This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json) Hash identifier: ABIaimTVE98w/RYGIk5UqkwtmJdozi77K33Gu59sIMU= Subject key identifier: B9:E2:E6:CE:3A:7C:CA:F1:6D:CE:77:BC:51:1B:CA:A6:92:7F:FB:4E Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698 Certificate serial: 019B3CB51976D5439B91FC492ABA9F214BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 17:01:00 +0000 Manifest this update: Sat 20 Dec 2025 17:01:00 +0000 Manifest next update: Sun 21 Dec 2025 17:01:00 +0000 Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=) 2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: ocKXY4P8Nn+hf3hHRS8aYgHG76eV8E43L9y3L3mrqt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:19:76:d5:43:9b:91:fc:49:2a:ba:9f:21:4b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698 Validity Not Before: Dec 20 17:01:00 2025 GMT Not After : Dec 21 17:01:00 2025 GMT Subject: CN=b9e2e6ce3a7ccaf16dce77bc511bcaa6927ffb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:6f:6c:10:a5:db:66:da:a0:52:2d:88:d8: 14:ac:48:56:45:19:52:0d:5e:bc:13:08:a3:90:e7: 6e:0a:4d:7a:ad:07:ca:06:e0:bd:2c:75:da:75:f7: 48:9f:1c:e8:3e:8b:77:ab:da:9d:48:27:03:ff:aa: 2b:2f:1f:16:c5:57:11:be:81:eb:65:c4:fa:2a:7c: 4f:18:ab:26:4f:24:ab:5c:94:95:13:15:87:74:e2: 48:15:7c:b3:99:ec:ad:c1:5c:1a:f3:1c:c6:c6:33: 80:7e:4f:6b:6c:d5:38:5a:01:62:bd:c8:12:2c:cf: 40:09:9c:c9:94:33:64:55:13:49:a9:57:3d:d5:18: a0:7c:fe:c6:7f:0e:61:3b:d3:db:2d:0d:52:a5:85: 86:2c:bb:9d:08:85:ad:d5:86:52:f1:5d:58:e8:79: a4:56:2a:f9:36:ca:fe:80:07:3a:cb:78:32:54:a2: 33:73:24:75:0c:9a:19:be:62:53:f8:44:61:c0:87: e3:39:2e:4a:df:80:b4:0f:a7:f3:60:5c:81:02:bd: f9:83:5f:58:1b:0b:6f:40:77:cb:11:ae:36:de:c5: 72:48:1a:3c:19:10:a8:3a:9e:ab:33:38:04:a2:92: eb:c1:21:7f:46:2d:9f:06:a6:6d:2e:35:de:72:b6: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:E6:CE:3A:7C:CA:F1:6D:CE:77:BC:51:1B:CA:A6:92:7F:FB:4E X509v3 Authority Key Identifier: keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5a:6a:72:91:3d:34:aa:55:30:fa:4a:45:53:0a:80:1a:19: 70:56:6d:4c:a2:34:13:71:cc:c3:8a:1d:bb:40:ca:5d:0f:0a: 04:16:99:bb:04:4e:1a:52:6d:f8:c9:7d:38:7e:3a:02:3f:77: 5e:56:87:42:ac:75:38:18:34:59:c1:90:b4:4e:85:ae:a5:04: 9e:c7:f8:07:4a:1c:34:89:87:66:7b:9f:f0:d1:01:fd:87:fd: 7c:f8:e9:f4:de:13:1a:db:a2:0e:82:5c:4c:fc:dd:9a:29:d2: af:49:ea:7c:93:c2:8a:f4:c2:77:2f:72:cc:e0:ed:fd:cc:83: e2:07:a1:c0:45:49:01:db:09:11:5e:93:70:36:a9:89:ac:ce: eb:c3:ee:8c:99:75:0a:66:38:3c:9a:3c:39:c3:96:7c:92:c9: d1:70:1b:06:3a:d8:97:ef:32:e2:13:5c:e2:26:f6:ef:36:1a: 24:cb:ee:45:20:54:ee:68:6a:6b:71:d7:af:e0:db:d1:d8:0c: 7c:a7:1d:4b:d2:c8:ae:16:31:72:06:7b:80:ee:27:ca:90:d1: 47:2e:ab:bb:2b:9b:14:8e:29:f0:cb:97:0b:1c:cb:3e:57:34: 66:9e:26:0f:22:ab:ea:38:cd:4a:ff:14:4c:2b:7c:8b:d6:37: 14:bf:94:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRl21UObkfxJKrqfIUu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz NGI2OTgwHhcNMjUxMjIwMTcwMTAwWhcNMjUxMjIxMTcwMTAwWjAzMTEwLwYDVQQD EyhiOWUyZTZjZTNhN2NjYWYxNmRjZTc3YmM1MTFiY2FhNjkyN2ZmYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GJvbBCl22baoFItiNgUrEhWRRlS DV68EwijkOduCk16rQfKBuC9LHXadfdInxzoPot3q9qdSCcD/6orLx8WxVcRvoHr ZcT6KnxPGKsmTySrXJSVExWHdOJIFXyzmeytwVwa8xzGxjOAfk9rbNU4WgFivcgS LM9ACZzJlDNkVRNJqVc91RigfP7Gfw5hO9PbLQ1SpYWGLLudCIWt1YZS8V1Y6Hmk Vir5Nsr+gAc6y3gyVKIzcyR1DJoZvmJT+ERhwIfjOS5K34C0D6fzYFyBAr35g19Y GwtvQHfLEa423sVySBo8GRCoOp6rMzgEopLrwSF/Ri2fBqZtLjXecrar0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLni5s46fMrxbc53vFEbyqaSf/tOMB8GA1UdIwQY MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFpqcpE9 NKpVMPpKRVMKgBoZcFZtTKI0E3HMw4odu0DKXQ8KBBaZuwROGlJt+Ml9OH46Aj93 XlaHQqx1OBg0WcGQtE6FrqUEnsf4B0ocNImHZnuf8NEB/Yf9fPjp9N4TGtuiDoJc TPzdminSr0nqfJPCivTCdy9yzODt/cyD4gehwEVJAdsJEV6TcDapiazO68PujJl1 CmY4PJo8OcOWfJLJ0XAbBjrYl+8y4hNc4ib27zYaJMvuRSBU7mhqa3HXr+Db0dgM fKcdS9LIrhYxcgZ7gO4nypDRRy6ruyubFI4p8MuXCxzLPlc0Zp4mDyKr6jjNSv8U TCt8i9Y3FL+UPA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:01 2025 by rpki-client