This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json) Hash identifier: CEdzIowwvg0lX7gvIJ1C7/YvjWeyyoQEe4zNkIHxL3E= Subject key identifier: F2:12:0F:27:68:DF:D2:22:D5:A9:EF:7A:42:BB:58:3D:9F:FE:3D:70 Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0 Certificate serial: 019B4EF1DEFF8944ECDA09B944708F666FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 06:00:32 +0000 Manifest this update: Wed 24 Dec 2025 06:00:32 +0000 Manifest next update: Thu 25 Dec 2025 06:00:32 +0000 Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: mVnGmGMTOLA7YdY+rqor1Z+dzpzAwREX59Q92HdJ2gM=) 2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:de:ff:89:44:ec:da:09:b9:44:70:8f:66:6f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0 Validity Not Before: Dec 24 06:00:32 2025 GMT Not After : Dec 25 06:00:32 2025 GMT Subject: CN=f2120f2768dfd222d5a9ef7a42bb583d9ffe3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:99:91:68:cc:0d:23:d7:09:65:4b:e1:8f: 7a:02:0b:b8:70:de:37:3f:03:9a:ac:dc:b2:75:da: c9:e1:41:45:00:14:04:22:63:29:61:bd:2a:c1:58: db:e3:7e:e4:0e:59:c4:f6:50:9f:ad:c0:1a:b8:cf: 31:48:82:cc:d9:2c:05:95:83:1b:51:b5:11:80:51: 06:d6:b1:a5:e7:29:f0:f8:e7:24:60:e8:80:c6:e3: e4:4f:0a:ca:8b:3e:d5:34:14:ec:e8:54:69:26:a4: cd:b4:94:79:ae:b0:b7:b9:83:3f:b5:61:55:cf:93: 8a:cc:90:9b:ca:46:8b:14:4b:c6:96:11:0c:5d:8c: a2:0d:ac:a3:e8:b8:6c:72:46:f3:15:02:db:22:b9: f2:94:59:5c:59:86:d4:dc:a6:0c:bb:fc:35:b0:8c: df:97:c1:89:4a:d3:98:ee:16:7d:c7:33:1c:04:e7: d0:a6:9b:8e:90:44:73:23:6f:31:28:1f:54:46:92: 71:b2:aa:61:c2:ac:77:a3:0b:3a:8f:e4:2e:0e:13: 83:2a:81:d2:40:b1:49:86:23:4d:9c:58:ee:cc:1d: 91:08:16:c3:75:90:13:d1:91:fd:cc:b8:ba:4d:dc: dd:95:be:f8:58:62:4b:0c:ce:13:44:39:1c:41:2b: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:0F:27:68:DF:D2:22:D5:A9:EF:7A:42:BB:58:3D:9F:FE:3D:70 X509v3 Authority Key Identifier: keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:21:99:11:00:c2:30:83:01:fe:8a:50:cc:f1:e8:a9:22:7d: a1:ab:77:50:9d:83:e5:ff:c8:6e:ac:40:91:09:65:34:90:aa: 8f:03:cf:03:6c:e1:97:d4:84:ad:25:ca:35:63:51:5f:66:db: 29:cf:1e:25:cc:08:76:76:b4:90:ac:7a:8d:b7:b6:46:24:19: 0f:26:46:59:46:fa:de:36:97:d5:8f:4a:9a:46:b6:d5:9d:2d: 88:60:79:30:fa:f1:bb:96:52:bc:3f:59:8e:c9:dc:d2:54:56: 46:44:f3:79:7a:7c:c3:4a:aa:bc:07:0d:45:82:76:04:cd:8a: a3:d9:ff:8b:69:f7:36:62:7a:8b:02:1d:ea:04:ed:d9:7d:17: 39:5f:ac:a8:2e:9c:0d:69:af:db:d6:ec:e7:86:58:61:0a:23: 4f:de:c3:7b:bc:b3:1a:c2:b8:cf:da:71:c8:54:23:bb:31:d4: d3:f6:da:0f:70:d0:2a:e4:1d:04:8c:c7:45:2b:82:6a:79:69: f6:04:85:f7:69:ad:31:9b:91:81:1a:70:f0:e3:e2:02:d7:ec: 71:af:98:7b:91:a6:7f:a7:cb:0d:9a:74:15:59:b9:6d:26:39: 3a:b0:75:9f:a4:40:a2:9a:e4:46:bc:04:74:3f:c9:84:3b:ef: e7:19:3c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8d7/iUTs2gm5RHCPZm+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw MjhlYjAwHhcNMjUxMjI0MDYwMDMyWhcNMjUxMjI1MDYwMDMyWjAzMTEwLwYDVQQD EyhmMjEyMGYyNzY4ZGZkMjIyZDVhOWVmN2E0MmJiNTgzZDlmZmUzZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZSZkWjMDSPXCWVL4Y96Agu4cN43 PwOarNyyddrJ4UFFABQEImMpYb0qwVjb437kDlnE9lCfrcAauM8xSILM2SwFlYMb UbURgFEG1rGl5ynw+OckYOiAxuPkTwrKiz7VNBTs6FRpJqTNtJR5rrC3uYM/tWFV z5OKzJCbykaLFEvGlhEMXYyiDayj6LhsckbzFQLbIrnylFlcWYbU3KYMu/w1sIzf l8GJStOY7hZ9xzMcBOfQppuOkERzI28xKB9URpJxsqphwqx3ows6j+QuDhODKoHS QLFJhiNNnFjuzB2RCBbDdZAT0ZH9zLi6Tdzdlb74WGJLDM4TRDkcQSvB6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPISDydo39Ii1anvekK7WD2f/j1wMB8GA1UdIwQY MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiGZEQDC MIMB/opQzPHoqSJ9oat3UJ2D5f/IbqxAkQllNJCqjwPPA2zhl9SErSXKNWNRX2bb Kc8eJcwIdna0kKx6jbe2RiQZDyZGWUb63jaX1Y9Kmka21Z0tiGB5MPrxu5ZSvD9Z jsnc0lRWRkTzeXp8w0qqvAcNRYJ2BM2Ko9n/i2n3NmJ6iwId6gTt2X0XOV+sqC6c DWmv29bs54ZYYQojT97De7yzGsK4z9pxyFQjuzHU0/baD3DQKuQdBIzHRSuCanlp 9gSF92mtMZuRgRpw8OPiAtfsca+Ye5Gmf6fLDZp0FVm5bSY5OrB1n6RAoprkRrwE dD/JhDvv5xk8PQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:08:52 2025 by rpki-client