDqb1hVX9ggh68xAbDPV2Fam0Q0Nga +7F2Kcj0pA8AdM4KHfohOLOq94kMf0Qufby4l5MKn8LY3WE944EbYK2lWMwM7qxJ afFYDkoXhbXOjBcgebY1xvIU4/Por9HVWvlhiqpASozBx4Epo41Yi1lV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEGJOPRlvqBKMP78BOrq7Ew8OnKMB8GA1UdIwQY MBaAFCWj9RHQCVYGpSUISuRgg23F0kOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYt ZThiNzBhYTQ0MmZkLzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kOGIwMDktZDkyMy00YmZmLWE4MmYtZThiNzBhYTQ0MmZk LzEvSmFQMUVkQUpWZ2FsSlFoSzVHQ0RiY1hTUTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE84qvlZ9 hswXZe3AFjwwyQz0fK4oia6DRBuPj/a7hfIDxyxe8eEXTO5jUC1fqTorEC/xUJQn /X3h7FFWhO+5Iw9Lstsn1VJnax4RMjL3pSg0LcRuVxNbsVRlNPgOjIV4jT2mq/nH yY56PuxLt+M5L6FD9kXKV1srjTdfBJFwAK4lx6TdGNlukO8A9g6oa1gSr9mZBh2E FsNK0SuR7Pc/oRBPYiz4exexvjpxTOoDw+n09/zDWNSwTXPF8HtK6cuzWhSoIXpY /LW/WcDS5mK9PIaNXh6YzfQ4iZ+MZk8vdDeCOyvDYekmU2iUH3Jz9zRndvQVEUgP vIebmVhZGeEAGg== -----END CERTIFICATE-----Generated at Fri Dec 26 01:35:44 2025 by rpki-client