This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json) Hash identifier: VJhHq+PNv+r096oQw0L1tf2EBYpH0YjkLdLx17YWNGk= Subject key identifier: E1:1A:47:04:91:F0:58:C5:A8:3D:EF:36:03:A6:B3:88:DB:37:81:51 Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d Certificate serial: 019B32D7962C0B4E52ECE442548476C17709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft Manifest number: 0B28 Signing time: Thu 18 Dec 2025 19:02:27 +0000 Manifest this update: Thu 18 Dec 2025 19:02:27 +0000 Manifest next update: Fri 19 Dec 2025 19:02:27 +0000 Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: BkdecrBfKiB9iHLIc5dOqbY9UXrpXeo03+YqacTwyZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:96:2c:0b:4e:52:ec:e4:42:54:84:76:c1:77:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d Validity Not Before: Dec 18 19:02:27 2025 GMT Not After : Dec 19 19:02:27 2025 GMT Subject: CN=e11a470491f058c5a83def3603a6b388db378151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:89:3d:4c:c9:fd:3a:a4:a7:80:0e:87:f0: 38:cf:73:8e:6a:28:7b:fc:a2:d0:7c:92:ab:22:66: 49:45:75:13:fe:d6:fc:ed:4c:76:72:68:76:96:69: bc:21:e0:66:ee:21:47:b8:45:5f:97:64:71:c6:1b: ec:8a:9e:ff:c8:b9:d4:46:75:c3:fe:16:81:ce:da: 4f:f8:49:1d:a5:48:b9:8c:21:13:1c:0b:b2:ea:a6: 52:88:2d:af:b7:86:b5:df:ec:37:36:04:ad:36:cb: 6c:40:74:c2:17:0e:8e:74:4d:fc:10:b1:c2:be:d8: 9a:0a:b1:0b:c7:a6:54:28:18:a7:d8:8f:4b:2d:58: 29:4e:f1:a0:3f:25:a2:f2:ba:7d:d9:04:f4:15:67: b9:1d:bc:8f:6c:b9:13:72:2a:dc:5e:9a:5d:53:7b: c2:de:be:2f:46:65:ba:f3:d9:82:1e:b6:bc:0d:17: 63:ae:61:e3:46:4d:bc:70:d6:40:e4:87:ef:63:97: 52:53:9d:a0:37:88:7f:7c:d9:82:b9:fc:11:b8:73: 2f:c7:7a:1b:06:3c:be:3f:bc:cf:06:5f:98:4d:d7: 36:36:7c:3b:5b:c9:5a:ba:07:e7:d9:a3:95:d0:5a: b0:20:0a:1b:36:7a:58:d8:e3:72:eb:d7:e9:a6:6a: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1A:47:04:91:F0:58:C5:A8:3D:EF:36:03:A6:B3:88:DB:37:81:51 X509v3 Authority Key Identifier: keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4d:b4:06:34:cc:f0:f3:96:fb:72:0c:4c:36:90:88:e3:49: 8c:ac:7c:c9:f0:fb:ed:0b:0d:9a:1e:52:5c:a0:15:b1:19:28: 7a:ee:27:8e:e4:57:57:05:00:48:d4:06:e1:6b:ac:27:38:f4: 9c:a9:61:23:1d:a7:0f:18:bf:73:97:42:e1:50:4b:ac:cf:b3: 86:ef:d5:f8:ef:f3:b2:ea:43:f8:1e:45:d9:93:9f:e3:82:98: 29:00:e3:a5:59:8d:05:4d:c9:e0:0e:b0:e6:7e:28:36:6b:f2: 39:d2:b7:9e:db:51:30:f3:b3:6a:7b:1f:89:2c:1c:e0:27:16: 3c:98:a6:8d:30:43:d1:70:de:a9:ee:dd:df:dd:62:76:fe:57: 37:77:2a:6b:4a:10:0f:32:48:32:28:31:1c:38:e4:27:92:e6: 21:d8:4e:a1:f3:2f:fc:3b:e3:e5:b5:8f:46:6f:38:da:64:17: 9d:b6:3e:6e:e5:02:3d:c2:2b:b2:6e:18:79:2d:25:85:42:ae: 91:0c:29:e7:9b:19:e2:8f:a4:5d:8e:5e:c8:0a:2d:b3:f0:7c: 11:47:71:55:9c:c5:9c:84:9c:74:a8:33:95:8e:31:65:82:0e: a4:f1:f5:74:de:aa:37:23:6a:94:bc:ce:3f:90:11:e9:1d:eb: 40:84:97:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy15YsC05S7ORCVIR2wXcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGUzNmEyNjZhMWY1ZGY5NWI5NmE2YjU4ZGExMWMyMzU0 ZGI1NWQwHhcNMjUxMjE4MTkwMjI3WhcNMjUxMjE5MTkwMjI3WjAzMTEwLwYDVQQD EyhlMTFhNDcwNDkxZjA1OGM1YTgzZGVmMzYwM2E2YjM4OGRiMzc4MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+CJPUzJ/Tqkp4AOh/A4z3OOaih7 /KLQfJKrImZJRXUT/tb87Ux2cmh2lmm8IeBm7iFHuEVfl2Rxxhvsip7/yLnURnXD /haBztpP+EkdpUi5jCETHAuy6qZSiC2vt4a13+w3NgStNstsQHTCFw6OdE38ELHC vtiaCrELx6ZUKBin2I9LLVgpTvGgPyWi8rp92QT0FWe5HbyPbLkTcircXppdU3vC 3r4vRmW689mCHra8DRdjrmHjRk28cNZA5IfvY5dSU52gN4h/fNmCufwRuHMvx3ob Bjy+P7zPBl+YTdc2Nnw7W8laugfn2aOV0FqwIAobNnpY2ONy69fppmqOdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEaRwSR8FjFqD3vNgOms4jbN4FRMB8GA1UdIwQY MBaAFCaONqJmofXflblqa1jaEcI1TbVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5Nzgt ZTJjNmIwZDZlZDk2LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5NzgtZTJjNmIwZDZlZDk2 LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU20BjTM 8POW+3IMTDaQiONJjKx8yfD77QsNmh5SXKAVsRkoeu4njuRXVwUASNQG4WusJzj0 nKlhIx2nDxi/c5dC4VBLrM+zhu/V+O/zsupD+B5F2ZOf44KYKQDjpVmNBU3J4A6w 5n4oNmvyOdK3nttRMPOzansfiSwc4CcWPJimjTBD0XDeqe7d391idv5XN3cqa0oQ DzJIMigxHDjkJ5LmIdhOofMv/Dvj5bWPRm842mQXnbY+buUCPcIrsm4YeS0lhUKu kQwp55sZ4o+kXY5eyAots/B8EUdxVZzFnIScdKgzlY4xZYIOpPH1dN6qNyNqlLzO P5AR6R3rQISXbw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:12:20 2025 by rpki-client