This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json) Hash identifier: qPRWVQgBW1GVn+EYXbI6x7fJamHZljYjU2qb/kSNxRc= Subject key identifier: 3A:4F:35:04:E5:1F:55:C2:6E:DD:B6:AE:85:EF:AD:A6:D2:A0:E2:6C Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Certificate serial: 019B3C7E578D673CCB449F61004CF95400CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:01:11 +0000 Manifest this update: Sat 20 Dec 2025 16:01:11 +0000 Manifest next update: Sun 21 Dec 2025 16:01:11 +0000 Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: jYRmAZbLk5I/4otnB5g0uNuN5eDkNqgZo7u1rSjTiC8=) 2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:57:8d:67:3c:cb:44:9f:61:00:4c:f9:54:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52 Validity Not Before: Dec 20 16:01:11 2025 GMT Not After : Dec 21 16:01:11 2025 GMT Subject: CN=3a4f3504e51f55c26eddb6ae85efada6d2a0e26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:cd:e1:2d:8e:8a:a6:ed:9f:c1:7d:4e:69: dd:9c:b3:39:65:4e:5a:4a:60:8c:3a:38:fb:8a:5e: 82:b9:73:0b:64:0c:f7:6b:32:e3:02:91:c5:97:11: a4:af:dc:77:b0:4e:dd:0f:3f:46:02:42:b2:38:c9: e7:7f:33:d4:0d:98:f5:7b:d6:8d:ea:00:6d:ab:53: 9a:e2:b7:b9:cf:36:9d:c7:35:58:7e:b7:b3:3d:1e: ab:00:41:46:c1:84:c9:5d:73:05:58:d8:26:72:31: e3:27:a3:c9:9b:8b:87:88:d8:2f:4e:45:02:1b:57: f3:28:83:9c:ed:52:8e:72:d9:bb:63:df:fc:c6:2d: 7c:04:dc:9c:f1:25:c3:e7:08:60:cc:85:4f:c7:5f: 64:80:3d:9f:72:e2:76:a4:cb:7b:af:0a:50:67:f8: 51:d8:a0:eb:81:c9:95:7c:e0:e3:e1:21:eb:60:9d: f3:73:5c:1a:64:bf:ad:ad:0b:6a:9c:ae:31:39:7c: 25:8c:e6:a3:f7:4b:cb:d3:ac:bb:19:6e:79:f6:8d: 0b:d7:78:11:6c:23:9d:17:d0:c7:81:47:7a:ff:cf: 43:b2:60:91:a6:a1:f2:5f:ed:b2:1e:c8:e5:14:e1: ba:52:f0:2a:5c:45:00:b5:fa:2a:3a:c9:3b:59:76: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4F:35:04:E5:1F:55:C2:6E:DD:B6:AE:85:EF:AD:A6:D2:A0:E2:6C X509v3 Authority Key Identifier: keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7b:39:f8:93:57:d8:5e:fd:a4:a1:f1:4e:79:14:9e:69:c5: 26:0d:83:41:bd:75:fe:8c:77:02:0c:25:a0:1f:dc:5d:bf:a0: ca:d5:00:e7:cf:85:28:09:ec:c6:27:74:61:9c:e6:42:11:3a: 74:7b:c7:e7:46:a6:e9:36:f3:e8:ff:3b:f6:0b:d3:7f:fb:2a: 3f:53:41:0b:f6:7d:af:64:7a:5a:c9:8f:69:a5:5a:4a:10:17: b9:1a:a9:b5:18:a7:b1:64:4f:c7:d3:07:ae:88:5c:ff:93:02: fc:c8:86:0e:fc:9d:7e:89:79:e6:cc:36:dd:c8:0b:2d:9a:b5: 58:65:b5:79:bd:3c:ef:ce:3f:7f:7d:39:2a:87:45:42:78:82: 69:a6:69:d1:a2:4f:58:ba:26:7f:5c:7e:b2:5a:31:e0:ca:00: 93:dc:48:1d:67:17:43:4a:de:ca:59:3b:1e:7b:7a:b1:3e:8a: d5:b8:61:d7:e6:0d:e2:dd:40:8d:f9:76:22:8c:48:fd:df:22: e9:1e:a2:09:31:a9:03:1c:59:c0:6c:18:c3:1d:3b:22:5b:e3: 88:35:22:45:ae:af:a6:cd:b5:f2:71:ec:05:f5:8a:c1:e5:4a: 71:ca:06:bf:a6:bc:c5:bd:8a:4a:e6:05:0b:aa:40:de:9b:cb: 96:46:9c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fleNZzzLRJ9hAEz5VADLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDI4MDdlYWUyNmE2N2QzZWJjMjVlZDUwZmZlNTQzNGJj NjZjNTIwHhcNMjUxMjIwMTYwMTExWhcNMjUxMjIxMTYwMTExWjAzMTEwLwYDVQQD EygzYTRmMzUwNGU1MWY1NWMyNmVkZGI2YWU4NWVmYWRhNmQyYTBlMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50TN4S2Oiqbtn8F9TmndnLM5ZU5a SmCMOjj7il6CuXMLZAz3azLjApHFlxGkr9x3sE7dDz9GAkKyOMnnfzPUDZj1e9aN 6gBtq1Oa4re5zzadxzVYfrezPR6rAEFGwYTJXXMFWNgmcjHjJ6PJm4uHiNgvTkUC G1fzKIOc7VKOctm7Y9/8xi18BNyc8SXD5whgzIVPx19kgD2fcuJ2pMt7rwpQZ/hR 2KDrgcmVfODj4SHrYJ3zc1waZL+trQtqnK4xOXwljOaj90vL06y7GW559o0L13gR bCOdF9DHgUd6/89DsmCRpqHyX+2yHsjlFOG6UvAqXEUAtfoqOsk7WXa9dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpPNQTlH1XCbt22roXvrabSoOJsMB8GA1UdIwQY MBaAFCTSgH6uJqZ9Prwl7VD/5UNLxmxSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTIt Zjk5YTNkZDk5ODI2LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNTM0NGQtNWVjMy00MGVlLTg2MTItZjk5YTNkZDk5ODI2 LzEvSk5LQWZxNG1wbjAtdkNYdFVQX2xRMHZHYkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHs5+JNX 2F79pKHxTnkUnmnFJg2DQb11/ox3AgwloB/cXb+gytUA58+FKAnsxid0YZzmQhE6 dHvH50am6Tbz6P879gvTf/sqP1NBC/Z9r2R6WsmPaaVaShAXuRqptRinsWRPx9MH rohc/5MC/MiGDvydfol55sw23cgLLZq1WGW1eb08784/f305KodFQniCaaZp0aJP WLomf1x+slox4MoAk9xIHWcXQ0reylk7Hnt6sT6K1bhh1+YN4t1Ajfl2IoxI/d8i 6R6iCTGpAxxZwGwYwx07IlvjiDUiRa6vps218nHsBfWKweVKccoGv6a8xb2KSuYF C6pA3pvLlkacnA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:50 2025 by rpki-client