This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json) Hash identifier: ktKKxeSjfdvWpVGdqk60Fy2XhI30Ff7NwNtvYLgIEBM= Subject key identifier: FA:5C:2F:59:33:42:8E:CE:3C:A4:23:CD:66:B6:B9:A0:3D:DF:4B:68 Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d Certificate serial: 019B4815CC71FC1E873B82CACDAE102C663A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft Manifest number: 0B33 Signing time: Mon 22 Dec 2025 22:02:26 +0000 Manifest this update: Mon 22 Dec 2025 22:02:26 +0000 Manifest next update: Tue 23 Dec 2025 22:02:26 +0000 Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: QJNNTcYqShz3uVIO3KBcBv6mPLeMUHX1T9CvZoxWhPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:cc:71:fc:1e:87:3b:82:ca:cd:ae:10:2c:66:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d Validity Not Before: Dec 22 22:02:26 2025 GMT Not After : Dec 23 22:02:26 2025 GMT Subject: CN=fa5c2f5933428ece3ca423cd66b6b9a03ddf4b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:7a:13:ff:88:24:68:69:98:d8:a5:73:7a: 75:a0:3c:66:9b:9d:50:b7:39:90:92:2c:36:9b:6a: e3:4b:7a:99:05:96:05:fc:a4:5e:c6:1f:8a:a9:1c: a2:2b:f4:ae:9f:ac:7b:28:89:44:18:0d:fe:d4:1d: b1:71:9a:34:36:5b:f9:25:7a:cf:61:01:6f:81:fa: 31:b1:83:32:bc:ef:96:23:8c:51:eb:dd:69:6d:36: 15:72:e5:a5:d4:5b:65:8d:d0:11:26:fc:8f:1c:c9: 1a:e7:5c:40:75:29:cb:04:04:8c:1a:22:0e:f0:2d: 9b:60:67:1e:1a:50:fd:4c:eb:da:c5:65:41:3e:47: bf:40:08:66:eb:88:af:7c:9e:34:11:aa:b9:5a:c6: 2f:35:e0:71:ee:89:8c:b8:f4:49:8c:78:74:b4:33: f0:d6:d0:28:74:51:86:87:7c:67:10:f7:e3:d5:ff: 8d:fa:f9:78:4b:a6:1f:a6:9e:c6:ea:69:93:f3:c2: 98:de:61:43:9b:68:ae:aa:b3:7d:ea:57:f0:b6:6f: f8:5d:7d:f0:16:ac:54:2f:c4:85:89:f7:63:e8:44: 09:89:73:19:f4:2d:d7:b1:f7:ed:63:b9:eb:8f:b6: 82:36:80:d0:86:e6:26:b3:e6:dc:22:8a:38:37:8f: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:2F:59:33:42:8E:CE:3C:A4:23:CD:66:B6:B9:A0:3D:DF:4B:68 X509v3 Authority Key Identifier: keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:9a:ed:ff:7c:da:9e:d6:d9:15:70:15:b0:43:c0:8e:ca: 4c:95:95:20:d1:31:b3:cf:54:61:c3:2f:5a:7d:dc:32:a5:e8: 64:02:12:c7:0b:b9:7e:ff:4f:dd:8a:70:0b:b6:21:0a:eb:8c: 4c:8a:a4:3c:3d:59:b4:19:a1:b5:28:b8:b1:b6:16:0d:a0:f6: b8:70:81:7d:1d:be:82:6d:42:c2:eb:e8:37:0c:91:eb:d8:c7: 12:2f:e3:d7:8b:b3:ca:00:b0:51:e7:9c:01:8f:f4:76:a8:e2: 60:9f:86:4f:52:82:37:cf:9e:12:8e:df:bf:43:79:f8:ab:26: 82:db:0e:fb:9a:fc:68:9b:63:cc:bb:e7:cd:82:f6:c9:00:07: 4a:1f:bc:42:83:a4:5b:e4:58:b1:3e:c0:8f:fd:31:38:f6:fd: de:9d:32:3b:38:92:f2:90:05:6e:41:0c:75:e7:e8:79:59:c7: e2:4a:8a:73:66:72:c5:28:16:29:af:a8:f2:38:7e:65:12:fa: da:b3:23:5b:43:fb:99:4c:f8:1c:2f:38:76:2c:9b:39:02:9e: 7f:85:7f:cf:e3:49:fe:47:39:cb:ec:24:3d:c8:2f:0b:8b:8c: 57:10:17:ea:d4:6a:5f:e1:dd:2b:22:bb:20:26:96:56:c1:d1: b1:63:1e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFcxx/B6HO4LKza4QLGY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGUzNmEyNjZhMWY1ZGY5NWI5NmE2YjU4ZGExMWMyMzU0 ZGI1NWQwHhcNMjUxMjIyMjIwMjI2WhcNMjUxMjIzMjIwMjI2WjAzMTEwLwYDVQQD EyhmYTVjMmY1OTMzNDI4ZWNlM2NhNDIzY2Q2NmI2YjlhMDNkZGY0YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJ6E/+IJGhpmNilc3p1oDxmm51Q tzmQkiw2m2rjS3qZBZYF/KRexh+KqRyiK/Sun6x7KIlEGA3+1B2xcZo0Nlv5JXrP YQFvgfoxsYMyvO+WI4xR691pbTYVcuWl1FtljdARJvyPHMka51xAdSnLBASMGiIO 8C2bYGceGlD9TOvaxWVBPke/QAhm64ivfJ40Eaq5WsYvNeBx7omMuPRJjHh0tDPw 1tAodFGGh3xnEPfj1f+N+vl4S6Yfpp7G6mmT88KY3mFDm2iuqrN96lfwtm/4XX3w FqxUL8SFifdj6EQJiXMZ9C3XsfftY7nrj7aCNoDQhuYms+bcIoo4N4+ANQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpcL1kzQo7OPKQjzWa2uaA930toMB8GA1UdIwQY MBaAFCaONqJmofXflblqa1jaEcI1TbVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5Nzgt ZTJjNmIwZDZlZDk2LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5NzgtZTJjNmIwZDZlZDk2 LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2ya7f98 2p7W2RVwFbBDwI7KTJWVINExs89UYcMvWn3cMqXoZAISxwu5fv9P3YpwC7YhCuuM TIqkPD1ZtBmhtSi4sbYWDaD2uHCBfR2+gm1CwuvoNwyR69jHEi/j14uzygCwUeec AY/0dqjiYJ+GT1KCN8+eEo7fv0N5+KsmgtsO+5r8aJtjzLvnzYL2yQAHSh+8QoOk W+RYsT7Aj/0xOPb93p0yOziS8pAFbkEMdefoeVnH4kqKc2ZyxSgWKa+o8jh+ZRL6 2rMjW0P7mUz4HC84diybOQKef4V/z+NJ/kc5y+wkPcgvC4uMVxAX6tRqX+HdKyK7 ICaWVsHRsWMeTg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:54 2025 by rpki-client