This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json) Hash identifier: a63CagNro5SjSlhco8cnMGjegISvnADa5mYF217LKxI= Subject key identifier: 6B:4D:DB:27:10:4E:58:CD:71:DC:A4:07:D3:6C:DA:83:4E:5E:BD:12 Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c Certificate serial: 019B2F9E5D22BFCE01B92EFAB6596E02845E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft Manifest number: 03BE Signing time: Thu 18 Dec 2025 04:01:06 +0000 Manifest this update: Thu 18 Dec 2025 04:01:06 +0000 Manifest next update: Fri 19 Dec 2025 04:01:06 +0000 Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: QyrsB+0V0Y/GQkvfE3YmnhH6IKe1tG0tad3r7/sPKd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:5d:22:bf:ce:01:b9:2e:fa:b6:59:6e:02:84:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c Validity Not Before: Dec 18 04:01:06 2025 GMT Not After : Dec 19 04:01:06 2025 GMT Subject: CN=6b4ddb27104e58cd71dca407d36cda834e5ebd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f1:d4:bd:4b:f9:7e:a0:06:ac:c6:02:a6:74: 59:b2:d1:f8:6d:ac:56:32:1a:5b:74:2c:70:e3:75: c1:70:b2:b0:00:b8:be:c7:f1:44:a0:bc:bd:a8:28: d0:2f:bf:eb:19:fd:67:a1:ab:ff:cd:cc:37:ae:9f: b3:94:22:9a:27:0f:f0:ef:75:2e:39:64:37:5e:75: 4b:d2:72:52:c0:b0:b4:cc:de:e8:5e:a1:73:bc:94: a7:73:35:52:5c:cb:b0:72:31:91:d6:15:84:eb:6b: b6:2b:e0:be:3f:42:a2:8e:f8:18:52:7c:8e:88:d5: cc:dd:df:2f:65:0f:aa:08:2e:71:58:89:51:be:d7: 3e:94:d5:30:88:e9:6e:02:14:be:ed:b0:3d:fc:30: f7:23:4a:e9:f9:cf:b9:11:ef:69:5c:12:35:a6:03: 1b:73:53:40:0b:45:91:5c:9c:03:fb:d6:c8:15:33: 02:3a:65:41:de:57:da:61:98:00:98:59:e5:f6:94: 16:f2:98:4d:7c:c1:d1:8e:37:0a:8f:d5:cc:70:0d: c4:a7:70:f4:7a:4e:5c:06:bb:b5:86:4e:08:a3:2c: 71:36:ac:fd:d1:b4:a1:14:e5:1b:0c:e9:91:49:45: 4c:f0:39:0b:0b:cb:5e:14:74:cc:28:56:0b:28:fe: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:DB:27:10:4E:58:CD:71:DC:A4:07:D3:6C:DA:83:4E:5E:BD:12 X509v3 Authority Key Identifier: keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:49:09:a4:3f:22:62:60:77:5a:83:d7:44:cd:7c:74:a3:9f: 7e:dd:1f:72:a9:1f:02:f0:96:8d:59:71:1c:38:7f:aa:63:70: 68:24:73:9f:b1:f8:e4:35:03:64:85:00:fd:7f:ba:43:aa:1b: d5:09:72:b4:1e:14:b8:ee:15:be:9e:e4:53:4a:09:eb:2e:64: 06:ee:65:2a:37:32:c6:b8:ed:ae:99:9a:c5:33:d2:33:9f:58: 6d:cf:0b:9c:14:34:ab:c3:a2:9c:4b:f5:87:d1:7b:ba:e4:87: db:81:d4:5a:b0:4e:c3:a8:e1:32:ca:a0:f7:ab:47:03:b0:a2: c0:8d:31:50:d1:a2:49:86:a2:1f:55:d4:76:3f:3d:49:df:e4: 15:65:37:3f:e4:35:22:fe:20:b1:8a:21:c4:0f:d0:21:9c:ab: 51:e6:c3:7d:6e:be:0f:98:bf:e1:0e:52:51:aa:b7:db:97:14: 93:54:c2:77:90:4c:80:a6:1b:80:18:1d:26:30:6a:e9:cd:b6: c3:b6:23:21:c6:c2:38:27:b8:9e:8f:8e:78:95:01:2e:8e:b1: 38:7c:54:20:f5:71:27:64:3e:56:9b:02:9f:f5:21:67:fb:b4: 8a:e7:da:a1:b3:f9:de:c1:a4:f2:44:f4:27:71:44:2a:22:ad: 77:a9:61:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnl0iv84BuS76tlluAoReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4 YTM5MGMwHhcNMjUxMjE4MDQwMTA2WhcNMjUxMjE5MDQwMTA2WjAzMTEwLwYDVQQD Eyg2YjRkZGIyNzEwNGU1OGNkNzFkY2E0MDdkMzZjZGE4MzRlNWViZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvHUvUv5fqAGrMYCpnRZstH4baxW MhpbdCxw43XBcLKwALi+x/FEoLy9qCjQL7/rGf1noav/zcw3rp+zlCKaJw/w73Uu OWQ3XnVL0nJSwLC0zN7oXqFzvJSnczVSXMuwcjGR1hWE62u2K+C+P0KijvgYUnyO iNXM3d8vZQ+qCC5xWIlRvtc+lNUwiOluAhS+7bA9/DD3I0rp+c+5Ee9pXBI1pgMb c1NAC0WRXJwD+9bIFTMCOmVB3lfaYZgAmFnl9pQW8phNfMHRjjcKj9XMcA3Ep3D0 ek5cBru1hk4IoyxxNqz90bShFOUbDOmRSUVM8DkLC8teFHTMKFYLKP6niQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtN2ycQTljNcdykB9Ns2oNOXr0SMB8GA1UdIwQY MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0kJpD8i YmB3WoPXRM18dKOfft0fcqkfAvCWjVlxHDh/qmNwaCRzn7H45DUDZIUA/X+6Q6ob 1QlytB4UuO4Vvp7kU0oJ6y5kBu5lKjcyxrjtrpmaxTPSM59Ybc8LnBQ0q8OinEv1 h9F7uuSH24HUWrBOw6jhMsqg96tHA7CiwI0xUNGiSYaiH1XUdj89Sd/kFWU3P+Q1 Iv4gsYohxA/QIZyrUebDfW6+D5i/4Q5SUaq325cUk1TCd5BMgKYbgBgdJjBq6c22 w7YjIcbCOCe4no+OeJUBLo6xOHxUIPVxJ2Q+VpsCn/UhZ/u0iufaobP53sGk8kT0 J3FEKiKtd6lhOg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:32 2025 by rpki-client